一种在线网络安全处理器SoC的IPSec加速器

An IPSec Accelerator for Online Network Security Processor SoC

对高速在线网络安全处理器中IPSec协议处理部分进行设计,完成了传输模式和隧道模式下网络数据包的认证头(AH)和安全封装载荷(ESP)处理。对IPSec加速器的可配置性和功能进行了FPGA验证,并在一款单通道10Gb/s在线网络安全处理器中实现了AH协议传输模式IPSec加速器的ASIC验证。测试结果表明,在200MHz时钟频率下,单个AH协议模块在传输模式下的数据吞吐率达到1.5Gb/s,通过并行的方式可以满足不同性能的网络安全需求。

The IPSec protocol processing part in the online high speed network security processor was designed,which could process AH and ESP of network packets under both transmission mode and tunnel model.Besides,the configuration and function of the IPSec accelerator was verified with FPGA,and the ASIC verification of the IPSec accelerator which could implement AH protocol under transmission model in a single channel online network security processor with 10Gb/s date rate was also completed.The simulation results showed that the throughput data rate reached 1.5Gb/s in a single AH protocol block under transmission mode at a clock frequency of 200 MHz.It could meet the network security requirements with different performances by parallel method.