Performance analysis of virtual private network segment on a per flow basis

摘要

A method is provided in one example embodiment and includes generating at a first network device Virtual Private Network (“VPN”) encapsulated packets with anonymized headers; maintaining a table mapping the anonymized headers to original headers of the VPN encapsulated packets; receiving a trace request from an initiator; generating from the received trace request an out-of-tunnel trace request toward a second network device via at least one intermediate network device using the anonymized headers; and forwarding the received trace request as an in-tunnel trace request through a VPN tunnel.