Determination of optimum network topology with the consideration of firewall security policies
The rapid development of network technologies and the growing number of interconnected devices have introduced significant challenges in optimizing the efficiency of computer networks. Misconfigurations in network devices such as manageable switches, routers, modems, and firewalls may lead to performance degradation and security vulnerabilities. Moreover, complex and poorly designed network architectures may exacerbate these issues by creating inefficiencies and increasing the risk of information security breaches. To address these challenges, this study focuses on designing and evaluating network topologies that segment physical networks into logical structures. By assessing various network designs, VLAN structures, and firewall security policies, the study aims to identify configurations that achieve an optimal balance between speed, security, and cost. The research evaluates key performance metrics, including round-trip time delays, jitter, download, and upload speeds, under different firewall policies. The findings provide actionable insights into how network configurations impact local network performance, highlighting best practices for creating high-performing, secure, and cost-effective network topologies. The findings also underscore the inherent trade-off between security and performance. While firewall security policies and VLAN configurations enhance network security, they also introduce processing overhead, particularly when additional switches and routing are involved, leading to increased local network delays.
Authors
- Ali Gezer (ORCID: https://orcid.org/0000-0001-8265-1736)
- Umut Babayiğit (ORCID: https://orcid.org/0000-0002-6053-6961)
Institutions
- Kayseri Eğitim ve Araştırma Hastanesi (TR)
- Kayseri Üniversitesi (TR)
Publication Details
- Journal
- Recep Tayyip Erdoğan Üniversitesi Fen ve Mühendislik Bilimleri Dergisi
- Published
- 2025-06-30
- DOI
- https://doi.org/10.53501/rteufemud.1505777
- Citations
- 1
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 1.49