一种虚拟私有网络模型的实现

The Implementation of a kind of VPN Model

VPNR求是解决网络安全问题的一条有效途径。在分析了VPN技术的特点和IPSec规范原理的基础之上，提出了一种VPN系统设计模型，不同于一般VPN系统模型，该模型考虑了群组通信和QoS的需求。同时，还着重讨论了具体实现中的Linux内核重构、密钥更新、基于策略的信息过滤以及QoS控制等关键技术。最后，对VPN技术的推广与应用提出了自己的看法。

VPN technology is one efficient way to solve network security problem. This paperpresents a kind of VPN model based on theanalysis of VPN's character and the principle of IPSec specification. This VPN model includes management module. key distribution module,identity authenhcahon module, data encryphon and decryphon module, data encapsulatinn and decomPosing module, cncryphon function lib.SAD and SPD, etc. Diffeent from general VPN model, this model considers the request of group communication and QoS. At the same hme,this paper talks about some key technology such as Linux kernel reorganization. key refreshment, informahon filter based-on policy and QoScontrol ete. At the end of this paper. authors presented views on the application of VPN technology.