一种虚拟私有网络的设计与实现

Design and Implementation of a Kind of Virtual Private Network

VPN技术是解决网络安全问题的一条有效途径·在分析了VPN技术的特点和IPSec规范原理的基础之上 ,提出了一种VPN系统设计模型·不同于一般VPN系统模型 ,该模型考虑了群组通讯和QoS的需求·着重讨论了具体实现中的Linux内核重构、密钥更新、基于策略的信息过滤以及QoS控制等关键技术·VPN产品能否被广泛接受主要取决于以下两点 :一是VPN方案能否以线路速度进行加密 ,否则将会产生瓶颈 ;二是能否调度和引导VPN的数据流到网络上的不同管理域·

VPN technology is one efficient way to solve network security problem. A kind of VPN model based on the analysis of VPN's character and the principle of IPSec specification was presented. The request of group communication and QoS were considered. Some key technology such as Linux kernel reorganization, key refreshment, information filter based on policy and QoS control etc were discussed. That VPN products can be accepted widely or not lies on two factors: ①VPN product can be encrypted in line speed or not; ②Data stream of VPN can be led to different management domain of network or not.