Research On The Mapping Mechanism Of Web Resources In SSL VPN

With the development and popularization of Web applications, SSL (Secure Socket Layer) VPN (Virtual Private Networks) technology has been one of the hot topics in the area of VPN. From a practical engineering view of point, this paper presents an overall framework for our design of SSL VPN Gateway, with emphasis on AAA (Authentication, Authorization, and Account) and Web resources mapping mechanisms in our design.At the beginning, this paper gives a brief introduction to the current application and the intriguing prospect of VPN technology, and a general method of VPN implementation as well, which is adopting some widely-used tunneling protocols; it then puts some more emphasis on the introduction to the SSL/TLS tunneling protocols used by SSL VPN, some brief descriptions of which are also given afterwards. Further, this paper gives a detailed explanation about the overall framework of our design of SSL VPN Gateway, with a following heavy discussion on both Web resources mapping, including an introduction to the mapping, paths changing mechanisms, and the internal cookie management, and AAA adopted in our design, which mainly involves extension of methods for authentication, authorization model and the management of users'authorization information, logging and accounting mechanisms as well.