基于高性能FPGA芯片的千兆网IPSec协议模块

当前,Internet的应用已经从最初的学术交流目的越来越多地演变为商业行为,其安全性需求日益增加。IPSec协议被广泛地应用于防火墙和安全网关中,但对IPSec协议的处理会大大增加网关的负载,成为千兆网实现的瓶颈。该文提出了一种基于高性能FPGA实现千兆IPSec协议的设计构想,并通过模拟试验证实了该设计方案的可行性和正确性,为进一步的物理实现奠定了基础。

Gigabit Net IPSec Protocol Module Research Based on High Performance FPGA

Nowadays,Internet application is turn from academic purposes to business purposes,the requirement of the network security is increasing.IPSec protocol is widely used in firewall and security gateway.However,it becomes the bottleneck to achieve the Gigabit communication,because the processing of IPSec protocol will largely increase the load of the gateway.Based on a high performance FPGA,this paper proposes a new design resolution to implement IPSec protocol in gigabit speed.Simulation results demonstrate the proposed design is correct and feasible,which provides a foundation for further implementation.