New answers tagged


Keepalives / Heartbeats Overhead from keepalives or heartbeats is configurable. This will almost always dominate the idle cost of an IPSEC tunnel. RFC3706 contains some abstract discussion of this and I think it'll be a good resource for you. Re-keying Additionally, IKE SAs are periodically re-keyed to maintain cryptographic resilience. Re-keying costs on ...

Top 50 recent answers are included