# Wireless and Fiber-Based Post-Quantum-Cryptography-Secured IPsec Tunnel
## 5 Experimental Setup and Methodology  
Figure 5 shows the schematical representation of a data center. In a data center, multiple servers are stashed in several racks. All servers are interconnected via a high-speed network within the data center. Different applications are running on the servers. The applications are potentially running a number of virtual machines (VMs) on various different machines that, hence, are required to communicate with each other. In a data center, this is called east-west traffic. External users and clients access the services provided by the applications that are running in the data center via the public internet. This kind of traffic is referred to as north-south traffic. In this work, we present two scenarios for the application of the PQC-secured IPsec tunnel that we demonstrate in this work. The first scenario emulates an intra-data-center east-west communication at line rate. Our experimental setup for this, shown in Figure 6, represents this scenario: Two Dell PowerEdge 740 xd ([[https://www.dell.com/en-us/shop/dell-poweredge-servers/poweredge-r740](https://www.dell.com/en-us/shop/dell-poweredge-servers/poweredge-r740) xd-rack-server/spd/poweredge-r740 xd/pe_r740 xd_tm_vi_vp_sb]([https://www.dell.com/en-us/shop/dell-poweredge-servers/poweredge-r740](https://www.dell.com/en-us/shop/dell-poweredge-servers/poweredge-r740) xd-rack-server/spd/poweredge-r740 xd/pe_r740 xd_tm_vi_vp_sb) accessed on 10 January 2024) servers are each equipped with an NVIDIA Bluetooth 2 DPU ([[https://www.nvidia.com/en-us/networking/products/data-processing-unit/](https://www.nvidia.com/en-us/networking/products/data-processing-unit/)]([https://www.nvidia.com/en-us/networking/products/data-processing-unit/](https://www.nvidia.com/en-us/networking/products/data-processing-unit/)) accessed on 10 January 2024). Each DPU is equipped with eight on-board ARMv8 processors that are clocked with 2750 MHz. The DPUs are connected via optical fiber with an optical switch. The throughput between DPU and DPU is measured using the  
Figure 5: Schematic representation of a data center: Multiple racks host many servers, all interconnected via the local intra-data-center network. Different applications are hosted. Traffic within the data center is referred to as east-west traffic. Incoming/outgoing traffic is called north–south traffic. External users and clients access the services. VIAVI [47] traffic generator. The VIAVI traffic generator can achieve throughputs of up to 400 Gbit/s. However, the DPUs that we use are capable of 100 Gbit/s, and therefore, we do not make use of VIAVI's full capabilities. In order to test the throughput, the VIAVI traffic generator is placed in between the two DPUs. The second scenario that we present in our work is a quantum-safe way for clients to establish a north-south IPSec connection for accessing the services from outside the data center. We demonstrate our north-south IPSec tunnel using a wireless connection. Our setup for this can be seen in Figure 7: a mobile device that seeks to exchange encrypted information with the cloud. As a mobile device, we use an Nvidia Jetson Nano ([[https://developer.nvidia.com/embedded/jetson-nano](https://developer.nvidia.com/embedded/jetson-nano)]([https://developer.nvidia.com/embedded/jetson-nano](https://developer.nvidia.com/embedded/jetson-nano)) accessed on 10 January 2024) that is equipped with a WiFi antenna extension. The Jetson connects to the cloud via a WiFi router. We measure the throughput between the Jetson and a 25 G DPU in the cloud using the iperf ([[https://iperf.fr/](https://iperf.fr/)]([https://iperf.fr/](https://iperf.fr/)) accessed on 15 January 2024) traffic generator and achieve a 0.486 Gbit/s throughput. We connect the Jetson to a 25 G DPU instead of a 100 G DPU because the WiFi antenna's maximum throughput is equal to 1 Gbit/s, and therefore, a 25 G DPU is suitable to provide the necessary performance. Figure 6: Two identical servers are each equipped with an Nvidia BlueField 2 100 G DPU.