The Reasearch And Implementation Of SSL VPN On Router System

The rapid development of the Internet leads to more business to enterprise in and out of the country. The requirements for company to set up branches to enlarging their business, for manager working at home, for sellor handling out-company official business is becoming more and more fashionable and argent. At present, a lot of network device manufacturers successively bring out their sure access device, some of the products are applications about IPSec. And in the last 5 years, IPSec products took up most of the market. However, the defects of IPSec became more and more evident, the most serious one is the complexcity of the IPSec protocols as well as its configuration. And this defect leads complaint from a lot common customs. Besides, IPSec requires higher cost than that the company can accept. As the developing of the SSL technique, enterprises and common customs start to change their eagerness to SSL applications, due to its lower cost and convienience. SSL is above the Transport Layer--we often refer to TCP, common customs often easily request the resources in the company through the Web-Browser which is always embedded in our operating system.At present, the applications of SSL VPN mainly include Web Resources Mapping, Client/Server Application Proxying(Port Forwarding), File Sharing. My SSL VPN system is based on Client/Server Application Proxying, a kind of SSL VPN application relying on client. In the first chapter, we briefly refer to the origin of SSL VPN project. In second chapter, we talk about the research background of the project, and the market foreground of the SSL VPN applications, and then talk about advantages and disadvantages about the VPN resolvment as well as sortment of VPN and related application model. In third chapter, we explain the designing requirements of SSL VPN project and several aspacts of technique backgrounds to implement the project. In chapter three, we detailedly describe the designing process and ideas of the project as well as functions which are supported in our system. In chapter five, we clearly describe the process of the system implementation and its key technologies. We divide the implementation into two main modules, SSL protocol and VPN protocol. We talk about the mechanism of multithreading and its implementation process. At last, we refer to the testing of the system and some of the following jobs to improve our system.