| A Network-Based VPN Architecture Using Virtual Routing |
| |
| 作者姓名： | KONGTao |
| |
| 作者单位： | 709thResearchInstituteofChinaShipbuildingEngineeringSociety,Wuhan430074,Hubei,China |
| |
| 基金项目： | SupportedbytheNationalNaturalScienceFoundationofChina(90104029) |
| |
| 摘 要： | A network based Virtual Private Network (VPN) architecture by using fundamental routing mechanism is proposed. This network is a virtual overlay network based on the relay of IP-in-IP tunneling of virtual routing modules. The packet format employs the encapsulation of IPSec ESP (Encapsulating Security Payload), an impact path code and an extended DS (Differentiated Services) code to support multi-path routing and QoS. Comparing with other models of VPN, this network system can be deployed in the current network with little investment, and it is easy to implement. The simulation result shows its performance is better than the traditional VPN system of black box mode.
|
| 关 键 词： | 虚拟路由 虚拟专用网络 IP地址 IPSec ESP 计算机网络安全 |
| 收稿时间： | 25 May 2004 |
A network-based VPN architecture using virtual routing |
| |
| KONGTao.A Network-Based VPN Architecture Using Virtual Routing[J].Wuhan University Journal of Natural Sciences,2005,10(1):161-164. |
| |
| Authors: | Zhang Bao-liang Hu Han-ping Wu Xiao-gang Kong Tao |
| |
| Institution: | (1) Laboratory of Image Information and Intelligent Control, State Education Ministry Key, 430074, Hubei Wuhan, China;(2) Institute of Pattern Recognition and Artificial Intelligonce, Huazhong University of Science and Technology, 430074, Hubei Wuhan, China;(3) 709th Research Institute of China Shipbuilding Engineering Society, 430074, Hubei Wuhan, China |
| |
| Abstract: | A network-based Virtual Private Network (VPN) architecture by using fundamental routing mechanism is proposed. This network is a virtual overlay network based on the relay of IP-in-IP tunneling of virtual routing modules. The packet format employs the encapsulation of IPSec ESP(Encapsulating Security Payload), an impact path code and an extended DS(Differentiated Services) code to support multi-path routing and QoS. Comparing with other models of VPN, this network system can be deployed in the current network with little investment, and it is easy to implement. The simulation result shows its performance is better than the traditional VPN system of black box mode. |
| |
| Keywords: | virtual routing network-based VPN proactive defense |
| 本文献已被 CNKI 维普 万方数据 SpringerLink 等数据库收录！ |
