Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!cis.ohio-state.edu!ucbvax!JAGUAR.ESS.HARRIS.COM!WELDEN From: WELDEN@JAGUAR.ESS.HARRIS.COM Newsgroups: comp.protocols.tcp-ip Subject: Congestion AVoidance Help Needed Message-ID: <9106012137.AA20860@ucbvax.Berkeley.EDU> Date: 31 May 91 23:31:54 GMT Sender: daemon@ucbvax.BERKELEY.EDU Distribution: world Organization: The Internet Lines: 33 From: JUNGLE::WELDEN 31-MAY-1991 15:49:07.56 To: EXOS%"tcp-ip@nic.ddn.mil" CC: WELDEN Subj: Congestion Avoidance Help Needed CONGESTION AVOIDANCE WHEN ICMP CAN'T BE USED ******************************************** I need feedback views and experience for a network situation we are facing in using the TCP/IP protocols in a secure application. Hosts on IEEE 802.3 LANs connect to a Packet Encryption Device and then by an IEEE 802.3 LAN to an IP Router and then out into a WAN to the reverse set of eomponents. The Packet Encryption Device will be a NSA approved item and will create a barrior between the Hosts and the IP Router. When congestion starts in the WAN the IP Router would normally generate an ICMP Source Quench packet to be sent back to the source Host but the Packet Encryp- tion Device blocks it. I need to know if anyone else has experienced this situation and/or what solid recommendations ca be made. We feel we must be able to slow down selected sourceHosts in order to manage congestion avoidance in the network. Please reply to: welden@jaguar.ess.harris.com Walter Elden Harris Corp-GCSD Melbourne, FL 407/729-3661 407/729-2855 FAX