iSCSI and the IPSEC replay window

["Bernard Aboba" <aboba@internaut.com>]

At IETF 49, we had a presentation on use of IPSEC in
iSCSI. While I'm generally positive on the concept
of re-using IPSEC in this way, there are some things
to think about. 

One of these is the effect of the IPSEC replay window
on TCP behavior. At the 1+ Gbps speeds of iSCSI, it
strikes me that even a small variation in delay 
between two alternate paths will result in falling
outside the IPSEC replay window if it is set to a
small, fixed value (say 64 packets). 

So the size of the IPSEC replay window should probably
scale with transmission speed. 

Do we understand how this ought to work and is there
a potential for some unforseen effects?

Inquiring minds want to know ;)