## 4 Description of Different Deployed VPN Solutions
### Considered VPN Deployed Topology  
Some deploys described in this paper were also used in the context of the \"DOMUS\" (\"Progetto DOMUS \", [[https://www.grupoptim.it/it/archivio-stampa/mercato/2016/TIM](https://www.grupoptim.it/it/archivio-stampa/mercato/2016/TIM)]([https://www.grupoptim.it/it/archivio-stampa/mercato/2016/TIM](https://www.grupoptim.it/it/archivio-stampa/mercato/2016/TIM)) -Distretto-Domus-Cosenza-14 Dicembre2016.html (accessed on 10 June 2022)), \"COGTO\" (\"Progetto COGITO \", [[https://www.icar.cnr.it/progetti/cogito-sistema-dinamico-e-cogniti-vo-per-consentire-agli-edifici-di-apprendere-ed-adattarsi/](https://www.icar.cnr.it/progetti/cogito-sistema-dinamico-e-cogniti-vo-per-consentire-agli-edifici-di-apprendere-ed-adattarsi/)]([https://www.icar.cnr.it/progetti/cogito-sistema-dinamico-e-cogniti-vo-per-consentire-agli-edifici-di-apprendere-ed-adattarsi/](https://www.icar.cnr.it/progetti/cogito-sistema-dinamico-e-cogniti-vo-per-consentire-agli-edifici-di-apprendere-ed-adattarsi/)) (accessed on 10 June 2022)) and \"RES-NOVAE\" (\"Progetto RES-NOVAE \", [[https://www.cueim.org/progetti/res-novae-reti-edifici-strade-nuovi-obietivi-virtuosi-per-lambiente-e-lenergia-smart-city/](https://www.cueim.org/progetti/res-novae-reti-edifici-strade-nuovi-obietivi-virtuosi-per-lambiente-e-lenergia-smart-city/)]([https://www.cueim.org/progetti/res-novae-reti-edifici-strade-nuovi-obietivi-virtuosi-per-lambiente-e-lenergia-smart-city/](https://www.cueim.org/progetti/res-novae-reti-edifici-strade-nuovi-obietivi-virtuosi-per-lambiente-e-lenergia-smart-city/)) (accessed on 10 June 2022)) projects and can be replied in any environment. The reason for the choice of the HW considered is given by the need to measure the performance of components already put into operation in the three research projects referred to above and also to ensure maximum backward compatibility.  
The basic network topology with example IP address ranges is depicted in Figure 5. From time to time, the right endpoint is replaced in the site-to-site scenario, and the connections whose data are shown in the figures are established. For Wi-Fi-only devices, acting as a VPN client, the connection is established with the left endpoint. The Wi-Fi network these devices are originally connected to is the dummy WAN.  
The dummy WAN is a simple network with a router (IP 192.168.110.254) on the segment 192.168.110.0/24, which simulates a public network and allows communication between VPNs endpoints (connected wired / wireless clients to the router or switch). In particular, two private IP of the fictitious WAN simulate the public IP of the gateways of two LANs located at a lower level and used to test site-to-site topology, respectively, with \"internal\" networks 192.168.111.0/24 (site one) and 192.168.112.0/24 (site two). The Wi-Fi clients are connected directly to the access point of the primary router. All the RTT tests were carried out by reaching the local network IP of the OpenWRT router, which acts as a VPN centralizer from the client on duty, as shown in Figure 5.  
\begin{table}
\begin{tabular}{l l l} \hline \hline
**VPN Type** & **Encryption** & **Authentication** \\ \hline _SSTP_ & AES-256 & Username/Password, Certificates \\ _IKEv1-L2 TP_ & AES-256-GCM128 & Username/Password/PSK \\ _OPENCONNECT_ & AES-256 & Username/Password, Certificates, OTP \\ _OPENVPN_ & AES-256, CHACHA20 & Username/Password, Certificates, OTP \\ _IKEv2 X599_ & AES-256 & Certificates \\ _IKEv2 PEAP_ & AES-256 & Username/Password, Certificates \\ _IKEv1-XAUTH_ & AES-128 & Username/Password, PSK \\ _WIREGULARD_ & CHACHA20, CURVE25519 & Certificates/Keys \\ \hline \hline \end{tabular}
\end{table}
Table 4: Comparison table of Authentication and Encryption used in the experiments and proposed by default client-side.  
Both tools, Iperf2 and Iperf3, were used to get throughput results, and the \"ping\" tool was used to get RTT data. The graphics were generated using Iperf3 because there were not significant differences with Iperf2.