Implications of security mechanisms on performance enhancing proxies

West, Mark A.; McDonald, Alex

doi:10.1049/ic:20030056

Cited by 3 publications

(3 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Multi-layer IPsec was proposed by Yongguang Zhang and Bikramjit Singh of HRL Laboratories, LLC in 2000 [13,14]. They noted that the use of IPsec hindered the use of Internet services including PEPs.…”

Section: Multi-layer Ipsecmentioning

confidence: 99%

“…However, satellite links generally have high latency (especially for satellites in Geostationary Earth Orbit [13]) and relatively high Bit Error Rates (BER). Many satellite links also provide dedicated bandwidth to single users, altogether eliminating congestion on the link.…”

Section: Introductionmentioning

confidence: 99%

“…HAIPEs will encrypt the entire Red IP packet and add a Black IP header. This encryption hides all information from layer 3 and above (including the TCP segment header), rendering a PEP inside of the Black Core unable to access the segment header to accelerate traffic across the satellite link or establish a proxy connection with the end host [13]. Essentially, a PEP inside of the Black Core is unable to accelerate the TCP traffic contained within the encrypted packets [15].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Approaches to using Performance Enhancing Proxies in the GIG Black Core

Molinari

Pezeshki

2007

MILCOM 2007 - IEEE Military Communications Conference

View full text Add to dashboard Cite

It has long been understood that Transport Control Protocol (TCP) traffic performs poorly across satellite links. To overcome this performance challenge, SATCOM users have traditionally used Performance Enhancing Proxies (PEP) to "accelerate" TCP traffic.PEPs work by breaking the end-to-end TCP connection, running a different layer 4 protocol across the satellite link, and proxying the TCP connections with each end host. To do this, PEPs must be able to inspect and modify the entire IP packet, including the TCP segment header, to ensure proper handling ofTCP traffic over the link.The Department of Defense (DoD) is in the process of implementing the Global Information Grid (GIG), an Internet-like network for warfighters anywhere on Earth. Current plans callfor the GIG to transition to a "Black", or IP-encrypted, Core in the future [3]. Within the Black Core, IP packets will be completely encrypted, obscuring all information at layer 3 and above. Such an approach would render existing PEPs useless ifplaced in the Black Core. This is referred to in this paper as the Black Core problem.Many solutions have been proposed to the Black Core problem. Proposed solutions have included making changes to the network architecture, to the network protocols, or both. This paper expands upon the overview of PEP-based solutions presented in [4], and details several additional approaches. Additionally, this paper overviews the advantages and disadvantages for each method.

show abstract

Section: Multi-layer Ipsecmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%