IPsec clustering

Abstract

IPsec based VPNs are widely used to secure connections in the Internet. As the bandwidth in the Internet grows there is a need to create more powerful fault tolerant IPsec systems. We present an IPsec c1ustering model based on sharing the processing of each IPsec connection to all cluster nodes using a master node. This c1ustering model offers good scalability, fine graded load balancing, and fault tolerance while maintaining all IPsec security features. We also present a test implementation of the c1ustering model with test results. © 2004 by Springer Science+Business Media Dordrecht.