Implementation and evaluation of secure and optimized IP-SAN mechanism

Since IP-SAN consolidates distributed storage by using TCP/IP networks, it not only reduces management costs but also realizes a large scale storage system on wide area network (WAN). In the case of accessing remote storage through open TCP/IP networks, security has a significant meaning. Although it is possible to employ IPsec encryption on IP-SAN, performance degradation due to inefficiency of encryption processing is concerned when IPsec is used. In this paper, we have proposed a method of optimization for encryption processing on IP-SAN. We have also implemented the middleware based on our proposed method, and evaluated the optimized IP-SAN system in regard to sequential write access.