关键词: 通信技术, 卫星IP网络, CZMLIPSec, 性能增强网关, HTTP加速代理

Abstract:

The confliction between satellite IP networks performance enhanced technology and IPSec was analyzed, and multilayer IP security protocol with changeable zone was proposed. The scheme can converts traditional static zone mapping to changeable dynamic mapping and corresponding composite security relationship was constructed, so that it enables the licensed intermediate nodes address not only TCP header but also object links in terms of HTML at uplayer. Hence, the goals of TCP performance enhancement and HTTP transmission acceleration were achieved while end to end security was held. The test for CZMLIPSec shows that bandwidth overhead and processing time delay are not unacceptable. And CZMLIPSec can provide both endtoend security and performance enhancement for satellite IP networks.

Key words: communication technology, satellite IP networks, CZMLIPSec, performance enhanced proxy, HTTP accelerator