Internet密钥交换(IKE)及其在Linux系统中的实现

摘要

This paper analyses the relationship between IKE and IPSec, and introduces the negotiation process of IKE for SA; then brings forward an IKE implementation in Linux, and analyses the communication method between processes and the kernel emphatically.%介绍了Internet 密钥交换协议(Internet Key Exchange,IKE)在IPSEC中的地位和作用，分析了IKE协商安全关联(SA)的过程；提出了IKE在Linux系统中的实现方案，着重分析了进程与内核之间进行通信所采用的消息队列的实现方法.