Message transmission method, device and network system

Abstract

The embodiment of the invention provides a message transmission method, a device and a network system, wherein the message transmission method comprises the following steps of: receiving an encrypted message transmitted by a client through a VPN (Virtual Private Network) tunnel, decrypting the encrypted message and transmitting the decrypted message to a corresponding intranet server, wherein the encrypted message is transmitted by encrypting the message to be transmitted when the client determines that a control strategy comprises an IP address and a port number which are the same with the IP address and the port number of a destination of the message to be transmitted according to the pre-set control strategy; the control strategy comprises the information of the IP address and the port number of the intranet server which can carry out message interaction with a secure socket layer virtual private network (SSLVPN) server; and the source IP address of the decrypted message is an extranet IP address. The message between an intranet and an extranet can be transferred through a secure socket layer virtual private network (SSLVPN) under the condition of unchanging the topology structure of the intranet by utilizing the technical scheme provided by the embodiment of the invention.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a message transmission method, device and network system. Background technique [0002] In the Secure Socket Layer Protocol (Security Socket Layer Protocol, SSL) virtual private network (Virtual Private Network, VPN) network, after the client logs in to the SSL VPN, it can access the intranet through the network extension function. Therefore, for some public service packets , the client can directly transmit to the intranet. For some protected service packets, the client needs to transmit the protected service packets to the intranet through SSL VPN. [0003] The network topology provided by the prior art is as follows: figure 1 As shown, after the client logs in to the SSL VPN, the client software does not add a tunnel IP address to the packets that do not need to be transmitted through the SSL VPN (ie, public service packets), and directly sends them to the intr...

AI Technical Summary

Problems solved by technology

In the prior art, since it is necessary to delineate a private network segment on the internal network for communication with the external network through SSL VPN, the topology of the internal network will change. At the same time, since the internal network is divided into private networks, the management strategy of the internal network etc. will change

Especially when multiple clients need to access the intranet through SSL VPN, a large number of virtual IP addresses need to be allocated, and multiple private networks need to be divided on the intranet, which will change the topology of the intranet

Images