Research On Key Technologies Of High Performance IPSec VPN Gateway Supporting IPv6

With the rapid progress of network technology,more and more applications have enriched people's lives.But at the same time of data transmission,the user's privacy data security is threatened.These threats may be that the device is invaded,eavesdropped or attacked by virus,which leads to the loss or eavesdropping of user data in the process of transmission.Through a variety of security technologies for data processing,IPSec VPN technology provides a high security tunnel technology.However,with the continuous improvement of service requirements,the performance and reliability requirements of IPSec VPN devices are also higher and higher.Research on fast forwarding technology and cluster load balancing technology of IPSec VPN gateway supporting IPv6 is the key research problem of high performance gateway.First of all,the existing IPSec VPN solutions are not optimal in network throughput and delay on high-speed network links,and need a lot of IP address lookup in IPSec VPN gateway.Therefore,a multi-level classified address lookup algorithm(MLC)is proposed,which classifies according to prefix length,and a large number of prefixes with the same prefix length are classified into higher level.Each level has corresponding data structure and dynamic mapping table operation.Experimental results show that the proposed algorithm is faster than other common search algorithms in search and update speed,takes up less memory than simple structure(such as prefix tree and priority tree).The user mode IPSec VPN gateway using MLC algorithm for address translation has higher throughput and lower latency.Secondly,aiming at the problem of load balancing in IPSec VPN cluster environment,if the load is not balanced,it will directly affect the processing performance of IPSec VPN gateway.This paper presents a load balancing algorithm based on dynamic time step feedback.In the traditional dynamic feedback load balancing algorithm,the dynamic adjustment time step and Ike negotiation overhead are considered.The specific scheme of this method is elaborated from the aspects of load attribute determination,load calculation,feedback time adjustment,etc.Compared with the static time step feedback load balancing algorithm and without considering Ike negotiation overhead,the experimental results show that the dynamic time step feedback load balancing algorithm can better improve the load balancing performance of IPSec VPN cluster and effectively improve the processing efficiency.