节点文献

Implementation and Performance Evaluation of IPSec VPN Based on Netfilter

  • 推荐 CAJ下载
  • PDF下载
  • 不支持迅雷等下载工具，请取消加速工具后下载。

【Author】 ZHAO Da-yuan, JIANG Yi-xin, LIN Chuang. LI Yan-xiDepartment of Science and Technology. Tsinghua University, Beijing 100084,China

【摘要】 <正> We mainly explore two problems when combining IPSec module into TCP/IP stack by porting the famous IPSec software (FreeS/WAN ) into a security gateway. One is how to implement the IPSec module based on Netfilter in Linux 2. 4. x kernel. The other problem is the performance evaluation. We test the throughput of our security gateway before and after applying IPSec with different encryption/decryption algorithms, including the software-based and hardware-based method. With these testing data, we analyze further system performance bottleneck. In the end. we also infer the quantitative relation between the system throughput and the speed of encryption/decryption algorithm and propose some valuable conclusions for improving performance.

【Abstract】 We mainly explore two problems when combining IPSec module into TCP/IP stack by porting the famous IPSec software (FreeS/WAN ) into a security gateway. One is how to implement the IPSec module based on Netfilter in Linux 2. 4. x kernel. The other problem is the performance evaluation. We test the throughput of our security gateway before and after applying IPSec with different encryption/decryption algorithms, including the software-based and hardware-based method. With these testing data, we analyze further system performance bottleneck. In the end. we also infer the quantitative relation between the system throughput and the speed of encryption/decryption algorithm and propose some valuable conclusions for improving performance.

【Key words】 IPSec； virtual private network； netfilter；
【基金】 Supported by the National Natural Science Foundation of China (90104002.. 60173012,60218003);Projects of Development Plan of the State High Technology Research (2001AA112080). Intel IXA University Research Plan(9077)
  • 【会议录名称】 Proceedings of the 1st Chinese Conference on Trusted Computing and Information Security
  • 【会议名称】The 1st Chinese Conference on Trusted Computing and Information Security
  • 【会议时间】2004-10
  • 【会议地点】中国武汉
  • 【分类号】TP393.08
  • 【主办单位】PLA Cipher Management Committee Office、Fault-Tolerant Computing Committee of China Computer Federation
打印本页
节点文献中：