PERFORMANCE AND RESILIENCE ANALYSIS OF GRE OVER IPSEC TUNNELS IN DYNAMIC ROUTING NETWORKS
DOI:
https://doi.org/10.68302/std2026.vol3.53Keywords:
dynamic routing protocols, GRE over IPsec, resilience analysis, routing convergence, secure inter-site connectivity, tunnel performanceAbstract
This paper presents the design and experimental evaluation of Generic Routing Encapsulation over Internet Protocol Security tunnels in dynamic routing networks. The study is motivated by the need to provide secure inter site connectivity while preserving support for dynamic route exchange between remote network segments. A laboratory topology is developed to examine the behavior of the proposed tunnel architecture under normal operation and during network failures. The evaluation focuses on key indicators including throughput, delay, jitter, packet loss, and routing convergence time. In addition, resilience is assessed through controlled disruption and recovery scenarios in order to measure tunnel stability, service continuity, and network reconvergence. The results are used to analyze the balance between secure communication and the performance impact introduced by encapsulation and tunnel protection. Particular attention is given to the practical suitability of this approach for distributed networks that require both protected traffic transmission and flexible routing operation. The study shows that GRE over IPsec remains an effective solution for secure dynamic routing environments when performance limitations and recovery characteristics are properly considered in network design and deployment.
Downloads
References
[1] K. Seo and S. Kent, “Security Architecture for the Internet Protocol,” Dec. 2005, RFC Editor. doi: 10.17487/RFC4301.
[2] T. Li, D. Farinacci, S. P. Hanks, D. Meyer, and P. S. Traina, “Generic Routing Encapsulation (GRE),” Mar. 2000, RFC Editor. doi: 10.17487/RFC2784.
[3] J. Moy, “OSPF Version 2,” Apr. 1998, RFC Editor. doi: 10.17487/RFC2328.
[4] Cisco, “Security Configuration Guide, Cisco IOS XE 17.14.x (Catalyst 9300 Switches) - Configuring GRE over IPsec .” Accessed: Apr. 07, 2026. [Online]. Available: https://web.archive.org/web/20260407185156/https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-14/configuration_guide/sec/b_1714_sec_9300_cg/configuring_gre_over_ipsec.html
[5] P. Savola, “MTU and Fragmentation Issues with In-the-Network Tunneling,” Apr. 2006, RFC Editor. doi: 10.17487/RFC4459.
[6] Cisco, “Cisco Catalyst SD-WAN Security Configuration Guide, Cisco IOS XE Catalyst SD-WAN Release 17.x - GRE Over IPsec Tunnels.” Accessed: Apr. 08, 2026. [Online]. Available: https://web.archive.org/web/20260407190810/https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/m-gre-over-ipsec-tunnels.html
[7] M. Huda and W. Andriyani, “Multi-Area OSPF Analysis Using Virtual Link and GRE Tunnel,” Eduvest - Journal of Universal Studies, vol. 5, no. 2, pp. 1804–1819, Feb. 2025, doi: 10.59188/EDUVEST.V5I2.1710.
[8] A. F. Gentile, D. Macrì, E. Greco, and P. Fazio, “Overlay and Virtual Private Networks Security Performances Analysis with Open Source Infrastructure Deployment,” Future Internet 2024, Vol. 16, Page 283, vol. 16, no. 8, p. 283, Aug. 2024, doi: 10.3390/FI16080283.
[9] C. Fu et al., “A Generic High-Performance Architecture for VPN Gateways,” Electronics 2024, Vol. 13, Page 2031, vol. 13, no. 11, p. 2031, May 2024, doi: 10.3390/ELECTRONICS13112031.
[10] J. Dudczyk, M. Sergiel, and J. Krygier, “Analysis of SD-WAN Architectures and Techniques for Efficient Traffic Control Under Transmission Constraints—Overview of Solutions,” Sensors 2025, Vol. 25, Page 6317, vol. 25, no. 20, p. 6317, Oct. 2025, doi: 10.3390/S25206317.
[11] K. Shahid, S. N. Ahmad, and S. T. H. Rizvi, “Optimizing Network Performance: A Comparative Analysis of EIGRP, OSPF, and BGP in IPv6-Based Load-Sharing and Link-Failover Systems,” Future Internet 2024, Vol. 16, Page 339, vol. 16, no. 9, p. 339, Sep. 2024, doi: 10.3390/FI16090339.
[12] A. F. Gentile, D. Macrì, E. Greco, and P. Fazio, “IoT IP Overlay Network Security Performance Analysis with Open Source Infrastructure Deployment,” Journal of Cybersecurity and Privacy 2024, Vol. 4, Pages 629-649, vol. 4, no. 3, pp. 629–649, Aug. 2024, doi: 10.3390/JCP4030030.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Penka Markova, Georgi Markov

This work is licensed under a Creative Commons Attribution 4.0 International License.