Full‐mesh VPN performance evaluation for a secure edge‐cloud continuum
Journal
Software: Practice and Experience
Date Issued
2024-08
Author(s)
Kjorveziroski, Vojdan
Bernad, Cristina
Gilly, Katja
Abstract
The recent introduction of full-mesh virtual private network (VPN) solutions
which offer near native performance, coupled with modern encryption algorithms and easy scalability as a result of a central control plane have a strong
potential to enable the implementation of a seamless edge-cloud continuum.
To test the performance of existing solutions in this domain, we present a
framework consisted of both essential and optional features that full-mesh VPN
solutions need to support before they can be used for interconnecting geographically dispersed compute nodes. We then apply this framework on existing
offerings and select three VPN solutions for further tests: Headscale, Netbird,
and ZeroTier. We evaluate their features in the context of establishing an underlay network on top of which a Kubernetes overlay network can be created. We
test pod-to-pod TCP and UDP throughput as well as Kubernetes application programming interface (API) response times, in multiple scenarios, accounting for
adverse network conditions such as packet loss or packet delay. Based on the
obtained measurement results and through analysis of the underlying strengths
and weaknesses of the individual implementations, we draw conclusions on the
preferred VPN solution depending on the use-case at hand, striking a balance
between usability and performance.
which offer near native performance, coupled with modern encryption algorithms and easy scalability as a result of a central control plane have a strong
potential to enable the implementation of a seamless edge-cloud continuum.
To test the performance of existing solutions in this domain, we present a
framework consisted of both essential and optional features that full-mesh VPN
solutions need to support before they can be used for interconnecting geographically dispersed compute nodes. We then apply this framework on existing
offerings and select three VPN solutions for further tests: Headscale, Netbird,
and ZeroTier. We evaluate their features in the context of establishing an underlay network on top of which a Kubernetes overlay network can be created. We
test pod-to-pod TCP and UDP throughput as well as Kubernetes application programming interface (API) response times, in multiple scenarios, accounting for
adverse network conditions such as packet loss or packet delay. Based on the
obtained measurement results and through analysis of the underlying strengths
and weaknesses of the individual implementations, we draw conclusions on the
preferred VPN solution depending on the use-case at hand, striking a balance
between usability and performance.
Subjects
File(s)![Thumbnail Image]()
Loading...
Name
Softw Pract Exp - 2024 - Kjorveziroski - Full‐mesh VPN performance evaluation for a secure edge‐cloud continuum.pdf
Size
2.26 MB
Format
Adobe PDF
Checksum
(MD5):3ae820550aa28b8c732707cee2a7714a