Linux下基于Ipsec和ssl复合vpn的设计  

Design of compound vpn based on ipsec and ssl under Linux

作　　者：范振岐[1] 

机构地区：[1]塔里木大学信息工程学院,新疆阿拉尔843300

出　　处：《农业网络信息》2007年第12期122-123,129,共3页Agriculture Network Information

摘　　要：基于frees wan的缺点,阐述了在netfilter下实现ipsec的思想,以减小网关或防火墙等网络节点成为网络信息传输过程中瓶颈的可能性。在此基础上,结合ssl提出一种同时从网络层和应用层对传输信息具有安全防护的复合vpn设计。In order to decrease the impossibility that network node such as firewall or netgate becomes a bottleneck in network information transmission,this article expounds how to realize ipsec based on the netfilter mechanism,and by combination ssl, sets forth a sort of compound vpn design that can secure information being transmited from network layer to application layer.

关 键 词：IP安全协议 NETFILTER框架 安全套接字层协议 虚拟专用网 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]