IPSec协议分析及实现

Analyzing and implementing of IPSec protocol

为了确保IP网络数据通信的可靠性和完整性,从分析IPSec协议出发,以Linux内核为基础研究它的实现,掌握Linux操作系统内核的网络模块,了解其内核的工作原理,合理修改内核,并将IPSec集成到Linux内核中,即采用IP+IPSec方案,从而保证系统通讯安全,有利于IPSec的互操性,提高系统的工作效率。

With the purpose of ensuring the reliability and integrality of data communication by IP network,IPSec protocol is discussed,and its implementation studied on the basis of the Linux kernel. The network module of the kernel of Linux is analyzed as well as the operation principle of the kernel. Then the kernel is modified,and IPSec is integrated into it. Through the IP+IPSec scheme,the system communication is made secure,and IPSec interoperability facilitated and the efficiency of the system improved.