bgpd - tcp md5 signatures As we have the pfkey interface already, we're pretty close at doing real IPsec IPsec with static keying is supported by JunOS too, we should be compatible We might do dynamic keying with isakmpd as well. nobody else does.