IPsec VPN中Netlink消息通信机制的研究和设计  

Research and Design of Message Communication Mechanism Netlink in IPsec VPN

作　　者：章晓明[1] 杜春燕[1] 陆建德[1] 

机构地区：[1]苏州大学计算机学院江苏省计算机信息处理技术重点实验室,江苏苏州215006

出　　处：《计算机工程与应用》2006年第34期139-141,共3页Computer Engineering and Applications

基　　金：江苏省自然科学基金资助项目(BK2004039)。

摘　　要：对Linux内核IP协议栈与应用层进程通信的Netlink消息通信机制进行深入研究,分析了内核中Netlink通信机制的设计,并结合密钥管理进程与内核的通信交互,给出具体设计。IPsecVPN安全网关使用Netlink机制为不同用户动态创建各自的安全通道,从而实现了安全密钥的动态管理。The Netlink message communication mechanism between Linux kernel IP protocol stack and application layer processes has been researched in depth,and the design of the Netlink mechanism in Linux kernel also has been analyzed.Combined with communication interaction between key management process and the kernel,a detailed design has given out.By means of Netlink mechanism,IPsec VPN gateway has created individual secure channels dynamically for various users to implement the dynamic management of secure keys.

关 键 词：NETLINK 消息通信 IPSEC VPN 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]