计算机工程与应用 ›› 2012, Vol. 48 ›› Issue (36): 85-89.

• 网络、通信、安全 • 上一篇    下一篇

基于负载均衡的高吞吐量IPsec VPN系统

周振斌1,2,唐剑琪3,邓  辉3,常  鹏2   

  1. 1.北京邮电大学 计算机学院,北京 100876
    2.中国科学院 信息工程研究所,北京 100093
    3.国家计算机应急响应协调中心,北京 100029
  • 出版日期:2012-12-21 发布日期:2012-12-21

High-throughput VPN system based on load balancing

ZHOU Zhenbin1,2, TANG Jianqi3, DENG Hui3, CHANG Peng2   

  1. 1.School of Computer Science, Beijing University of Posts and Telecommunications, Beijing 100876, China
    2.Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China
    3.National Computer Network Emergency Response Technical Team/Coordination Center of China, Beijing 100029, China
  • Online:2012-12-21 Published:2012-12-21

摘要: 为了解决连接网络型IPsec VPN随着用户接入增多、网络流量增大,而引起的响应时间延长、吞吐量降低的问题,提出一种高吞吐量IPsec VPN解决方案。在网关处组建服务器集群,利用特定的负载均衡策略,实现了对IPsec数据流的均匀分配。模拟实验结果表明,随着网络流量的增加,负载均衡技术可以一定程度减少IPsec VPN系统响应时间,提高系统的吞吐量。

关键词: IPsec, 负载均衡, 虚拟专用网络(VPN), 服务器集群

Abstract: In order to solve the problem of traditional IPsec VPN, whose type is Connecting Networks over the Internet, when the number of users and network traffic increase, response time lengthens and throughput decreases. This paper proposes a kind of high-throughput solution. Server farms at the gateway distribute the IPsec data equably using a specific load balancing strategy. The simulation experiments demonstrate that with the amount of network traffic increasing, load balancing technology can reduce the IPsec VPN system response time and improve the system throughput.

Key words: IPsec, load balancing, Virtual Private Network(VPN), server farms