Transcription

1

2 VPN

3 VPN

4 (VPN) VPN VPN VPN VPN VPN VPN VPN VPN VPN VPN 2 VPN 3 VPN L2 L2 L3 VPN VPN IP VPN L2 VPN SoftEther VPN Server SoftEther VPN Server L2TP/IPsec SSTP OpenVPN (L2 L3) L2TPv3/IPsec EtherIP/IPsec SoftEther VPN Protocol (SEVP) 1 VPN VPN 7% VPN VPN VPN Gate VPN IP IP IP VPN Gate i

5 i SoftEther VPN Server VPN Gate VPN Click OpenVPN poptop openl2tpd OpenWRT DD-WRT VyOS DeleGate OS Visual Studio Eclipse VM Docker Tor BitTorrent Web MIXes ii

6 2.3.4 Great Firewall Infranet SafeWeb Telex VPN GroupVPN N2N VPN SoftEther VPN VPN VPN VPN VPN SoftEther VPN Server VPN SoftEther VPN Server ARP DHCP L ARP DHCP VPN SoftEther VPN Server VPN L2TP iii

7 OpenVPN IPsec PPP Windows GUI CUI RPC SoftEther VPN Client SoftEther VPN Server VPN VPN Gate Server HUB iv

8 ISP VPN VPN VPN VPN Gate VPN Gate VPN Gate Server VPN Gate Server (OS) VPN OpenVPN VPN Gate Client VPN Gate Great Firewall DNS IP TCP RST IP IP IP VPN Gate Server VPN Gate HTTP URL VPN Gate Server NAT VPN Gate Server v

9 4.4.3 VPN VPN VPN Gate Client VPN Gate Client Great Firewall : VPN Gate : GFW VPN Gate : GFW VPN : GFW 1 IP : GFW : IP : GFW VPN Gate : GFW IP : : Tor LAN GFW VPN Gate vi

10 4.6.2 VPN VPN VPN SoftEther VPN VPN VPN VPN Gate vii

11 (Virtual Private Network: VPN) VPN VPN VPN VPN VPN VPN VPN VPN VPN VPN 2 1 VPN Local Area Network (LAN) OS Windows Mac OS X Linux OS ios Android OS VPN VPN VPN VPN OS VPN VPN VPN Windows Layer 2 Tunneling Protocol (L2TP)/IPsec Secure Socket Tunneling Protocol (SSTP) 1

12 SoftEther VPN Mac OS X L2TP/IPsec Linux VPN CentOS OpenVPN L2TP/IPsec 2 VPN VPN LAN 1 LAN LAN LAN 1 LAN VPN VPN VPN OS VPN Windows Linux VPN OpenVPN Cisco VPN OpenVPN Cisco VPN L2TPv3 over IPsec EtherIP over IPsec NEC VPN L2TPv3 over IPsec VPN 1 IP VPN VPN VPN VPN 1 VPN 2

13 VPN 1 VPN VPN IP VPN VPN VPN VPN VPN OS OS VPN 1 (Virtual Machine: VM) VM VPN VPN OS OS VPN OS 1.1 VPN VPN VPN 1.1 L2TP OpenVPN (L3) EtherIP 3 VPN VPN VPN VPN VPN 1.1 L2TP OpenVPN L3 VPN VPN LAN IP OS IP EtherIP L2 VPN 3

14 1.1: VPN VPN LAN MAC OS VPN VPN OS VPN VPN OS VPN Web 1.1 VPN IP Web TCP/IP OS VPN IP IP IP 4

15 LAN Web LAN VPN Web L2TP/IPsec VPN PPP IPsec VPN VPN VPN VPN VPN IP 1 PC VPN VPN VPN VPN VPN VPN VPN VPN IP Web SNS IP 1.2 VPN VPN VPN VPN OS 1 VPN 1.2 VPN VPN 1 VPN 5

16 1.2: VPN VPN 1 VPN VPN VPN 2 VPN L3 VPN 3 2 VPN OS VPN 6

17 IP 1 VPN VPN 1 VPN Web TCP/IP VPN OS IP Web VPN VPN OS VPN OS VPN VPN VPN VPN VPN VPN PC VPN VPN 2 VPN 1. VPN SoftEther VPN Server 2. VPN VPN Gate VPN VPN VPN VPN 2 VPN 3 VPN 7

18 L2 VPN VPN VPN L2 L2 VPN VPN IP 1.3 SoftEther VPN Server VPN VPN VPN VPN 2 (Ethernet ) 3 (IP ) 2 2 (Ethernet ) 2 3 (IP ) VPN 2 VPN 3 VPN 2 VPN 2 VPN VPN 2 3 VPN 2 3 L2 L2 3 VPN VPN VPN 2 Etheret 3 VPN L2 2 8

19 VPN SoftEther VPN Server L2 3 VPN 2 VPN 2 SoftEther VPN Server VPN VPN L2 L2 VPN 2 VPN 2 Ethernet VPN SoftEther VPN Server VPN VPN 7% OS SoftEther VPN Server SoftEther VPN Server ,009,000 VPN VPN 1.4 VPN Gate VPN PC VPN IP VPN VPN IP IP IP VPN IP IP ( DNS ) IP IP 9

20 IP IP IP IP IP VPN IP IP IP VPN IP IP VPN ( ) IP ( ) VPN IP IP VPN IP SoftEther VPN Server VPN Gate Great Firewall (GFW) of China IP GFW 81% VPN 25% ,000 IP 234,000 IP 6.7 Gbps VPN 3 VPN 10

21 VPN SoftEther VPN Server VPN 4 VPN VPN Gate 5 11

22 VPN Click Click [73] Click IP Elements Graphical User Interface (GUI) IP Click Click Linux 10% [73] Click SMP Click [10] Click SMP Click 1 12

23 4 3.8 Click [56] Wireless Personal Area Network (WPAN) [30] IP Click Click Hydra Click [59] Orthogonal Frequency-Division Multiplexing (OFDM) [75] Multiple-Input and Multiple-Output (MIMO) [82] Media Access Control (MAC) [54] Hydra Click VPN Click VPN Click VPN Click CPU CPU OS OpenVPN poptop openl2tpd VPN OpenVPN VPN [26] OpenVPN OpenVPN L3 L2 OpenVPN OpenVPN L2TP/IPsec SSTP EtherIP 13

24 VPN OpenVPN VPN OpenVPN OpenVPN 1 OpenVPN L3 L2 VPN L3 L2 VPN 1 OpenVPN L3 L2 VPN VPN 2 OS L2 L3 OS OS L3 L2 2 OpenVPN 2 Poptop [35] openl2tpd [44] VPN Poptop Point-to-Point Tunneling Protocol (PPTP) openl2tpd L2TP VPN VPN VPN VPN VPN VPN OpenVPN OS OS VPN VPN 1 OS L3 L3 OS Point-to-Point Protocol (PPP) [91] PPP VPN OS PPP OS VPN OS Linux iptables [86] BSD PF [36] OS 14

25 L2TP IPsec L2TP L2TP/IPsec IPsec OS IPsec Linux IPsec strongswan [92] racoon [71] IPsec VPN IPsec OS VPN IPsec OS OS Dependency Hell [64] DLL Hell [24] VPN 1 L2TP SSTP L2TPv3 EtherIP SEVPN VPN VPN VPN IPsec VPN 1 VPN OpenWRT DD-WRT OpenWRT [81] DD-WRT [15] Linux LAN LAN Network Address Translator (NAT) VPN OpenWRT DD-WRT Linux Web Web 15

26 OpenWRT DD-WRT Point to Point Tunneling Protocol (PPTP) Layer-2 Tunneling Procotol (L2TP) OpenVPN VPN VPN VPN VPN PPTP poptop L2TP openl2tpd OpenVPN OpenVPN VPN VPN Linux OpenWRT DD-WRT VPN VPN Web (Command Line Interface: CLI) Web VPN Linux VPN VPN VPN OpenWRT DD-WRT VPN VPN Linux OpenWRT DD-WRT 1 OpenWRT DD-WRT VM VM OpenWRT DD-WRT VM VM OS VPN OpenWRT DD-WRT VPN VPN Linux OS OS PC PC OS VM VPN OS 3 16

