RFC 9329: TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets

This document describes a method to transport Internet Key Exchange Protocol (IKE) and IPsec packets over a TCP connection for traversing network middleboxes…

Read RFC 9329 on the RFC Editor

Outgoing relationships (25 related RFCs)

Obsoletes, Informative reference — RFC 8229: TCP Encapsulation of IKE and IPsec Packets
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 4301: Security Architecture for the Internet Protocol
Normative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Normative reference — RFC 7296: Internet Key Exchange Protocol Version 2 (IKEv2)
Normative reference — RFC 6040: Tunnelling of Explicit Congestion Notification
Normative reference — RFC 3948: UDP Encapsulation of IPsec ESP Packets
Normative reference — RFC 8019: Protecting Internet Key Exchange Protocol Version 2 (IKEv2) Implementations from Distributed Denial-of-Service Attacks
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Informative reference — RFC 1122: Requirements for Internet Hosts - Communication Layers
Informative reference — RFC 3168: The Addition of Explicit Congestion Notification (ECN) to IP
Informative reference — RFC 4953: Defending TCP Against Spoofing Attacks
Informative reference — RFC 4555: IKEv2 Mobility and Multihoming Protocol (MOBIKE)
Informative reference — RFC 2817: Upgrading to TLS Within HTTP/1.1
Informative reference — RFC 4987: TCP SYN Flooding Attacks and Common Mitigations
Informative reference — RFC 5961: Improving TCP's Robustness to Blind In-Window Attacks
Informative reference — RFC 5723: Internet Key Exchange Protocol Version 2 (IKEv2) Session Resumption
Informative reference — RFC 6528: Defending against Sequence Number Attacks
Informative reference — RFC 6520: Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Heartbeat Extension
Informative reference — RFC 7383: Internet Key Exchange Protocol Version 2 (IKEv2) Message Fragmentation
Informative reference — RFC 5685: Redirect Mechanism for the Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 4621: Design of the IKEv2 Mobility and Multihoming (MOBIKE) Protocol
Informative reference — RFC 6311: Protocol Support for High Availability of IKEv2/IPsec

Incoming relationships (4 related RFCs)

Informatively referenced by — RFC 9347: Aggregation and Fragmentation Mode for Encapsulating Security Payload (ESP) and Its Use for IP Traffic Flow Security (IP-TFS)
Informatively referenced by — RFC 9622: An Abstract Application Programming Interface (API) for Transport Services
Informatively referenced by — RFC 9838: Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2)
Informatively referenced by — RFC 9601: Propagating Explicit Congestion Notification across IP Tunnel Headers Separated by a Shim