Moving past TCP in the data center, part 1 [LWN.net]

Moving past TCP in the data center, part 1

Posted Nov 2, 2022 10:08 UTC (Wed) by ale2018 (subscriber, #128727)
Parent article: Moving past TCP in the data center, part 1

I'm surprised SCTP is not mentioned, neither in the article nor in comments.

Moving past TCP in the data center, part 1

Posted Nov 6, 2022 15:26 UTC (Sun) by dullfire (guest, #111432) [Link]

SCTP does seem like it would solve several of the issues.

Even if it doesn't solve all the issues, it would be sane to at least state why SCTP is not a good solution.

And their aversion to encryption is... odd? Yes, it's a data center. Yes, you may not see an attack vector. But these kinds of attacks are only growing. Unless you are literally doing something like "cat /dev/zero | ssh ${other-dc-system} dd of=/dev/null" (in which case the is no useful information being transmited, and nothing is being done with that info either), it's not really sane to assume clear traffic is good. I've heard of several cases where "surprise. you totally benign clear connections can be used as a weapon".