基于VPN的动态选择应用层过滤技术

An Automatic Mechanism to Redirect Incredible Flow to Content-Filtering Proxy Base on General VPN

论文提出了一种简单高效的内容过滤方法,其特点是对于白名单中的网址直接在TCP层或TCP层以下通信,而对于白名单之外网址的访问,则自动定向到代理服务器或应用层防火墙,实施内容过滤,避免了全部互联网访问流量经过代理服务器或应用层防火墙导致的效率问题。对代理服务器或应用层防火墙的处理能力的要求也大大降低。

This paper presents a simple but efficient Content-Filtering method by the introduction of white-list. The visits to credible web sites included in white-list are not filtered. On the contrary the visits to incredible web sites are automatically re-directed to proxy or application-layer firewall for content filtering via general VPN mechanism. Thus the efficiency of communication is greatly improved.