Tell me more ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.
up vote 0 down vote favorite
1

Complexity of installation of IPSec is not an issue. I would like to know which one will provide a faster connection for tunneling.

share|improve this question
What are your cryptography requirements? – belacqua Mar 10 '11 at 23:37
I prefer using the fastest crypto algorithm (I guess AES?). But yes the connection should be encrypted – bonzi Mar 11 '11 at 0:43
2  
I'm quite pessimistic about this one. What's the use case? Platform, data, environment? Ubuntu, Linux, mixed platform? Who would be using it to do what? Without heavy usage, I don't think it's going to be meaningfully different. With heavy loading, we'd need the details of what kinds of things would be happening. Even then, unless you have some specific requirements, just use whatever makes most sense for your environment. Unless the implementation of IPSec or VPN is broken (buggy, wrong, etc.) I don't think it is going to matter much. – belacqua Mar 12 '11 at 4:30

2 Answers

up vote 3 down vote

that is very very AFAIK, but I decided to make answer and not a comment.

OpenVPN uses certificates, and there should be some certificate/key exchange involved, so to establish tunnel it will take longer than IPSEC with peer negotiation and establishing of tunnel. Afterwards if same encryption is used you will see no difference.

I should note, that OpenVPN will be like tunnel with addresses, for IPSEC it will be tunnel mode, where it will check packets from certain place going to other certain place and ecrypt/decrypt accordingly, that way for IPSEC to make actual tunnel you will have to use some simpler tunnel like IPIP or GRE over IPSEC encryption.

share|improve this answer
up vote -1 down vote

After doing some experiments I found out that IPSec is faster than OpenVPN. The reason could be because IPSec is a kernel implementation while OpenVPN is a userspace implemenation.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.