摘要
IPSec是IETF制定的新一代的网络安全协议,是IPv6协议标准的有机组成部分。简要介绍IPSec协议和Linux的Netfilter机制,详细介绍基于Netfilter机制实现IPSec协议的设计思想和系统设计方案,为开发VPN和安全路由器奠定了安全基础。
IPSec is IP security protocol defined by IETF for the next generation network, and is the mandatory part of IPv6 protocol stack. Briefly introduces the IPSec protocol and Netfilter mechanism of Einux, detailedly introduces a new design idea and system design scheme, the final realization of IPSec protocol based on the Netfiher mechanism shows this scheme properly, efficiently and stability, which sets up the basis for the development of security route, VPN, next generation network.
出处
《现代计算机》
2009年第5期113-115,121,共4页
Modern Computer
基金
国家863项目(No.2003AA144081)
北航青年创新基金(No.320-9-35-3-7)