Abstract:In the existing IPSec architecture, in which tunnel is built in kernel, the number of concurrent tunnels is restricted by IP address configured on the machine and user can not control the process of establishing tunnel. This brings inconvenience when we use personal computer to measure the performance parameters of VPN Gateway (e.g. the maximum number of concurrent tunnels and the maximum rate of the new tunnels built). In order to solve this problem, this paper presents a novel IPSec multi-tunnels concurrent architecture which uses distributed objects to build tunnels in user space. The architecture privodes one Console which are used to control all AgentNodes and multiple AgentNodes which are used to build tunnels. In AgentNode, the negotiation processing of tunnels, the IPSec processing of packets and the protocol processing of TCP/IP are all completed in user space by objects. Meanwhile, AgentNode uses virtual IP address instead of local IP address to negotiate tunnel and the number of concurrent tunnels will be unlimited (only limited by memory). Moreover, based on distributed architecture, the number of AgentNode can be arbitrarily extended. Therefore, the system has a great deal of flexibility on the number of concurrent tunnels and the rate of tunnel establishment, which helps to accurately measure the performance parameters of VPN Gateway.

Research and Implementation of IPSec Tunneling Technology of Virtual Private Network

Research and Implementation of one Kind of IPSec -based VPN in Linux

VPN Test System Based on IPSec Network Protocol

Research & Implementation of Security Communication Mechanism for Virtual Private Network

Implementation of Virtual Private Network Based on Ipsec

Solution to VPN and Authentication System

Virtual Private Networks Constructed by the Combination of IPSec & L2TP

Research of VPN Technology

Study on IPSec-based Security VPN Model

Application of IPSec Technique to VPN

The research of VPN security gateway based on IPSec

IPSec:Fundamental of Network Security and VPN

Study of Implementing IPSec under the Linux Platform

Research of Tunnel Technique in Virtual Private Net

Research on Tunneling Techniques Supporting VPN

A Distributed Object-Based IPSec Multi-Tunnels Concurrent Architecture

Realization of the VPN of Enterprise Based on IPSec

A Multi-tunnel VPN Concurrent System for New Generation Network Based on User Space

Key exchange implementation and security analysis for IPSec based virtual private network

VPN Implementation Based on IPSec in Linux

The Implementation of Virtual Private Network on Windows NT Platform