## 8 Discussion  
Implementing VLAN-based protection measures for IoT systems operating through TOR networks ensures strong information safeguarding and optimal operational efficiency. While customized data confidentiality techniques address the security requirements of sensitive situations, extensive examination and benchmarking of cipher suites and QoS levels yield insights for enhancing IoT installations. When it comes to managing encrypted connections among various sensor networks, wireless solutions are important. They also present major advantages in cases where access is limited, such as rural or hilly places. Integrating routers as active network participants requires dedicated equipment and custom software configurations. This integration often involves protocols such as Zigbee, typically accessed through Raspberry Pi-based intermediary devices or Lora/Lorawan systems interfaced with 3 GPP-4G/5G infrastructure. Even with inexpensive devices, this firmware solution offers a safe basis for building internet of things networks. Our main goal is to find the best combinations (QoS, CipherSuite, TLS Version) to improve data transmission efficiency on limited devices. Performance tests carried out on Raspberry Pi 4s, and TP-LINK OpenWRT routers highlight the most effective algorithms and are compiled in Table 2.  
From our experiments, it's evident that certain cipher suites perform notably better than others across different network types. For instance, on 1 Gb IEEE 802.3 ab connections, ECDHE-RSA-CHACHA20-POLY1305 excels, whereas AES128-SHA with MQTT 5.0 and TLSv1.2 shows optimal performance on 3 GPP-4G connections. Evaluating MQTT versions across 3 GPP-4G connections reveals varying performance levels, particularly in less controllable communication environments provided by ICT providers. Regarding our second objective, TLSv1.2 cipher suites demonstrate broad compatibility with current devices, whereas TLSv1.3 is natively supported by specific clients like mqttx and hive-mqtt-cli. The third objective emphasizes client capabilities: while mosquuitto clients support TLSv1.2 and TLSv1.3 but lack WebSocket communication, mqttx  
Figure 22: Statistical Distribution of Delays for TLS v1.2 cipher suites and QoS0 level on IEEE 802.11n/ac Link and MQTT V3.11. \(\times\) represents the median value. and mqtt-cli offer comprehensive support for various cipher suites, TLS families, and MQTT versions. This study underscores the significance of optimizing message sizes on the TOR network, particularly \"small payload messages\" up to 5 k-bytes, to enhance responsiveness for critical updates and periodic network condition summaries. The advantages of our approach are particularly evident in high-sensitivity environments. Consider the following use cases:  
* **Healthcare IoT:** In a scenario where wearable devices are monitoring patients with stigmatized conditions, our approach ensures that the data transmission remains not only encrypted but also anonymous. This prevents potential discrimination based on data interception or metadata analysis. * **Industrial IoT in Restrictive Regions:** For multinational corporations operating in regions with strict government surveillance, our method allows for secure and anonymous communication between IoT devices and central servers, protecting sensitive industrial data from unauthorized access or monitoring. * **Smart City Applications:** In smart city deployments where citizen privacy is a concern, our approach can be used for anonymous data collection, ensuring that individual data points cannot be traced back to specific households or individuals. While our method introduces some latency due to the routing through the TOR network, the enhanced privacy and security make it an ideal choice for applications where data sensitivity outweighs the need for real-time communication. The degraded performance of AES256-GCM-SHA384 and DHE-RSA-CHACHA20-POLY1305 can be attributed to several factors.