VPN Consortium aims to define VPNs

The debate goes on and on over what constitutes a VPN, and now there is some guidance from the VPN Consortium, an industry group that until now had consisted only of IPSec VPN vendors.

The group has published a white paper that expands its definition of VPNs to include Multi-protocol Label Switching (MPLS) based VPNs, which is a major shift in the group's thinking.

As the paper outlines, there are significant differences between IPSec and MPLS VPNs, the greatest of which is trust. If you want an MPLS VPN to carry your data safely, you have to trust that the provider of the VPN service is keeping your traffic separate from the traffic of others and safe from being intercepted and tampered with.

IPSec VPNs are based on gear that is placed between trusted machines and a shared IP network. The gear encrypts the data running between sites, ensuring that if someone manages to capture your traffic, and they are well equipped with decrypting equipment, it will take them an impossibly long time to crack your data.

MPLS VPNs are based on devices within the service provider's network that runs over paths whose integrity the provider maintains. If someone happens to somehow grab your data, it is there unencrypted for them to see. The clear value of these networks is that MPLS enables providers to offer services with guaranteed characteristics such as delay and jitter that fall within specified parameters. The security of the data is not guaranteed.

Hybrid networks, ones that use both technologies, can offer the best of both: security and predictable service quality.

This new work by the VPN Consortium underlines that VPNs have many characteristics that are valuable, but also that to certain users, all the features are not necessary. This acknowledgment that there is no single VPN by a group that bases its name on the technology should help lift some of the confusion surrounding VPNs. Think of VPNs as a very large tent that contains many items. You should be aware of what is in the tent, and then seek out those most useful to you.

The VPN Consortium paper also points up this continuing for vigilance. As soon as someone brings up VPNs ask, " What do you mean by that? " You can avoid a lot of confusion and have more productive conversations.

Tim Greene is a senior editor at Network World, covering virtual private networking gear, remote access, core switching and local phone companies. You can reach him at tgreene@nww.com.

Network World VPNs archive
Past newsletters.