摘要
为了解决网络流量的快速增长对VPN(虚拟专用网)网关速度和性能要求日益提高的问题,提出一种基于Intel集成处理器EP80579的系统设计方案,充分利用该硬件平台上专用协处理器对网络数据包转发、加解密等操作进行处理的能力设计软件栈,解放CPU处理网络数据包的压力。实验结果表明,Linux上的以Openswan实现的IPSecVPN在性能上得到显著提高,从而论证了复杂指令集的X86体系结构和精简指令集的协处理器的协同工作成为网络安全处理上一种高效的解决方案。
To satisfy the speed and performance requirements of VPN gateway from the increasing network traffic,a system solution based on EP80579 integrated processor is proposed,made full use of the ability of the dedicated coprocessors on the hardware platform to deal with the operations such as network packet forwarding,encryption,etc.The processing pressure of CPU is released,the processing speed of IPSec VPN that implemented by Linux Openswan have been significantly increased,thus the proposed method of cooperation of CISC X86 architecture and RISC coprocessor has been proved a new solution with high performance for the network se-curity application.
出处
《计算机工程与设计》
CSCD
北大核心
2010年第7期1451-1454,共4页
Computer Engineering and Design
