API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 9329
[ACTIVE]

TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets

Metadata

Publisher
IETF
Doc Type
Standard
Pages
30
Abstract
This document describes a method to transport Internet Key Exchange Protocol (IKE) and IPsec packets over a TCP connection for traversing network middleboxes that may block IKE negotiation over UDP. This method, referred to as "TCP encapsulation", involves sending both IKE packets for Security Association (SA) establishment and Encapsulating Security Payload (ESP) packets over a TCP connection. This method is intended to be used as a fallback option when IKE cannot be negotiated over UDP. TCP encapsulation for IKE and IPsec was defined in RFC 8229. This document clarifies the specification for TCP encapsulation by including additional clarifications obtained during implementation and deployment of this method. This documents obsoletes RFC 8229.
Publication Date
2022-11-01
Status Note
Proposed Standard
DOI
10.17487/RFC9329
Link
https://doi.org/10.17487/RFC9329
Author(s)
Tommy Pauly
Valery Smyslov
Keyword(s)
IKE, IKEv2, IPSEC, TCP
Latest version of IETF RFC 9329

Document Versions — IETF RFC 9329

  • ▶ IETF RFC 9329 (2022-11-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9329.json

Supersedes:
RFC8229 — RFC8229 EXTERNAL

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 9329, TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets. Available at https://doi.org/10.17487/RFC9329
Snippet:
IETF RFC 9329, TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets. Available at https://doi.org/10.17487/RFC9329

HTML (ISO 690 compliant)

Preview:
IETF RFC 9329, TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets. Available at https://doi.org/10.17487/RFC9329
Snippet:
<span class="citation"><cite>IETF RFC 9329</cite>, TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets. Available at <a href="https://doi.org/10.17487/RFC9329" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9329</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 9329, TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets
doi: 10.17487/RFC9329
url: https://doi.org/10.17487/RFC9329
Snippet:
<li>
<cite id="bib-rfc9329">IETF RFC 9329</cite>, TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets
<span class="doi">10.17487/RFC9329</span>
</li>

Referenced By