linux内核实现ipsec,基于IPv6的IPSec原理分析和在Linux内核中的实现

The Analysis of IPsec and It's Implement in Linux Kernel Based on IPv6

Sun Shanpeng

1

孙善鹏(1987-)，男，硕士研究生，主要研究方向：网络安全

1、Computer School, Beijing University of Posts and Telecommunications, Beijing 100876

Abstract：IPsec(Internet Protocol Security) is a protocol suite for securing IP communications by authenticating and encrypting each IP packet of a communication session, it is mandatory for the standards-compliant implementations of IPv6 to provide necessary data stream authentication and encryption. The article first describes four key parts of IPsec,AH (Authentication Header),ESP (Encapsulating Security Payload),SA (Security Association),IKE (Internet Key Exchange). Then the article focuses on detailed analysis of the implementation of IPsec based on IPv6 in the Linux kernel, gives the frame structure and function invocations of XFRM which is the management module of SAD, SPD in kernel. Based on XFRM, the article depicts the use of IPv6 IPsec XFRM framework of incoming and outgoing packets processing flow . Taking into account the rapid development of mobile Internet , the article Finally gives the future expansion of IPsec in the mobile IP area.