@inproceedings{9b9a2178ef074ef3882896ce85d6e076,
title = "Performance Analysis of VPN Gateways",
abstract = "VPNs play an important role in today's Internet architecture. We investigate different architectures for software implementations of VPN gateways and their effect on performance. Our case study compares OpenVPN, Linux IPsec, and WireGuard. We also implement a WireGuard-compatible VPN benchmarking example application with three different software architectures inspired by the evaluated open-source solutions. Our implementation allows benchmarking of individual effects and optimizations in isolation. We find that WireGuard is the most promising software VPN implementation from an architectural viewpoint. Our implementation of WireGuard's pipeline architecture on top of DPDK achieves 6.2Mpps and 40Gbit/s, the fastest of all evaluated VPN implementations. We find that the main bottleneck for scaling software VPNs are data structures and multi-core synchronization - a problem that can be tackled with an architecture based on pipelining and message passing.",
keywords = "IPsec, Linux, OpenVPN, VPN, Wireguard",
author = "Maximilian Pudelko and Paul Emmerich and Sebastian Gallenm{\"u}ller and Georg Carle",
note = "Publisher Copyright: {\textcopyright} 2020 IFIP.; 2020 IFIP Networking Conference and Workshops, Networking 2020 ; Conference date: 22-06-2020 Through 25-06-2020",
year = "2020",
month = jun,
language = "English",
series = "IFIP Networking 2020 Conference and Workshops, Networking 2020",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "325--333",
booktitle = "IFIP Networking 2020 Conference and Workshops, Networking 2020",
}