实现IPsec的一种方案

An Implementation Design of IPsec

介绍了层安全协议,包括其主要的加密技术和、工作方式和、密钥管理技术。探讨了IPIPsecAHESPTransport modeTunnel modeIKE几种可能的实现思路,介绍了笔者的一种设计方案,包括目标、需求分析、硬件和软件的总体结构,简要分析了这种设计方案的性能和需要完善的方面。

This article briefly introduces IPsec, the security protocol for IP stack. The content covers here includes such two transformations of IPsec as AH and ESP, two modes as transport mode and tunnel mode and the key management protocol IKE. Several possible implementation methods are discussed and one approach originated by the author is presented. About this approach, the design objective, requirements determination, hardware and software architecture are described. In addition, the design performance issue is discussed and compared to some extent.