Everything about IPsec

🧭 Start here: a 6-step reading path

1. Read the overview: IPsecA 5-minute orientation
2. Skim a recent paper: P4sec: Automated Deployment of 802.1X, IPsec, and MACsec Network Protection in P4-Based SDNInfluential work since 2022
3. Pick up a classic book: A Technical Guide to IPSec Virtual Private NetworksThe most-reprinted book on the subject
4. Read the landmark paper: Secure communication for the Internet of Things—a comparison of link‐layer security and IPsec for 6LoWPANCited 134 times
5. Go sideways: Internet Key ExchangeA closely related topic
6. Go sideways: Host Identity ProtocolA closely related topic

🏆 Landmark papers (most cited)

• Secure communication for the Internet of Things—a comparison of link‐layer security and IPsec for 6LoWPAN

  Shahid Raza, Simon Duquennoy, Joel Höglund · 2012 · Security and Communication Networks · 134 citations

• P4-IPsec: Site-to-Site and Host-to-Site VPN With IPsec in P4-Based SDN

  Frederik Hauser, Marco Haberle, Mark Schmidt · 2020 · IEEE Access · 69 citations

• A generic characterization of the overheads imposed by IPsec and associated cryptographic algorithms

  Christos Xenakis, Nikolaos Laoutaris, Lazaros Merakos · 2006 · Computer Networks · 39 citations

• Key exchange in IPSec: analysis of IKE

  C. Kaufman, R. Perlman · 2000 · IEEE Internet Computing · 34 citations

• Trust management for IPsec

  · 2002 · ACM Transactions on Information and System Security · 29 citations

• Towards a standard SDN-based IPsec management framework

  Gabriel Lopez-Millan, Rafael Marin-Lopez, Fernando Pereniguez-Garcia · 2019 · Computer Standards & Interfaces · 29 citations

• A Hardware Architecture of NIST Lightweight Cryptography Applied in IPSec to Secure High-Throughput Low-Latency IoT Networks

  Sy-Nam Tran, Van-Thuc Hoang, Duy-Hieu Bui · 2023 · IEEE Access · 26 citations

• Securing VPNs: comparing SSL and IPsec

  Ray Stanton · 2005 · Computer Fraud & Security · 25 citations

🆕 Influential since 2022

• P4sec: Automated Deployment of 802.1X, IPsec, and MACsec Network Protection in P4-Based SDN

  Frederik Hauser, Marco Häberle, Michael Menth · 2023 · IEEE Access · 13 citations

• Analysis and practical validation of a standard SDN-based framework for IPsec management

  Gabriel López-Millán, Rafael Marín-López, Fernando Pereñíguez-García · 2023 · Computer Standards & Interfaces · 12 citations

• Performance analysis of OSPF and EIGRP convergence through IPsec tunnel using Multi-homing BGP connection

  Zeeshan Basit, Mujahid Tabassum, Tripti Sharma · 2022 · Materials Today: Proceedings · 11 citations

• Wireless and Fiber-Based Post-Quantum-Cryptography-Secured IPsec Tunnel

  Daniel Christian Lawo, Rana Abu Bakar, Abraham Cano Aguilera · 2024 · Future Internet · 9 citations

• SDN-based automated rekey of IPsec security associations: Design and practical validations

  José Antonio Parra-Espín, Rafael Marín-López, Gabriel López-Millán · 2023 · Computer Networks · 8 citations

📚 Books worth reading

• A Technical Guide to IPSec Virtual Private NetworksJames S. Tiller · 2000
• IPsec virtual private network fundamentalsJames Henry Carmouche · 2006
• Data Communications Networking (McGraw-Hill Forouzan Networking)Behrouz A. Forouzan · 2006
• IPSec VPN designVijay Bollapragada · 2005
• IKEv2 IPsec Virtual Private NetworksGraham Bartlett, Amjad Inamdar · 2016
• IPSecNaganand Doraswamy, Dan Harkins · 1999
• A technical guide to IPSec virtual private networksJim S. Tiller · 2000
• IPSecNaganand Doraswamy, Dan Harkins · 2003

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

🔗 Related topics

• Internet Key Exchange In computing, Internet Key Exchange (IKE, versioned as IKEv1 and IKEv2) is the protocol used to set up a security association (SA) in the IPsec protocol…
• Host Identity Protocol The Host Identity Protocol (HIP) is a host identification technology for use on Internet Protocol (IP) networks, such as the Internet. The Internet has…
• Internet Security Association and Key Management Protocol Internet Security Association and Key Management Protocol (ISAKMP) is a protocol defined by RFC 2408 for establishing security association (SA) and cryptographi…
• Internet layer The internet layer is a group of internetworking methods, protocols, and specifications in the Internet protocol suite that are used to transport network…
• Anything In Anything Anything In Anything (AYIYA) is a computer networking protocol for managing IP tunneling protocols in use between separated Internet Protocol networks…
• IPv6 Internet Protocol version 6 (IPv6) is the most recent version of the Internet Protocol (IP), the communications protocol that provides an identification…
• Security Parameters Index The Security Parameter Index (SPI) is an identification tag added to the header while using IPsec for tunneling the IP traffic. This tag helps the kernel…
• Stephen Kent (network security) Stephen Thomas Kent (born January 25, 1951) is an American computer scientist, noted for his contributions to network security. Kent was born in New Orleans…