多卡并行加密VPN的性能分析

Performance analysis of VPN with paralleled multi-cards

在对原有的IPsec模块设计进行性能分析的基础上,结合Linux2.4系统的软中断机制,提出多卡并行加密的设计方案.为了适应该并行设计,采取对原有的IPsec模块细分,添加缓冲链表,以及关键区保护等修改,在Linux2.4上实现了并行系统原型.最后对原型性能进行理论分析,总结出并行加密VPN性能的计算公式,并根据实测数据验证了计算公式的正确性,为进一步提高利用并行技术提高VPN性能提供理论依据.

A paralleled multi-card model was proposed in Virtual Private Network (VPN) design based on original IPSec module and the soft interrupt mechanism of Linux 2.4. In the module of IPSec, some measures, including adding a buffer list and protection of critical codes, were taken in order to meet this paralleled design. The experiments for the performance of VPN were endured based on academic analysis and proved by the accurate data to improve the performance of VPN further.