Re: IEEE MACsec

[Andriy Bilous <andriy.bilous () gmail com>]

In case you'll find it interesting - all three major cloud providers (AWS,
Azure, GCP) support MACSec on their circuits dedicated to customers
(restictions may apply).

https://aws.amazon.com/directconnect/locations/
https://cloud.google.com/network-connectivity/docs/interconnect/concepts/choosing-colocation-facilities

Can't find the similar table for Azure unfortunately but MACSec is there
https://learn.microsoft.com/en-us/azure/expressroute/expressroute-about-encryption

On Mon, Oct 21, 2024 at 9:11 PM John Schiel <jschiel () flowtools net> wrote:

> I know this is a NANOG forum but curious how widespread usage of MACsec
> might be. (https://1.ieee802.org/security/802-1ae/).Currently reading
> the spec but wanted to pose some questions.
>
> I'm seeing some pitfalls:
>      1) May not work over wireless LAN devices?
>      2) Needs a centralized key server.
>      3) May not be supportable on all devices?
>
> Purported to be faster on the LAN than IPsec because MACsec is on layer 2.
>
> Thoughts?