VPN System Based on Virtual Ethernet
Yanzhou Zhou · Jisuanji gongcheng · 2008
This paper studies the virtual Ethernet technology, and develops a VPN system. The system transports packets between kernel space and user space, and simulates a virtual Ethernet environment by constructing virtual NIC in kernel. It realizes the functions of identity authentication based on digital certificate system, traffic encryption, integrality validating and resistance to replay attack by constructing secure tunnel in user space. Test results demonstrate that, besides the primary function of VPN, the system has good performance on passing through net devices and can support multiple net protocols, etc.