基于二层交换技术的改进型SSL VPN的设计与实现  

Design and implementation of improved SSL VPN system based on L2 switching technology

作　　者：马巍娜[1] 张延园[1] 

机构地区：[1]西北工业大学计算机学院,西安710072

出　　处：《计算机应用》2007年第12期2954-2956,2959,共4页journal of Computer Applications

摘　　要：在分析了传统SSL VPN对应用支持不足和存在安全问题的基础上,提出了基于二层交换技术的改进型SSL VPN系统结构,该结构包括三项关键性技术:虚拟二层交换机的SSL VPN代理服务器,数据封装标准和客户端防火墙。该系统不仅满足了为所有应用提供访问的需求,而且增强了通信隧道和客户端的安全性,最后还给出了改进后系统的延迟性能和并发性能测试。As traditional SSL VPN suffered from insufficient support for applications and weak security, an improved SSL VPN system architecture based on L2 switching technology was put forward. It accommodated three schemes： virtual switch deployed at SSL VPN proxy Server, data encapsulation standards and client firewall. The improved system not only meets all the applications, but also enhances the security of communication tunnels and client. Finally, the delay performance and concurrent performance testing of improved system were given.

关 键 词：SSL VPN 虚拟网卡 虚拟交换机 网络驱动程序接口规范 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]