WireGuard-AES: Hardware based encryption to WireGuard for VPN gateways
Oluşturanlar
- 1. Ulak Haberlesme AS, Ankara, Turkiye
- 2. Istanbul Univ, Dept Comp Engn, Istanbul, Turkiye
Açıklama
WireGuard is a high-performance virtual private network (VPN) implemented in the Linux kernel, known for its speed and software-based encryption. However, it struggles as a VPN gateway (VPNGW) due to reduced throughput when multiple clients connect-especially in software-defined networks (SDNs), where hardware encryption support is underutilized. This study introduces a novel WireGuard implementation using Advanced Encryption Standard (AES) encryption, leveraging hardware support to improve performance. Kernel-based AES boosts throughput by 11%, reduces retransmissions by 5.5%, and lowers central processing unit (CPU) usage by at least 2% (with 95% confidence interval). User-space AES achieves up to 19% higher throughput on modern CPUs, paving the way for increased speeds and better efficiency with larger maximum transmission units (MTUs).
Dosyalar
bib-7698379e-c1c3-4001-be65-d4e8cdea7e19.txt
Dosyalar
(278 Bytes)
| Ad | Boyut | Hepisini indir |
|---|---|---|
|
md5:b295c447efad4f228ec7a55a33fbb85c
|
278 Bytes | Ön İzleme İndir |