ОЦЕНКА ПРОИЗВОДИТЕЛЬНОСТИ КАНАЛА СВЯЗИ МЕЖДУ УСТРОЙСТВАМИ ТРЕТЬЕГО УРОВНЯ ПРИ РАЗЛИЧНЫХ РЕЖИМАХ РАБОТЫ
Authors: Чумаров С.Г. , Чернов В.К. 
Published: February 2025

Проведён сравнительный анализ характеристик сетевых устройств третьего уровня (маршрутизаторов) для режимов работы: при обычной маршрутизации в локальной или глобальной сети; при наличии GRE-туннеля между конечными узлами и при настройке протокола IPSec в туннельном режиме. Для решения задачи используется модель сети, состоящей из конечных устройств и устройства коммутации сетевых пакетов. По результатам работы полезная пропускная способность канала связи уменьшается при настройке протоколов туннелирования ввиду добавления дополнительных служебных заголовков в структуру кадра. Особенно это характерно для кадров минимальной длины, для кадров же, близких к максимальным размерам в сети Ethernet, соотношение объёма полезных данных к общему размеру фрейма минимально, что увеличивает полезную пропускную способность.

Introduction. In wired and wireless communication networks for data transmission there are usually used information security tools in the form of network protocols. These additional security tools characterized by redundant information that does not carry useful data, but performs a security function for user traffic, as a result useful amount of data in the channel reduced. This is especially true for backbone BGP networks, in which a huge amount of data is transmitted. The aim of the paper is to consider, compare and evaluate the performance of the communication channel with different state-of-the-art network security protocols. To solve this problem, there were used a communication channel model, a network packet generator providing channel load of up to 100%, and network equipment in which security protocols are configured (IPSec, GRE). Material and research methods. Calculations were carried out on raw data gathered in simulations. The digital data (tables, plots) were processed on a computer with the use of application programs such as Excel and Matlab. Findings and discussion. The authors found that the calculated parameters had the best performance with typical static routing. To evaluate the performance of a communication channel, we used the following criteria: throughput for various network security protocols depending on the packet length, the delay time of the packet passing between two end devices in the network. Such indicators are associated with the use of redundant information in the form of additional service headers in the packet when using security protocols. Comparing the calculated values of the three selected models, we shall note that the throughput values for both static routing and IPSec tunnel with the same frame length are close to each other. Conclusions. In the paper, we considered and analyzed three standard operating modes for routing traffic in communication networks between end users such as, typical static routing, GRE and IPSec tunnels. Performance scores showed the dominant role of conventional static routing in the two performed tests. During the simulation, it was revealed that for a communication channel with a data rate of 100 Mbps, the use of the secure IPSec protocol decreases channel performance to the greatest extent compared to the GRE protocol, but ultimately decreases insignificantly for packet lengths over 400 bytes, as proved by the test outcomes. For the state-of-the-art data transmission networks, such losses are negligible, which substantiates the use of these protocols with a decrease in performance.