Abstract: In order to solve the problem of traditional IPsec VPN, whose type is Connecting Networks over the Internet, when the number of users and network traffic increase, response time lengthens and throughput decreases. This paper proposes a kind of high-throughput solution. Server farms at the gateway distribute the IPsec data equably using a specific load balancing strategy. The simulation experiments demonstrate that with the amount of network traffic increasing, load balancing technology can reduce the IPsec VPN system response time and improve the system throughput.

Key words: IPsec, load balancing, Virtual Private Network（VPN）, server farms

摘要： 为了解决连接网络型IPsec VPN随着用户接入增多、网络流量增大，而引起的响应时间延长、吞吐量降低的问题，提出一种高吞吐量IPsec VPN解决方案。在网关处组建服务器集群，利用特定的负载均衡策略，实现了对IPsec数据流的均匀分配。模拟实验结果表明，随着网络流量的增加，负载均衡技术可以一定程度减少IPsec VPN系统响应时间，提高系统的吞吐量。

关键词: IPsec, 负载均衡, 虚拟专用网络（VPN）, 服务器集群