iSCSI has been paid much attention since it allows the storage data to be transported over the popular TCP/IP networks and takes advantage of the networks. Carrying data over the TCP/IP networks introduces the security problem. The IP security mechanisms, such as IPSec, always degrade the performance greatly. In this paper we introduced a parallel encryption method, combined with the IPSec AH, to provide the security and high performance for the iSCSI storage system. We have implemented parallel encryption with IPSec AH in the UNH iSCSI software. Numerical results using popular benchmark program and OLTP traces have shown dramatic performance gain and the average response time reduced greatly.
Citation:
Bo Mao, Dan Feng, Suzhen Wu, Jianxi Chen, Lingfang Zeng, "Performance-Directed iSCSI Security with Parallel Encryption," aina, pp.855-860, 22nd International Conference on Advanced Information Networking and Applications (aina 2008), 2008