Design Based On Ip And Vpn Security Gateway

Since the Internet is not secure, many organizations now begin develop and deploy the Virtual Private Network technology for their secure internal communication on this global, yet insecure network. In this paper, I first briefly introduce the basics of VPN, and then concentrate on the security requirements of the VPN gateway, the critical part of VPN. In order to implement a VPN security gateway, the first thing is to choose a proper and reasonable approach. For this, I determine to employ the security in IP layer by implementing the IPSec protocol. Based on this thought, I first conceptually design the VPN security gateway. The main content of this design includes how to construct the hardware, how to organize the software, how to implement the Security Association, how to deal with the incoming IP packets and how to automatically negotiate the Security Association and keys. From this conceptual design, I implement two concrete projects. One is based on the Linux and ARM RISC chips, while the other is totally build from the board by myself. At last, I analyze and compare the performance of these two approaches, and present my prospect for future improvement.