Analytical model of IPsec process throughput

Abstract

The paper concerns with a throughput of securing process which cannot be described neither by a constant value of bits per second nor by a constant value of packets per second over the range of packet sizes. We propose general throughput model of IPsec process based on characteristic parameters that are independent on the packet size. These parameters might be used for comprehensive definition of throughput on any security system. Further, a method for obtaining characteristic parameters is proposed. Usage of the method can significantly decrease count of throughput measurements required for modelling the system.