基于插件的双协议栈安全路由器框架结构研究

Research on the Framework of the Dual-stacked Security Router Based on Plugins

传统的路由器在软件上是一个整体,且软件不易扩展和升级。另外IPv4过渡到IPv6已成为历史的必然,而如何保证路由器的安全也是较为困难的事情。因此,需要研究一种新型的路由器结构来解决以上问题。文中首先阐述了安全路由器的设计原则,然后研究了基于插件的安全路由器的框架结构,并解释了该框架结构所运用的双协议栈结构和IPSec,最后给出了运用该安全路由器构建虚拟专用网的一个实例。该安全路由器结构对构建一个安全的Internet有一定的理论和现实意义。

Traditional router is made as a whole,which is not easily extended and updated.It is inevitable that IPv4will be replaced by IPv6,and it is difficult to assure router's security.So there should be a new router architecture to solve the above problems.In this paper,the design principles of security router are related,then the architecture of secu-rity router based on plugins is put forward.At the same time ,IPSec and the frame of dual protocol stack used in the architecture are discussed.At last,one instance is given to build a virtual private network by using the architecture of the security router.This architecture of security router will be significant for creating a secure Internet.