Determination of optimum network topology with the consideration of firewall security policies

Umut Babayiğit; Ali Gezer

Makale detayları

Determination of optimum network topology with the consideration of firewall security policies

Yazarlar:

Umut Babayiğit | Ali Gezer

Yayıncı:

Recep Tayyip Erdoğan University

Ana Başlıklar:

Ağ Mühendisliği

Dergi:

Recep Tayyip Erdoğan Üniversitesi Fen ve Mühendislik Bilimleri Dergisi Vol.6 Issue 1, pp.69-81

Belge Tipi:

Makale

Yayın Tarihi:

6/2025

Belge Dili:

İngilizce

Document ID (Org No.):

2001351003

pISSN:

2687-2315

Anahtar kelimeler:

Özet:

 The rapid development of network technologies and the growing number of interconnected devices have introduced significant challenges in optimizing the efficiency of computer networks. Misconfigurations in network devices such as manageable switches, routers, modems, and firewalls may lead to performance degradation and security vulnerabilities. Moreover, complex and poorly designed network architectures may exacerbate these issues by creating inefficiencies and increasing the risk of information security breaches. To address these challenges, this study focuses on designing and evaluating network topologies that segment physical networks into logical structures. By assessing various network designs, VLAN structures, and firewall security policies, the study aims to identify configurations that achieve an optimal balance between speed, security, and cost. The research evaluates key performance metrics, including round-trip time delays, jitter, download, and upload speeds, under different firewall policies. The findings provide actionable insights into how network configurations impact local network performance, highlighting best practices for creating high-performing, secure, and cost-effective network topologies. The findings also underscore the inherent trade-off between security and performance. While firewall security policies and VLAN configurations enhance network security, they also introduce processing overhead, particularly when additional switches and routing are involved, leading to increased local network delays.

 The rapid development of network technologies and the growing number of interconnected devices have introduced significant challenges in optimizing the efficiency of computer networks. Misconfigurations in network devices such as manageable switches, routers, modems, and firewalls may lead to performance degradation and security vulnerabilities. Moreover, complex and poorly designed network architectures may exacerbate these issues by creating inefficiencies and increasing the risk of information security breaches. To address these challenges, this study focuses on designing and evaluating network topologies that segment physical networks into logical structures. By assessing various network designs, VLAN structures, and firewall security policies, the study aims to identify configurations that achieve an optimal balance between speed, security, and cost. The research evaluates key performance metrics, including round-trip time delays, jitter, download, and upload speeds, under different firewall policies. The findings provide actionable insights into how network configurations impact local network performance, highlighting best practices for creating high-performing, secure, and cost-effective network topologies. The findings also underscore the inherent trade-off between security and performance. While firewall security policies and VLAN configurations enhance network security, they also introduce processing overhead, particularly when additional switches and routing are involved, leading to increased local network delays.

 The rapid development of network technologies and the growing number of interconnected devices have introduced significant challenges in optimizing the efficiency of computer networks. Misconfigurations in network devices such as manageable switches, routers, modems, and firewalls may lead to performance degradation and security vulnerabilities. Moreover, complex and poorly designed network architectures may exacerbate these issues by creating inefficiencies and increasing the risk of information security breaches. To address these challenges, this study focuses on designing and evaluating network topologies that segment physical networks into logical structures. By assessing various network designs, VLAN structures, and firewall security policies, the study aims to identify configurations that achieve an optimal balance between speed, security, and cost. The research evaluates key performance metrics, including round-trip time delays, jitter, download, and upload speeds, under different firewall policies. The findings provide actionable insights into how network configurations impact local network performance, highlighting best practices for creating high-performing, secure, and cost-effective network topologies. The findings also underscore the inherent trade-off between security and performance. While firewall security policies and VLAN configurations enhance network security, they also introduce processing overhead, particularly when additional switches and routing are involved, leading to increased local network delays.

