SECURE INTERNET PROTOCOL (IP) FRONT-END FOR VIRTUALIZED ENVIRONMENTS

摘要

An IPSec front-end may be configured to encrypt, decrypt and authenticate packets on behalf of a host on an insecure network and a peer on a secure network. For example, the IPSec front-end may receive internet protocol (IP) packets from the host and encrypt the data and format the data as an internet protocol security (IPsec) packet for transmission to the peer. When the peer responds with an IPSec packet, the IPSec front-end may decrypt the data and format the data as an IP packet. The IPSec front-end may be software executing on a Linux server.

主权项

1. A method, comprising:
receiving, by an IPSec front-end, encrypted and authenticated IPsec messages formatted in an internet protocol (IP) packet from a network peer; stripping, by the IPsec front-end, network addressing information from the received IPsec messages; decrypting and authenticating the received IPsec messages, by the IPsec front-end, to generate data; and reformatting, by the IPsec front-end, the data into a clear text packet by reattaching the previously-stripped network addressing information to the data.