基于安全隧道多路复用的SSL VPN研究

Research for STDM Based SSL VPN

针对普通SSL VPN由于隧道的频繁建立会消耗大量系统资源的缺陷,本文提出一种STDM(Secure T unne l D iv is ionM u ltip lex ing,安全隧道多路复用)机制.该机制的核心是隧道缓存技术,即利用隧道与终端服务的无关性,实现安全隧道的复用,改善系统的性能.

Aiming at the defects of the ordinary SSL VPN that the frequent setting-ups of tunnels will consume a large number of system resources, this paper presented a mechanism called STDM（Secure Tunnel Division Multiplexing）. The kernel of this mechanism was Tunnel Caching, which implemented the shared use of secure tunnels by the independence of tunnel of a remote service. This mechanism would improve the efficiency of the system.