27 2.1.4 VyOS VyOS Linux OS [99] VyOS CLI VPN VPN OpenVPN L2TP OpenVPN OpenVPN L2TP xl2tpd VyOS 2 VPN CLI CLI VPN OpenWRT DD-WRT OpenWRT DD-WRT VyOS VM VPN OS DeleGate DeleGate [89] DeleGate HTTP FTP Gopher NNTP SMTP POP DeleGate VPN 2 Ethernet 3 VPN 2 VPN OS OS [25] OS ( OS 17

28 VM) OS OS OS OS TCP/IP OS VM TCP/IP OS TCP/IP TCP TCP OS API OS VM OS OS OS API OS Slirp [49] Slirp Personal Data Assistant (PDA) OS Palm Slirp TCP Slirp PPP TCP BSD TCP/IP VPN VPN OS TCP/IP DHCP L2 VPN NAT OS VPN API API 18

29 2.2.3 Visual Studio Visual Studio Microsoft C C++ Visual Basic C# [97] Visual Studio.NET (2002 ) 1 GUI Component Object Model (COM) [102] Visual Studio COM IronRuby tools for Visual Studio Visual Studio Ruby [31] Microsoft [42] Visual Studio COM Dynamic Link Library (DLL) Visual Studio DLL COM DLL DLL Visual Studio Microsoft Visual Studio Visual Studio Uninstaller [68] Visual Studio Uninstaller Visual Studio VPN Visual Studio VPN VPN VPN VPN VPN VPN Visual Studio 19

30 VPN VPN VPN VPN VPN Eclipse Eclipse Visual Studio [74] Eclipse Visual Studio GUI Eclipse Visual Studio Eclipse 1 Xtext Domain Specific Language (DSL) Eclipse [5] Eclipse VPN GUI VPN Eclipse Eclipse Eclipse 1 VPN VPN VPN VM VM VMware Virtual Appliance Marketplace [109] VM VM VPN VM VM VPN VPN VPN OS IP 20

31 VM root VM OS VM VM VM VM VPN VPN Docker Docker Linux OS [64] OS Docker OS OS OS VM CPU VM Virtual Ethernet (veth) [12] veth OS veth veth Ethernet MAC UberCloud [96] Docker VPN Docker VPN VPN Docker VPN VPN Docker VPN 1 Docker OS 21

32 Tor The Onion Router (Tor) P2P [18] Tor 3 Tor Tor Tor Tor Web Tor IP Tor [101] [104] obfsproxy Tor Tor Tor [94] Tor Tor Tor Tor Tor Tor 1 VPN Tor VPN Tor Web Tor VPN IP Tor Tor rbox-tor Tor Tor CD-ROM (Virtual Machine: VM) Tor Tor [87] rbox-tor VM VM VM IP 22

33 VM OS CPU VM NAT NAT Demilitarized Zone (DMZ) VM CPU VM NAT BitTorrent VPN BitTorrent [14] BitTorrent BitTorrent BitTorrent ISP BitTorrent Azureus Distributed Hash Table (DHT) Mainline DHT DHT [2] [7] 2 DHT 1 VPN (VPN ) 2 VPN VPN DHT BitTorrent P2P Sybil Attack [19] BitTorrent Sybil Attack 23

34 [100] Sybil Attack Web MIXes Web MIXes Web [4] Java MIX MIX MIX Adaptive chop-and-slice VPN HTTPS UDP VPN Web MIXes VPN Great Firewall Great Firewall (GFW) [13] GFW TCP TCP (RST) GFW RST GFW RST Web GFW TCP RST IP 24

35 VPN GFW VPN Infranet Infranet HTTP Web [27] Infranet Infranet Requester HTTP Infranet Responder ( ) HTTP HTTP HTTP Infranet Responder HTTP Infranet Responder 1 Infranet Responder Infranet Responder Infranet IP [28] IP IP IP IP 25

36 IP IP SafeWeb SafeWeb [61] SafeWeb Web Web 2 SafeWeb Web JavaScript VPN Web TCP UDP Telex Telex Transport Layer Security (TLS) [105] Telex Web TLS Web ISP Telex Station Telex Station TLS Web Telex ISP ISP ISP IP Web Telex Telex Station ISP 26

37 Telex IP ISP Telex Station ISP VPN PC VPN VPN vpnsurfing.com VPN [98] VPN VPN Web VPN IP VPN VPN IP IP IP VPN VPN IP IP GroupVPN VPN GroupVPN P2P VPN [106] GroupVPN P2P Distributed Hash Table (DHT) Public Key Infrastructure (PKI) 27

38 PKI Certificate Revocation List (CRL) HTTP GroupVPN CRL DHT DHT VPN GroupVPN N2N N2N P2P VPN [16] N2N L2 Ethernet UDP VPN N2N P2P IP NAT IP N2N IP N2N VPN N2N IP VPN N2N 28

39 1 VPN VPN 29

40 3 VPN SoftEther VPN 2 3 VPN SoftEther VPN Server OS OS VPN VPN VPN VPN VPN VPN VPN VPN SoftEther VPN Server VPN [77] SoftEther VPN Server VPN VPN L2TP over IPsec Ether IP over IPsec OpenVPN L3 L2 L2TPv3 over IPsec SSTP SoftEther VPN Protocol (SEVP: Ethernet over HTTPS ) VPN VPN (PC ) VPN ( ) SoftEther VPN Server SoftEther VPN Server 30

41 VPN VPN 1 VPN VPN IP SoftEther VPN Server (ISP) VPN VPN VPN ( ) SoftEther VPN Server SoftEther VPN Server VPN IPv4 IPv6 Internetwork Packet Exchange (IPX) 3 MAC VPN 3 VPN L VPN 3.3 SoftEther VPN Server SoftEther VPN Server VPN 1.1 VPN VPN VPN VPN VPN VPN VPN VPN VPN VPN 3.1 VPN VPN 31

42 IP 2 VPN (LAN) Ethernet 2 VPN 3 VPN PC 2 VPN VPN IP IP Microsoft NetBIOS Extended User Interface (NetBEUI) [8] Novell Internetwork Packet Exchange (IPX) / Sequenced Packet Exchange (SPX) Apple Talk [90] 3 VPN ARP [69] IP 2 VPN Multicast DNS (mdns) [11] NetBIOS over TCP/IP Link-Local Multicast Name Resolution (LLMNR) [43] IPsec 3.1: VPN 3(IP ) VPN L2TP/ IPsec PPTP SSTP OpenVPN L3 2(MAC ) VPN OpenVPN L2 L2TPv3/ IPsec EtherIP/ IPsec SEVP IPsec IPsec MPPE SSL SSL SSL IPsec IPsec SSL ESP/UDP ESP/UDP GRE HTTPS /TCP HTTP TCP, UDP TCP, UDP ESP/UDP ESP/UDP HTTPS /TCP Windows Mac OS X ios Android Linux FreeBSD SEVP=SoftEther VPN Protocol MPPE=Microsoft Point-to-Point Encryption ESP=Encapsulating Security Payload GRE=Generic Routing Encapsulation HTTPS=HTTP over SSL VPN IP VPN SSL SSL OS OS VPN VPN 1 32

43 3.1 VPN IP 3.1 VPN SSTP OpenVPN (L3 L2) SEVP PC VPN HTTP SSTP SEVP SSL TCP PC VPN Deep Packet Inspection (DPI) [51] TCP SSL SSL SSL OS VPN VPN VPN 3.1 VPN Layer 2 Tunneling Protocol (L2TP) [95] over IPsec Point-to-Point Tunneling Protocol (PPTP) [33] ios Mac OS X Android VPN VPN Windows Secure Socket Tunneling Protocol (SSTP) [66] VPN CentOS Linux OpenVPN [80] Layer 3 (L3) VPN VPN OpenVPN Layer 2 (L2) Layer 2 Tunneling Protocol version 3 (L2TPv3) [53] EtherIP [34] OpenVPN L2 CentOS L2TPv3 Cisco IOS EtherIP NEC IX VPN LAN 1 VPN VPN ios VPN L2TP PC VPN mdns 2 OpenVPN L2 VPN VPN 33

