Dynamic IPsec VPN architecture for private cloud services
Quandeng Gou, Yihe Liu · 2012
Cloud computing provides computation, software, data access, and storage services that do not require end-user of the physical location and configuration of the system. Its classification includes public cloud, private cloud and hybrid cloud. Private cloud provides enterprise a secure environment to run business process; so many companies are planning to implement private clouds. Virtual private network (VPN) plays an important role to connect enterprise IT with the private cloud securely. Direct connected VPN usually allows for a small scale of secure connections into a private network over the public network. If the number of connections increases, the architecture of VPN would be more complicated which cannot meet the flexible adjustment feature of cloud computing. Therefore, we propose a dynamic IPsecVPN architecture with secure IPsec tunnels for cloud services, it is based on hub-and-spoke and bipartite, which can accommodate a large number of connections and meets these requirements.