Linux下基于IPSec和应用层代理的安全系统的设计

Design of Security System based on IPSec and application layer proxy under Linux

说明IPSec的一种实现frees/wan的缺点,阐述在netfilter下实现IPsec的思想,然后说明在应用层级由代理建立的安全机制。最后通过IPSec和squid相互结合,提出一种对计算机网络系统本身及其传输的信息都具有安全防护的设计。

It was firstly illuminated the drawback of a kind of implementing flees/wan for IPSec, and expounded how to implement IPSec based on the neffilter mechanism, and then accounted for the security mechanism established by application proxy on application layer. At last, by combination of IPSec and squid, it was set forth a sort of design that could Secure Computer Network System and transmited information.