基于SSL VPN的网络安全研究与实现

Network Safety Research and Realization Based On SSL VPN

SSLVPN是利用SSL/TLS协议结合强加密算法、身份认证、基于隧道技术的安全VPN。SSLVPN支持多种网络协议,通过PKI技术和加密技术鉴定通信双方身份,以此确保传输数据的安全。它具有管理维护成本低、用户操作简便、可穿越NAT设备等特点。本文进行了SSLVPN研究,重点分析了SSLVPN的实施方案,对SSLVPN的OpenVPN实施方案进行了扩展功能的研究设计。

SSL VPN ensures security by combining SSL/TLS protocol, advanced encryption algorithm and identity recognition based on tunneling. SSL VPN supports multiple network protocols and recognizes identities of both sides of communication via PKI and encryption so that the safety of data communication can be ensured. Its advantage includes low maintenance cost, relative easiness of use, and the ability to cross NAT. The researcher studied SSL VPN, with a particular emphasis on the executive plan of SSL VPN and designed extended function of the executive plan of the Open VPN of SSL VPN.