A Model for Optimizing IPsec Cluster Performance

• Main Authors: Chang Ya-Ting, 張雅婷
• Other Authors: Shiuhpyng Shieh
• Format: Others
• Language: zh-TW
• Published: 2003
• Online Access: http://ndltd.ncl.edu.tw/handle/97369536552089662696

碩士 === 國立交通大學 === 資訊工程系 === 91 === Nowadays, security issues are more and more important in the field of internet and IPsec protocol suites provides an effective secure solution over IP networks. We could apply IPsec into Virtual Private Network (VPN). However, in high speed network environment, IPsec VPN gateway might become the bottleneck due to their encryption or decryption overhead. Thus various approaches are proposed and a typical soulution is IPsec cluster to share and reduce the overhead. In order to verify the advantages and disadvantages of this scheme and promote performance, how to model IPsec cluster is necessary and critical. In this thesis, we propose a novel model to analyze IPsec cluster. Markov chain of this model is finite quasi birth-death process (QBD) and emulation result is based on the stationary analysis. It is showed to obtain the relation between system factors and performance flexiablely and easily. Based on above data, we could optimize system by tuning influential parameters.