# IoT IP Overlay Network Security Performance Analysis with Open Source Infrastructure Deployment
## 2 Related Works
This router supports the IKEv1-L2 TP tunnel type, where authentication and traffic are handled via L2 TP, while encryption is ensured by IPvSec. The article [11] proposed an approach to deploy VPN technologies for securely encrypting traffic in untrusted networks. This includes environments like bars, lounges, conferences, free hotspots, and airport Wi-Fi, as well as more broadly during any travel scenario. Generally speaking, the IPvSec stack comprises three key subcomponents: Encapsulating Security Payload (ESP), Authentication Header (AH), and Internet Key Exchange protocol (IKE). In the previously overviewed work [12], the AH protocol is discussed, focusing on the security and Quality of Service (QoS) aspects of VPNs. The IKE protocol facilitates the generation of session keys for secure communications among various VPN endpoints through a series of message exchanges. Currently, IKE exists in two versions: IKEv1 [13, 14] and IKEv2 [6]. IKEv1 offers high flexibility with different configuration options but is burdened by architectural complexity, making deployment increasingly challenging in modern networks. On the other hand, IKEv2 builds upon the legacy of its predecessor while addressing its limitations, and it provides more modern and efficient encryption systems for network traffic. A significant advantage of IKEv2 is its native support across contemporary platforms such as OS X 10.11+, iOS 9.1+, Linux 3.x+, and Windows 8+. Moreover, IKEv2 enjoys robust support on mobile devices, being compatible with native clients and third-party apps on iOS, Android, Blackberry, and Windows platforms. In Ref. [15], a comparative analysis of various VPN technologies including _L2 TP_, _PPTP_, _OpenVPN_, _Ethernet over IP_ (EoIP), and _MPLS_ is proposed to determine the best fit for specific business requirements. This evaluation considers both performance metrics and packet transit characteristics for each VPN technology item. In Ref. [8], the focus is on the authentication parameters required for VPN server access. While some implementations may only necessitate the traditional username/password combination, other deployments like IKEv1-XAUTH may require additional parameters. Refs. [16, 17] proposed Microsoft's Secure Socket Tunneling Protocol (SSTP) for channeling PPP device traffic through an encrypted VPN tunnel via HTTP using SSL/TLS transport, handling key negotiation, channel encryption, and traffic integrity. Quick UDP Internet Connections (QUICs) is highlighted as suitable for IoT devices with limited resources [18], with implementation guidance in general transport services (TAPSs) [7] discussed in [9]. VPNaaS refers to a simplified approach for configuring network security, consolidating configurations into a single product to address various corporate security needs, and accessing virtualized networks on the cloud. Ref. [19] proposes the implementation of VPNaaS using WireGuard with a WAN backbone based on 5G transport. In Ref. [12], experimental analysis on a Debian Linux environment is conducted by implementing the IPsec tunneling protocol with different encryption algorithms. The study concludes that IPsec AES-sha1 offers reasonable performance comparable to IPsec 3 DESha1, noting the resource-intensive nature of UDP VPN encryption/decryption leading to performance degradation due to CPU and memory usage. The article [20] examines the network performance of virtual and native nodes on ARM-based single-board computers (SBCs). It uses KVM (Kernel-based Virtual Machine) as the hypervisor for virtualization. The aim is to compare the network performance between virtualized and non-virtualized environments, analyzing parameters such as latency, bandwidth, and throughput capacity. The main focus is on the efficiency of resources and the scalability of virtual solutions on ARM hardware, which are known for being energy-efficient and cost-effective. The article [21] discusses using reinforcement learning to optimize the selection of Overlay Networks in SD-WAN environments.