多层IPSec协议优化研究

目前有许多对传输层和应用层协议进行性能增强的技术,但由于网络层安全协议对其负载实施保护后,其相关信息就不便获取。已有的多层IPSec协议在提供网络层安全的同时还可以使用这些性能增强技术,缺陷是效率降低和结构复杂化。分析了多层IPSec协议自身存在的一些问题并且提出了优化的方法,通过实验证明了其优化效果明显。

Researching on Optimization of Multilayer IP Security Protocol

A number of techniques have recently been developed which aim to increase the performance of transport and application layer protocols.However,many of these techniques become useless when a network layer security protocol is used,due to the network payload being protected from observation and/or manipulation.The Multilayer IP Security(ML-IPsec) protocol has been proposed as a way to allow performance enhancing technologies to be used whilst provide network layer security.ML-IPsec has a number of problems that reduce its effectiveness and cause configuration complexities.This paper identifies these problems and proposes modifications to ML-IPsec,ultimately proves its effectiveness of the optimization by experiment.