1. OpenVPN Vs IPSec measure performance
Speaker : Anuwat Teerarojanawong
Date : 02/04/2008

2. Outline Introduction VPN OpenVPN IPSec SIPp Set up OpenVPN environment
Reference

3. Introduction VPN
A virtual private network (VPN) is communication networks tunnels through another network.
VPN have 3 type
- pptp ( Point-to-Point Tunneling Protocol )
- IPSec ( IP Security Protocol )
- tun/tap (Virtual Point-to-Point network device/ Virtual Ethernet network device )
Pptp ( Point-to-Point Tunneling Protocol ) use poptop to create vpn server on linux by the way poptop is compatible with windows vpn client
IPSec ( IP Security Protocol ) use FreeS/WAN and openswan to create vpn server by use IPSec it famous because it have high security but it hard and complex to set up and configuration because NAT(Network Address Translation ) and must be patch kernel.
tun/tap (Virtual Point-to-Point network device/ Virtual Ethernet network device ) use OpenVPN ,Vtune ,tinc to create vpn server it run on protocal SSL ( Secure Socket Layer ) it can work on many operation system like linux,freeBsd,window, mac os x , solaris

4. OpenVPN This is concopt how to OpenVPN work create by James Yonan
In initial it encrytion data and then send by UDP ( User Datagram Protocol ) and decrytion data in destination
OpenVPN work flow

5. OpenVPN (cont.) Feature of OpenVPN
- Create tunnel by use IP Frame (TUN) and Ethernet Frame (TAP)
- Have a security passive and active attack
- Pre-shared Keys and Certficated Keys
- Tunnel on NAT
- Not patch kernel
- Support many OS.
Create tunnel by use IP Frame (TUN) and Ethernet Frame (TAP)
Tun is faster than tap but support only ip frame and vpn client is not same subnetmask with vpn server
Tap is support ethernet frame and another protocal example IPX , vpn client is same subnetmask with vpn server but tap slower than tun
Passive Attack คือ protect another to see data by use encrytion Active Attack คือ) protect another to edit data by use authentication OpenVPN use HMAC for authentication and tranfer packet

6. IPSec
IPsec protocols operate at the network layer, layer 3 of the OSI model.
IPsec protocols operate at the network layer, layer 3 of the OSI model. IPsec has an advantage over SSL and other methods that operate at higher layers:

7. SIPp
SIPp is Open Source software test tool to test perfomance in SIP protocal
SIPp feature
- Call rate
- Round trip delay
- Message statistics

8. Set up OpenVPN environment
Use debian to OpenVPN server

9. Set up OpenVPN environment (cont.)
Use window to OpenVPN client

10. Set up OpenVPN environment (cont.)
I have some problem to use OpenVPN on FreeBSD.When I finish set up and configuration and reboot it FreeBSD can’t boot. But I will try to continue resolve this problem

11. Reference http://www.itdestination.com/articles/openvpn /