Research On Key Technologies Of Parallel Architecture Of VPN Based On IPSec

The speed of transmitting data on network has been greatly increased with the development of network technology. As an equipment to ensure secure transmission on network, VPN must be high-powered, available and scalable.The article brings forward a high-powered parallel architecture of VPN on IPSec which is called IPSec VPN. PVPN adopts the pipelining parallel algorithm to achieve multi-cards parallel management, meanwhile largely improves the capability of VPN equipments on the basis of the hardware platform of CompactPCI.Pipeline parallel algorithm separates CPU and encrypt card into two functional parts. Overlapping and pipelining the two components can carry out parallel operations on time. At the same time, setting several encrypt components and decrypt components can enhance the speed of wholesale management to achieve parallel operations on space. The article analyzes the performance of pipelining parallel algorithm by queueing theory, then emulates the algorithm, tests and analyzes the performance the algorithm.Load balancing technology is the key technology of the cluster system. Pointed to the characteristics of mechanism of IPSec VPN, the article designs a load balancing measure applied to PVPN. The load balancing design can hand out packets evenly and efficiently, send IPSec fragment packets attributed to the same packets to the identical CPU processing board to recompose them successfully. The experiment verifies the implementation. PVPN is a cluster system and the probability of it's single point is higher than the traditional IPSec VPN. The article puts up profound research on high-powered PVPN.PVPN use cluster backup mode to prevent the fault of the CPU managing board and hotbak mode to avoid the fault of switching board. All these means safeguard the high availability of the whole system.At the end of the article, a large number of experiments emulate PVPN and test the performance of the system. The results of the tests indicate the resolution.