[vpn] Re: Performance question.

[Ryan Malayter]

From: Jeff Klein [mailto:nyjklein at panix.com] 
> > data before encryption. Strict Ipsec (which your Nortel 
> probably uses) does no compression.
> 
> 
> Not necessarily true. Some IPsec implementations (such as 
> Alcatel's) implement the IPcomp RFC. This compresses the 
> cleartext before passing it to be encrypted. In fact, some of 
> the IPsec hardware gateways include a hardware compression 
> assist engine.

Well, I did say 'strict Ipsec' ;-), which wouldn't seem to include Ipcomp.
I'll check out that RFC - IPcomp sounds like a godsend for some of my sites.
I'm pretty sure none of the gear I've got supports it yet, though.


VPN is sponsored by SecurityFocus.com