MULTI-LEVEL VPN-TUNNELING METHOD FOR ENSURING REMOTE ACCESS TO EXTRANET NETWORK NODES

Abstract

The article proposes a method for organizing a secure segment of a private SDN network using the BitTorrent protocol for data transmission. This method combines the flexibility of centralized management, implemented through an SDN controller, with the high efficiency of distributed data transfer between Nodes of an isolated secure network segment. To achieve the stated goal, experimental modeling and the study of three variants of secure access organization to a segment of a corporate computer network were conducted based on the local network of the Department of Electronic Computers at Kharkiv National University of Radio Electronics. In the first model, access was implemented using the OpenVPN protocol, which provides basic data confidentiality and integrity but limits system scalability and fault tolerance. The second model involved the use of the BitTorrent protocol to organize secure and distributed data transfer between Nodes; however, it does Not provide centralized control. The third model, which underlies the proposed method, involves the construction of a logically isolated SDN segment that addresses the limitations of the previous models. Data transmission within this segment is carried out using the BitTorrent protocol, which helps offload central channels and ensure fault tolerance of individual Nodes. Simultaneously, the centralized SDN controller provides monitoring, routing, and access control, ensuring a high level of security. This combination minimizes latency, optimizes the use of network resources, and increases the overall throughput of the system. The evaluation of the proposed approach demonstrated that the use of logically isolated segments in SDN networks contributes to the reduction of internal delays and enhances control over traffic routing. The obtained results confirm the practical feasibility of applying the proposed method to construct secure and high-performance segments of corporate networks to ensure reliable data transmission.