Implementation and Performance Evaluation of IPSec VPN Based on Netfilter

被引：7
作者：
ZHAO Da-yuan
机构：
来源：
WuhanUniversityJournalofNaturalSciences | 2005年 / 01期
关键词：
IPSec; virtual private network; netfilter;
D O I：
暂无
中图分类号：
TP393 [计算机网络];
学科分类号：
081201 ; 1201 ;
摘要：
We mainly explore two problems when combining IPSec module into TCP/IP stack by porting the famous IPSec software (FreeS/WAN) into a security gateway. One is how to implement the IPSec module based on Netfilter in Linux 2.4.x kernel. The other problem is the performance evaluation. We test the throughput of our security gateway before and after applying IPSec with different encryption/decryption algorithms, including the software-based and hardware-based method. With these testing data, we analyze further system performance bottleneck. In the end, we also infer the quantitative relation between the system throughput and the speed of encryption/decryption algorithm and propose some valuable conclusions for improving performance.
引用
收藏
页码：98 / 102
页数：5
相关论文
共 50 条
  • [31] 基于IPSec的VPN技术的应用研究
    王凤领
    计算机技术与发展, 2012, 22 (09) : 250 - 253
  • [32] Traffic masking in IPsec: architecture and implementation
    Kiraly, Csaba
    Bianchi, Giuseppe
    Formisano, Fabrizio
    Teofili, Simone
    Lo Cigno, Renato
    2007 PROCEEDINGS OF THE 16TH IST MOBILE AND WIRELESS COMMUNICATIONS, VOLS 1-3, 2007, : 1343 - +
  • [33] The Implementation of IKEV2 for IPSec
    Yang, Xiaojin
    Liu, Jianhua
    CLOUD COMPUTING (CLOUDCOMP 2014), 2015, 142 : 175 - 180
  • [34] Efficient Algorithms for Dynamic Detection and Resolution of IPSec/VPN Security Policy Conflicts
    Niksefat, Salman
    Sabaei, Masoud
    2010 24TH IEEE INTERNATIONAL CONFERENCE ON ADVANCED INFORMATION NETWORKING AND APPLICATIONS (AINA), 2010, : 737 - 744
  • [35] Performance Analysis of Offloading IPsec processing to Hardware Based Accelerators
    Agrawal, Hemant
    Dutta, Yashpal
    Malik, Sandeep
    2012 INTERNATIONAL SYMPOSIUM ON ELECTRONIC SYSTEM DESIGN (ISED 2012), 2012, : 291 - 294
  • [36] Performance Analysis of 4to6 and 6to4 Transition Mechanisms over Point to Point and IPSec VPN Protocols
    Narayan, Shaneel
    Ishrar, Salman
    Kumar, Avinesh
    Gupta, Ruchinav
    Khan, Ziafil
    2016 THIRTEENTH IEEE AND IFIP INTERNATIONAL CONFERENCE ON WIRELESS AND OPTICAL COMMUNICATIONS NETWORKS (WOCN), 2016,
  • [37] An efficient implementation of FPGA based high speed IPSec (AH/ESP) core
    Rao, Muzaffar
    Newe, Thomas
    Omerdic, Edin
    Dooly, Gerard
    Lewis, Elfed
    Toal, Daniel
    INTERNATIONAL JOURNAL OF INTERNET PROTOCOL TECHNOLOGY, 2018, 11 (02) : 97 - 109
  • [38] Research and Implementation of IPSec in IC Payment Gateway
    Yang Ming
    Guo Shuxu
    MINES 2009: FIRST INTERNATIONAL CONFERENCE ON MULTIMEDIA INFORMATION NETWORKING AND SECURITY, VOL 2, PROCEEDINGS, 2009, : 514 - 517
  • [39] Research and implementation of IPSec inside operating system
    Jiang, Z
    Wang, XL
    Zhang, HK
    Zhang, LY
    APOC 2002: ASIA-PACIFIC OPTICAL AND WIRELESS COMMUNICATIONS; NETWORK DESIGN AND MANAGEMENT, 2002, 4909 : 286 - 291
  • [40] Design and Implementation of VPN Security Gateway Based on Linux Kernel 2.6
    Li, Zhou
    ICCSSE 2009: PROCEEDINGS OF 2009 4TH INTERNATIONAL CONFERENCE ON COMPUTER SCIENCE & EDUCATION, 2009, : 357 - 360
12345