Communication method and related device of a virtual private network

Abstract

The invention relates to the field of cloud transmission, and provides a virtual private network communication method and related devices. A communication method for a virtual private network includes: when a first distributed gateway establishes a communication connection with a client, acquiring a security association established between the first distributed gateway and the client; when the first distributed gateway fails, other Select the second distributed gateway that establishes a communication connection with the client in the distributed gateway; send the first communication connection establishment message to the second distributed gateway, wherein the first communication connection establishment message carries a security association, and the first communication connection establishment message carries a security association. The message is used to instruct the second distributed gateway to establish a communication connection with the client through the security association. The technical solution of the embodiment of the present invention realizes efficient communication in the virtual private network.

Description

technical field [0001] The present invention relates to the field of cloud transmission, in particular to a communication method and a related device of a virtual private network. Background technique [0002] The function of a virtual private network is to establish a private network on a public network, perform encrypted communication, and realize remote access. It is widely used in enterprise networks. At present, the virtual private network solution used by cloud computing vendors is an active-standby mode. When the main link transmits data, the backup link does not participate. When the main link fails, the traffic switches back to the backup link. [0003] At present, in the virtual private network, a data communication tunnel is encapsulated on the public network by using encryption technology, and secure communication is provided between the client and the distributed gateway through the IPSec protocol. The agreement on communication elements, such as the protocol u...

AI Technical Summary

Problems solved by technology

[0003] At present, in the virtual private network, a data communication tunnel is encapsulated on the public network by using encryption technology, and secure communication is provided between the client and the distributed gateway through the IPSec protocol. The agreement on communication elements, such as the protocol used, the encapsulation mode of the protocol, the cryptographic algorithm, the shared key for protecting data in a specific data flow, and the life cycle of the key, etc. There are two ways, one is that the main link and the backup link do not synchronize the security association, then when the distributed gateway of the main link goes down, the established security association will be lost, and the client and other distributed gateways need to be re-established Only security associations can be used for secure communication. The other is the synchronization of the main link and the backup link. Then, it is necessary to synchronize data between all distributed gateways at regular intervals. Neither of these two methods can achieve high efficiency in virtual private networks. Communication

Images