Abstract:With the development of Internet of Things technology, the security threats faced by the industrial control field are increasing, and strengthening the security protection capabilities of intelligent systems on IoT highways is becoming increasingly important. IPSec VPN tunneling technology can achieve identity authentication and encrypted data transmission, and is an important means to achieve secure data transmission in intelligent systems on Expressway intelligent tunnel system. The commonly used IPSec VPN gateway uses a traditional Linux protocol stack-based approach for data capture, which requires multiple data copies and context switching, resulting in low efficiency of IPSec services. In addition, the commonly used IPSec VPN security gateway is implemented on the basis of the open-source IPSec framework, using internationally recognized algorithms for encryption and decryption, which poses security risks. This article is based on the IPSec protocol, and studies the high-speed network packet capture framework PFRING technology, the fusion technology of national secret algorithm and IPSec protocol. It designs and implements an IPSec VPN IoT security gateway based on national secret algorithm. After experimental verification, the IPSec VPN gateway system constructed in this article has complete functions and better performance than the common open-source IPSec frameworks OpenSwan and strongSwan, and can meet the application requirements of IoT data encryption transmission.

Implementation and Performance Evaluation of IPSec VPN Based on Netfilter

Fastpath-based VPN Gateway over Network Processor

VPN Test System Based on IPSec Network Protocol

A Multi-tunnel VPN Concurrent System for New Generation Network Based on User Space

Solution to VPN and Authentication System

IPsec Security Policy Oriented VPN Performance Evaluation Model

Design and Implementation of IPsec VPN IoT Gateway System in National Secret Algorithm

Accelerating Implementation of IKEv2 by Using Security Coprocessor

Design and Implementtationg of an IPsec VPN Gateway Base on OpenWRT

Hybrid-mode IPv6 IPSec-VPN Implementation Toward Linux Netfilter Scheme

Implementation of IPSec IKE

A Distributed Object-Based IPSec Multi-Tunnels Concurrent Architecture

An IPSec Accelerator Design for a 10gbps In-Line Security Network Processor

Performance Evaluation of netfilter: A Study on the Performance Loss When Using netfilter as a Firewall

Towards high-performance IPsec on cavium OCTEON platform

A Gbps IPSec SSL Security Processor Design and Implementation in an FPGA Prototyping Platform.

Analysis of IPSec Implementation on Dynamic Multipoint VPN Protocol Using Routing Border Gateway Protocol

Research and Implementation of High-Speed Packet Processing in Gigabit Network IPS

A Design and Implementation Method of IPSec Security Chip for Power Distribution Network System Based on National Cryptographic Algorithms

VPN Implementation Based on IPSec in Linux

Design and implementation of security gateway prototype system based on protocol translation