一种新型VPN中IP分组膨胀问题的研究  

Research on IP Packet Expansion in a New-style VPN

作　　者：黄娜[1] 姚劲勃[1] 李昕[1] 沈文旭[1] 于晓[1] 

机构地区：[1]空军航空大学,长春130022

出　　处：《长春理工大学学报（自然科学版）》2009年第4期672-676,共5页Journal of Changchun University of Science and Technology(Natural Science Edition)

摘　　要：提出了一种高强度的VPN安全通信解决方案,该方案将VPN的安全协议脱离开操作系统,嵌入到网络设备(安全网卡)中,使得任何程序在使用网络设备时无法绕开安全协议,从而使系统在完成保密通信的同时具有防止主动攻击的能力。讨论了IPComp技术和IP分片与重装技术在解决IP分组膨胀方面的优势和不足,提出了一种简便易行的降低MTU方法,经验证该方法在这种新型VPN应用中显著降低了IP分组的分片率,提高了VPN网络的带宽利用率。A new scheme is developed for constructing secure VPN.In this scheme,security protocols are separated from operating system and integrated into the network equipment-Safe Ethernet Card.When a program makes use of network equi-pments,the protocols cannot be bypassed.The scheme can be used to provide security communication and prevent active attack.In the scheme,it s very important for the network usage efficiency in preferably solving IP packet expansion problem.IPComp,IP fragmentation and reassembly,the advantages and disadvantages of them are discussed for resolving IP Packet expansion. A new MTU reduced method is put forward in the VPN. The result shows that this method decreases the amount of IP packet fragment distinctly, and improves the usage rate of network bandwidth.

关 键 词：虚拟专用网 安全网卡 最大传输单元 IP 压缩 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]