论文部分内容阅读
由于代理服务器价格昂贵、投资巨大、部署复杂,不太适宜中小规模企业用户。本文介绍了SPI封包截获的原理和实现方法,设计了一套Windows下采用SPI封包截获技术实现轻量级SSLVPN系统,以OpenSSL为基础,建立SSL VPN通道,使用SPI包截获技术实现系统快速部署和用户透明连接,并对标准SSL协议进行裁剪和优化,在保证安全的基础上提高了通信效率。
As the proxy server is expensive, huge investment, complex deployment, not suitable for small and medium-sized enterprise users. This paper introduces the principle and implementation method of SPI packet capture, designs a set of lightweight SSLVPN system using SPI packet capture technology under Windows, establishes SSL VPN channel based on OpenSSL, uses SPI packet interception technology to achieve rapid system deployment and User transparent connection, and the standard SSL protocol tailoring and optimization, to ensure safety based on improved communication efficiency.