44 3.2.2 VPN VPN VPN VPN VPN L2TP PPTP SSTP Microsoft Windows Routing and Remote Access (RRAS) VPN 1 VPN VPN 2 VPN L2TP OpenVPN RRAS OpenVPN Server VPN 1. VPN IP VPN VPN Microsoft RRAS OpenVPN IP VPN 2. 2 VPN 2 L2TPv3 SSTP Cisco Windows PC 3. VPN 2 VPN 2 VPN 2 VPN VPN VPN VPN VPN 34

45 3.2.3 Web Web Apache HTTP [72] Postfix [93] HTTP IP VPN VPN IP VPN 1 VPN VPN VPN VPN 1. VPN 2. VPN VPN 3. VPN (ACL) VPN 35

46 VPN * 1*2 VPN OS VPN OS L3 OS VPN Linux L3 PPP VPN 1 VPN Poptop openl2tpd VPN PPP PPP iptables PF L2TP IPsec VPN VPN VPN VPN VPN VPN VPN * PacketiX VPN *2 Cisco IOS Virtual Routing and Forwarding (VRF) VPN 1 Cisco 36

47 3.3 SoftEther VPN Server 3.2 VPN 3 VPN VPN VPN VPN SoftEther VPN Server SoftEther VPN Server VPN VPN VPN ARP [84] DHCP [21] VPN SoftEther VPN Server VPN SoftEther VPN Server VPN VPN 1. PC (Windows, Mac OS X, Linux BSD) 2. (ios Android) 3. (Cisco, Extreme Networks, Brocade, F5 Networks, ) SoftEther VPN Server 1. 3 VPN L2TP/IPsec, SSTP OpenVPN L3 37

48 2. 2 VPN OpenVPN L2, L2TPv3/IPsec, EtherIP/IPsec SEVP SoftEther VPN Server PPTP PPTP 3.1 VPN 1 L2TP PPTP PPTP PPTP L2TP [67] IP IPsec SoftEther VPN Server 2 VPN Ethernet VPN 2 VPN 2 Asynchronous Transfer Mode (ATM) [20] Synchronous Optical Networking / Synchronous Digital Hierarchy (SONET/SDH) [83] ATM SONET/SDH Ethernet Ethernet Virtual extensible Local Area Network (VXLAN) [58] VXLAN Ethernet UDP VPN 2 VPN Ethernet VPN VXLAN SoftEther VPN Server VXLAN VXLAN SoftEther VPN Server L2TP/IPsec VPN VPN VXLAN SoftEther VPN Server HUB 38

49 3.3.2 SoftEther VPN Server SoftEther VPN Server VPN 1. VPN 2. Remote Authentication Dial In User Service (RADIUS) [88] Microsoft Active Directory (PKI) [62] 3. DHCP SoftEther VPN Server DHCP IP 2 3 IP 4. VPN LAN 2 3 SoftEther VPN Server VPN 1. 1 VPN *3 2. L3 VPN IPv4 IPv6 (ACL) 3. L3 ARP DHCP DHCP DHCP IP 4. *3 VPN SEVP 3.4 VPN 39

50 5. 1 IP VPN (NAT) [23] IP IP Quality of Service (QoS) PacketiX VPN Server 3.0 PacketiX VPN 3.0 VPN SEVP SoftEther VPN Server PacketiX VPN 3.0 VPN SoftEther VPN Server VPN 2 3 VPN VPN 3 VPN L2TP 3 2 VPN OpenVPN L ( )

51 : VPN L2TPv3 EtherIP 41

52 2 VPN L VPN ARP DHCP L SoftEther VPN Server 3 2 L L2 VPN L2 VPN 3 L VPN L2 2 L2 3 VPN L2 ARP IP IP L2 DHCP OS IP ARP IP L2 ARP ARP ARP IP IP IP IP L2 MTU L2 ARP IP DHCP UDP UDP IP L2 OS IP TCP TCP 42

53 L2 HUB L L2 L3 IPv4 VPN LAN IPv4 L3 VPN IPv4 IPv6 L3 VPN IPv6 IP L2 IPv6 IPv4 ARP IPv6 Neighbor Discovery DHCP IPv6 Router Advertisement ARP ARP L2 PC OS IP (NIC) 3.2 Ethernet LAN SoftEther VPN Server ARP 3.2 (a) PC1 PC2 2 PC 2 PC IP ARP NIC PC IP MAC PC1 3 (IPv4 ) PC2 PC1 PC2 2 PC1 PC2 MAC PC1 PC2 MAC PC1 PC2 IP ARP Request MAC 2 ARP Request PC PC2 ARP Request ARP Reply PC1 ARP Reply PC2 MAC PC1 PC2 MAC ARP Reply PC1 3 PC2 MAC 2 PC1 2 2 PC2 43

54 IP NIC ARP IP NIC ARP 2 NIC: Network Interface Card IP IP ARP vnic vnic L2 1 ARP HUB ( 2 ) vnic: Virtual Network Interface Card 3.2: 2 PC HUB HUB 3.2 (b) VPN L2 SoftEther VPN Server MAC Ethernet 2 SoftEther VPN Server Ethernet 2 HUB VPN PC PC1 3 VPN VPN 1 PC PC2 2 VPN VPN PC1 PC2 IP PC1 VPN 3 (IP ) PC2 VPN 2 (MAC ) PC1 TUN 3 PC2 TAP 2 44

55 2 NIC (vnic) PC2 vnic MAC PC1 MAC PC1 HUB L2 L2 MAC PC2 HUB L2 3.2 (b) PC1 3 (IPv4 ) PC2 PC1 VPN VPN PC1 L2 L3 (IPv4) PC2 MAC L2 PC2 MAC PC2 IP ARP Request MAC MAC PC1 L2 MAC HUB ARP Request PC L2 PC2 VPN ARP PC2 PC1 L2 MAC ARP Reply ARP Reply PC2 MAC ARP Reply HUB PC1 L2 L2 ARP Reply PC2 MAC 3 2 PC2 MAC HUB VPN PC2 L2 PC IP ARP ARP Reply IP MAC 3 ARP SoftEther VPN Server 3 VPN 2 VPN 2 2 VPN 3 VPN L2 ARP Request ARP Reply 3 VPN 45

56 VPN L2 ARP 2 VPN L2 PC IP ARP ARP DHCP ARP DHCP L2 VPN LAN IP IP LAN DHCP IP 2 VPN VPN 2 VPN IP DHCP DHCP Discovery DHCP Request DHCP DHCP Offer DHCP Acknowledgement vnic IP L2 3 VPN VPN 3 VPN L2 DHCP VPN PC DHCP Discovery DHCP Request DHCP DHCP Offer DHCP Acknowledgement DHCP IP DHCP 3 VPN IP VPN 3 VPN IP L2TP over IPsec SSTP Internet Protocol Control Protocol (IPCP) OpenVPN L3 OpenVPN VPN VPN VPN OS VPN VPN OS ( OS 46

57 ) *4 VPN OS OS IP VPN OS SoftEther VPN Server VPN 2 1 VPN SoftEther VPN Server OS MAC MAC OS UNIX OS Raw socket Raw socket Windows Network Driver Interface Specification (NDIS) API NDIS API API SoftEther VPN Server API Promiscuous Mode Raw socket 2 NAT NAT SoftEther VPN Server OS VPN VPN TCP/IP OS VPN *4 2 MAC OS 47

