A kind of traffic fast forwarding method and system based on ssl/tls protocol

Abstract

The invention belongs to the technical field of network information security, and in particular relates to a fast traffic forwarding method based on the SSL / TLS protocol. The method includes: receiving the client greeting message sent by the client, modifying it, and recording the number; forward the modified client hello message to the server; obtain the server hello message according to the modified client hello message; send the server hello message to the data collector, and record the protocol version information and Encryption suite information, and random numbers on the server side; the client, data collector, and server are mutually authenticated, and the three establish SSL / TLS protocol connections with each other; judge the current connection based on the judgment criteria that support SSL / TLS traffic fast forwarding Whether to support fast forwarding; this method greatly improves the performance of the collection system and reduces the transmission delay of the collection system.

Description

technical field [0001] The invention belongs to the technical field of network information security, in particular to a method for fast forwarding of traffic based on the SSL / TLS protocol. Background technique [0002] SSL / TLS protocol, namely Secure Socket Layer / Transport Layer Security (Secure Socket Layer / TransportLayer Security, SSL / TLS protocol), is currently the most widely used secure communication protocol, running on a reliable transport layer protocol, various Under the application layer protocol, by establishing a secure connection between the client and the server, the messages of both parties are prevented from being eavesdropped, tampered with and forged, thereby providing confidentiality, integrity, privacy and authentication for data communication on the Internet and other security services. SSL / TLS is a layered protocol, which includes: a record layer protocol at the bottom layer, a change encryption specification protocol at the upper layer, an alarm proto...

AI Technical Summary

Problems solved by technology

This scheme is easy to implement, but there are also problems: after the data collector obtains the data, it needs to decrypt the data into plaintext, and then encrypt it into ciphertext and send it to the peer end, which will obviously increase the transmission delay and reduce the TLS throughput rate

This scheme does not need to decrypt and then encrypt the ciphertext data. Therefore, it has obvious advantages over the middleman agent scheme in terms of corresponding time and throughput. However, this scheme also has problems: when the data in the ciphertext needs to be modified During auditing, for example, when operations such as protocol analysis or modification of plaintext data are required, this solution is helpless

Images