Open Access Open Access  Restricted Access Subscription Access

Design and Implementation of a Secure Peer-to-Peer Mesh VPN with NAT Traversal and Relay-Based Connectivity

Kaustubh Bhushan Kolhe, Rutuja Sopan Ghayatad, Aryan Ashok Chaudhari, Dr. Sanjay Jondhale

Abstract


Virtual Private Networks (VPNs) are widely used to provide secure communication between distributed devices. Traditional VPN solutions typically rely on centralized gateways, introducing performance bottlenecks and single points of fail-ure. Modern mesh VPN architectures address these limitations through direct peer-to-peer communication, dynamic routing, and secure endpoint discovery. This paper presents a peer-to-peer mesh VPN system designed to provide secure, scalable, and efficient communication across heterogeneous networks. The pro-posed architecture combines WireGuard-based tunneling, public-key cryptography, STUN and ICE-based NAT traversal, and relay fallback mechanisms inspired by modern mesh network-ing systems. This enables automatic peer discovery, encrypted communication, dynamic route establishment, and reliable con-nectivity even when direct peer-to-peer communication is not feasible. Experimental evaluation demonstrates throughput of up to 1.2 Gbps with 17 ms latency on local networks, 122 Mbps with 227 ms latency across geographically separated networks, and 21 Mbps with 435 ms latency through relay-assisted communication. The proposed system offers a practical framework for secure de-centralized networking while maintaining simplicity, scalability, and high performance.


Full Text:

PDF

References


J. A. Donenfeld, “WireGuard: Next Generation Kernel Network Tunnel,” in Proceedings of the 19th USENIX Symposium on Networked Systems Design and Implementation (NSDI ’22), 2022.

L. Wang and Q. Wang, “A Survey on Decentralized VPN and Mesh Net-working: Security and Performance Challenges,” IEEE Communications Surveys & Tutorials, vol. 25, no. 2, pp. 1204–1232, 2023.

Y. Zhang, H. Li, and K. Chen, “P2PVPN: A Blockchain-Based De-centralized VPN Framework for Enhanced Privacy and Censorship Resistance,” IEEE Transactions on Dependable and Secure Computing, 2023.

S. Kumar and R. B. Patel, “Performance Analysis of NAT Traversal Techniques in Peer-to-Peer Networks: A Comparative Study,” Interna-tional Journal of Network Management, vol. 32, no. 4, e2195, 2022.

M. Johnson and A. Williams, “Post-Quantum Cryptography in VPN Protocols: Implementation and Performance Evaluation,” Computers & Security, vol. 124, p. 102965, 2023.

P. Rodriguez and N. Gupta, “Kademlia-DHT Enhancements for Low-Latency Peer Discovery in Mobile Ad Hoc Networks,” Ad Hoc Net-works, vol. 134, p. 102908, 2022.

X. Chen and Z. Liu, “Lightweight Cryptographic Protocols for IoT Mesh Networks: A ChaCha20-Poly1305 Performance Analysis,” Internet of Things, vol. 22, p. 100785, 2023.

T. Anderson and J. Lee, “Zero-Trust Architecture in Decentralized Networks: A Novel Framework for Dynamic Access Control,” Journal of Network and Computer Applications, vol. 204, p. 103419, 2022.

R. Schmidt and K. Fischer, “Machine Learning-Based Anomaly Detec-tion in Encrypted VPN Traffic: A WireGuard Case Study,” Computers & Security, vol. 127, p. 103102, 2023.

Y. Kim and S. Tanaka, “Decentralized Identity Management for Peer-to-Peer Networks Using Blockchain Technology,” Future Generation Computer Systems, vol. 136, pp. 112–125, 2022.


Refbacks

  • There are currently no refbacks.