 Ağ teknolojilerinin hızla gelişmesi ve birbirine bağlı cihazların sayısının artması, bilgisayar ağlarının verimliliğini optimize etme konusunda önemli zorlukları da beraberinde getirmiştir. Yönetilebilir anahtarlar, yönlendiriciler, modemler ve güvenlik duvarları gibi ağ cihazlarındaki yanlış yapılandırmalar, performans düşüşlerine ve güvenlik açıklarına yol açabilir. Ayrıca, karmaşık ve kötü tasarlanmış ağ mimarileri bu sorunları daha da kötüleştirerek verimsizliklere ve bilgi güvenliği ihlallerine neden olabilir. Bu zorlukların üstesinden gelmek amacıyla, bu çalışma fiziksel ağları mantıksal yapılar halinde segmentlere ayırarak ağ topolojilerinin tasarımı ve değerlendirilmesine odaklanmaktadır. Çalışmada, çeşitli ağ tasarımları, VLAN yapıları ve güvenlik duvarı politikaları incelenerek hız, güvenlik ve maliyet arasında optimal bir denge sağlayan yapılandırmalar belirlenmeye çalışılmıştır. Araştırma, farklı güvenlik duvarı politikaları altında gidiş-dönüş gecikme süresi, gecikme değişkenliği jitter, indirme ve yükleme hızları gibi temel performans metriklerini değerlendirmiştir. Bulgular, yerel ağ performansını etkileyen ağ yapılandırmalarının etkilerine dair uygulanabilir bilgiler sunmakta ve yüksek performanslı, güvenli ve maliyet açısından etkili ağ topolojileri oluşturmak için en iyi uygulamaları vurgulamaktadır. Ayrıca, bulgular güvenlik ve performans arasındaki doğal dengeyi de ortaya koymaktadır. Güvenlik duvarı politikaları ve VLAN yapılandırmaları ağ güvenliğini artırırken, ek anahtarlar ve yönlendirme eklendiğinde işleme yükü artarak yerel ağ gecikmelerinin yükselmesine neden olmaktadır.

Makale detayları

Determination of optimum network topology with the consideration of firewall security policies

Yazarlar:

Umut Babayiğit | Ali Gezer

Yayıncı:

Recep Tayyip Erdoğan University

Ana Başlıklar:

Ağ Mühendisliği

Dergi:

Recep Tayyip Erdoğan Üniversitesi Fen ve Mühendislik Bilimleri Dergisi Vol.6 Issue 1, pp.69-81

Belge Tipi:

Makale

Yayın Tarihi:

6/2025

Belge Dili:

İngilizce

Document ID (Org No.):

2001351003

pISSN:

2687-2315

Network technologies

information security

network topology

Vlan

delay

jitterAğ teknolojileri

bilgi güvenliği

ağ topoloji

VLAN

gecikme

jitter

Sayı

Makale detayları

Yazarlar: Umut Babayiğit | Ali Gezer

Yayıncı: Recep Tayyip Erdoğan University

Ana Başlıklar: Ağ Mühendisliği

Dergi: Recep Tayyip Erdoğan Üniversitesi Fen ve Mühendislik Bilimleri Dergisi Vol.6 Issue 1, pp.69-81

Belge Tipi: Makale

Yayın Tarihi: 6/2025

Belge Dili: İngilizce

Document ID (Org No.): 2001351003

pISSN: 2687-2315

Sayı

Yazarlar:

Umut Babayiğit | Ali Gezer

Yayıncı:

Recep Tayyip Erdoğan University

Ana Başlıklar:

Ağ Mühendisliği

Dergi:

Recep Tayyip Erdoğan Üniversitesi Fen ve Mühendislik Bilimleri Dergisi Vol.6 Issue 1, pp.69-81

Belge Tipi:

Makale

Yayın Tarihi:

6/2025

Belge Dili:

İngilizce

Document ID (Org No.):

2001351003

pISSN:

2687-2315