58 VPN TCP UDP VPN TCP/IP TCP UDP TCP UDP NAT TCP UDP API TCP UDP Windows Linux Solaris FreeBSD Mac OS X OS NAT SoftEther VPN Server API OS API OS NAT 2 1 NAT VPN LAN TCP UDP LAN VPN VPN VPN LAN 2 UNIX ICMP ICMP OS Windows ICMP UNIX Raw socket UNIX NAT ICMP VPN ping traceroute ICMP ping traceroute ICMP SoftEther VPN Server UNIX OS ping traceroute 48

59 OS ICMP ICMP TCP UDP ICMP NAT IPv L2 IPv4 IPv6 NAT LAN IPv6 VPN IPv4 NAT VPN SoftEther VPN Server 2 1 VPN HUB VPN HUB VPN (VPN ) VPN HUB HUB HUB HUB HUB VPN 2 VLAN IaaS VLAN [40] SoftEther VPN Server IaaS VLAN ID SoftEther VPN Server IaaS VPN 49

60 VPN SoftEther VPN Server 1 SoftEther VPN Server VPN VPN VPN PPP PPP VPN SoftEther VPN Server PPP IPsec IPsec VPN SoftEther VPN Server IPsec L2 NAT SoftEther VPN Server IPsec SSL [6] OpenSSL VPN 1. VPN IPsec IPsec IPsec (RFC ) 2. VPN VPN 5. VPN 50

61 6. (RFC ) SoftEther VPN Server OS OS SoftEther VPN Server SoftEther VPN Server malloc(), free(), realloc() OS OS Condition Variables ( ) mutex ( ) OS open(), close(), read(), write(), lseek() OS OS ( ) API TCP UDP Bind Listen Accept Poll Peek OS zlib 51

62 zlib [110] VPN zlib C OS OS OpenSSL OpenSSL [111] SoftEther VPN Server VPN SSL OpenSSL C OS SSL API OS API OS 2 ( ) VPN 2 Windows NDIS API UNIX OS Raw socket OS NAT ICMP ( ) ICMP NAT ICMP Windows ICMP UNIX OS UNIX OS VPN LAN ICMP 3.4 SoftEther VPN Server SoftEther VPN Server VPN OS 52

63 SoftEther VPN Server 1. VPN 7 VPN 2. VPN SSL HTTP Pointto-Point Protocol (PPP) IPsec L2 HUB VPN 7 VPN HUB L2TP/IPsec IPsec IPsec IPsec L2TP L2TP PPP PPP PPP IP IP L2 MAC HUB SoftEther VPN Server C 390, VPN 25,000 VPN VPN 1 VPN VPN VPN VPN PPP SSTP L2TP VPN 1 VPN VPN 53

64 3.2: SoftEther VPN Server VPN ( ) L2 IPsec IPC.c 2,100 IPsec IPsec.c, 10,700 IPsec.h, IPsec IKE.c, IPsec IKE.h, IPsec IkePacket.c, IPsec IkePacket.h L2TP IPsec L2TP.c, 2,700 IPsec L2TP.h PPP IPsec PPP.c, 2,800 IPsec PPP.h EtherIP IPsec EtherIP.c, 500 IPsec EtherIP.h SSTP Interop SSTP.c, 1,300 Interop SSTP.h OpenVPN Interop OpenVPN.c, 3,100 Interop OpenVPN.h Windows Vista / 7 / 8 IPsec Win7.c, 1,800 IPsec Win7.h, IPsec Win7Inner.h, Wfp.c, Wfp.h 25, L2TP VPN L2TP over IPsec L2TPv3 over IPsec 1 L2TP VPN 1 L2TP L2TPv3 L2TP L2TP TCP 54

65 Protocol modules L2TP L2TPv3 SSTP OpenVPN L3/L2 EtherIP SEVP Shared protocol modules PPP IPsec L2 adapter HTTP SSL UI modules User interface Core VPN processing modules Virtual HUB System modules Platform abstraction Logging User authentication Access control 3.3: SoftEther VPN Server Virtual HUB SoftEther VPN Server L2 adapter SEVP PPP L2TPv3 L2TP HTTP EtherIP SSL OpenVPN IPsec SEVP L2TP SSTP OpenVPN (L3) OpenVPN (L2) L2TPv3 EtherIP 3.4: 7 VPN HUB OpenVPN OpenVPN L2 L3 OpenVPN OpenVPN Technologies, Inc. UDP TCP 2 VPN 2 OpenVPN SSL OpenVPN UDP UDP SSL UDP TCP OpenVPN TCP 55

66 OpenVPN TCP UDP UDP OpenVPN OpenVPN L3 OpenVPN L3 IP ( LAN DNS IP ) IP HUB DHCP LAN DHCP IP IP OpenVPN L3 OpenVPN L3 L2 DHCP Discovery DHCP Request HUB OpenVPN OpenVPN (Windows) PPP PPP IP OpenVPN L3 OpenVPN IPv4 SoftEther VPN Server VPN IP ( DHCP ) DHCP IP DHCP IP IP IP IP IPsec IPsec IPsec L2TP L2TPv3 EtherIP IPsec v2 Internet Key Exchange (IKE) v1 IPsec v3 IKE v2 [45] VPN VPN IPsec v2 IKE v1 56

67 Negotiation of NAT-Traversal in the IKE (INTERNET-DRAFT) [47] Negotiation of NAT Traversal in the IKE (RFC 3947) [48] Traffic-Based Method of Detecting Dead IKE (RFC 3706) [38] Encapsulating Security Payload (RFC 4303, RFC 4305) [22] [46] UDP Encapsulation of IPsec ESP Packets (RFC 3948) [39] PPP VPN SoftEther VPN Server PPP PPP L2TP SSTP PPP 2 Password Authentication Protocol (PAP) Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAPv2) SoftEther VPN Server RADIUS Microsoft Active Directory VPN PAP VPN VPN IPsec VPN MS-CHAPv2 Microsoft CHAP Microsoft OS Mac OS X ios Android MS-CHAPv2 SoftEther VPN Server Microsoft Active Directory MS-CHAPv2 Windows 2000 Server RRAS LsaLogonUser API MS-CHAPv2 Windows Active Directory Remote Authentication Dial-In User Service (RADIUS) MS-CHAPv2 VPN UDP SoftEther VPN Server OS 57

68 PPP IP VPN OpenVPN L3 PPP L2 DHCP IP IP PPP IPCP LAN DNS IP Windows IPsec Windows Vista Windows Windows IPsec bind IPsec IPsec Windows Windows Filtering Platform Windows IPsec IPsec Windows IPsec VPN SoftEther VPN Server OS OS BSD mbuf [55] Linux skbuf [3] Windows NET BUFFER LIST NET BUFFER [65] SoftEther VPN Server 58

69 3.5: ( 3.5) malloc() free() realloc() OS SoftEther VPN Server VPN OS 59

70 VPN VPN SoftEther VPN Server VPN HUB 7 VPN 7 VPN HUB 7 VPN MAC HUB HUB ACL ACL VPN HUB MAC VPN SoftEther VPN Server GUI VPN Server Manager (GUI) Windows WINE Linux GUI CUI vpncmd (CUI) SoftEther VPN Server OS RPC SoftEther VPN Server Remote Procedure Call (RPC) SoftEther VPN Server 60

71 3.6: SoftEther VPN Server HUB 3.7: SoftEther VPN Server HUB 61

72 RPC SoftEther VPN Server RPC GUI CUI SoftEther VPN Server 135 RPC VPN GetCaps, GetServerInfo, GetServerStatus, SetServerPassword, SetServerCert, GetServerCert, GetServerCipher, SetServerCipher, SetKeep, GetKeep, GetConfig, SetConfig, SetSysLog, GetSysLog, RebootServer, Crash, GetAdminMsg, Flush, Debug VPN ( ) CreateListener, EnumListener, DeleteListener, EnableListener, SetIPsecServices, GetIPsecServices, AddEtherIpId, GetEtherIpId, DeleteEtherIpId, EnumEtherIpId, SetOpenVpnSstpConfig, GetOpenVpnSstpConfig, MakeOpenVpn- ConfigFile, SetSpecialListener, GetSpecialListener SetFarmSetting, GetFarmSetting, GetFarmInfo, EnumFarmMember, GetFarm- ConnectionStatus VPN DNS GetDDnsClientStatus, ChangeDDnsClientHostname, GetAzureStatus, SetAzureStatus, GetDDnsInternetSetting, SetDDnsInternetSetting VPN (VPN ) EnumConnection, DisconnectConnection, GetConnectionInfo HUB CreateHub, SetHub, GetHub, EnumHub, DeleteHub, SetHubOnline, GetHub- Status, SetHubLog, GetHubLog, GetDefaultHubAdminOptions, GetHubAdminOptions, SetHubAdminOptions, GetHubExtOptions, SetHubExtOptions, SetAcList, GetAcList, SetHubMsg, GetHubMsg HUB EnumLogFile, ReadLogFile HUB GetHubRadius, SetHubRadius HUB 62

