diff --git a/Chapters/Methodology.tex b/Chapters/Methodology.tex index e93c7dd..341294f 100755 --- a/Chapters/Methodology.tex +++ b/Chapters/Methodology.tex @@ -5,7 +5,7 @@ \label{Methodology} This chapter describes the methodology used to benchmark peer-to-peer -overlay VPN implementations. The experimental design prioritizes +mesh VPN implementations. The experimental design prioritizes reproducibility at every layer---from dependency management to network conditions---enabling independent verification of results and facilitating future comparative studies. @@ -58,13 +58,13 @@ mesh topologies. Table~\ref{tab:vpn_selection} summarizes the selection. \hline Tailscale (Headscale) & Coordinated mesh & Open-source coordination server \\ ZeroTier & Coordinated mesh & Global virtual Ethernet \\ - Nebula & Lighthouse-based mesh & Slack's overlay network \\ - Tinc & Decentralized mesh & Established since 1998 \\ + Nebula & Coordinated mesh & Slack's overlay network \\ + Tinc & Fully decentralized & Established since 1998 \\ Yggdrasil & Fully decentralized & Spanning-tree routing \\ Mycelium & Fully decentralized & End-to-end encrypted IPv6 overlay \\ Hyprspace & Fully decentralized & libp2p-based, IPFS-compatible \\ - EasyTier & Decentralized mesh & Rust-based, multi-protocol \\ - VpnCloud & Decentralized mesh & Lightweight, kernel bypass option \\ + EasyTier & Fully decentralized & Rust-based, multi-protocol \\ + VpnCloud & Fully decentralized & Lightweight, kernel bypass option \\ WireGuard & Point-to-point & Reference baseline (not a mesh VPN) \\ \hline Internal (no VPN) & N/A & Baseline for raw network performance \\ @@ -359,6 +359,17 @@ isolated from stateful interactions typical in imperative package management. This property is essential for ensuring identical test environments across benchmark runs. +\subsection{A Comparative Study on Virtual Private Networks} + +Lackorzynski et al.\ \cite{lackorzynski_comparative_2019} evaluate +VPN protocols in the context of industrial communication systems (Industry 4.0), +benchmarking OpenVPN, IPSec, Tinc, Freelan, MACsec, and WireGuard. +Their analysis focuses on point-to-point protocol performance---throughput, +latency, and CPU overhead---rather than overlay network behavior. +In contrast, this thesis evaluates VPNs that provide a full data plane +with peer-to-peer connectivity, NAT traversal, and dynamic peer discovery. + + \subsection{Full-Mesh VPN Performance Evaluation} Kjorveziroski et al.\ \cite{kjorveziroski_full-mesh_2024} provide a @@ -377,11 +388,4 @@ This thesis extends their work in several ways: \item Fully reproducible experimental framework via Nix/NixOS/Clan \end{itemize} -\subsection{Low Maintenance Peer-to-Peer Overlays} -Shukla et al.\ propose integrating Software Defined Networks with -DHT-based P2P overlays to reduce maintenance overhead -\cite{shukla_towards_2021}. Their work on aligning overlay topology -with physical networks is relevant to understanding the performance -characteristics of mesh VPNs that must discover and maintain peer -connectivity dynamically. diff --git a/Chapters/Motivation.tex b/Chapters/Motivation.tex index 8708bae..18e88f8 100644 --- a/Chapters/Motivation.tex +++ b/Chapters/Motivation.tex @@ -75,7 +75,7 @@ evidence-based comparison of peer-to-peer overlay VPN implementations. Existing research on this topic remains sparse. One notable work from 2024, ``Full-mesh VPN performance evaluation for a secure edge-cloud continuum'' \cite{kjorveziroski_full-mesh_2024}, -benchmarks a subset of overlay VPNs but focuses primarily +benchmarks a subset of mesh VPNs but focuses primarily on solutions with a central point of failure. In contrast, this thesis evaluates more widely adopted mesh VPNs with an emphasis on fully decentralized architectures. diff --git a/main-blx.bib b/main-blx.bib index 