Design And Implementation Of Load Balancer For SSL VPN

As the speed development of Internet, globalization is paid more and more attention, SSL VPN acquires more and more adhibition under globalization trend. The superior of SSL VPN is that it has no client-side and easy to deploy in the internet. SSL VPN not only has a high expansibility and reliability but also has low costs. SSL VPN use SSL protocol to encrypt communication exchange in the Internet. It exchanges data between application layer and TCP/IP layer. All these are good for the data encryption and the authentication of client-side and server without changing the structure of Internet.We research the SSL VPN carefully and deeply in the greater market competition and globalization environment. First, we learn the principle of SSL VPN. Focus deeply on SSL protocol, encryption principle, key agreement and identity authentication. Then design a system of SSL VPN.The requirement of client is growing. The quality of SSL VPN which client needs is growing, too. So if the SSL VPN wants to have a site in the market, it must have a good quality in performance of SSL VPN system. This is more important for client. We research the performance of SSL VPN system in the paper. We narrate the weakness of the SSL VPN performance at present. We design a load balancing arithmetic for the bottleneck of performance to enhance performance of the whole SSL VPN system.In practice, we design load balancing proxy server to do load balance in the SSL VPN system. According to different needs of SSL VPN server. SSL VPN load balancing proxy server will accomplish dynamic load balance, which distributes client's request to low balancing server to lighten the load balance of SSL VPN server and enhance the output of the whole system. We design function interface to communicate between load balancing proxy server and SSL VPN servers. When SSL VPN servers collect performance information timely and transfer to load balancing proxy server which analyzes, compares and selects the best suitable SSL VPN proxy and transmits packets to it. On client, improved SSL VPN affords a method of certificate to ensure the validity of client and clears local track information to guarantee the security of client.