基于内存交换的网闸系统的研究与实现

A Research and Implementation on the ViGap System Based on Memory Exchange

物理隔离网闸是一种应用级的安全隔离系统,主要用来解决网络安全所带来的问题。文章重点介绍了一种新的基于内存交换的物理隔离网闸系统的工作原理、主控FPGA芯片的架构以及设备驱动如何控制硬件操作等。主控FPGA芯片采用ATA协议中UDMA 5实现主机间的通信,采用独立控制逻辑设计,还支持CRC校验以保证板间数据可靠传输,CRC校验出错支持数据重传。数据传输率是网闸系统的一个重要技术指标,文章同时分析了数据包长对数据传输率的影响。

The ViGap,which is a security separating system on the application layer,can resolve the problems of the network security.This article mainly discusses the principle of a new physical separating system based on memory exchange.The frame of the master FPGA chip and how does the device driver control the hardware operation are also included.The master FPGA chip that contains an independent design of control logic implements the communication between the host computers though the UDMA 5 of the ATA protocol.It is reliable for the data transfer between the mainboards by supporting the CRC.h would send the data again if the CRC error occurs.The data transfer rate is an important technology target in the ViGap system.This paper also analyses the effect of the length of data packet on the data transfer rate.