OpenVPN Vs IPSec measure performance Speaker : Anuwat Teerarojanawong Date : 02/04/2008

Outline Introduction VPN OpenVPN IPSec SIPp Set up OpenVPN environment Reference

Introduction VPN A virtual private network (VPN) is communication networks tunnels through another network. VPN have 3 type - pptp ( Point-to-Point Tunneling Protocol ) - IPSec ( IP Security Protocol ) - tun/tap (Virtual Point-to-Point network device/ Virtual Ethernet network device ) Pptp ( Point-to-Point Tunneling Protocol ) use poptop to create vpn server on linux by the way poptop is compatible with windows vpn client IPSec ( IP Security Protocol ) use FreeS/WAN and openswan to create vpn server by use IPSec it famous because it have high security but it hard and complex to set up and configuration because NAT(Network Address Translation ) and must be patch kernel. tun/tap (Virtual Point-to-Point network device/ Virtual Ethernet network device ) use OpenVPN ,Vtune ,tinc to create vpn server it run on protocal SSL ( Secure Socket Layer ) it can work on many operation system like linux,freeBsd,window, mac os x , solaris

OpenVPN This is concopt how to OpenVPN work create by James Yonan In initial it encrytion data and then send by UDP ( User Datagram Protocol ) and decrytion data in destination OpenVPN work flow

OpenVPN (cont.) Feature of OpenVPN - Create tunnel by use IP Frame (TUN) and Ethernet Frame (TAP) - Have a security passive and active attack - Pre-shared Keys and Certficated Keys - Tunnel on NAT - Not patch kernel - Support many OS. Create tunnel by use IP Frame (TUN) and Ethernet Frame (TAP) Tun is faster than tap but support only ip frame and vpn client is not same subnetmask with vpn server Tap is support ethernet frame and another protocal example IPX , vpn client is same subnetmask with vpn server but tap slower than tun Passive Attack คือ protect another to see data by use encrytion Active Attack คือ) protect another to edit data by use authentication OpenVPN use HMAC for authentication and tranfer packet

IPSec IPsec protocols operate at the network layer, layer 3 of the OSI model. IPsec protocols operate at the network layer, layer 3 of the OSI model. IPsec has an advantage over SSL and other methods that operate at higher layers:

SIPp SIPp is Open Source software test tool to test perfomance in SIP protocal SIPp feature - Call rate - Round trip delay - Message statistics

Set up OpenVPN environment Use debian to OpenVPN server

Set up OpenVPN environment (cont.) Use window to OpenVPN client

Set up OpenVPN environment (cont.) I have some problem to use OpenVPN on FreeBSD.When I finish set up and configuration and reboot it FreeBSD can’t boot. But I will try to continue resolve this problem

Reference http://www.itdestination.com/articles/openvpn / http://www.openswan.org/ http://wikipedia.org http://sipp.sourceforge.net/