基于虚拟以太网的VPN系统  

VPN System Based on Virtual Ethernet

作　　者：田权斌[1] 李立新[1] 周雁舟[1] 

机构地区：[1]解放军信息工程大学电子技术学院,郑州450004

出　　处：《计算机工程》2008年第14期129-131,134,共4页Computer Engineering

摘　　要：研究基于虚拟以太网的VPN系统,该系统通过在内核构建虚拟网卡实现核心态和用户态的交互,并虚拟了一个以太网的工作环境,在用户态构建安全隧道,实现基于数字证书系统的身份认证、传输加密、数据完整性验证和抗重放攻击等功能。测试表明,在实现VPN功能的基础上,该系统在穿越网络设备、支持多种协议等方面具有良好的性能。This paper studies the virtual Ethernet technology, and develops a VPN system. The system transports packets between kernel space and user space, and simulates a virtual Ethernet environment by constructing virtual NIC in kernel. It realizes the functions of identity authentication based on digital certificate system, traffic encryption, integrality validating and resistance to replay attack by constructing secure tunnel in user space. Test results demonstrate that, besides the primary function of VPN, the system has good performance on passing through net devices and can support multiple net protocols, etc.

关 键 词：虚拟以太网 VPN系统 隧道 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]