Abstract:In this paper, we propose a port randomized VPN architecture such that any application can use the VPN and the VPN has strength against DOS or DDOS. A key advantage of SSL VPN is that no specialized client software is required. When a user requests access to a server, the SSL client module, which is a Java Applet code, is downloaded into the host at first. However, it is quite likely that with a server through an HTTPS tunnel in some applications as we know. Moreover, there is the possibility that we can not use the VPN connections when the SSL port is under DOS or Distributed DOS(DDOS) attack. The proposed VPN use the same Java Applet as existing SSL VPNs use , but the function of the applet, which we call mobile code, is dynamically changed by Java Remote Method Invocation(RMI).The VPN client applet can cooperate with a VPN server and a firewall in server side. KeyWords: SSL VPN , mobile code, Java Applet, RMI