Patent ID: 8713305
Filing Date: 2014-04-29
Classification: H04L

Abstract:
1. A packet transmission method, comprising: receiving, by a Security Socket Layer Protocol (SSL) Virtual Private Network (VPN) server, an encrypted packet sent by a client device through a VPN tunnel, wherein the encrypted packet is sent by the client device after the client device determines, according to a preset control policy, that a destination Internet Protocol (IP) address and a destination port of a packet to be sent are included in the control policy and encrypts the packet to be sent, and an IP address and a port included in the preset control policy are an IP address and a port of an intranet server that can exchange a packet with the SSL VPN server; decrypting, by the SSL VPN server, the encrypted packet; sending, by the SSL VPN server, the decrypted packet to a corresponding intranet server, wherein a source IP address of the decrypted packet is an external network IP address; storing, by the SSL VPN server, a mapping relationship between the destination IP address and the destination port of the decrypted packet and the VPN tunnel; receiving, by the SSL VPN server, a response packet from the intranet server; and according to the source IP address and source port of the response packet and the stored mapping relationship, sending, by the SSL VPN server, the response packet after encryption to the client device through the VPN tunnel corresponding to the source IP address and source port after a determination that a source IP address and a source port of the response packet are included in the control policy.