Linux环境下基于多包加密的高速IPSec VPN并发调度方法设计  

Research on Concurrent Scheduling based on Multi-packet Encryption for Fast-speed IPSec VPN in Linux

作　　者：罗字军[1] 王凌燕 司志刚[1] 刘新军[1] 

机构地区：[1]信息工程大学电子技术学院,河南郑州450004 [2]空军电子科技研究所,北京100097

出　　处：《计算机安全》2011年第5期48-52,共5页Network & Computer Security

摘　　要：随着千兆网络的发展,用户对VPN即虚拟专用网设备提出了更高的要求。高速VPN设备的研究与实现,对信息系统的整体性能具有重要的意义。目前,高速的IPSec VPN的实现方法已经很多,VPN的IPSec协议加密处理速度是影响IPSec VPN的整体性能的一个重要因素。在对传统的并行加密方法进行分析的基础上,使用数据包快速分流的处理方法,根据数据"流"的局部性原理,设计了一种基于多包加密的IPSec VPN的并发调度方法。With the development of gigabit network,the users are putting forward more and more requirements on VPN（Virtual Private Network,VPN）equipments.The research and implementation of high-speed VPN equipments influence on the overall performance of information systems greatly.Currently,there are many means to implement the high-speed IPSec VPN,and the processing speed of encrypting the VPN＇s IPSec protocol is an important factor which affects the overall performance much.In this paper,according to the locality principle of data flow,a new method of concurrent scheduling based on the analysis of traditional parallel encryption method and the way of fast streaming of data packet is introduced.

关 键 词：虚拟专用网 IPSEC协议 多包加密 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]