Improved user datagram protocol encapsulation solution

An improved scheme of UDP encapsulation is proposed, in which the whole IP package protected by IP security protocol (IPSec) is encapsulated by adding a UDP/IP header. The scheme can solve problems such as AH authentication failure and TCP invalidation resulted from the UDP encapsulation scheme presented by IETF. And the UDP encapsulation scheme is proposed to solve the problem of the incompatibility between network address translation (NAT) and virtual private network (VPN) based on IP-Sec. The performance detail of the scheme proposed is formulated, and it is easier to be implemented comparing with the original method. The influence of the proposed scheme of UDP encapsulation on the network performance and security in the operation process are discussed.