73 CreateLink, EnumLink, GetLinkStatus, SetLinkOnline, SetLinkOffline, DeleteLink, RenameLink, GetLink, SetLink 3 ( HUB IP ) AddL3Switch, DelL3Switch, EnumL3Switch, StartL3Switch, StopL3Switch, AddL3If, DelL3If, EnumL3If, AddL3Table, DelL3Table, EnumL3Table HUB ACL ( ) AddAccess, DeleteAccess, EnumAccess, SetAccessList HUB CreateUser, SetUser, GetUser, DeleteUser, EnumUser, CreateGroup, SetGroup, GetGroup, DeleteGroup, EnumGroup PKI AddCa, EnumCa, GetCa, DeleteCa, EnumCrl, AddCrl, DelCrl, GetCrl, SetCrl, RegenerateServerCert HUB VPN EnumSession, GetSessionStatus, DeleteSession HUB MAC EnumMacTable, DeleteMacTable, EnumIpTable, DeleteIpTable NAT EnableSecureNAT, DisableSecureNAT, SetSecureNATOption, GetSecure- NATOption, EnumNAT, EnumDHCP, GetSecureNATStatus EnumEthernet, AddLocalBridge, DeleteLocalBridge, EnumLocalBridge, Get- BridgeSupport, EnumEthVLan, SetEnableEthVLan SoftEther VPN Server VPN VPN 1 OS Windows Linux Mac OS X FreeBSD 63

74 Solaris Windows UNIX OS UNIX OS malloc realloc free OS API Windows malloc HeapAlloc API Windows Win32 UNIX OS pthread Condition Variables mutex ( ) TCP UDP API OS Windows IO IO (I/O completion ports) UNIX OS select poll epoll UNIX ioctl connect() accept() wchar t sprintf Windows Native Language Support (NLS) API UNIX iconv 64

75 [52] OS VPN TCP/IP SoftEther VPN Server 10ms Windows timegettime() API UNIX OS clock gettime() OS 10ms : SoftEther VPN Server VPN VPN VPN L2TP/IPsec iphone (ios 4, 5, 6, 7, 8) ipad (ios 4, 5, 6, 7, 8) Android (2, 3, 4) Windows Vista, 7, 8, 8.1, RT Mac OS X ( 10.6, 10.7, 10.8, 10.9) SSTP Windows Vista, 7, 8, 8.1, RT OpenVPN L3 OpenVPN Client 2.2 for Linux OpenVPN Client 2.2 for Windows OpenVPN Connect for ios OpenVPN Connect for Android OpenVPN L2 OpenVPN Client 2.2 for Linux OpenVPN Client 2.2 for Windows OpenVPN Connect for ios OpenVPN Connect for Android L2TPv3/IPsec Cisco 892J, Cisco 1812J, IIJ SEIL x86 EtherIP NEC IX2015 SEVP SoftEther VPN Client for Windows SoftEther VPN Client for Linux 65

76 3.4.6 SoftEther VPN Client SoftEther VPN Server VPN SEVP (SoftEther VPN Protocol) VPN SoftEther VPN Client SoftEther VPN Client SoftEther VPN Server SoftEther VPN Client VPN GUI SoftEther VPN Client SoftEther VPN Server SEVP Ethernet SSL TCP TCP UDP Ethernet over UDP UDP Ethernet SoftEther VPN Client Windows Linux 3.5 SoftEther VPN Server VPN SoftEther VPN Server SoftEther VPN Server 3.2 SoftEther VPN Server SoftEther VPN Server VPN SoftEther VPN Server VPN VPN SoftEther VPN Server 3.4 VPN VPN VPN SoftEther VPN Server PPTP IPsec VPN 66

77 SoftEther VPN 2 VPN VPN VPN VPN 1. VPN VPN SoftEther VPN Server VPN HUB VLAN VPN SoftEther VPN Server VPN : VPN VPN VPN VPN IPsec 3(IP ) VPN L2TP / IPsec PPTP SSTP OpenVPN L3 2(MAC ) VPN OpenVPN L2TPv3 EtherIP SEVP L2 / IPsec / IPsec Microsoft RRAS Mac OX X Server OpenVPN PacketiX VPN 3.0 SoftEther VPN Server Cisco Extreme Networks Brocade F5 Networks 67

78 ( ) 1,100,000 1,000, , , , , , , , , , /08 12/11 13/02 13/05 13/08 13/11 14/02 14/05 14/08 14/11 15/02 15/05 15/08 15/11 16/02 16/05 16/08 16/11 3.8: SoftEther VPN Server, 17, , 250,857, 190,268, 18,140, 20,698, 23,176, 26,007, 27,250, 27,672, 28,797, 30,156, 163,846, 182, : SoftEther VPN Server 68

79 SoftEther VPN Server API OS OS Windows Linux Mac OS X FreeBSD Solaris VPN PPP IPsec SoftEther VPN Server VPN VPN VPN OS SoftEther VPN Server SoftEther VPN Server VPN *5 VPN VPN SoftEther VPN Server VPN VPN SoftEther VPN Server SoftEther VPN Server * GNU General Public License (GPL) Version 2 GitHub *7 SoftEther VPN Server ,009,000 SoftEther VPN Server DNS (DDNS) DDNS SoftEther VPN Server IP 16 % 84 % ( *5 OS OS Linux *6 *7 69

80 ) SoftEther VPN Server Visual Studio Dependency Hell SoftEther VPN Server 1 SoftEther VPN Server SoftEther VPN Server GitHub Pull Request ( ) SoftEther VPN Server OS SSL CPU RADIUS 1 Classless Inter-Domain Routing (CIDR) VPN SoftEther VPN Server Internet Key Exchange Version 2 (IKEv2) VPN IKEv2 SoftEther VPN Server Dependency Hell Remote Procedure Call (RPC) 70

81 SoftEther VPN Server VPN RPC VPN HUB L2 VPN RPC OS OS OS VPN RPC SoftEther VPN Server SoftEther VPN Server VPN VPN PC PC Intel Xeon E GHz CPU 16GB 1 10 Gigabit Ethernet NIC (Intel 10 Gigabit CX4 Dual Port Server Adapter 2 CX4 ) PC OS Windows Server 2008 R2 x64 Linux (OpenVPN ) Linux Kernel (x64) Windows Linux SoftEther VPN TrafficServer / TrafficClient iperf [32] iperf 32 TCP SoftEther VPN Server PC VPN 71

82 NIC1 NIC2 NIC1 NIC2 NIC1 NIC2 NIC: Network Interface Card (Intel 10GbE CX4 Dual Port Server Adapter) 3.10: 3 PC VPN client VPN server VPN client VPN client VPN server 3.11: 72

