基于硬件的安全路由器设计和实现

Implementation Of A Security Router Based On Hardware

当前的许多安全路由器采用常规路由器硬件平台加安全软件的方式实现,效率低下而不能满足线速安全的需求。针对这一技术缺陷,我们使用通信处理器MPC8260和安全处理器MPC180来设计并实现了一款安全路由器。利用MPC8260提供中央处理以及路由器接口,而MPC180则提供硬件加密功能,解决软件实现VPN功能时效率低下的缺点。通过对设计的硬件平台的测试,表明我们设计的安全路由器能够满足中小企业虚拟私有网络(VPN)应用的需求,具有较好的性能价格比。

Current security router was almost implemented using general hardware plus security software. This method cannot meet the challenge of line rate security. To solve the problem, a designing of security router is accomplished by using MPC180 & MPC8260. We use MPC8260 to provide functions of router interface and central process. MPC180 is a security processor that can encrypt data in a way of hardware and it can improve the efficiency of implementing Virtual Private Network(VPN). Test for the router shows that our designing can meet the demand of VPN for medium-scaled enterprise.