UCL Overview of VPN Work

10/11 July 2003VPN Workshop2 Current Work Projects Projects  Past  ANDROID  RADIOACTIVE  Present  6NET  ICB VPN Technologies  Netcelo VPN Manager  ISI - X-Bone  DRDC - DVC  UMU - PBNM  Entrust VPN Connector

10/11 July 2003VPN Workshop3 ANDROID Netcelo IPv6 VPN Manager Netcelo IPv6 VPN Manager Full Mesh Topology Full Mesh Topology Active Network Techniques Active Network Techniques  Funnelweb  Transcoding Active Gateway

10/11 July 2003VPN Workshop4 RADIOACTIVE ISI X-Bone ISI X-Bone UCL extended X-Bone for IPv6 capability UCL extended X-Bone for IPv6 capability Demonstrated at DANCE - May 2002 Demonstrated at DANCE - May 2002  3 sites  Star Topology Possibility of sub-optimal topology Possibility of sub-optimal topology

6NET VPN Infrastructure Deployment Work Package 4 - Activity 4.3 “To look at the issues surrounding the provision of IPv6 dynamic VPN technology and deploy an IPv6- Enabled VPN Infrastructure”

ICB “To carry out an experimental deployment of an IPv6-Enabled VPN Infrastructure upon which one can experiment on the sort of policies that coalition networks require”

10/11 July 2003VPN Workshop7 UCL IPv6 VPN Deployment Requirements IPv6-Enabled IPv6-Enabled VPN Management VPN Management Security Infrastructure Security Infrastructure Policy Infrastructure Policy Infrastructure Non-Fully Meshed Topology Non-Fully Meshed Topology Failure Tolerant Failure Tolerant Deployable Over Multiple Platforms Deployable Over Multiple Platforms

10/11 July 2003VPN Workshop8 Future Requirements Topology Topology  Flexible  Dynamic Routing Routing  Dynamic  Secure Multicast Multicast QoS QoS

10/11 July 2003VPN Workshop9 Building An Ideal System Each system excels in its particular area of focus Each system excels in its particular area of focus  X-Bone – Overlay Hierarchy, Topology  DVC – Distributed, Localised Control  UMU-PBNM – Security Infrastructure Want the best of all worlds Want the best of all worlds

10/11 July 2003VPN Workshop10 Ideal System – Existing Features Localisation and Security of DVC Localisation and Security of DVC Distributed Nature of DVC Distributed Nature of DVC Wide Deployability of DVC/X-Bone Wide Deployability of DVC/X-Bone Hierarchic Nature of X-Bone Hierarchic Nature of X-Bone Topological Flexibility of X-Bone/UMU Topological Flexibility of X-Bone/UMU Policy Management of UMU Policy Management of UMU Security Management of UMU Security Management of UMU

10/11 July 2003VPN Workshop11 Ideal System – New Features Dynamic Topology Dynamic Topology Secure (Non-Decrypted) Routing over VPN Secure (Non-Decrypted) Routing over VPN Multicast Capability Multicast Capability QoS Provision QoS Provision

10/11 July 2003VPN Workshop12 Issues Definition of a “VPN” Definition of a “VPN” Scope – Edge vs. Node Scope – Edge vs. Node VPN Management System VPN Management System  Central / Coalition / Combination  Dynamic Tunnel Establishment  Tunnel Management  Minimised Overheads

10/11 July 2003VPN Workshop13 Issues (cont.) Security Security  Authentication  PKI Infrastructure  Certificate Enrolment & Management  Authorisation  Distributed Access Control  Policy Management  Automated Policy Negotiation

10/11 July 2003VPN Workshop14 Issues (cont.) Topology & Routing Topology & Routing  Ability To Choose Topology  Dynamic Topology  Requires Dynamic Routing  Bootstrapping  Secure Routing

Manish Lad Department of Computer Science University College London