Performance of Cooperative Firewalls in Real-World Deployments

The concept of cooperative firewalls or customer edge switching (CES) has been proposed to establish secure communication sessions between public and private domains in the global Internet. It allows public (or private) domains to initiate a trusted communication session with a private domain, by using the private host's fully qualified domain name (FQDN) instead of its IP addresses. However, this concept requires further evaluation in real-world scenario deployments that could benefit from having cooperative firewalls. The scenario addressed in this paper is Internet of Things (IoT). An analytical model was developed to estimate the performance in terms of session setup delays and number of servers required for the Customer Edge Traversal Protocol (CETP) to support a large number of IP-based devices.