MP2P-VPN Design And Implementation Base On Mobile Network

This paper comes from intelligent data concentrator, in the project cloud server platform needs to detect and control the remote intelligent management of equipment data concentrator. So, it needs to build a safe channel between the remote server and the intelligent data concentrator. In the present, the project team use Open VPN to build this safe channel. The design and realization of Open VPN is aiming at Ethernet, so it doesn’t take Network Traffic and communication latency into consideration using mobile network. It will lead to consume large Network Traffic to maintain the VPN network and get large communication latency. Besides, the server-side of Open VPN is implemented by single process and single thread, so it can’t make full use of the current multi-core server any more, which leads to the low throughput of the server. At the same time, the certificate management of Open VPN is tedious and it hasn’t batch operation. Therefore it is not suitable for large-scale deployment.Base on the problem of Open VPN and the requirement of the intelligent data concentrator, this paper presented a design MP2P-VPN which is aiming at the mobile network. Compared with Open VPN, there are four advantages in MP2P-VPN.(1) Reduce the Network Traffic to maintain the VPN network largely: Referring to SSL access authentication process, MP2P-VPN designed an access authentication process which doesn’t need to transmit certification certificates. At the same time, MP2P-VPN designs an intelligent heartbeat to adapt to the network environment automatically.(2) Reduce the communication delay between end-nodes: Add P2 P mode to the VPN server then the end-nodes can communicate directly without the transit of the server. This can not only reduce the communication delay but also reduces the pressure of the VPN server.(3) Increase the network throughput of the VPN server largely: Design and implement a lock free multithread program to make full use of server resources and increase the network throughput of VPN.(4) Allocate mass of certification of VPN client in a short time: Referring to the certificate format of X.509 and combining with project’s requirements, MP2P-VPN designed and implemented a certificate system which can distribute mass of certifications rapidly.Finally, this paper tested MP2P-VPN system and analyzed the result. The results show that MP2P- VPN system can effectively reduce the data traffic and increase network throughput and shorten the communication delay.