Virtual private network node information processing method, relevant device and system

A Virtual Private Network (VPN) node information processing device, comprising:

• a first receiver, configured to receive an access request message sent by a second node, wherein the access request message at least carries authentication information, a current real Internet Protocol (IP) address, a node name of the second node and information indicating whether to accept extranet connection of the second node;
• a second receiver, configured to receive a query message sent by a first node, wherein the query message carries a node name of the second node or a virtual IP address of the second node or their both the node name of the second node and the virtual IP address of the second node;
• a processor, configured to judge whether the authentication information of the second node is correct, allocate a virtual IP address for the second node when the authentication information of the second node is judged as correct, register the current real IP address, the node name of the second node, the information indicating whether to accept the extranet connection, and the virtual IP address of the second node as registration information, and query registration information of the second node according to the node name of the second node or the virtual IP address of the second node or both the node name of the second node and the virtual IP address of the second node;
• and
• a transmitter, configured to send the registration information of the second node to the first node, wherein the registration information of the second node at least carries information indicating whether the second node accepts the extranet connection;
• when neither the second node nor the first node accepts the extranet connection, the first receiver is further configured to receive a network tunnel establishing request sent by the first node and a network tunnel establishing request sent by the second node;
• wherein the transmitter is further configured to send a network tunnel establishing response to the first node so as to establish a network tunnel between the transmitter and the first node, and send a network tunnel establishing response to the second node so as to establish a network tunnel between the transmitter and the second node:
• and
• wherein the processor is further configured to control the second receiver to receive information sent by the first node to the second node, and control the transmitter to transmit the information to the second node, and control the second receiver to receive information sent by the second node to the first node, and control the transmitter to transmit the information to the first node.