Encryption will be offloaded to the network interface. ASICs on the NICs
will greatly improve encryption and authentication performance. It won't
run over the Internet because of latencies inherent on the public network.
It will run over incredibly fast Packet over SONET Wide Area
Networks--behind firewalls. OC-192 and soon-to-come OC-768 (terrabit)
switches will be the backbone of WANs and MANs of large networks in a few
years. Also, IPv6 has significantly improved authentication capabilities
that will help ensure security on the Storage WAN (SWAN?)
Brian
-----Original Message-----
From: Keith Moore [mailto:moore(_at_)cs(_dot_)utk(_dot_)edu]
Sent: Friday, May 26, 2000 9:23 AM
To: Jon William Toigo
Cc: ietf(_at_)ietf(_dot_)org
Subject: Re: Storage over Ethernet/IP
None of the cited limitations of TCP performance are true.
they are also missing the point.
If you're going to run storage access over IP then you are potentially
allowing it to be run over the global Internet. If you do that you need
good authentication and privacy, and (if you try to do them in software)
authentication and encyption will eat far more in performance than
anything inherent to TCP or IP.
and no, it's not acceptable to assume that the storage device will be
behind a firewall.
Keith