IPsec and IKE as Functions in SDN Controlled Network

Markku Vajaranta; Joona Kannisto; Jarmo Harju

doi:10.1007/978-3-319-64701-2_39

IPsec and IKE as Functions in SDN Controlled Network

Markku Vajaranta
, Joona Kannisto
, Jarmo Harju

Tutkimustuotos: Konferenssiartikkeli › Tieteellinen › vertaisarvioitu

8 Sitaatiot (Scopus)

Abstrakti

Currently IPsec performance in high-speed networks is problematic. Traditionally the connections are established between some multifunction network devices which are typically inefficient already in 10 Gbps packet delivery and do not have high-availability nor scalability features. In the Software-Defined Networking, packets only travel through the desired dedicated networking devices. However, few high-speed stand-alone IPsec solutions exists that can be hooked up with the SDN. In this paper we propose a design which will utilize the IPsec in SDN fashion by separating IKE and packet encryption. Experimental results show that high-availability and scalability goals are reached and per-client throughput is increased. The IPsec protocol suite can thus face the on-going need for faster packet processing rate.

Alkuperäiskieli	Englanti
Otsikko	Network and System Security
Alaotsikko	11th International Conference, NSS 2017, Helsinki, Finland, August 21–23, 2017, Proceedings
Kustantaja	Springer
Sivut	521-530
ISBN (elektroninen)	978-3-319-64701-2
ISBN (painettu)	978-3-319-64700-5
DOI - pysyväislinkit	https://doi.org/10.1007/978-3-319-64701-2_39
Tila	Julkaistu - heinäk. 2017
OKM-julkaisutyyppi	A4 Artikkeli konferenssijulkaisussa
Tapahtuma	International Conference on Network and System Security - Kesto: 1 tammik. 2000 → …

Julkaisusarja

Nimi	Lecture Notes in Computer Science
Vuosikerta	10394
ISSN (elektroninen)	1611-3349

Conference

Conference	International Conference on Network and System Security
Ajanjakso	1/01/00 → …

Julkaisufoorumi-taso

Jufo-taso 1

Pääsy asiakirjaan

10.1007/978-3-319-64701-2_39

Siteeraa tätä

@inproceedings{689b790afc0a4c3295b20ecc11115108,

title = "IPsec and IKE as Functions in SDN Controlled Network",

abstract = "Currently IPsec performance in high-speed networks is problematic. Traditionally the connections are established between some multifunction network devices which are typically inefficient already in 10 Gbps packet delivery and do not have high-availability nor scalability features. In the Software-Defined Networking, packets only travel through the desired dedicated networking devices. However, few high-speed stand-alone IPsec solutions exists that can be hooked up with the SDN. In this paper we propose a design which will utilize the IPsec in SDN fashion by separating IKE and packet encryption. Experimental results show that high-availability and scalability goals are reached and per-client throughput is increased. The IPsec protocol suite can thus face the on-going need for faster packet processing rate.",

author = "Markku Vajaranta and Joona Kannisto and Jarmo Harju",

note = "jufoid=62555; International Conference on Network and System Security ; Conference date: 01-01-2000",

year = "2017",

month = jul,

doi = "10.1007/978-3-319-64701-2\_39",

language = "English",

isbn = "978-3-319-64700-5",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "521--530",

booktitle = "Network and System Security",

}

Vajaranta, M, Kannisto, J & Harju, J 2017, IPsec and IKE as Functions in SDN Controlled Network. julkaisussa Network and System Security: 11th International Conference, NSS 2017, Helsinki, Finland, August 21–23, 2017, Proceedings. Lecture Notes in Computer Science, Vuosikerta 10394, Springer, Sivut 521-530, International Conference on Network and System Security, 1/01/00. https://doi.org/10.1007/978-3-319-64701-2_39

IPsec and IKE as Functions in SDN Controlled Network. / Vajaranta, Markku; Kannisto, Joona; Harju, Jarmo.
Network and System Security: 11th International Conference, NSS 2017, Helsinki, Finland, August 21–23, 2017, Proceedings. Springer, 2017. s. 521-530 (Lecture Notes in Computer Science; Vuosikerta 10394).

Tutkimustuotos: Konferenssiartikkeli › Tieteellinen › vertaisarvioitu

TY - GEN

T1 - IPsec and IKE as Functions in SDN Controlled Network

AU - Vajaranta, Markku

AU - Kannisto, Joona

AU - Harju, Jarmo

N1 - jufoid=62555

PY - 2017/7

Y1 - 2017/7

N2 - Currently IPsec performance in high-speed networks is problematic. Traditionally the connections are established between some multifunction network devices which are typically inefficient already in 10 Gbps packet delivery and do not have high-availability nor scalability features. In the Software-Defined Networking, packets only travel through the desired dedicated networking devices. However, few high-speed stand-alone IPsec solutions exists that can be hooked up with the SDN. In this paper we propose a design which will utilize the IPsec in SDN fashion by separating IKE and packet encryption. Experimental results show that high-availability and scalability goals are reached and per-client throughput is increased. The IPsec protocol suite can thus face the on-going need for faster packet processing rate.

AB - Currently IPsec performance in high-speed networks is problematic. Traditionally the connections are established between some multifunction network devices which are typically inefficient already in 10 Gbps packet delivery and do not have high-availability nor scalability features. In the Software-Defined Networking, packets only travel through the desired dedicated networking devices. However, few high-speed stand-alone IPsec solutions exists that can be hooked up with the SDN. In this paper we propose a design which will utilize the IPsec in SDN fashion by separating IKE and packet encryption. Experimental results show that high-availability and scalability goals are reached and per-client throughput is increased. The IPsec protocol suite can thus face the on-going need for faster packet processing rate.

U2 - 10.1007/978-3-319-64701-2_39

DO - 10.1007/978-3-319-64701-2_39

M3 - Conference contribution

SN - 978-3-319-64700-5

T3 - Lecture Notes in Computer Science

SP - 521

EP - 530

BT - Network and System Security

PB - Springer

T2 - International Conference on Network and System Security

Y2 - 1 January 2000

ER -

IPsec and IKE as Functions in SDN Controlled Network

Abstrakti

Julkaisusarja

Conference

Julkaisufoorumi-taso

Pääsy asiakirjaan

Sormenjälki

Siteeraa tätä