The Design and Realization of IPSec Based on Linux for IPv6

摘要

IPSec is IP security protocol made by IETF designed for the next generation network, and is the mandatory part of IPv6 protocol stack. In this paper, the IPSec protocol and the Netfilter mechanism of Linux are introduced briefly. Then a new design idea and system design scheme is presented in detail, the final realization of IPSec protocol based on the Netfilter mechanism shows this scheme properly , efficiently and stability, which sets up the basis for the development of security route, VPN, next generation network.