A New Approach for Accelerating IPSec Communication

IPSec VPN is widely used to secure communications between different branch Intranet over Internet, and its performance is becoming more and more important now. Traditional IPSec accelerating approaches are mostly based on hardware and have low cost performance. In this paper, we propose a software approach based on IPSec thumbnail protocol (ITP) to accelerate IPSec communication. By caching data segments of the original IP packet and constructing ITP Thumbnail packet to transfer, IPSec communication can be accelerated. We implement an ITP prototype system on Linux platform and evaluate it in our test environment. The experimental results show that the ITP protocol is effective and the overall IPSec communication performance is improved obviously.