Analysis of IPSec overheads for VPN servers

Craig Shue; Youngsang Shin; Minaxi Gupta; Jong Youl Choi

doi:10.1109/NPSEC.2005.1532049

Analysis of IPSec overheads for VPN servers

Craig Shue, Youngsang Shin, Minaxi Gupta, Jong Youl Choi

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

23 Scopus citations

Abstract

Internet Protocol Security (IPSec) is a widely deployed mechanism for implementing Virtual Private Networks (VPNs). This paper evaluates the performance overheads associated with IPSec. We use Openswan, an open source implementation of IPSec, and measure the running times of individual security operations and also the speedup gained by replacing various IPSec components with no-ops. The main findings of this study include: VPN connection establishment and maintenance overheads for short sessions could be significantly higher than those incurred while transferring data, and cryptographic operations contribute 32 - 60% of the total IPSec overheads.

Original language	English
Title of host publication	2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005
Subtitle of host publication	13th IEEE International Conference on Network Protocols
Pages	25-30
Number of pages	6
DOIs	https://doi.org/10.1109/NPSEC.2005.1532049
State	Published - 2005
Externally published	Yes
Event	2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols - Boston, MA, United States Duration: Nov 6 2005 → Nov 6 2005

Publication series

Name	2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols
Volume	2005

Conference

Conference	2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols
Country/Territory	United States
City	Boston, MA
Period	11/6/05 → 11/6/05

Access to Document

10.1109/NPSEC.2005.1532049

Cite this

Shue, C., Shin, Y., Gupta, M., & Choi, J. Y. (2005). Analysis of IPSec overheads for VPN servers. In 2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols (pp. 25-30). Article 1532049 (2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols; Vol. 2005). https://doi.org/10.1109/NPSEC.2005.1532049

Shue, Craig ; Shin, Youngsang ; Gupta, Minaxi et al. / Analysis of IPSec overheads for VPN servers. 2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols. 2005. pp. 25-30 (2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols).

@inproceedings{5dcd22b0436745fda900bbc2799b02b7,

title = "Analysis of IPSec overheads for VPN servers",

abstract = "Internet Protocol Security (IPSec) is a widely deployed mechanism for implementing Virtual Private Networks (VPNs). This paper evaluates the performance overheads associated with IPSec. We use Openswan, an open source implementation of IPSec, and measure the running times of individual security operations and also the speedup gained by replacing various IPSec components with no-ops. The main findings of this study include: VPN connection establishment and maintenance overheads for short sessions could be significantly higher than those incurred while transferring data, and cryptographic operations contribute 32 - 60% of the total IPSec overheads.",

author = "Craig Shue and Youngsang Shin and Minaxi Gupta and Choi, {Jong Youl}",

year = "2005",

doi = "10.1109/NPSEC.2005.1532049",

language = "English",

isbn = "0780394275",

series = "2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols",

pages = "25--30",

booktitle = "2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005",

note = "2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols ; Conference date: 06-11-2005 Through 06-11-2005",

}

Shue, C, Shin, Y, Gupta, M & Choi, JY 2005, Analysis of IPSec overheads for VPN servers. in 2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols., 1532049, 2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols, vol. 2005, pp. 25-30, 2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols, Boston, MA, United States, 11/6/05. https://doi.org/10.1109/NPSEC.2005.1532049

Analysis of IPSec overheads for VPN servers. / Shue, Craig; Shin, Youngsang; Gupta, Minaxi et al.
2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols. 2005. p. 25-30 1532049 (2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols; Vol. 2005).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Analysis of IPSec overheads for VPN servers

AU - Shue, Craig

AU - Shin, Youngsang

AU - Gupta, Minaxi

AU - Choi, Jong Youl

PY - 2005

Y1 - 2005

N2 - Internet Protocol Security (IPSec) is a widely deployed mechanism for implementing Virtual Private Networks (VPNs). This paper evaluates the performance overheads associated with IPSec. We use Openswan, an open source implementation of IPSec, and measure the running times of individual security operations and also the speedup gained by replacing various IPSec components with no-ops. The main findings of this study include: VPN connection establishment and maintenance overheads for short sessions could be significantly higher than those incurred while transferring data, and cryptographic operations contribute 32 - 60% of the total IPSec overheads.

AB - Internet Protocol Security (IPSec) is a widely deployed mechanism for implementing Virtual Private Networks (VPNs). This paper evaluates the performance overheads associated with IPSec. We use Openswan, an open source implementation of IPSec, and measure the running times of individual security operations and also the speedup gained by replacing various IPSec components with no-ops. The main findings of this study include: VPN connection establishment and maintenance overheads for short sessions could be significantly higher than those incurred while transferring data, and cryptographic operations contribute 32 - 60% of the total IPSec overheads.

UR - http://www.scopus.com/inward/record.url?scp=33749071849&partnerID=8YFLogxK

U2 - 10.1109/NPSEC.2005.1532049

DO - 10.1109/NPSEC.2005.1532049

M3 - Conference contribution

AN - SCOPUS:33749071849

SN - 0780394275

SN - 9780780394278

T3 - 2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols

SP - 25

EP - 30

BT - 2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005

T2 - 2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols

Y2 - 6 November 2005 through 6 November 2005

ER -

Shue C, Shin Y, Gupta M, Choi JY. Analysis of IPSec overheads for VPN servers. In 2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols. 2005. p. 25-30. 1532049. (2005 First Workshop on Secure Network Protocols, NPSec, held in conjunction with ICNP 2005: 13th IEEE International Conference on Network Protocols). doi: 10.1109/NPSEC.2005.1532049

Analysis of IPSec overheads for VPN servers

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this