基于IPSec的路由器安全子系统的设计与实现  

The design and implementation of router security subsystem based on IPSec

作　　者：徐恪[1] 徐明伟[1] 吴建平[1] 

机构地区：[1]清华大学计算机科学系

出　　处：《华中科技大学学报（自然科学版）》2003年第S1期117-119,共3页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金重点资助项目 (90 10 4 0 0 2 ;6 972 5 0 0 3);国家高技术研究发展计划重大资助项目(2 0 0 1AA12 10 13)

摘　　要：介绍了清华大学研制的高性能安全路由器中基于IPSec协议族的路由器安全子系统的设计与实现 .其主要特点是将分组过滤和IPSec相结合 ,并在分布式路由器平台上实现其分布式结构 .在实现完善而可靠的安全功能基础上 ,采用各种优化措施最大限度地提高其性能 。This article introduces the design and implementation of Router Security Subsystem based on IPSec, which is the part of High Performance Security Router made by Tsinghua University. The main characteristics are that we combine IP Filter and IPSec together, and implement the distributed architecture in the distributed router platform. Based on perfect and reliable security functions, we use various optimal methods to enhance the performance furthest, and to make the security router bear actual economical val...

关 键 词：高性能安全路由器 安全子系统 IPSec协议族 IP FILTER 安全联盟 安全策略 

分 类 号：TN915.05[电子电信—通信与信息系统]