基于Netfilter框架的VPN网关实现技术研究

Study of Implementing VPN Gateway Based on Netfilter Framework

VPN是在开放网络环境下向用户提供类似专用网络的信息传输框架的安全体系。VPN解决全球化企业联网的能力正使其越来越受到关注。IPSec协议良好的体系结构及解决端对端通信的能力使其已经成为开发VPN的事实标准。该文在深入研究IPSec协议以及Netfilter框架的基础上,提出了一种全新的基于Netfilter框架实现VPN网关的实现方案,并在工程中进行了实施。

Virtual Private Network is the s ecurity architecture similar to leased-line network under open network environm ent.The ability of solving globalization networking of VPN makes it gradually c ome to front.The better ability to solve end-to-end communicating of IPSec makes IPSec the factual criterion to develop VPN.Based on the deep research of IPSec protocol and Netfilter framework,this thesis promotes a new solution to implement VPN Gateway based on Netfilter framework,and implements it in projec t.