loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Michael G. Iatrou 1 ; Artemios G. Voyiatzis 2 and Dimitrios N. Serpanos 2

Affiliations: 1 University of Patras, Greece ; 2 University of Patras / Industrial Systems Institute, Greece

Keyword(s): IPsec, Performance, Petworking, Security, Linux.

Related Ontology Subjects/Areas/Topics: Data and Systems Security ; Information and Systems Security ; Ipsec, Vpns and Encryption Modes

Abstract: Virtual Private Network (VPN) connectivity is a necessity in the public Internet, for accessing in a secure fashion private resources from anywhere. Internet Protocol Security (IPsec) is a standardized VPN technology for serving multiple connectivity scenarios. Implementation of cryptography is widely considered as a performance bottleneck and a target for optimization. We present a set of system configuration optimizations for the Linux 2.6 kernel network stack implementation, supported by extensive measurements. These optimizations achieve significant throughput gains. Our work demonstrates that comparable performance between plain IP and IPsec connections is possible without altering the implementation of the cryptographic algorithms.

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.17.28.48

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
G. Iatrou, M.; G. Voyiatzis, A. and N. Serpanos, D. (2009). NETWORK STACK OPTIMIZATION FOR IMPROVED IPSEC PERFORMANCE ON LINUX. In Proceedings of the International Conference on Security and Cryptography (ICETE 2009) - SECRYPT; ISBN 978-989-674-005-4; ISSN 2184-3236, SciTePress, pages 83-91. DOI: 10.5220/0002225600830091

@conference{secrypt09,
author={Michael {G. Iatrou}. and Artemios {G. Voyiatzis}. and Dimitrios {N. Serpanos}.},
title={NETWORK STACK OPTIMIZATION FOR IMPROVED IPSEC PERFORMANCE ON LINUX},
booktitle={Proceedings of the International Conference on Security and Cryptography (ICETE 2009) - SECRYPT},
year={2009},
pages={83-91},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0002225600830091},
isbn={978-989-674-005-4},
issn={2184-3236},
}

TY - CONF

JO - Proceedings of the International Conference on Security and Cryptography (ICETE 2009) - SECRYPT
TI - NETWORK STACK OPTIMIZATION FOR IMPROVED IPSEC PERFORMANCE ON LINUX
SN - 978-989-674-005-4
IS - 2184-3236
AU - G. Iatrou, M.
AU - G. Voyiatzis, A.
AU - N. Serpanos, D.
PY - 2009
SP - 83
EP - 91
DO - 10.5220/0002225600830091
PB - SciTePress