Questions re: VPN protocols globally

Mailman List Mirror (Read Only)
1

I’ve been charged with building a global VPN as an overlay on top of a certain 3 letter company who also sells lots of stuff.

We’re looking at

US East
US West
US Central (eventually)
Brazil
Singapore
Frankfurt
Ireland
Sydney
Maybe Canada
Maybe India (outsourcesrs)

In the planning stages now and wondering if there are any protocols I need to stay away from ITAR wise with this list of countries.

Contemplating Suite B with GCM, etc and AES acceleration.

Any land mines?

Thanks in advance

EKG

2

There is a Mumbai, India three letter company region available as of June 27, 2016

https://aws.amazon.com/blogs/aws/now-open-aws-asia-pacific-mumbai-region/

3

I’m aware. We’re considering them down the line.

So, back to the question, any ITAR gotchas with any of these companies?

Thanks

EKG

4

I’ve been charged with building a global VPN as an overlay on top of a
certain 3 letter company who also sells lots of stuff.

you say 'vpn' do you mean 'mpls vpn' or 'ipsec vpn over intertubes' ?

We’re looking at

US East
US West
US Central (eventually)
Brazil
Singapore
Frankfurt
Ireland
Sydney
Maybe Canada
Maybe India (outsourcesrs)

In the planning stages now and wondering if there are any protocols I need
to stay away from ITAR wise with this list of countries.

Contemplating Suite B with GCM, etc and AES acceleration.

most places dont' really care about encryption if your use is 'for
corporate use', not providing use by external parties (internet access
sorts of things), I believe.

5

IPSec and corporate.

Customers will connect to their respective regional sites separately. Any ITAR concerns there?

6

If there are serious concerns there, I recommend spending the coin for
an actual ITAR expert.

7

* Valdis Kletnieks: