@techreport{weis-delay-detection-04, number = {draft-weis-delay-detection-04}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-weis-delay-detection/04/}, author = {Brian Weis and Umesh Mangla and Thomas Karl and Nilesh Maheshwari}, title = {{IPsec Delivery Delay Detection}}, pagetotal = 13, year = 2018, month = mar, day = 5, abstract = {This memo describes a one-way measurement of an IPsec packet edge-to- edge delay. Delay detection is enabled by a sender of an IPsec packet that includes a timestamp declaring the time at which it was sent. The receiver of the datagram can then judge how recently it was sent and choose a policy action, which could include discarding packets deemed to be 'too old' (having a timestamp too far into the past) or 'too new' (having a timestamp that is too far into the future). This provides a freshness policy check, which can be valuable irrespective of whether the IPsec policy also includes replay protection.}, }