基于报文模拟的OpenVPN测试方案的设计与实现

Design and Realization of OpenVPN Test Scheme Based on Message Simulation

文中研究了SSL协议及OpenVPN的实现原理,设计了基于硬件加密的OpenVPN接入系统,给出了结构原理框图。针对OpenVPN并发测试问题,一般的并发测试采用基于录制回放的机制,通过录制构成单次流程,再通过回放流程的方法实现。然而,对基于SSL协议的OpenVPN接入系统,由于加密协议自身的安全性设计,特别是硬件加密数据包具有不可复制的特性,设计了一种基于IP报文模拟的并发测试方案,较好地解决了OpenVPN接入系统并发测试的难题,为下一步更为深入的研究提供了良好的启发。

It studied the SSL protocol and the principle of OpenVPN, design a hardware-based encryption access system of OpenVPN, which drawn the block diagram of design structure. In view of the problem of OpenVPN concurrent test, general concurrent test adopt the mechanism based on the recording and playback, constitute a single process by recording and realize by playback. However, the OpenVPN access system based on SSL protocol, due to the encryption protocol security design,especially hardware encryption packet not be copied features,proposed a concurrent test scheme which based on IP message simulation and solved the problem of OpenVPN access system concurrent test,which provided a good inspiration for the next step more in-depth study.