Abstract
Virtual Private Networks (VPNs) are commonly used to provide secure connectivity over public networks. VPNs use tunnels to provide encryption, compression, and authentication functions, which are identically applied to every packet passing through them. However, this behavior may be overly rigid in many situations where the applications require different functions to be applied to different parts of their streams. Current VPNs are unable to offer such differential treatment, posing a heavy computational burden on edge routers, reducing their flexibility and degrading network performance. Additionally, the administrative cost of maintaining these tunnels is as high as O(N2) for an N node VPN. In this paper, we propose and evaluate a flexible VPN architecture (called Flexi-Tunes) where within a single VPN tunnel, different VPN functions are applied to different packet streams. Flexi-Tunes also replaces the traditional point-to-point tunnels with packet switched tunnels that improve scalability by reducing administrative costs to O(N). Simulation of this enhanced model demonstrates 170% improvement in bandwidth and 40 times improvement in end-to-end delay.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Venkateswaran, R.: Virtual Private Networks. IEEE Computer Society Press, Los Alamitos (2001)
Kolesnikov, O., Hatch, B.: Building Linux VPNs. New Riders, Indianapolis (2001)
Khanvilkar, S., Khokhar, A.: Virtual Private Networks: An Overview with performance evaluation. IEEE Comm. Mag. (October 2004)
De Clercq, J., Paridaens, O.: Scalability implications of virtual private networks. IEEE Comm. Mag. (May 2002)
Albitz, P., Liu, C.: DNS and BIND, 4th edn. O’Reilly, Sebastopol (2001)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Khanvilkar, S., Khokhar, A. (2005). Towards a Scalable and Flexible Architecture for Virtual Private Networks. In: Lorenz, P., Dini, P. (eds) Networking - ICN 2005. ICN 2005. Lecture Notes in Computer Science, vol 3421. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-31957-3_68
Download citation
DOI: https://doi.org/10.1007/978-3-540-31957-3_68
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-25338-9
Online ISBN: 978-3-540-31957-3
eBook Packages: Computer ScienceComputer Science (R0)