Design and implementation of IPSec VPN system supporting multi-link load balance
Gongyi Wu · Jisuanji gongcheng yu sheji · 2006
The ability of solving globalization networking of VPN makes it gradually comes to front.IPSec provides security service for traffic at the IP layer,and it's an important approach to implement VPN.On the basis of analyses the feature of existing IPSec VPN systems,the architecture of an IPSec VPN gateway system is presented which supports multi-link load balance and is implements on Linux platform.This system uses Netfilter frame to combine IP process,IPSec process,and multi-link load balance function efficiently.The traffic to multiple links between VPN gateways reasonably is assigned,and the capability and reliability of VPN system are enhanced.