83 PC1 PC2 PC3 9.95Gbps PC1 CPU 10Gbps CPU VPN 3.5 VPN SoftEther VPN Server VPN SoftEther VPN Server 3.4 VPN VPN Windows Linux 3.5 OpenVPN OpenVPN L3 Windows OpenVPN Technologies, Inc. OpenVPN Windows UDP 100Mbps Linux L2TP OpenVPN xl2tpd (Linux ) Windows Server 2008 R2 OpenVPN Linux L2TP/IPsec SEVP Linux SSTP SoftEther VPN Server SSTP OpenVPN : VPN VPN VPN VPN VPN VPN L2TP IPsec (AES128-CBC) Microsoft RRAS (Windows Server 2008 R2 ) Windows Server 2008 R2 L2TP IPsec (AES128-CBC) xl2tpd (Linux ) xl2tpd (Linux ) SSTP RC4 Microsoft RRAS (Windows Server 2008 R2 ) Windows Server 2008 R2 OpenVPN (L3) AES128-CBC OpenVPN (Linux ) OpenVPN SEVP RC4 SoftEther VPN Server SoftEther VPN Server 73

84 1. A. 1 VPN LAN 1 PC VPN ( 3.11 (a)) PC1 VPN PC2 VPN PC3 VPN PC1 PC1 VPN PC2 VPN LAN 2. B. 2 VPN ( 3.11 (b)) PC1 VPN PC2 PC3 VPN 2 VPN B1 B2 VPN VPN VPN A VPN VPN LAN PC VPN L2TP SoftEther VPN Server Windows RRAS SSTP Windows RRAS SoftEther VPN Server RRAS VPN Windows SoftEther VPN Server SSTP SEVP L2TP SSL RC4 OpenVPN SoftEther VPN Server OpenVPN 12% SoftEther VPN Server OpenVPN SoftEther VPN Server VPN B1 VPN 2 VPN VPN L2TP SSTP SEVP A OpenVPN SoftEther 74

85 A. VPN LAN PC ( VPN ) (Mbps) L2TP SSTP OpenVPN SEVP VPN VPN So Ether VPN Server 3.12: 1 VPN LAN 1 PC VPN B1. VPN VPN ( VPN ) (Mbps) L2TP SSTP OpenVPN SEVP VPN VPN So Ether VPN Server 3.13: VPN 2 VPN VPN B2. VPN VPN ( VPN ) (Mbps) L2TP-SSTP L2TP-SEVP SSTP-SEVP OpenVPN-L2TP OpenVPN-SEVP VPN VPN So Ether VPN Server 3.14: VPN 2 VPN VPN VPN VPN (SEVP) (Mbps) Win2003 R2 Win2008 R2 Linux VPN So Ether VPN Server 3.15: OS SoftEther VPN Server VPN 75

86 VPN Server B1 VPN 2 VPN AES OpenVPN VPN AES SoftEther VPN VPN 2 AES 3.14 B2 VPN 2 VPN VPN B1 SoftEther VPN Server 2 VPN L2TP SSTP SoftEther VPN Server RRAS 7% 2 VPN SoftEther VPN Server SoftEther VPN Server OS Windows Linux Mac OS X FreeBSD Solaris 3.15 Windows Server 2003 R2 x64 Windows Server 2008 R2 x64 Linux CentOS 6 VPN A SEVP Windows Server Linux Windows 6% SoftEther VPN Server VPN Gate Server SoftEther VPN Server VPN Gate [78] VPN Gate Great Firewall of China VPN Gate Windows PC VPN Gate Server VPN Gate Server SoftEther 76

87 VPN Server VPN Gate Server L2TP SSTP OpenVPN L3 SEVP VPN Gate 4 VPN Gate , VPN ,469 VPN SoftEther VPN Server VPN Gate Server VPN Gate Server HUB SoftEther VPN Server 8 SoftEther VPN Server Web HUB HUB SoftEther VPN Server PacketiX VPN Server HUB 141,270 4 HUB RPC ,300 HUB 3,000 VPN 5 HUB VPN 1 HUB VPN 1 2 HUB VPN 2 1 HUB VPN 3 1 HUB VPN 4 50 VPN 1 HUB 1 77

88 VPN VPN VPN HUB VPN VPN HUB VPN SSL CPU VPN 1 SSL SSL SoftEther VPN Server PacketiX VPN Server Version IPv6 Version SoftEther VPN Server VPN Version * ,050 PacketiX VPN Server SoftEther VPN Server PacketiX VPN Server 4.0 VPN *9 CPU *8 *9 packetix/, on bias/ 78

89 Linux PacketiX VPN Server ISP VPN PacketiX VPN Server Internet Service Provider (ISP) VPN VPN * 10 VPN IP PacketiX VPN Server RPC ISP ISP ISP PacketiX VPN Server 1 N IP HUB N 2 HUB 1,000 N PacketiX VPN Server VPN VPN OS 1 VPN L2 SoftEther VPN Server 2 VPN 3 VPN 2 VPN 2 Ethernet Ethernet *

90 2 VPN Ethernet 1.1 VPN VPN 1 VPN VPN L2TP/IPsec OpenVPN (L3) EtherIP 3 VPN VPN 3 SoftEther VPN Server VPN 1 VPN 1 7 VPN VPN VPN IP VPN VPN VPN SoftEther VPN Server VPN 7 % SoftEther VPN Server VPN OS IP PPP VPN VPN OS NAT VPN TCP UDP Raw socket ICMP OS ICMP (ping, traceroute ) NAT VPN IPsec VPN L2 VPN SoftEther VPN Server 80

91 API OS OS OS VPN SoftEther VPN Server VPN VPN SoftEther VPN Server SoftEther VPN Server VPN VPN VPN L2TP over IPsec SSTP OpenVPN L3 L2 EtherIP over IPsec L2TPv3 over IPsec SoftEther VPN Protocol (SEVP) PC VPN VPN VPN VPN VPN SoftEther VPN Server 2 3 VPN HUB HUB VPN 2 HUB VPN 3 L2 3 2 HUB L2 OS ARP NIC MAC VPN VPN SoftEther VPN Server Microsoft Windows RRAS 2 VPN VPN SoftEther VPN Server VPN 81

92 SoftEther VPN Server GNU General Public License (GPL) Version 2 SoftEther VPN Server ,009,000 SoftEther VPN Server PacketiX VPN Server 3.0 PacketiX VPN Server 4.0 SoftEther VPN Server PacketiX VPN Server 6,050 VPN 2 3 VPN SoftEther VPN Server SoftEther VPN Server L2 NAT IPv6 VPN IPv6 SEVP VPN SoftEther VPN Client ios Android SoftEther VPN Server Multiple Protocol Label Switching (MPLS) Virtual Private LAN Service (VPLS) Ethernet over IP 2 VPN VXLAN 82

93 4 VPN VPN VPN Gate 3 VPN SoftEther VPN Server 4 VPN VPN Gate Great Firewall (GFW) Twitter Facebook YouTube [9] VPN Tor [18] IP IP IP Tor [104] Tor [50] 83

94 GFW (Blocking Resistance) VPN VPN Gate [78] VPN Gate IP VPN VPN Gate VPN Gate VPN Gate VPN VPN VPN VPN Gate VPN 2 2 IP 1 IP VPN Gate IP ( : Windows Update ) IP IP IP 2 IP IP ( ) VPN IP VPN IP IP VPN IP VPN Gate VPN Gate Server VPN Gate VPN Gate Client VPN Gate Client OS VPN VPN Gate Server VPN Gate Server 84

95 TCP UDP Network Address Translation (NAT) [23] VPN Gate Server Secure Sockets Layer (SSL) [6]-VPN (SSL-VPN) L2TP/IPsec OpenVPN MS-SSTP OS VPN VPN VPN VPN Gate VPN Gate 3,000 Tor VPN Gate 1 464,000 VPN VPN 88,000 IP VPN Gate GFW GFW VPN Gate VPN IP GFW VPN 81% 19% IP % % VPN 40% IP GFW VPN IP IP VPN Gate VPN 45,000 9,000 IP Tor 3,000 VPN Gate Tor VPN Gate VPN VPN Gate 85

96 4.1: VPN Gate 4.2 VPN Gate VPN Gate 4.1 VPN Gate Server PC VPN Gate Server VPN Gate VPN Gate Server VPN Gate Web VPN Gate VPN Gate Web VPN Gate Server VPN Gate Server 1 VPN Gate Server VPN Gate Server VPN PC OS VPN VPN Gate Client VPN Gate VPN VPN VPN Gate Server 86

