Abstract:In the existing IPSec architecture, in which tunnel is built in kernel, the number of concurrent tunnels is restricted by IP address configured on the machine and user can not control the process of establishing tunnel. This brings inconvenience when we use personal computer to measure the performance parameters of VPN Gateway (e.g. the maximum number of concurrent tunnels and the maximum rate of the new tunnels built). In order to solve this problem, this paper presents a novel IPSec multi-tunnels concurrent architecture which uses distributed objects to build tunnels in user space. The architecture privodes one Console which are used to control all AgentNodes and multiple AgentNodes which are used to build tunnels. In AgentNode, the negotiation processing of tunnels, the IPSec processing of packets and the protocol processing of TCP/IP are all completed in user space by objects. Meanwhile, AgentNode uses virtual IP address instead of local IP address to negotiate tunnel and the number of concurrent tunnels will be unlimited (only limited by memory). Moreover, based on distributed architecture, the number of AgentNode can be arbitrarily extended. Therefore, the system has a great deal of flexibility on the number of concurrent tunnels and the rate of tunnel establishment, which helps to accurately measure the performance parameters of VPN Gateway.

Research on Tunneling Techniques Supporting VPN

A Multi-tunnel VPN Concurrent System for New Generation Network Based on User Space

Solution to VPN and Authentication System

Research of Tunnel Technique in Virtual Private Net

Virtual Private Networks Constructed by the Combination of IPSec & L2TP

Research of VPN Technology

A Distributed Object-Based IPSec Multi-Tunnels Concurrent Architecture

Research and Implementation of IPSec Tunneling Technology of Virtual Private Network

The research of VPN security gateway based on IPSec

NEW Research about VPN Communication Based on Protocol of IPSec over Http

Research of Strategies to Enhance VPN's Adaptability

Research and Implementation of one Kind of IPSec -based VPN in Linux

Design and Implementation of Improved SSL VPN System Based on L2 Switching Technology

Session-Based Tunnel Scheduling Model in Multi-link Aggregate IPSec VPN

The Research of SSL VPN-Based Access Mechanism

Research on the Construction Method for Secure and Efficient SSL VPN

VPN Scheme of User Space

A VPN Solution Based on IPSec and MPLS

Application of IPSec Technique to VPN

STUDY ON SEAMLESS AND MULTILEVEL VPN

Comprehensive Experiment Design of VPN based on Virtual Machines