Assessing the impacts of IPsec cryptographic algorithms on a virtual network embedding problem. (October 2018)

• Record Type: Journal Article
• Authors: Camilo, Bernardo C.V.; Couto, Rodrigo S.; Costa, Luís Henrique M.K.
• Is Part Of: Computers & electrical engineering. Volume 71(2018)
• Page Start: 752
• Page End: 767
• Publication Date: 2018-10
• Subjects: Network virtualization -- Virtual network embedding -- Security overhead -- IPsec; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2017.06.025
• Languages: English
• ISSNs: 0045-7906

Abstract

Highlights: IPsec overheads can have a major influence in a virtual network embedding problem. When using IPsec, the CPU overhead is much greater than the bandwidth overhead. Although small, the bandwidth overhead of IPsec should not be neglected. Abstract: Network virtualization has emerged as an alternative to traditional networking, allowing several different virtual networks to operate on the same physical infrastructure. Despite its wide adoption, virtualization still has some open issues. One of the challenges is related to resource allocation of virtual networks on the physical substrate. In the literature, this problem is known as virtual network embedding. Different papers propose virtual network embedding considering different aspects, but only a few address security, which is a key requirement for many applications. This work quantifies the overhead of cryptographic algorithms in order to use them in virtual network embedding solutions. Both theoretical and experimental evaluation of IPsec algorithms are conducted. The obtained results are applied to a known virtual network embedding problem, using realistic characteristics. These results demonstrate the importance of considering such overheads to perform the allocation of secure virtual networks.