Design and Implementation of an Enhanced VPN Isolation Gateway

An enhanced VPN gateway is designed employing the architecture of dual ARM hosts + FPGA isolator in this paper. The ARM hosts routed IP packets. The FPGA isolator ferried packets between inner and outer networks of two ARM hosts, authenticated the input packets and signed the output packets, thus the non-confidential packets was isolated. The private protocol is used to build the mutual authentication between two VPN gateways, so the security performance of the system is improved by setting up ESP-VPN connection between VPN Gateway and boundary server, the system can transfer sensible data securely over non-confidential network areas.