Virtual Private Network Solution Research Articles

Full‐mesh VPN performance evaluation for a secure edge‐cloud continuum

AbstractThe recent introduction of full‐mesh virtual private network (VPN) solutions which offer near native performance, coupled with modern encryption algorithms and easy scalability as a result of a central control plane have a strong potential to enable the implementation of a seamless edge‐cloud continuum. To test the performance of existing solutions in this domain, we present a framework consisted of both essential and optional features that full‐mesh VPN solutions need to support before they can be used for interconnecting geographically dispersed compute nodes. We then apply this framework on existing offerings and select three VPN solutions for further tests: Headscale, Netbird, and ZeroTier. We evaluate their features in the context of establishing an underlay network on top of which a Kubernetes overlay network can be created. We test pod‐to‐pod TCP and UDP throughput as well as Kubernetes application programming interface (API) response times, in multiple scenarios, accounting for adverse network conditions such as packet loss or packet delay. Based on the obtained measurement results and through analysis of the underlying strengths and weaknesses of the individual implementations, we draw conclusions on the preferred VPN solution depending on the use‐case at hand, striking a balance between usability and performance.

Security Assessment and Evaluation of VPNs: A Comprehensive Survey

The use of Virtual Private Networks (VPNs) has witnessed an outstanding rise as they aim to provide confidentiality and anonymity to communication. Despite this enormous and ubiquitous usage, VPNs come with various security, misconfiguration, and performance related issues thereby hindering the users to take maximum advantage of this revolutionary technology. To address this concern, VPN users must choose the most secure and perfect VPN solution for the smooth functioning of daily life activities. Generally, no clear set of directions is available for assisting a common VPN user thereby accentuating the need to develop an elucidated and coherent checklist that thoroughly helps in evaluating any VPN based on its security, performance, auditing, and management function. This research comprehensively surveys VPN technologies, its features, working principles, and compliance principles that evolved over the last two decades. Based on it, this research presents a new methodology in the form of a feature-enriched template to comprehensively analyze a VPN solution. Each VPN feature is given its score against the potential damage it may cause in case of failure and the probability of occurrence of that failure. In this way, the corporate sector and individual users can quantitatively and qualitatively grade available options while choosing a VPN and use it effectively.

Construction of 5G all-wireless network and information system for cabin hospitals.

The epidemic of coronavirus disease 2019 (COVID-19) broke out in Wuhan, China, in early 2020. In an effort to curb the spread of the epidemic, the government has requisitioned a variety of venues and plant buildings and built more than 20 cabin hospitals to receive patients with mild symptoms within 48 hours. Under this circumstance, we worked out a 5G all-wireless solution to divide the overall network system of the cabin hospital into multiple network units by function. While ensuring good signal coverage of the local unit, each network unit was independently connected to the host hospital’s data center over a virtual private network (VPN) tunnel built on the 5G wireless network. Our successful experience with the application of this 5G + VPN all-wireless network system well points to the bright prospect of 5G wireless network. In addition, the 5G + VPN solution can also be used for multihospital network interconnection and rapid network recovery during the failure of wired network.

A Survey of Mobile VPN Technologies

Virtual private network (VPN) is the traditional approach for an end-to-end secure connection between two endpoints. Most existing VPN solutions are intended for wired networks with high-speed, highly reliable connections. In a mobile environment, these network connections are less reliable. This affects traditional VPN performance resulting in frequent application failure, data loss, and reduced productivity. Mobile VPN bridges the gap between what users and applications expect from a wired network and the realities of mobile computing. In this survey, we provide a taxonomy of VPN designs, present a study of existing mobile VPN solutions, and highlight the advantages and disadvantages and applications of these methods.

Securing IEEE 802.11g WLAN Using Open VPN and its Impact Analysis

Like most advances, wireless LAN poses both opportunities and risks. The evolution of wireless networking in recent years has raised many serious security issues. These security issues are of great concern for this technology as it is being subjected to numerous attacks. Because of the free-space radio transmission in wireless networks, eavesdropping becomes easy and consequently a security breach may result in unauthorized access, information theft, interference and service degradation. Virtual Private Networks (VPNs) have emerged as an important solution to security threats surrounding the use of public networks for private communications. While VPNs for wired line networks have matured in both research and commercial environments, the design and deployment of VPNs for WLAN is still an evolving field. This paper presents an approach to secure IEEE 802.11g WLAN using OpenVPN, a transport layer VPN solution and its impact on performance of IEEE 802.11g WLAN.

