基于分布式隧道模型的SSL VPN的设计和实现  

Design and Implementation of SSL VPN Based on the Distributed Tunnel Model

作　　者：李宁[1] 黄辰林[1] 罗军[1] 

机构地区：[1]国防科技大学计算机学院,湖南长沙410073

出　　处：《计算机工程与科学》2008年第8期8-11,14,共5页Computer Engineering & Science

基　　金：国家863计划资助项目(2007AA01Z408)

摘　　要：VPN是一种利用加密通讯协议在公共网络中建立安全、可靠数据传输通道的技术。目前,利用SSL协议构建安全VPN已成为一种主流方式。本文在对隧道式SSL VPN运行机理分析的基础上,针对其性能瓶颈提出了一种基于分布式隧道模型的SSL VPN方案。该方案通过引入P2P技术,利用边缘节点的计算能力分担了服务器的数据传输任务,在改善了点到点之间的传输性能的同时,也极大提高了VPN的整体吞吐率。VPN（Virtual Private Network）is a technique that uses encryption and communication protocols to construct secure data transmission channels in public networks. Nowadays,it is the main choice to build secure VPNs using the SSL protocol. This paper analyses the internal working mechanism of turmel-based SSL VPN,and presents a new SSL VPN solution which is based on the distributed tunnel model according to its performance bottleneck. By introducing the P2P technology,this solution uses the computing power of edge nodes to share the server＇s data transmission task. As a result, it does not only improve the performance of point-to-point transmission, but also enhance the whole throughput of a VPN system.

关 键 词：VPN SSL协议 P2P 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]