2cc7d12..286c489 100644 --- a/main-blx.bib +++ b/main-blx.bib @@ -1,5 +1,5 @@ @Comment{$ biblatex control file $} -@Comment{$ biblatex bcf format version 3.11 $} +@Comment{$ biblatex bcf format version 3.10 $} % Do not modify this file! % % This is an auxiliary file used by the 'biblatex' package. @@ -7,5 +7,5 @@ % required. @Control{biblatex-control, - options = {3.11:0:0:1:0:1:1:0:0:0:0:1:3:1:3:1:0:0:3:1:79:+:+:nty}, + options = {3.10:0:0:1:0:1:1:0:0:0:0:1:3:1:3:1:0:0:3:1:79:+:+:nty}, } diff --git a/main.tex b/main.tex index ddf47d4..13ce769 100644 --- a/main.tex +++ b/main.tex @@ -41,12 +41,17 @@ %parskip, % Uncomment to add space between paragraphs %nohyperref, % Uncomment to not load the hyperref package headsepline, % Uncomment to get a line under the header - %chapterinoneline, % Uncomment to place the chapter title next to - % the number on one line + chapterinoneline, % Place the chapter title next to the number on one line %consistentlayout, % Uncomment to change the layout of the % declaration, abstract and acknowledgements pages to match the default layout ]{MastersDoctoralThesis} % The class file specifying the document structure +% Fix chapter prefix for chapterinoneline option +\makeatletter +\renewcommand{\mdtChapapp}{\@chapapp\space} +\renewcommand{\autodot}{:} +\makeatother + \usepackage[utf8]{inputenc} % Required for inputting international characters \usepackage[T1]{fontenc} % Output font encoding for international characters \usepackage{float} @@ -250,7 +255,7 @@ and Management}} % Your department's name and URL, this is used in demonstrating measurable improvements in network throughput. This work contributes to decentralized networking research by providing an extensible framework for reproducible P2P benchmarks, - offering insights into overlay VPN implementation quality, + offering insights into mesh VPN implementation quality, and demonstrating that default Linux kernel settings are suboptimal for adverse network conditions. @@ -264,7 +269,7 @@ and Management}} % Your department's name and URL, this is used in \addchaptertocentry{\acknowledgementname} % Add the % acknowledgements to the table of contents - I am very grateful to my work colleagues Mic92, Lassulus, W, Hsjobeki, + I am very grateful to my work colleagues Mic92, Lassulus, Hsjobeki, Enzime, DavHau and Pinpox with whom I worked together to create the Clan framework. As well as my supervisor, Ber Lorke, for his guidance and support during my research. @@ -283,9 +288,9 @@ and Management}} % Your department's name and URL, this is used in \tableofcontents % Prints the main table of contents -\listoffigures % Prints the list of figures +%\listoffigures % Prints the list of figures -\listoftables % Prints the list of tables +%\listoftables % Prints the list of tables %---------------------------------------------------------------------------------------- % ABBREVIATIONS @@ -315,17 +320,17 @@ and Management}} % Your department's name and URL, this is used in % SYMBOLS %---------------------------------------------------------------------------------------- -\begin{symbols}{lll} % Include a list of Symbols (a three column table) +% \begin{symbols}{lll} % Include a list of Symbols (a three column table) - % $a$ & distance & \si{\meter} \\ - % $P$ & power & \si{\watt} (\si{\joule\per\second}) \\ - %Symbol & Name & Unit \\ +% % $a$ & distance & \si{\meter} \\ +% % $P$ & power & \si{\watt} (\si{\joule\per\second}) \\ +% %Symbol & Name & Unit \\ - \addlinespace % Gap to separate the Roman symbols from the Greek +% \addlinespace % Gap to separate the Roman symbols from the Greek - % $\omega$ & angular frequency & \si{\radian} \\ +% % $\omega$ & angular frequency & \si{\radian} \\ -\end{symbols} +% \end{symbols} %---------------------------------------------------------------------------------------- % DEDICATION