基于IXP2400安全路由器的研究与设计

Study and design of security router based on IXP2400

随着网络向着更高的速度、更多的业务方向的发展,传统的通用CPU或ASIC架构已经不能适应新一代网络设备的需求,而随着网络处理器的出现,基于网络处理器开发的网络设备能够很好地解决灵活性和高性能之间的矛盾。由于安全路由器是解决网络安全问题的关键设备[1],因而在研究网络处理器体系结构和功能特点的基础上,分析了安全路由器的系统结构和软/硬件组成,最后给出了一种基于IXP2400的安全路由器的设计方案,并对方案进行了性能分析。

With the development of the network to higher speed and more operations, the traditional structure based on general CPU or ASIC is not fits the requirement ofthe next generation network equipment. But with the network processor＇s appearance, thenetwork equipment based on network processor solves the contradiction between flexibility and high power commendably. Because the security router is the key equipment to solve the problem about network security, so through the study of the architecture and function of network processor and the analysis of the system architecture and the software/hardware composing of security router, a security router based on IXP2400 is introduced finally, and the performance of the system is also analysed.