Abstract: The complex semantics of IPsec policies increase the difficulty of VPN performance evaluation，lack of framework in performance analysis of IPsec VPN cannot guarantee the effectiveness of evaluation，to solve this issue，a model of VPN performance evaluation based on IPsec security policy is presented.The model constructs a flexible VPN environment，maintains a volume of IPsec security policies which set the measure to VPN performance，compiles statistics in parallel based on concurrency control of multi-thread.At last，experiment is carried on to verify the reliability and the feasibility of this model.