Elastic virtual private cloud
Résumé
Virtual Private Networks (VPN) are usually based on IPsec. However, IPsec has not been designed with elasticity in mind, which makes cluster of security gateways hard to man- age for providing high Service Level Agreement (SLA). Cluster of SGs must be handled, for example, ISPs use VPNs to secure millions of communications when ooading End- Users from Radio Access Networks to alternative access net- works asWLAN. Additionally, Virtual Private Cloud (VPC) providers also handle thousands of VPN connections when remote EUs access private clouds. This paper describes how to provide Trac Management (TM) and High Availability (HA) for VPN infrastructures by sharing an IPsec context. TM and HA have been imple- mented and evaluated over a 2-node cluster. We measured their impact on a real time audio streaming service simulat- ing a phone conversation. We found out that over a 3 minute conversation, the impact on QoS measured with POLQA is less than 3%.
Origine | Fichiers produits par l'(les) auteur(s) |
---|
Loading...