Dynamic virtual private network provisioning from multiple cloud infrastructure service providers

The Cloud infrastructure service providers currently provision basic virtualized computing resources as on demand and dynamic services but there is no common framework in existence that allows the seamless provisioning of even these basic services across multiple cloud service providers, although this is not due to any inherent incompatibility or proprietary nature of the foundation technologies on which these cloud platforms are built. We present a solution idea which aims to provide a dynamic and service oriented provisioning of secure virtual private networks on top of multiple cloud infrastructure service providers. This solution leverages the benefits of peer to peer overlay networks, i.e., the flexibility and scalability to handle the churn of nodes joining and leaving the VPNs and can adapt the topology of the VPN as per the requirements of the applications utilizing its intercloud secure communication framework

A Programmable Network Based Approach for Managing Dynamic Virtual Private Networks

Colloque avec actes et comité de lecture. internationale.International audienceIn this paper we address the management of dynamic virtual private networks (DVPN). Dynamic virtual private networks are VPNs with a high degree of change in terms of membership, implying the necessity for fast reconfiguration and provisioning. We propose a framework for the management of such networks by integrating the management and the control plane, using the programmable and active networks paradigms developed within the research community. We apply the framework to the management of residential user TV multicast, where an ATM based access network supports the delivery of TV content to all clients having subscribed to a DVPN

Reduction of Routing Delay in an Enterprise Network using Dynamic Multipoint Private Network

The more integrated networks are with the internet, the more our security concerns grow. Virtual Private Networks (VPNs) have been used to solve the problem of internet security. As more locations need to be securely connected, more configurations and greater complexity are given to a network design. Dynamic Multipoint VPN (DMVPN) was used in this research with some supporting protocols to allow changing of Internet Protocol (IP) addresses of remote locations. It proves to be a very scalable VPN technique with minimal configurations and robustness. Lesser delay between two branches of an organization among other advantages, such as elimination of triangular routing, and dynamic changing IP addresses were achieved

Evaluating the Perfomance of the Modified Dynamic Hose Model for Virtual Private Networks

This paper is designed to model a Modified Dynamic Hose Algorithm for data traffic management. The Virtual Private Network (VPN) under study was characterized and the data for transmission was modeled. Then Algorithm for Modified Dynamic Hose Model to handle varying traffic rates was developed and simulated using MATLAB. The results obtained from network characterization shows that variation in window size and packet size affects the throughput in a VPN as an increase in window size from 50kb to 100kb improved the throughput generated from 15 for the Conventional Hose Model to 28.3 for the Modified Dynamic Hose Model resulting in 13.3 throughputs, which translate to 47% improvement. Also variation in window size and packet size affects the throughput in a VPN as an increase in window size from 10kb to 50kb resulted to a maximum throughput of 3.01 for the Conventional Model as against 15 for the Modified Dynamic Hose Model resulting to additional 11.99 or improvement of 79.93%. The Modified Dynamic Hose Model algorithm, unlike the Conventional Hose Model, determines whether to drop a particular packet or to queue it thereby improving the bandwidth utilization, minimize latency (delays) and Virtual Private Network Throughput

MUSeS: Mobile User Secured Session

International audienceMobility and security are very important services for both current and future network infrastructures. However, the integration of mobility in traditional virtual private networks is difficult due to the costs of re-establishing broken secure tunnels and restarting broken application connections. In order to address this issue, we propose a new communication system called Mobile User Secured Session. Based upon a peer-to-peer overlay network, it provides security services to the application layer connections of mobile users. The secure and resilient sessions allow user connections to survive network failures as opposed to regular transport layer secured connections. We have implemented a prototype and have assessed its proper functioning by running experimentations upon a simple virtual dynamic network

Implementation of a Private Cloud

The exponential growth of hardware requirements coupled with online services development costs have brought the need to create dynamic and resilient systems with networks able to handle high-density traffic. One of the emerging paradigms to achieve this is called Cloud Computing it proposes the creation of an elastic and modular computing architecture that allows dynamic allocation of hardware and network resources in order to meet the needs of applications. The creation of a Private Cloud based on the OpenStack platform implements this idea. This solution decentralizes the institution resources making it possible to aggregate resources that are physically spread across several areas of the globe and allows an optimization of computing and network resources. With this in mind, in this thesis a private cloud system was implemented that is capable of elastically leasing and releasing computing resources, allows the creation of public and private networks that connect computation instances and the launch of virtual machines that instantiate servers and services, and also isolate projects within the same system. The system expansion should start with the addition of extra nodes and the modernization of the existing ones, this expansion will also lead to the emergence of network problems which can be surpassed with the integration of Software Defined Network controllers

Secure communication using dynamic VPN provisioning in an Inter-Cloud environment

Most of the current cloud computing platforms offer Infrastructure as a Service (IaaS) model, which aims to provision basic virtualised computing resources as on-demand and dynamic services. Nevertheless, a single cloud does not have limitless resources to offer to its users, hence the notion of an Inter-Cloud enviroment where a cloud can use the infrastructure resources of other clouds. However, there is no common framework in existence that allows the srevice owners to seamlessly provision even some basic services across multiple cloud service providers, albeit not due to any inherent incompatibility or proprietary nature of the foundation technologies on which these cloud platforms are built. In this paper we present a novel solution which aims to cover a gap in a subsection of this problem domain. Our solution offer a security architecture that enables service owners to provision a dynamic and service-oriented secure virtual private network on top of multiple cloud IaaS providers. It does this by leveraging the scalability, robustness and flexibility of peer- to-peer overlay techniques to eliminate the manual configuration, key management and peer churn problems encountered in setting up the secure communication channels dynamically, between different components of a typical service that is deployed on multiple clouds. We present the implementation details of our solution as well as experimental results carried out on two commercial clouds