一种隧道型SSL_VPN网关设备性能提升方法  

A Method for Performance Promotion of Tunnel-based SSL VPN Gateway Device

作　　者：陈洋 骆华杰 陈宇燕[1] CHEN Yang;LUO Hua-jie;CHEN Yu-yan(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2018年第4期986-990,共5页Communications Technology

摘　　要：虚拟专用网络技术已发展多年,SSL VPN产品是企业级用户中使用颇为广泛的一种,提供了应用层数据的保护。首先介绍了SSL VPN技术的发展状况,然后对隧道型SSL VPN产品的应用模式、软件架构进行了分析,阐述了设备性能提升的瓶颈与现有的解决方案。结合开发实践,提出了同一硬件平台上纯软件改造提升性能的方法,且测试结果表明整机性能获得了显著提升。最后,评价了该方法的优劣,并展望了隧道型SSL VPN网关设备的发展方向。Virtual private network technology has been developed for many years.SSL VPN products are widely used among enterprise users.It can provide data protection for application layer.First of all,the development of SSL VPN technology is introduced.Then,the application mode and software architecture of the tunnel SSL VPN product are analyzed,and the bottleneck of equipment performance improvement and the existing solutions are described.Combined with the development practice,the method of improving the performance of pure software based on the same hardware platform is put forward,and the test results indicate that the performance of the whole machine has been significantly improved.Finally,the advantages and disadvantages of the method are evaluated,and the development trend of tunnel SSLVPN gateway is prospected.

关 键 词：SSL协议 SSLVPN 隧道 虚拟网卡 

分 类 号：TP393.04[自动化与计算机技术—计算机应用技术]