OpenVPN

OpenVPN is an open-source VPN solution. More information on it can be found at http://openvpn.net/. In Linux, OpenVPN is installed with the command:

apt-get install openvpn

An example of OpenVPN configuration on Linux can be found at https://help.ubuntu.com/community/VPNServer. This link illustrates very well the configuration files. In those configuration files, only the IP addresses need to be changed according to the machines that will be used in the VPN. We used similar routing as shown in the link above, but not exactly the same. The basic for successful VPN routing is to have the VPN traffic routed through the tun0 interface, and all other traffic directed through the default interface. No changes to iptables were needed.

A HIP and OpenVPN tunnel have roughly the same througput. It is even possible run HIP inside the OpenVPN tunnel, even though this seems to halve the throughput without any optimizations.

In contrast to the previous measurements, the following use a virtual machine for HIP communication (virtualbox.org). Additionally, HIP communication is UDP-encapsulated. The average values of the measurements of throughput are:

1. No HIP or VPN. We do not use HIP or VPN for the data traffic - 70.26 Mbits/sec

2. VPN, no HIP. We use VPN for the data traffic - 52.6 Mbits/sec

3. HIP, no VPN. We use HIP for the data traffic - 25.6 Mbits/sec

4. VPN and HIP. We use HIP over VPN for the data traffic - 17.14 Mbits/sec