[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Flow label and its uses



> There is something I never understood about the flow label... In the
> case someone wants to used it when deep packet inspection is not
> possible because of IPsec encryption, how can one trust it as this
> field is NOT protected by IPsec?

How would protecting that field with IPsec help any of the devices
along the path, i.e., those devices that are using the flow label to
classify packets? They most certainly will _not_ have an SA for those
packets (and talk about a performance hit if routers actually tried to
do this!!!)

Thomas