Wrapped Encapsulating Security Payload (ESP) for Traffic Visibility
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 15
- Abstract
- This document describes the Wrapped Encapsulating Security Payload (WESP) protocol, which builds on the Encapsulating Security Payload (ESP) RFC 4303 and is designed to allow intermediate devices to (1) ascertain if data confidentiality is being employed within ESP, and if not, (2) inspect the IPsec packets for network monitoring and access control functions. Currently, in the IPsec ESP standard, there is no deterministic way to differentiate between encrypted and unencrypted payloads by simply examining a packet. This poses certain challenges to the intermediate devices that need to deep inspect the packet before making a decision on what should be done with that packet (Inspect and/or Allow/Drop). The mechanism described in this document can be used to easily disambiguate integrity-only ESP from ESP-encrypted packets, without compromising on the security provided by ESP. [STANDARDS-TRACK]
- Publication Date
- 2010-04-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC5840- Link
- https://doi.org/10.17487/RFC5840
- Author(s)
- Ken GrewalGabriel MontenegroManav Bhatia
- Keyword(s)
- WESP
Latest version of IETF RFC 5840
Document Versions — IETF RFC 5840
-
▶ IETF RFC 5840 (2010-04-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 2410 [Active*]
- IETF RFC 3948 [Active*]
- IETF RFC 4303 [Active*]
- IETF RFC 4543 [Active*]
- IETF RFC 5226 [Superseded*]
Bibliographic Reference(s)
- Kivinen, T. and D. McDonald, "Heuristics for Detecting ESP-NULL packets", Work in Progress, March 2010. EXTERNAL
- IETF RFC 3947 [Active*]
- IETF RFC 4302 [Active*]
- IETF RFC 4306 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5840.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5840, Wrapped Encapsulating Security Payload (ESP) for Traffic Visibility. Available at https://doi.org/10.17487/RFC5840
Snippet:
IETF RFC 5840, Wrapped Encapsulating Security Payload (ESP) for Traffic Visibility. Available at https://doi.org/10.17487/RFC5840
HTML (ISO 690 compliant)
Preview:
IETF RFC 5840, Wrapped Encapsulating Security Payload (ESP) for Traffic Visibility. Available at https://doi.org/10.17487/RFC5840
Snippet:
<span class="citation"><cite>IETF RFC 5840</cite>, Wrapped Encapsulating Security Payload (ESP) for Traffic Visibility. Available at <a href="https://doi.org/10.17487/RFC5840" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5840</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 5840, Wrapped Encapsulating Security Payload (ESP) for Traffic Visibility
doi: 10.17487/RFC5840
url: https://doi.org/10.17487/RFC5840
doi: 10.17487/RFC5840
url: https://doi.org/10.17487/RFC5840
Snippet:
<li> <cite id="bib-rfc5840">IETF RFC 5840</cite>, Wrapped Encapsulating Security Payload (ESP) for Traffic Visibility <span class="doi">10.17487/RFC5840</span> </li>
Referenced By
- IETF RFC 5879 [Active*]
- IETF RFC 6071 [Active*]