Research On Implements Of IPSec Under Linux And Improved Design Of The Cooperation Between IPSec And Firewall

IPSec is a suite of standard protocol that provides security services for Internet communications,it provides strong ability of mutual operation,high quality and secure services based cryptology for ipv4 or ipv6. Linux,as a famous open source sofeware.gives our country's sofeware industry a great chance, research on Linux and its applications is very important.This paper studies the implement of IPSec under Linux and its cooperation with firewalls. The main works as follows.The paper researchs IPSec'current status and its development,deeply analyzes FreeS/WAN'resource codes,a son project named EPSec security gate under Linux of Kaiyuan Software and its implements of each small part, the secure operations of protocols of IPSec protocol set and the process to in/ out datagrams and the implements of IKE protocol,SPD and SADB.Finds out the programming methods of network protocols. otherwise, about the problem of cooperation of IPSec and firewall, we privides a technology of Double_Layer IPSec.that is doing IPSec processes on protocol head and data in IP datagram separately ,so we can solve the problem above.The advantages of our scheme are the negotiation of Composite SA is variable between hosts and firewalls, changes of the format of IP datagram is very small and the transportation of imformation is efficient.