Abstract: The principle of SSL protocol and VPN technology was analyzed, and the background of SSL VPN was introduced. Through the analysis of the simplest form of SSL VPN——Web reverse proxy, essence of SSL VPN was revealed, and an end-to-end security scheme of SSL VPN was proposed. At last, a comparative analysis between SSL VPN and IPSec VPN was made.

Key words: Virtual Private Network(VPN), Secure Sockets Layer(SSL), SSL VPN, IPSec VPN, Web reverse proxy, end-to-end security

摘要： 分析了SSL协议和VPN技术的原理以及SSL VPN的提出背景。通过研究最简单的SSL VPN——Web反向代理运行原理，阐述了SSL VPN的本质，并提出了一个端到端安全的SSL VPN方案。最后对SSL VPN和IPSec VPN进行了对比分析。

关键词: 虚拟专用网, 安全套接层, SSL VPN, IPSec VPN, Web反向代理, 端到端安全