An enterprise network opens a virtual private network tunnel with a data center by sending the data center a data request that includes a uniform resource identifier. The data center responds by sending the enterprise network ongoing reply data. A user wishing to access network data of the enterprise network transmits an access request to the data center. The data center authenticates the identity of the user and transmits the access request to the enterprise network. The enterprise network responds to the access request by performing acts upon the network data and/or by returning network data to the data center such that the user is enabled access to the network data. In an alternative embodiment, the data center caches a copy of network data to be retrieved by a remote user when the same network data is disconnected from the enterprise network.

Spontaneous virtual private network between portable device and enterprise network

Methods, apparatuses and systems allowing for dynamic detection of network devices, located along communications paths associated with a computer network, that include compatible transformation tunneling capabilities. In one embodiment, a tunnel probing device, having transformation tunneling capabilities, monitors data flows to respective destination hosts and probes for other network devices, having compatible transformation tunneling capabilities, located along respective communications paths to the destination hosts. A network device in a communications path, recognizing probes transmitted by the tunnel probing device, responds to the probe by communicating its transformation tunneling capabilities, and passes the probe along the path to the destination host for possible recognition by other compatible network devices. The present invention allows for recognition and optimization of network traffic between network devices without prior configuration.

Dynamic tunnel probing in a communications network

The invention discloses a method transferring packets between a mobile host device (100) and a source node via a number of independent data networks while maintaining a secure connection. The independent networks may include, for example, the Internet (120), localized Access Zones (110,140), a Corporate Intranets, a Home Network (130) etc. Problems may occur, for example, when the mobile node is using a co-located care-of address, in which case both IP-in-IP and IPsec tunneling transformations are performed, and the current IPsec and IP-in-IP implementations cannot perform the required tunneling operations on the mobile host. This is because the IP-in-IP and IPsec tunneling when the IP-in-IP tunnel is not the outermost transformation. In an embodiment of the invention, the security policy operated by the mobile host includes a primary security policy and a dynamic secondary security policy that selectively apply specified transformations to certain packets in the data transfer.

IP security and mobile networking

A secure connection between a computer network and a remote device is provided by a carrier network between the computer network and the remote device. The secure connection includes data tunnels that operate as virtual private networks between the corporate network and the carrier network and between the remote device and the carrier network. In addition, communication protocols can be used to enable data requests and data transmission over the secure connection, optionally through ports on the computer network that are opened for Web traffic.

Virtual private network between computing network and remote device

The key point of this paper is to assess and look over the top of the line network layer-based VPN (Virtual Private Network) protocols because data link layer is hardly ever found to be in use in organizations, the reason is because of its exceedingly high charge. Virtual Private Network (VPN) is commonly used in business situations to provide secure communication channels over public infrastructure such as Internet. Virtual Private Networks (VPNs) provide a secure encrypted communication between remote networks worldwide by using Internet Protocol (IP) tunnels and a shared medium like the Internet. The paper follows and sets standards for different types of protocols and techniques, the VPN (Virtual Private Network) architectural feature is made to deliver dependable and safe network that is not in line with regular networks that provide a higher trust and a higher secure channel between user and organization. The current study took place to summaries the usage of existing VPNs protocol and to show the strength of every VPN. Through different studies that have been made by other researchers as well as an extra focus on the state of art protocol, Wire guard. It is also worthy to mention that wire guard compared with other protocols such as IPsec and GRE. The studies show the WireGuard being a better choice in terms of other well-known procedures to inaugurate a secure and trusted VPN.

/pdf/comparison-of-vpn-protocols-at-network-layer-focusing-on-3v4lknyqxp.pdf

Comparison of VPN Protocols at Network Layer Focusing on Wire Guard Protocol

It is a trend of virtual private networks (VPN) to be used for information exchange between enterprises, between branches of enterprises and between enterprises and their employees instead of traditional dial networks and leased lines. The tunneling technique is the key technique to implement VPN. With the VPN implementation requirements in mind, we perform comparative research on the existing tunneling protocols including GRE, L2TP, IPSec and IP/IP. We also propose an integrated scheme of tunneling mechanism that supports VPN under the current condition.

Research on tunneling techniques in virtual private networks

We present queue length based fair queueing (QLFQ), a scheme to approximate fair bandwidth allocation without per-flow state. We have evaluated QLFQ together with CSFQ (core-stateless fair queueing) (see Stoica, I., Proc. ACM SIGCOMM'98, p.119-30, 1998) and RFQ (rainbow fair queueing) (see Cao, Z., Proc. IEEE Infocom, 2000) with several different configurations and traffic sources. The simulation results show that QLFQ is able to achieve approximately fair bandwidth sharing in all of these scenarios. The performance of QLFQ is comparable to that of CSFQ and it performs much better than RFQ. The simulations also show that in an environment with bursty traffic sources, QLFQ provides much better fairness than CSFQ.

Yuan Yuan

Papers

Research on tunneling techniques in virtual private networks

Fair bandwidth allocations through queue management in core-stateless networks