Protocol stack system structure for SSL VPN and data processing method

Abstract

The invention discloses a protocol stack system structure for SSL VPN. The protocol stack system structure comprises an equipment drive layer, a data link layer, a TCP-IP layer and a kernel application processing layer from bottom to top, wherein in the TCP-IP layer, an IP packet head and a TCP packet head of stacked data are disassembled on the same layer through five components (protocol, local ip, local port, communication opposite end ip and communication opposite end port) and a TCP-IP link state machine mechanism, then the application data processed by the TCP-IP layer is processed by the kernel application data processing layer of an embedded operating system kernel (namely kernel state) protocol stack, the processing process is performed in the kernel state of an operating system all the time, and state switching between the kernel state and a user state is not needed. The protocol stack system structure can improve the processing speed of the conventional large concurrency SSL VPN service and ensure the performance of an SSL VPN server so as to greatly promote the popularization and application of the SSL VPN.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a protocol stack system and data processing method for SSL VPN. Background technique [0002] In recent years, with the development of the Internet, VPN (Virtual Private Network, virtual private network) technology has received increasing attention from the network software research community and industry. In addition, by utilizing the ubiquitous Internet, the economy and deployment flexibility of VPN have It has reached a higher level and has increasingly become the preferred solution to replace dedicated lines in recent years. [0003] At the same time, with the increasingly mature SSL (Secure Sockets Layer, Secure Sockets Layer) VPN technology, more and more enterprises and institutions have chosen SSL VPN to protect their network communication security. However, while increasing the security of the communication network, it also brings about a decrease in the n...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the problem that the traditional TCP / IP protocol stack has a processing speed drop and a performance drop when dealing with large concurrent SSL VPN services, the technical problem to be solved by the present invention is: how to provide a protocol stack system and data protocol for SSL VPN The processing method improves the processing speed of the existing large concurrent SSL VPN business and ensures the performance of the SSL VPN server

Images