Implementation and evaluation of information socket servers with authentication, encryption, and load-balancing

在2002年实现的原型系统的基础上，我们计划（1）实现多种认证方法，（2）实现加密机制，（3）通过负载均衡或集群功能增强加密功能，（4）评估原型服务器。对于（1）和（2），我们实现了使用服务器的一个网卡同时用于PPPoE和PPTP的机制，这使得用户能够选择PPPoE和PPTP。对于（2），我们实现了MPPE。对于（3）的负载均衡，我们实现了一个函数，将服务器-客户端会话从一个服务器移动到另一个服务器。我们还在服务器内核中添加了一个API，用于获取MPPE的初始向量等内部状态，并将其安装在集群服务器上。在2002年，我们发现了两个问题：学生在自己的笔记本电脑上安装和设置PPPoE时遇到了麻烦，我们不得不分发PPPoE模块并帮助学生安装。由于我们实现了（1）、（2）和（3），学生可以选择已经安装在Windows98/Me/2000/XP中的PPTP。需要更高吞吐量的学生可以像以前一样选择PPPoE。总之，虽然信息套接字子系统可以通过部署昂贵的网络设备交换机来构建，但我们展示了使用廉价的交换机和PC机来构建信息套接字子系统的可能性和实用性。

Based on the prototype system implemented in 2002, we had planned (1)to implement several authentication method, (2)to implement encryption mechanism, (3)to enhance encryption function with load balancing or clustering function, and (4)to evaluate the prototype server.As for (1) and (2), we implemented mechanism to use one network card of the server both for PPPoE and PPTP simultaneously, which enabled users to select PPPoE and PPTP. As for (2), we implemented MPPE.As for the load balancing of (3), we implemented a function to move a server-client session from one server to another. We also added an API to the server kernel for obtaining internal state like initial vectors of MPPE, then installed it on the clustering server.The experimental service was continued in a COOP cafeteria this year. In2002, we had found two problems ; that students had trouble in installing and setting PPPoE on their own note PCs, and that we had nuisance having to distribute PPPoE modules and to help students to install. Since we implemented (1),(2), and (3), students can choose PPTP which is already installed in Windows98/Me/2000/XP. Students who do require higher throughput can choose PPPoE as before. Also, MPPE is now available for users who need 'secure communication.In conclusion, though information socket subsystem can be constructed by deploying costly network appliance switches, we showed possibility and practical usefulness of the subsystem using cheap switches and PCs.