Implementation and Performance Evaluation of IPSec VPN Based on Netfilter

被引：7
作者：
ZHAO Da-yuan
机构：
来源：
WuhanUniversityJournalofNaturalSciences | 2005年 / 01期
关键词：
IPSec; virtual private network; netfilter;
D O I：
暂无
中图分类号：
TP393 [计算机网络];
学科分类号：
081201 ; 1201 ;
摘要：
We mainly explore two problems when combining IPSec module into TCP/IP stack by porting the famous IPSec software (FreeS/WAN) into a security gateway. One is how to implement the IPSec module based on Netfilter in Linux 2.4.x kernel. The other problem is the performance evaluation. We test the throughput of our security gateway before and after applying IPSec with different encryption/decryption algorithms, including the software-based and hardware-based method. With these testing data, we analyze further system performance bottleneck. In the end, we also infer the quantitative relation between the system throughput and the speed of encryption/decryption algorithm and propose some valuable conclusions for improving performance.
引用
收藏
页码：98 / 102
页数：5
相关论文
共 50 条
  • [1] Design and implementation of an embedded VPN gateway based on IPSec
    Zheng, YJ
    Liu, Q
    Li, FM
    DCABES 2004, Proceedings, Vols, 1 and 2, 2004, : 225 - 227
  • [2] A high performance parallel IPSec-VPN gateway design
    Li, Weiming
    Li, Zhitang
    Xie, Yunfeng
    NETWORK ARCHITECTURES, MANAGEMENT, AND APPLICATIONS IV, 2006, 6354
  • [3] Implementation of GRE Over IPsec VPN Enterprise Network Based on Cisco Packet Tracer
    Wang, Chong
    Chen, Jing-you
    PROCEEDINGS OF THE 2ND INTERNATIONAL CONFERENCE ON SOFT COMPUTING IN INFORMATION COMMUNICATION TECHNOLOGY, 2014, : 142 - 146
  • [4] Research and Implementation of Security Wireless LANs based on EAP-TLS and IPSec VPN
    Zhou Li
    Tan Fang-yong
    Gao Xiao-hui
    2010 INTERNATIONAL COLLOQUIUM ON COMPUTING, COMMUNICATION, CONTROL, AND MANAGEMENT (CCCM2010), VOL I, 2010, : 80 - 83
  • [5] On the Study of IPSec-Based VPN Application
    Pan, Lihong
    2ND INTERNATIONAL CONFERENCE ON INFORMATION AND COMMUNICATION TECHNOLOGY FOR EDUCATION (ICTE 2015), 2015, : 308 - 311
  • [6] Implementation and Evaluation of IPSec in an NFV-Based Network
    Nhu Q Tran
    Khanh D L Nguyen
    Chan D T Thai
    COMMUNICATION AND INTELLIGENT SYSTEMS, VOL 1, ICCIS 2023, 2024, 967 : 53 - 65
  • [7] A comparative research on SSL VPN and IPSec VPN
    Mao, Huaqing
    Zhu, Li
    Qin, Hang
    2012 INTERNATIONAL CONFERENCE ON WIRELESS COMMUNICATIONS, NETWORKING AND MOBILE COMPUTING (WICOM), 2012,
  • [8] Implementation of IPsec VPN with SIP Softphones using GNS3
    Sushma, Amirisetti
    Sanguankotchakorn, Teerapat
    PROCEEDINGS OF 2018 VII INTERNATIONAL CONFERENCE ON NETWORK, COMMUNICATION AND COMPUTING (ICNCC 2018), 2018, : 152 - 156
  • [9] The Research of Building VPN Based on IPsec and MPLS Technology
    Xu, Hong-Yun
    THEORETICAL AND MATHEMATICAL FOUNDATIONS OF COMPUTER SCIENCE, 2011, 164 : 184 - 189
  • [10] A detailed implement and analysis of MPLS VPN based on IPSec
    Ren, R
    Feng, DG
    Ma, K
    PROCEEDINGS OF THE 2004 INTERNATIONAL CONFERENCE ON MACHINE LEARNING AND CYBERNETICS, VOLS 1-7, 2004, : 2779 - 2783
12345