HTTP重定向在网关认证中的应用

网关认证主要用于认证从本地网络访问外部网络的用户,这要求所有的网络访问请求必须穿过网关系统.为了改善网关认证过程的友好性,在网关系统中增加了特别针对HTTP访问请求的重定向模块--ReHTTP,使得未经认证的用户在访问Web页面的时候能够自动转向到网关认证页面. ReHTTP重定向功能采用了模拟TCP连接建立和加速TCP校验和算法,并通过硬件中断的底层方式实现,其性能要比基于操作系统协议栈的实现方式提高至少1个数量级.

HTTP redirection applied to gateway authentication

Gateway authentication is mainly used to authenticate users who get access to external network from a local network.In this case,all of network access requests must go through a gateway system.In order to improve the user-friendliness of gateway authentication process,the gateway system was extended with the additional redirection module-ReHTTP especially for HTTP access request.It can automatically turn to the gateway authentication page once the unauthenticated users browse web page.ReHTTP introduced a simulating TCP connection establishment and accelerated TCP checksum algorithms,and was implemented within hardware interrupt routine.Compared with the implementation based on the network protocol stack of operating system,the performance of ReHTTP is enhanced at least one order of magnitude.