Linux下基于Ipsec和ssl复合vpn的设计

Design of compound vpn based on ipsec and ssl under Linux

基于frees wan的缺点,阐述了在netfilter下实现ipsec的思想,以减小网关或防火墙等网络节点成为网络信息传输过程中瓶颈的可能性。在此基础上,结合ssl提出一种同时从网络层和应用层对传输信息具有安全防护的复合vpn设计。

In order to decrease the impossibility that network node such as firewall or netgate becomes a bottleneck in network information transmission,this article expounds how to realize ipsec based on the netfilter mechanism,and by combination ssl, sets forth a sort of compound vpn design that can secure information being transmited from network layer to application layer.