Abstract:In the existing IPSec architecture, in which tunnel is built in kernel, the number of concurrent tunnels is restricted by IP address configured on the machine and user can not control the process of establishing tunnel. This brings inconvenience when we use personal computer to measure the performance parameters of VPN Gateway (e.g. the maximum number of concurrent tunnels and the maximum rate of the new tunnels built). In order to solve this problem, this paper presents a novel IPSec multi-tunnels concurrent architecture which uses distributed objects to build tunnels in user space. The architecture privodes one Console which are used to control all AgentNodes and multiple AgentNodes which are used to build tunnels. In AgentNode, the negotiation processing of tunnels, the IPSec processing of packets and the protocol processing of TCP/IP are all completed in user space by objects. Meanwhile, AgentNode uses virtual IP address instead of local IP address to negotiate tunnel and the number of concurrent tunnels will be unlimited (only limited by memory). Moreover, based on distributed architecture, the number of AgentNode can be arbitrarily extended. Therefore, the system has a great deal of flexibility on the number of concurrent tunnels and the rate of tunnel establishment, which helps to accurately measure the performance parameters of VPN Gateway.

Research and Implementation of IPSec VPDN Based on Multi-core Platforms

Fastpath-based VPN Gateway over Network Processor

A Multi-tunnel VPN Concurrent System for New Generation Network Based on User Space

A Distributed Object-Based IPSec Multi-Tunnels Concurrent Architecture

VPN Test System Based on IPSec Network Protocol

Research of the Implementation of IPSec Protocol Based Network Prosessor

Accelerating Implementation of IKEv2 by Using Security Coprocessor

Study of Implementing IPSec under the Linux Platform

Security policy searching method research of IPSec VPN based on multi-core network processor

Implementation and Performance Evaluation of IPSec VPN Based on Netfilter

Design and Implementation of Embedded VPN Gateway System

Research & Implementation of Security Communication Mechanism for Virtual Private Network

Based-compactPCI Research and Implementation of IPSec with Paralleled Architecture

Intrusion prevention system based on multicore-processor

Research and Implementation of one Kind of IPSec -based VPN in Linux

Towards high-performance IPsec on cavium OCTEON platform

Towards Practical IPSec over Challenged Networks

Towards High-Performance Network Intrusion Prevention System on Multi-core Network Services Processor

A Design and Implementation Method of IPSec Security Chip for Power Distribution Network System Based on National Cryptographic Algorithms

Implementation of Embedded VPN Gateway Based Hardware Data Encryption

Research and Implementation of IPSec Tunneling Technology of Virtual Private Network