网络处理器平台下VPN系统的一体化设计  

Integration Design of VPN System Based on IXP425 Network Processor

作　　者：曹利峰[1] 杜学绘[1] 陈性元[1] 钱雁斌[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《微计算机信息》2007年第03X期153-155,共3页Control & Automation

基　　金：河南省自然科学基金资助(994060100)

摘　　要：本文介绍了Intel IXP425的软件体系结构,分析了Linux下防火墙的netfilter框架,给出了防火墙策略和vpn策略在linux下的一体化表示方法,最后,对集防火墙、VPN、NAT功能为一体的vpn系统在IXP425下进行了一体化的设计。Network Processor is hardware platform which improves capability and flexibility currently, and moreover which brings a new idea for developing high-powered network product. In the paper, the software architecture of Intel ixp425 is introduced. At the same time, the frame of netfiher for firewall in linux is analyzed and integrative description in linux about firewall policy and vpn policy is given. Finally vpn system based on ixp425 which combine many functions such as VPN, stateful firewall and NAT as a whole is designed and accomplished.

关 键 词：网络处理器引擎 网络地址翻译 虚拟专用网 IPSEC NETFILTER 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]