OS Integrated vs. BITS

• OS Integrated: IPSec becomes a network layer protocol

  • Advantages: can use network services, IPSec services, making implementation very efficient
  • Disadvantages: limited by features provided by OS vendors

• Bump in the Stack (BITS): header creation is not as clean

Application Layer

Transport Layer

Network Layer + IPSec

Data Link Layer

IPSec Stack

Application Layer

Transport Layer

Network Layer

Data Link Layer

IPSec

BITS IPSec Stack

Previous slide

Next slide

Back to first slide

View graphic version