去中心化的自组织VPNs设计

摘要

VPNs is currently the most commonly-used connection mode for secure communication, and however, it requires profes￣sional deployment, thus a complex manual configuration is needed. Especially when network structure varies, this manual configuration is particularly complicated, and therefore, could not meet the demand of mobile nodes. In order to solve the usability problems of VPNs in practical application, a solution which is independent of central server, and support dynamic node creation and deletion is in demand. Based on virtual gateway, topology information exchange method of similar routing flooding mechanism is introduced in the proposed scheme to achieve a decentralized self-organizing VPNs design. This scheme supports node dynamic change, transparent to terminal users, and simplifies manual configuration complexity in a certain extent.%VPNs是目前最为常用的安全通信连接方式，但其部署要求专业，通常需要复杂的手动配置。尤其发生网络结构变更的时候，这种手动配置异常繁琐，不能适应移动节点的动态组网需求。为解决VPNs实际应用的易用性问题，需要设计一种不依靠中心服务器，支持节点动态创建、删改的解决方案。本文提出的方案以虚拟网关为基础，引入类似路由泛洪机制的拓扑信息交换方法，实现了一种去中心化的自组织VPNs设计。该方案支持节点动态改变，对终端用户透明，一定程度上简化了人工配置的复杂性。