Voice over IPsec: Analysis and Solutions

  • Authors:
  • Roberto Barbieri;Danilo Bruschi;Emilia Rosti

  • Affiliations:
  • -;-;-

  • Venue:
  • ACSAC '02 Proceedings of the 18th Annual Computer Security Applications Conference
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper we present the results of the experimentalanalysis of the transmission of voice over securecommunication links implementing IPsec. Criticalparameters characterizing the real-time transmission ofvoice over an IPsec-ured Internet connection, as well astechniques that could be adopted to overcome some of thelimitations of VoIPsec (Voice over IPsec), are presented.Our results show that the effective bandwidth can bereduced up to 50% with respect to VoIP in case ofVoIPsec. Furthermore, we show that the cryptographicengine may hurt the perfomance of voice traffic because ofthe impossibility to schedule the access to it in order toprioritize traffic.We present an efficient solution for packet headercompression, which we call cIPsec, for VoIPsec traffic.Simulation results show that the proposed compressionscheme significantly reduces the overhead of packetheaders, thus increasing the effective bandwidth used bythe transmission. In particular, when cIPsec is adopted,the average packet size is only 2% bigger than in the plaincase (VoIP), which makes VoIPsec and VoIP equivalentfrom the bandwidth usage point of view.