Applied Research On SSL And IPSec In Web Cluster

Web cluster system has been adopted widely by all kinds of Web sites now. Many important operations have been shifted to Web servers, so it is vital to ensure the Web cluster service secure.This paper researches the security of Web cluster, analyses the architecture of Web cluster nowadays and the secure protocols and clarifies the particularity of applying these secure protocols to Web cluster. Furthermore, it puts forward the schemes for implementing SSL and IPSec in various Web clusters. Based on these ideas, a distributed L7 Web cluster, which supports SSL and can effectly protect the data transported in network along with ensuring the quality of service, is realized. In addition, by means of conformity with IP protocol, the secure policy system of IPSec is achieved in centralized L7 Web cluster based on TCP splicing so that the Web cluster can support great high reliability service.The method to do research in this article is theoretical model together with realization. In the first, it brings out models based on theoretical researth for realizing protocol. Secondly, it introduces the realization of the theoretical models in detail. As a whole, the paper falls into two parts. One part is the application and realization of SSL in Web cluster, and the other is that of IPSec. Beginning with the analysis of SSL and varied architectures of Web cluster, the first part discusses the design of schemes for deploying SSL in all kinds of Web clusters. Then it gives a realization for SSL in distributed L7 Web cluster. Accordingly, beginning with the analysis of IPSec and varied operation modes, the second part brings out the schemes for deploying IPSec in L4/3 Web cluster, which is based on dispatcher and NAT, and centralized L7 Web cluster using TCP splicing technology. Then a realization for the scheme is given. At last, it summarizes the research results and puts forward the future work.