基于虚拟网卡的SSL VPN体系结构的研究  

Research of SSL VPN architecture based on virtual network interface card

作　　者：李之棠[1] 何桂丽[1] 王美珍[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,武汉430074

出　　处：《计算机应用研究》2007年第12期327-329,332,共4页Application Research of Computers

基　　金：国家科技部创新基金资助项目(国科发计字2003[375])

摘　　要：为了打破传统的SSL VPN(secure socket layer virtual private network)局限于支持Web的应用,不能满足诸如OA、ERP、FTP等非Web应用需求的局限,提出了一种基于虚拟网卡的SSL VPN(VNICB-SSL VPN)体系结构。基于虚拟网卡的技术成功地解决了NDIS(network driver interface specification,网络驱动接口规范)框架中的软件冲突问题,也避免了WinSock2动态链接库重载、传输层过滤驱动截获网络报文不够彻底的问题。The traditional SSL VPN was limited to support Web application, and could not meet the needs of many non-Web applications, such as OA, ERP,FTP, etc. Thus, in order to break through this limitation, this paper proposed an SSL VPN architecture based on virtual network interface card （ VNICB-SSL VPN）. It successfully solved the software collision in the NDIS framework, and it also avoided some problems such as reloading dynamic link library of WinSock2 and the incompleteness of filtration driver in transport layer to catch the network message.

关 键 词：安全套接字层/传输层安全性协议 虚拟专用网络 虚拟网卡 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]