适用于私有云的动态IPsec VPN架构  

Dynamic IPsec VPN architecture for private cloud computing

作　　者：庄雪[1] 孙国强[1] 

机构地区：[1]上海理工大学光电信息与计算机工程学院,上海200093

出　　处：《信息技术》2016年第2期112-116,共5页Information Technology

摘　　要：VPN技术在安全地连接企业和私有云中扮演了一个重要角色。传统直连VPN通常允许私有网络在公共网络上的小范围安全连接。而动态IPsec VPN架构基于Hub-and-Spoke和FullMesh两种IPsec VPN网络类型,适用于私有云,可以容纳大量的连接。但此架构只针对单一节点的中心网关(Hub-GW),单节点规模庞大,难以管理控制,一旦出现问题,容易产生流量拥塞,造成瓶颈。针对此问题,在动态IPsec VPN架构的基础上,提出多节点Hub-GW处理模型,实现了负载分担和冗余管理等作用,更加符合实际网络框架。Virtual private network plays an important role to connect enterprise IT with the private cloud securely. Traditional direct connected VPN usually allows for a small scale of secure connections into a private network over the public network. Based on the Hub-and-Spoke and Full-Mesh two IPsec VPN network types,dynamic IPsec VPN architecture is suitable for private cloud,can accommodate a large number of connections. But the Hub-GW is a single node in this architecture. It is difficult to control at large scale of single node. Once appear problem,it is easy to produce traffic congestion,caused by the bottleneck. On the basis of dynamic IPsec VPN architecture,multi-node Hub-GW processing model is proposed for this problem. This model implements the load sharing and redundancy management,and is more conform to the actual network framework.

关 键 词：云计算 动态IPsec-VPN 多节点 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术]