97 Web VPN Gate Server VPN Gate VPN Gate Server PC VPN Gate Server VPN Gate Server VPN VPN Gate Server 4 VPN (L2TP/IPsec OpenVPN MS-SSTP SoftEther VPN ) VPN Gate Server PC PC NAT VPN Gate Server Universal Plug and Play (UPnP) UDP NAT VPN Gate Server VPN Gate VPN Gate Server VPN Gate VPN Gate Web VPN IP VPN VPN VPN 1 VPN Gate Web Web Web VPN Gate Server HTTP [29] Web VPN 87

98 (OS) VPN VPN IP L2TP/IPsec MS-SSTP VPN VPN vpn vpn OpenVPN 1 OpenVPN VPN VPN Gate OpenVPN (.ovpn ) OpenVPN VPN VPN Gate Client 1 VPN Gate Client VPN VPN Gate Client VPN ( 4.2) VPN VPN Gate VPN Gate VPN Gate Server VPN Gate VPN Gate VPN Gate (Firewall Resistance System) 88

99 4.2: VPN Gate Client VPN Gate VPN Gate Server VPN Gate 2 IP Great Firewall 1 GFW GFW [1] [13] [107] [60] GFW (ISP) ISP 3 GFW IP 89

100 GFW Tor [104] DNS IP GFW DNS [57] GFW DNS DNS Fully Qualified Domain Name (FQDN) DNS DNS DNS (DNS IP ) GFW DNS DNS DNS DNS DNS DNS GFW FQDN DNS TCP RST IP GFW TCP GFW TCP TCP TCP URL TCP RST TCP (TCP RST IP ) [103] GFW Web URL TCP (UDP ) IP GFW IP IP IP IP GFW ISP BGP 90

101 TCP UDP DNS IP IP VPN Gate 1 IP 4.3 VPN Gate VPN IP VPN IP IP VPN Gate IP IP IP IP DNS DNS IP Windows Update IP IP IP IP IP VPN Gate Server IP IP IP VPN Gate IP IP IP VPN Gate Web VPN IP IP VPN 91

102 4.3: IP IP VPN Gate IP VPN IP IP IP (DDoS) [70] 1 1 VPN Gate 1,000 VPN 1 IP VPN IP 1 100,000,000 / 1,000 = 100, IP

103 VPN 100 VPN IP IP IP VPN Gate 2 IP VPN Gate Server ( ) VPN Gate Server IP ( ) 4.4 IP IP IP VPN IP IP VPN Gate Server 1 VPN Gate Server VPN Gate Server VPN VPN Gate Server VPN 1 VPN Gate Server 93

104 4.4: VPN Gate Server VPN Gate Server VPN Gate Server VPN 3 VPN VPN VPN 94

105 VPN VPN VPN Gate Server IP VPN Gate Server VPN Gate VPN Gate VPN Gate VPN Gate Server 1. VPN IP IP IP IP 2. VPN IP IP IP IP VPN Gate VPN IP 1 /24 IP IP IP [28] VPN Gate 3 1 [28] 95

106 VPN Gate IP 2 VPN Gate Client VPN Gate Client VPN Gate Server 3 VPN Gate Client VPN Gate Client VPN Gate Client VPN Gate Client VPN Gate Client 1 IP VPN Gate 1,630, % 379, HTTP URL VPN Gate Web VPN Gate Client VPN Gate Server HTTP VPN Gate Client 96

107 VPN Gate Client OS VPN VPN Gate VPN Gate Web HTTP HTTP HTTP gzip [17] HTTP VPN Gate URL HTTP VPN Gate Web URL *1 URL URL , VPN Gate Server VPN Gate Client VPN Gate VPN Gate Server VPN Gate Server Windows 3 SoftEther VPN Server SoftEther VPN Server L2TP over IPsec Ether IP over IPsec OpenVPN L3 L2 L2TPv3 over IPsec SSTP SoftEther VPN 7 VPN *1 Gmail Gmail GFW Gmail SSL GFW GFW Gmail Gmail 97

108 4.5: VPN Gate Server Windows Mac OS X ios Android VPN 4 VPN 1. L2TP/IPsec 2. OpenVPN L3 3. MS-SSTP 4. SoftEther VPN 4.5 SoftEther VPN Server VPN Gate Server VPN Gate Server VPNGATE HUB SoftEther VPN Server VPN Gate Server VPN VPNGATE HUB vpn 1 VPNGATE HUB vpn vpn PC LAN IP VPN Gate Server VPN 1 VPN VPN Gate 98

109 VPN VPN Gate VPN Gate Server VPN 1 IP ( IP NAT IP ) VPN IP VPN Gate Server NAT OS NAT VPN Gate OS VPN Gate Server VPN PPP IPsec OS SoftEther VPN Server VPN Gate Server OS NAT VPN Gate Server NAT VPN Gate Server NAT VPN Gate Server NAT VPN Gate Server UPnP UDP NAT VPN VPN Gate VPN VPN VPN Gate VPN Gate VPN VPN 99

110 VPN Gate VPN VPN VPN Google Public DNS ( ) [37] ICMP [85] *2 TCP VPN VPN Gate VPN VPN VPN VPN VPN VPN VPN VPN VPN TCP UDP TCP UDP HTTP HTTP (TCP ) 1. TCP VPN SYN SYN+ACK ACK TCP IP TCP TCP HTTP HTTP URL 2. UDP VPN DHCP IPsec OpenVPN IP UDP VPN VPN IP *2 SINET (Science Information NETwork) 1Gbps SINET ISP ISP 100

111 PC VPN VPN VPN IP VPN VPN VPN VPN Gate VPN Gate VPN Gate VPN Gate IP VPN VPN VPN Gate Web VPN Gate VPN Gate Server VPN Gate Client SoftEther VPN Client GUI VPN Gate VPN Gate Client ( 4.2) VPN Gate Server VPN Gate Client BitTorrent P2P P2P P2P P2P VPN Gate Client VPN Gate Server VPN Gate VPN Gate Client VPN Gate Server VPN Gate Client VPN 101

112 4.4.6 VPN Gate Client VPN Gate VPN Gate Client HTTP VPN Gate Client ZIP ZIP VPN Gate Client ZIP ZIP VPN Gate Client ZIP TCP VPN Gate Client ZIP ZIP I/O CPU ZIP ZIP CPU VPN Gate Web VPN Gate Server VPN Gate Client VPN Gate VPN VPN IP ,000 VPN 88,000 IP 1 IP 5.3 VPN 4.8 VPN Gate Server 102

113 700, , , , , , , /3/8 2013/4/8 2013/5/8 2013/6/8 2013/7/8 2013/8/8 4.6: 1 VPN 120, ,000 80,000 60,000 40,000 20, /3/8 2013/4/8 2013/5/8 2013/6/8 2013/7/8 2013/8/8 4.7: 1 VPN IP Gbps VPN VPN 10 VPN Gate VPN 7 VPN 103

114 1,800 Mbps 1,600 Mbps 1,400 Mbps 1,200 Mbps 1,000 Mbps 800 Mbps 600 Mbps 400 Mbps 200 Mbps 0 Mbps 2013/3/8 2013/4/8 2013/5/8 2013/6/8 2013/7/8 2013/8/8 4.8: VPN Gate Server VPN Gate VPN Gate Server , ,663 IP VPN IP / VPN IP VPN IP ,935 IP 2,363 IP 4.1: VPN VPN 1 7,253, % 2 3,974, % 3 3,841, % 4 2,281,446 8 % 5 1,768,716 6 % 6 1,399,833 5 % 7 1,373,906 5 % 8 742,640 3 % 9 589,148 2 % ,265 2 % 190 3,536, % 27,228, % 104

