基于IPSec的路由器安全子系统的设计与实现

The design and implementation of router security subsystem based on IPSec

介绍了清华大学研制的高性能安全路由器中基于IPSec协议族的路由器安全子系统的设计与实现 .其主要特点是将分组过滤和IPSec相结合 ,并在分布式路由器平台上实现其分布式结构 .在实现完善而可靠的安全功能基础上 ,采用各种优化措施最大限度地提高其性能 。

This article introduces the design and implementation of Router Security Subsystem based on IPSec, which is the part of High Performance Security Router made by Tsinghua University. The main characteristics are that we combine IP Filter and IPSec together, and implement the distributed architecture in the distributed router platform. Based on perfect and reliable security functions, we use various optimal methods to enhance the performance furthest, and to make the security router bear actual economical val...