Design and performance analysis of CZML-IPSec for satellite IP networks

  • Authors:
  • Zhan Huang;Xuemai Gu

  • Affiliations:
  • Communication Research Center, Harbin Institute of Technology, Harbin, P.R. China;Communication Research Center, Harbin Institute of Technology, Harbin, P.R. China

  • Venue:
  • NPC'07 Proceedings of the 2007 IFIP international conference on Network and parallel computing
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper analyzes the conflict between performance enhancing technology and IPSec in satellite IP networks, and proposes a solution called multilayer IP security with changeable zone (CZML-IPSec). It enables licensed intermediate nodes not only access TCP header, but also object links of upper layer in the form of HTML by converting static zone mapping to changeable dynamic mapping and building up composite security association correspondingly. A prototype is implemented to demonstrate the practical feasibility of CZML-IPSec. Measurements and performance analysis indicate that CZML-IPSec does not add unacceptable bandwidth overheads and delay, and it does not increase substantially processing hardware requirements. CZML-IPSec can help satellite IP networks provide both end-to-end security and performance enhancement.