基于OpenVPN的虚拟专用网关键技术研究与实现  

Research and Implement of VPN Key Technology— based OpenVPN

作　　者：诸晔[1] 桂祚勤[1] 

机构地区：[1]江南计算技术研究所,江苏无锡214083

出　　处：《计算机安全》2014年第1期20-24,共5页Network & Computer Security

摘　　要：为了借助互联网扩展自己的业务范围,许多企业和政府部门开始构建虚拟专用网。由于IPSec VPN在应用中的不足,基于SSL协议的VPN技术以其安全易用的特点引起人们的关注。首先分析了SSL协议对VPN实现的支持;接下来结合开源项目OpenVPN,分析了隧道型VPN的原理,包括虚拟网卡通信原理和隧道型SSL VPN应用模式;最后,提出了一种支持自主密码设备和算法的VPN实现方案。In order to extend business through Internet, many companies and departments establish virtual private network. Because of the flaw of IPsec VPN, people put more and more attention to VPN based on SSL, which is secure and wieldy. This paper firstly analyses the supports provided by the SSL protocol for VPN implementation. Secondly, combined with OpenVPN, which is a open source project, analyses tunnel based VPN, include the principle of virtual NIC and the application mode of tunnel SSL VPN. Finally, design a VPN implementation, which supports for the domestic crypto equipments and algorithms.

关 键 词：虚拟专用网 SSL OPENVPN 隧道 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]