基于网络处理器的高性能IPSec VPN的设计方案

Design of High-performance IPSec VPN Based on Network Processor

VPN是利用开放的公共网络建立专用数据传输通道的一种广域网技术。IPSec协议是目前实现安全的VPN最常用的方式。使用可编程的高性能网络处理器可以提供灵活丰富的VPN服务,增加VPN的可扩展性。在分析研究了IPSecVPN的体系结构、Intel的网络处理器IXP2400的功能特点之后,提出了一种基于IXP2400网络处理器的高性能IPSecVPN的设计方案。

Virtual private network is a WAN technology with which private channels are built to transmit data on the public network.IPSec protocol is a current popular method which is used to build secure VPN. High-performance programmable network processor can be used to provide flexible and multiple VPN services, and to increase VPN’s scalability. This paper analyzes IPSec VPN’s architecture,Intel’s network processor IXP2400’s character, and then presents an design approach of high-performance IPSec VPN based on IXP2400 network processor.