IKE框架实现和功能扩充的研究

随着Internet的快速扩张,信息安全问题也日趋成为商家关注的焦点,VPN作为解决网络通信安全问题的工具被越来越多的网络安全厂商研发和生产。通过利用成熟的开源框架可以有效的减少开发成本,但同时也由于得不到好的技术支持会增加添加自己个性化元素的难度。添加自定义载荷是一种常用的VPN研发中的应用。该文利用IKEv1协议下的开源框架strongswan介绍了IKE的实现模型,并介绍了在strongswan中添加自定义载荷以及在配置文件中添加开关控制是否启用该载荷的方法。

As the sharply development of the Internet, the Internet security become more and more important to companies. As the solution of the Internet security problem, VPN is developed by more and more VPN companies. By using the open code system, we can reduce our costing during developing, but some problem in adding our own things by lacking of technical support. Adding our own payloads is a common application in development. This paper introduce IKE by using strongswan opening code, and introduce how to add our own payloads and control new payloads by a switch in configure file.