Learn more about Cohesive Networks' virtual networking device with our handy comparison guide. See how VNS3 outshines the rest with enhanced capabilities, functionality and interoperability for any public, private or hybrid cloud.

1. A virtual networking platform to protect apps in any environment
Cohesive Networks’ VNS3 is a cloud-class network security and connectivity platform built for
public, private and hybrid cloud environments. Over 1,200 customers in 20+ countries trust VNS3
to enhance network security on top of other cloud networks.
VNS3 Data Sheet | Customer Solutions © 2016 Cohesive Networks
Comparison: VNS3 and Openswan
Your applications secured
VNS3 Openswan
Core Functionality
Router yes yes
Firewall yes OS port filtering
VPN Concentrator (IPsec & SSL) yes yes
Switch yes no
Protocol Redistributor yes no
Custom Network Services yes no
Pricing based on network complexity open source
Data Encryption (In Motion) yes no
Overlay Network yes no
Scalability/Elasticity
change the instance size and/or add
more VNS3 controller instances to the
network mesh
single software package
High Availability
IPsec eBGP, peer list, standby controller eBGP
SSL/TLS multiple VNS3 controller mesh failover none
Overlay Network multiple VNS3 controller mesh failover none
Built for cloud
Launched in 2008 VNS3 was built for the cloud, defined the cloud networking/NFV market and continues to
innovate with Docker integration and virtual network management and monitoring. VNS3 allows users to
connect, integrate and secure their cloud-based applications.
Openswan was first released in 2003 by Xelerance and some of the original FreeS/WAN volunteers to cater
the open source IPsec project more to enterprise. (source: Building And Integrating Virtual Private Networks With
Openswan by Wouters and Bantoft). Today, Openswan remains a free IPsec implementation for Linux, and
supports most of the extensions (RFC + IETF drafts) related to IPsec, including IKEv2, X.509 Digital Certificates,
NAT Traversal, and many others (source: https://www.openswan.org/).

2. Lower price
VNS3 Pricing also subscription-based but is standard across all clouds, and different editions are offered in
order to offer customers a choice based on their use-case. VNS3 pricing ranges from Free to $750/month,
excluding server runtime fees
Openswan is a free, open source project. There is no support
Data Security Compliance
VNS3 allows you to encrypt all your data in monitions, even that within the cloud, and you control the
encryption keys. Customers build PCI and HIPPA compliant (cloud based) solutions with VNS3
Openswan does not encrypt your data in motion in the cloud
Control over IP Addressing, Network Topologies, and Multicast
VNS3 provides Overlay Network functionality which was specifically developed for 3rd party owned and
operated deployment environments. The Overlay Network allows users to control addressing, topology,
protocols, and security in the public cloud
Openswan has no concept of an Overlay Network and no ability to handle address overlap or public IP
encrypted domain requirements
Scalable, High Availability, Hybrid-Cloud, Multi-Cloud, Multi-Geo
VNS3 Controller instances are configurable in a mesh. VNS3 can run as a cluster to provide additional
features and increased performance in single cloud regions, across regions and even across cloud providers
Openswan virtual machines are standalone devices
Extend and customize your network functions
VNS3 allows customers to add Layer 4-7 network services via its Docker LXC Container system. Users can add
load balancing, proxy, reverse proxy, content caching, IDS, and other functionality directly to their VNS3
devices
Openswan is a software package that can be loaded on an instance with other network services but
customer/user customization has no enterprise support or standardized mechanism for integration
VNS3 Use cases (unachievable with Openswan alone)
1. Data Security Compliance - end to end encryption for PCI and HIPPA solutions
2. HA - True Cloud Network Failover
3. Cloud WAN- Federated Cloud (and Global Points of Presence)
4. Multicast for service election and service discovery
5. Add Load balancing/IDS/Proxy/etc to you network appliance
Comparison: Openswan
Copyright Cohesive Networks
Chicago | London | Palo Alto
info@cohesive.net
US toll-free: +1 888 444 3932
UK: +44 208 144 015
www.cohesive.net/vns3