115 IP 38% 40% VPN IP IP VPN :00 (GMT) 2,800 IP IP 77% VPN 4.2: VPN TB 35 % TB 15 % TB 11 % TB 8 % TB 7 % TB 3 % TB 2 % TB 2 % TB 2 % TB 1 % TB 13 % 1,331.1 TB 100 % 7,000 6,000 5,000 4,000 3,000 2,000 1, /4/5 2013/4/ /5/ /6/ /7/ /8/8 4.9: VPN IP / 105

116 VPN Google Public DNS (IP : ) (RTT) Google Public DNS IP RTT VPN VPN RTT 100 VPN 4.11 VPN TCP 50% VPN 5Mbps 70Gbps Gbps VPN VPN 72.8% NAT NAT 4.3: VPN Gate Server % % % % % % % % % % % % 4.4: VPN (NAT ) 3, % NAT (UPnP ) 7, % NAT (UDP ) 3, % 14, % 106

117 : VPN Google Public DNS (IP : ) (RTT) : VPN TCP 10,000 8,000 6,000 4,000 2, /3/8 2013/4/8 2013/5/8 2013/6/8 2013/7/8 2013/8/8 4.12: (1 IP ) 107

118 4.5.2 GFW VPN Gate IP GFW VPN Gate VPN IP VPN IP 10% 8,000 IP VPN GFW (VPN GFW ) 4.13 GFW VPN VPN 30% IP % % - 70% 2 84% 3 93% VPN GFW GFW VPN Gate Server GFW IP 2 VPN IP Great Firewall VPN Gate IP VPN 108

119 3,000 2,500 2,000 1,500 1, /3/ /4/ /5/ /6/ /7/ : GFW / Gate Great Firewall : VPN Gate VPN Gate Web 4 VPN Gate Web GFW VPN Gate IP 5,663 GFW : GFW VPN Gate GFW VPN Gate IP VPN Gate Web VPN Gate Client HTTP URL SNS Web ( : Weibo) HTTP VPN Gate Web VPN Gate Client VPN Gate Client VPN Gate Client 109

120 : GFW VPN GFW VPN Gate VPN IP GFW GFW GFW GFW : GFW 1 IP IP 32 IP IP VPN Gate Server VPN Gate IP (32 ) 2 32 IP 2 IP IP IP IP IP 30 GFW IP IP IP Whois IP China Science and Technology Network (CSTNET) : GFW GFW IP GFW Amazon EC2 Gorilla Server HTTP User agent 4.14 Python-urllib GFW VPN 110

121 ID Access Date Client FQDN URL User Agent /23/13 7:40 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 7:41 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 7:45 PM static.gorillaservers.com Python-urllib/ /23/13 7:45 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 7:46 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 7:50 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 7:51 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 7:55 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 7:56 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:00 PM static.gorillaservers.com Python-urllib/ /23/13 8:00 PM static.gorillaservers.com Python-urllib/ /23/13 8:00 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:01 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:05 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:07 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:10 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:12 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:15 PM static.gorillaservers.com Python-urllib/ /23/13 8:15 PM static.gorillaservers.com Python-urllib/ /23/13 8:15 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:17 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:20 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:22 PM ec compute-1.amazonaws.com Python-urllib/ /23/13 8:26 PM ec compute-1.amazonaws.com Python-urllib/ : Amazon EC2 Gorilla Server GFW GFW GFW GFW VPN IP IP GFW GFW VPN 80% : IP IP IP VPN IP 30 IP 4 IP 30 GFW VPN Gate IP GFW IP VPN Gate Server IP GFW 111

122 : GFW VPN Gate VPN IP GFW IP GFW VPN Gate VPN Gate 4 GFW VPN Gate : GFW IP GFW GFW IP IP VPN Gate Server : VPN Gate : GFW VPN Gate GFW VPN Gate GFW VPN Gate GFW VPN Gate GFW VPN Gate , ,049,000 VPN (156,000 IP ) 1 123,000 VPN (16,000 IP ) ,000 IP 234,000 IP 6.7 Gbps 112

123 4.5.4 VPN Gate VPN Gate VPN Gate VPN Gate VPN Gate VPN Gate 3 Web Web Web Web Intel Xeon E GHz ( PRIMERGY TX100 S3) Microsoft SQL Server 1.0MB L2 32GB 2 SSD Web CPU 5% I/O 1.3MB/s 10 3,000 VPN 10 VPN Tor VPN 3,000 Tor Tor 4,000 2,

124 VPN Gate Tor ,000 IP VPN Gate Tor *3 Tor 3,000 IP Tor VPN Gate Tor VPN Gate IP VPN VPN Gate LAN VPN VPN VPN Gate Server VPN Gate Client VPN Gate Server VPN VPN *4 VPN Gate VPN *3 *4 VPN VPN Gate VPN Gate 114

125 VPN VPN Gate Server VPN Gate Server VPN Gate Server VPN Gate Server VPN LAN LAN LAN LAN LAN LAN VPN Gate Server LAN ISP ISP ISP VPN Gate Server ISP ISP LAN VPN VPN Gate Server 3 VPN Gate Server VPN VPN VPN Gate Server GUI

126 図 4.15: VPN Gate Server 機能の動作を開始させるための画面 (日本語 英語 中国語) 図 4.16: ユーザの責任で地域の法令を遵守するよう警告するメッセージ (日本語 英語) 図 4.17: VPN Gate Server 機能に関する注意事項を掲示した Web サイト (日本語 英語) 116

127 Web 4.17 VPN Gate Server GUI VPN IP 2 VPN VPN NAT IP IP VPN IP IP IP

128 4.5.7 VPN Gate IP VPN VPN Tor VPN VPN IP IP IP IP IP IP Yahoo! US IP Amazon EC2 IP Web Akamai [79] CDN IP VPN Gate VPN Gate Sybil Attack [19] VPN Gate VPN IP ( VPN Gate IP ) VPN Gate 118

129 VPN Gate Sybil Attack Sybil Attack DDoS VPN Gate VPN Gate GFW IP IP IP IP GFW IP IP GFW IP IP IP IP GFW 4,000 C IP 4.5: GFW IP (/24) 2013 IP 3 2,792 2, % 4 2, , % 5 1, , % 6 1, , % 7 1, , % 8 1, , % 9 1, , % 10 1, , % 119

130 4.5.8 GFW GFW VPN Gate VPN Gate NSDI (USENIX Symposium on Networked Systems Design and Implementation) IP GFW VPN Gate GFW GFW GFW VPN Gate Great Firewall (GFW) VPN VPN Gate VPN Gate IP % - 70% VPN GFW 1 VPN VPN VPN Gate PC VPN Gate 120

131 4.6.2 VPN VPN Gate 3 VPN VPN Gate VPN VPN Gate Server VPN VPN OS OS VPN VPN VPN VPN OS VPN SoftEther VPN Server VPN SoftEther VPN Server 7 VPN VPN Gate OS Windows Mac OS X ios Android L2TP/IPsec OpenVPN L3 MS-SSTP SoftEther VPN 4 VPN VPN Gate Server VPN Gate Server 1 HUB VPN VPN Gate Server 121

132 VPN 1 VPN VPN Gate VPN VPN Gate VPN Gate Server VPN 1 IP ( IP NAT IP ) VPN IP NAT OS NAT OS VPN Gate Server VPN Gate VPN Gate Client VPN Gate Server VPN Gate Client VPN Gate Client VPN Gate Server VPN Gate VPN VPN Gate Server VPN VPN Gate VPN VPN Gate 3 VPN VPN Gate GFW GFW VPN Gate 1 VPN Gate 122

133 VPN Gate IPv

134 VPN VPN VPN VPN VPN 1 VPN VPN VPN VPN OS OS VPN (Virtual Machine: VM) VM VPN VPN VPN 1 1 VPN IP 124

135 OS OS VPN OS VPN VPN OS OS VPN OS OS OpenSSL VPN VPN OpenVPN poptop openl2tpd VPN 1 VPN OpenWRT DD-WRT VyOS VPN OpenVPN poptop openl2tpd VPN VPN Linux DeleGate DeleGate OS OS TCP/IP OS VM OS OS Visual Studio Eclipse VPN OpenVPN VPN 125