Optimasi IPSec Site to Site VPN Mikrotik menggunakan Algoritme Enkripsi Blowfish
Authors: Rahman Ikhwanul Kurnia , Mulyana Dadang Iskandar , Akbar Yuma 
Published: January 2025

<p><em>Although data security is very important, the performance of a VPN (Virtual Private Network) must also be a concern. This paper presents how the use of encryption algorithms affects the performance of a site-to-site VPN. This research simulates a site-to-site IPsec VPN network using the EVE-NG simulator to run two point-to-point network security encryption algorithms, namely IPSec with the default encryption algorithm AES (Advanced Encryption Standard) and IPSec (Internet Protocol Security) with the Blowfish encryption algorithm to encrypt traffic. data sent over a public network. Test uploading a file of 900 Megabytes from computer 2 and computer 3 to the FTP (File Transfer Protocol) Server with a throughput of 3.51 MBps with the AES encryption algorithm; and 3.81 MBps throughput with the Blowfish encryption algorithm. Traffic does not experience problems on the network or Request Time Out (RTO) with an average ping latency of 8ms on the IPSec network with the AES encryption algorithm; and 7ms on an ipsec network that uses the Blowfish algorithm. The test results show that the Blowfish encryption algorithm has better performance in throughput and latency than using the AES encryption algorithm.</em></p><p><strong><em>Keywords:</em></strong><em> Virtual Private Network; Internet Protocol Security; Mikrotik; Blowfish Algorithm</em></p><p><em> </em></p><p align="center"><strong>Abstrak</strong></p><p>Meskipun keamanan data sangat penting, akan tetapi performa VPN (<em>Virtual Private Network</em>) juga harus menjadi perhatian. Paper ini menyajikan bagaimana penggunakan algoritme enkripsi mempengaruhi performa dari <em>site to site</em> VPN. Penelitian mensimulasikan jaringan <em>site to site IPsec</em> VPN menggunakan simulator EVE-NG untuk menjalankan dua algoritme enkripsi keamanan jaringan <em>point to point</em>, yaitu <em>IPSec</em> dengan algoritme enkripsi default AES (<em>Advanced Encryption Standard</em>) dan <em>IPSec</em> (<em>Internet Protocol Security</em>) dengan algoritme enkripsi <em>Blowfish</em> dalam mengenkripsi trafik data yang dikirim melalui jaringan publik. Uji <em>upload</em> file sebesar 900 <em>Megabyte</em> dari komputer 2 dan komputer 3 ke FTP (<em>File Transfer Protocol</em>) Server dengan <em>throughput</em> 3,51 MBps dengan algoritme enkripsi AES; dan <em>throughput</em> 3,81 MBps dengan algoritme enkripsi <em>Blowfish</em>. Trafik tidak mengalami kendala pada jaringan atau <em>Request Time Out</em> (RTO) dengan <em>latency</em> ping rata-rata 8ms pada jaringan IPSec algoritme enkripsi AES; dan 7ms pada jaringan ipsec yang menggunakan algoritme <em>Blowfish</em>. Hasil uji menunjukkan algoritme enkripsi <em>Blowfish</em> memiliki performa lebih baik dalam <em>troughput </em>dan <em>latency</em> dibandingkan menggunakan algoritme enkripsi AES.</p><p><strong>Kata kunci</strong><strong>:</strong> <em>Virtual Private Network; Internet Protocol Security; Mikrotik; Advanced Encryption Standard; Algoritme Blowfish</em></p><p><em>Although data security is very important, the performance of a VPN (Virtual Private Network) must also be a concern. This paper presents how the use of encryption algorithms affects the performance of a site-to-site VPN. This research simulates a site-to-site IPsec VPN network using the EVE-NG simulator to run two point-to-point network security encryption algorithms, namely IPSec with the default encryption algorithm AES (Advanced Encryption Standard) and IPSec (Internet Protocol Security) with the Blowfish encryption algorithm to encrypt traffic. data sent over a public network. Test uploading a file of 900 Megabytes from computer 2 and computer 3 to the FTP (File Transfer Protocol) Server with a throughput of 3.51 MBps with the AES encryption algorithm; and 3.81 MBps throughput with the Blowfish encryption algorithm. Traffic does not experience problems on the network or Request Time Out (RTO) with an average ping latency of 8ms on the IPSec network with the AES encryption algorithm; and 7ms on an ipsec network that uses the Blowfish algorithm. The test results show that the Blowfish encryption algorithm has better performance in throughput and latency than using the AES encryption algorithm.</em></p><p><strong><em>Keywords:</em></strong><em> Virtual Private Network; Internet Protocol Security; Mikrotik; Blowfish Algorithm</em></p><p><em> </em></p><p align="center"><strong>Abstrak</strong></p><p>Meskipun keamanan data sangat penting, akan tetapi performa VPN (<em>Virtual Private Network</em>) juga harus menjadi perhatian. Paper ini menyajikan bagaimana penggunakan algoritme enkripsi mempengaruhi performa dari <em>site to site</em> VPN. Penelitian mensimulasikan jaringan <em>site to site IPsec</em> VPN menggunakan simulator EVE-NG untuk menjalankan dua algoritme enkripsi keamanan jaringan <em>point to point</em>, yaitu <em>IPSec</em> dengan algoritme enkripsi default AES (<em>Advanced Encryption Standard</em>) dan <em>IPSec</em> (<em>Internet Protocol Security</em>) dengan algoritme enkripsi <em>Blowfish</em> dalam mengenkripsi trafik data yang dikirim melalui jaringan publik. Uji <em>upload</em> file sebesar 900 <em>Megabyte</em> dari komputer 2 dan komputer 3 ke FTP (<em>File Transfer Protocol</em>) Server dengan <em>throughput</em> 3,51 MBps dengan algoritme enkripsi AES; dan <em>throughput</em> 3,81 MBps dengan algoritme enkripsi <em>Blowfish</em>. Trafik tidak mengalami kendala pada jaringan atau <em>Request Time Out</em> (RTO) dengan <em>latency</em> ping rata-rata 8ms pada jaringan IPSec algoritme enkripsi AES; dan 7ms pada jaringan ipsec yang menggunakan algoritme <em>Blowfish</em>. Hasil uji menunjukkan algoritme enkripsi <em>Blowfish</em> memiliki performa lebih baik dalam <em>troughput </em>dan <em>latency</em> dibandingkan menggunakan algoritme enkripsi AES.</p><p><strong>Kata kunci</strong><strong>:</strong> <em>Virtual Private Network; Internet Protocol Security; Mikrotik; Advanced Encryption Standard; Algoritme Blowfish</em></p>