IPSec: Performance Analysis and Enhancements

Abstract— Internet Protocol Security (IPSec) is a widely deployed mechanism for implementing Virtual Private Networks (VPNs). In previous work, we examined the overheads incurred by an IPSec server in a single client setting. In this paper, we extend that work by examining the scaling of a VPN server in a multiple client environment and by evaluating the effectiveness of connection credential caching. Motivated by the potential benefits of caching, we also propose a cryptographically secure cache resumption protocol for IPSec connections to reduce the connection establishment overheads.

• Type: Conference
• Year: 2007
• Where: ICC
• Authors: Craig A. Shue, Minaxi Gupta, Steven A. Myers
• Keywords: Communications, Connection Credential Caching, Connection Establishment Overheads, ICC 2007, IPSec Server