Virtual vpn in the cloud

7.2
 
Future work
•
OpenStack - VPNaaS 
In OpenStack networking, VPNaaS is a neutron-extension also based on IPSec based 
VPN implementation [49]. The feature set also involves the implementation of IKE with 
PSK authentication. Since similar work involving authentication has been performed in this 
research, future work could revolve around a comparative analysis of the current research 
and OpenStack based VPNaaS. 
•
Caching to reduce overheads 
The performance analysis conducted by the authors of [23], deduced caching to be 
an effective strategy to reduce the IKE overheads introduced. With reference to the 
cryptographically secure cache resumption protocol introduced in [23], the choice of caching 
strategy and duration depends on the detected vulnerabilities in any environment. The same 
could be implemented in the cloud model, to reduce overheads and gain better VPN 
performance.
•
Detailed protocol overhead analysis 
Detail analysis and evaluation can be performed on overheads introduced by ESP 
and IKE protocols to determine the exact percentage of overheads induced into the network 
and its causes. Similar Site-to-Site VPNs architectures can be modeled, using other key 
distribution mechanisms such as Digital Certificates and Public key encryption to evaluate 
and compare different architectures. Performance metrics such as CPU utilization, power 
consumption considered important service quality metrics for cloud-based users and VNF 
customers can also be calculated. 
•
Security improvements with IDS 
Providing data confidentiality and authentication to sensitive information are of 
utmost importance to cloud-based users, compromising on security during data traversing is 
a major setback. In addition to the encryption provided, VPN systems can be installed with 
host-based intrusion detection systems that monitors and analyses the internals of a system 
along with network packets.
Algorithms can be designed to detect specific intrusion attacks and counter measures 
designed to mitigate them. Encrypting of data can be made stronger, usage of digital 
signatures and certificates and usage of bandwidth and throughput throttling techniques can 
be adopted for proper validating and filtering of output.

---

37