P4-IPsec: Site-to-Site and Host-to-Site VPN With IPsec in P4-Based SDN

VPN and IPsec

Experiences with Host-to-Host IPsec

This paper recounts some lessons that we learned from the deployment of host-to-host IPsec in a large corporate network. Several security issues arise from mismatches between the different identifier spaces used by applications, by the IPsec security policy database, and by the security infrastructure (X.509 certificates or Kerberos). Mobile hosts encounter additional problems because private I...

IPsec-based end-to-end VPN deployment over UMTS

Next generation mobile users require flexible security mechanisms, which provide customized security services to data traffic, take into account end-user mobility and mobile network characteristics, and are available anywhere–anytime. An IPsecbased end-to-end Virtual Private Network (VPN) deployment scheme over the Universal Mobile Telecommunication System (UMTS) is proposed and analysed. The U...

Simple-VPN: Simple IPsec Configuration

The IPsec protocol promised easy, ubiquitous encryption. That has never happened. For the most part, IPsec usage is confined to VPNs for road warriors, largely due to needless configuration complexity and incompatible implementations. We have designed a simple VPN configuration language that hides the unwanted complexities. Virtually no options are necessary or possible. The administrator speci...

GESEQ: A Generic Security and QoS Model for Traffic Priorization over IPSec Site to Site Virtual Private Networks

Virtual Private Networks (VPNs) are replacing expensive leased lines since they use the public Internet as the communication channel. However, Internet by itself does not provide guarantees of security and QoS to send voice and video packets. In this paper we present a generic security and QoS model named GESEQ which is based on the DiffServ model that shows design considerations when delay-sen...