MPLS vs. IPsec VPN: Choosing the Right Network Architecture for Enterprise WAN

Abstract

The rapid expansion of the global business has increased the demand for secure, resilient and optimized WANs. Enterprises had traditionally used Wide Area Network (WAN) technologies like Multi-Protocol Label Switching (MPLS) or Internet Protocol Security (IPsec) VPNs to link geographically separated data centers. Each of these technologies provides their own benefits, based on an organization’s requirement and a combination of performance, price and security needs. This paper will dive deep to provide a comparative analysis between MPLS and IPsec VPNs technologies and the enterprise WAN scenarios in which these VPNs could be deployed. The paper describes internet circuits, their drawbacks, the benefit of MPLS circuits, and how IPsec VPN can protect public internet circuits. Last but not least, the paper aims to provide network administrators with the necessary tools to choose an appropriate circuit for their organization by providing network architecture scenarios in which MPLS or IPsec VPN over internet circuits is the best choice. Keywords— Internet Circuits, MPLS, IPSec VPN, Tunnel, Budget, Reliability, Security.