Leveraging an Open Source VPN Technology to End User

Virtual Private Network (VPN) can be implemented by corporate and public user in a few methods. The methods included proprietary or open source solutions. It has shown great potential due to its encrypted traffic flow which gives it a secure environment. With a good reception of internet in Malaysia it is unfortunate that the major Internet Service Providers (ISPs) have imposed packet filtering. In effect they have throttled the fast broadband to become a slow medium. As a result it gives a disadvantage to active end user. To overcome an ISP packet filtering which slows down internet traffic, this paper intends to study and provide a sample of VPN solution service to end user to improve the current problem.

Development of International Medical Teleconference System Using Advanced Research Network and Digital Video Transport System(DVTS)

Objective: The purpose of this study is to develop telesurgical conference system by establishing a gigabit broad-banded network between hospitals in Korea and Japan using Digital Video Transport System(DVTS) on internet protocol, and to audit performance of this system through questionnaire study. Methods: The Korea Advanced Research Network(Korean side), the Fukuoka Gigabit Highway(Japanese side), and the Korea-Japan Cable Network(international line)were used for assuring a high speed network connectivity. DVTS streaming was propagated with 30 M bps bandwidth for two channels on IPv4 network. Network security was built with virtual private network solution to guarantee protecting patient's privacy. Technological performance and satisfaction of users were evaluated following the events. Results: The teleconference sessions and live surgery transmission with DVTS on Internet protocol using advanced research network were performed successfully. Bandwidth of 60 Mbps for two-line transmission was maintained throughout the conference. The quality of the transmitted pictures had no frame loss with the rate of 30 frames per second. The sound was also clear and the time delay was less than 0.3 sec. Effectiveness of telesurgical conference using advanced network was felt beneficial for 94% of the attendants in questionnaire study. Conclusion: Establishing an international telesurgical conference system with high quality digital video transmission over internet protocol using international gigabit network was performed successfully. With the improvement of network engineering, this system is expected to contribute penetration of medical skills and knowledge through network infrastructure.

Global Open Ethernet (GOE) System and its Performance Evaluation

This paper presents an overview of global open Ethernet (GOE) architecture as a cost-effective Ethernet-based virtual private network (VPN) solution, and discusses a hardware and software implementation of a prototype system. Three main approaches have been proposed for a VPN solution on metro-area network: resilient packet ring, Ethernet over multiprotocol label switching (EoMPLS), virtual bridged local area network-tag stacking (Q-in-Q). None of these schemes can satisfy the following requirements at the same time: network topology flexibility, affordable network functionalities, low equipment cost, and low operational cost. The proposed GOE system is designed to solve VPN management problems of these approaches with MPLS VPN functionality at a low cost of Ethernet-based solution. The key components of GOE are: 1) a novel GOE tag for high-speed switching and 2) a novel routing and protection module via per-destination multiple rapid spanning tree protocol (PD-MRSTP). Via the analytical performance evaluation of EoMPLS, Q-in-Q, and GOE, we show that the memory cost and the network utilization of GOE is two-three times smaller and 22% higher than the other approaches, respectively. We also have developed a GOE prototype system and obtained the following remarkable hardware and software performance results. The GOE core switch delivered 100% of theoretical maximum throughput (10 G) with zero packet loss even with the field programmable gate array platform, and its 10-G port density is 1.5 times denser than the best currently available products. The GOE switch using PD-MRSTP also delivered a significantly fast protection switching time (1.975 ms), which was significantly faster than legacy Ethernet switches. These performance evaluation results prove that the proposed GOE system can be used as a cost-effective high-performance Ethernet-based VPN solution.

Virtual private networks and their role in e-business

The idea of using a low-cost public network such as the Internet to build a private network is intriguing. In this article, we will focus on virtual private networks (VPNs), which leverage the Internet to provide cost-effective, secure communications. We will discuss the challenges of implementing VPNs based on the Internet Engineering Task Force (IETF) Internet protocol security (IPSec) standards. We will cover various aspects including encryption, authentication, Internet key exchange (IKE), and public key infrastructure (PKI) as they relate to IPSec-based VPNs. We will discuss the major issues facing enterprises, service providers, and end-users in implementing intranets, extranets, and remote access VPNs. We will elaborate by discussing how the Lucent VPN firewall handles the various issues and scenarios described here, and how customers in implementing robust VPNs, use it in practice. We also will touch on other VPN solutions and product architectures, and briefly mention other Lucent VPN products. In closing, we will discuss future VPN challenges, including the impact of Internet protocol version 6 (IPv6).3