基于NPU架构的VPN防火墙硬件结构模型  

Hardware structure model of VPN firewall based on NPU frame

作　　者：周轶男[1] 李曦[2] 冯朝阳[2] 

机构地区：[1]江南计算技术研究所,江苏无锡214083 [2]中国科学技术大学计算机科学技术系,安徽合肥230026

出　　处：《计算机工程与设计》2006年第5期831-835,共5页Computer Engineering and Design

摘　　要：随着光纤网络的快速发展,网络速度的瓶颈并不在于传输系统,而依赖于数据报的处理速度是否能匹配不断增长的线路速度,尤其是在不断出现新服务和新协议的情况下,基于软件的网络处理已经不能完全胜任了,软硬件协同处理的方法开始不断涌现。防火墙同传统的网络设备一样,硬件体系结构经历了从Intelx86架构到ASIC架构再到NPU架构的发展过程。通过对防火墙硬s件体系结构进行研究,以NPU架构为基础提出一种VPN防火墙的硬件平台模型,建议以“龙芯”或其它国产CPU core为基础,以网络安全设备的应用为目标,以SOC宽带NPU为切入点,研制具有自主知识产权的NPU及其网络安全产品。The rapid advancements of optical networking have increased the capacity of physical links, Nowadays, the bottleneck does not lie on the transmission system, but on the network processing elements that must keep in space with the ever increasing line rates. sotlware-based network processing is not sufficient anymore, eapecially due to the increased requirements of new emerging feature-rich applications and services, more and more approaches using Cooperation with software and hardware was proposed. Similar as the traditional network equipment, the firewall experienced its hardware architecture evolving from Intelx86 to ASIC, and then to NPU. The main characteristics of these three system structures was analysed and compared. Their values of existing and room of developing were discussed. Based a hardware platform model ofVPN firewall, suggesting to develop NPU and its network security product as our own intellectual properties. It is recommended to use domestic made CPU such as ＂GodSon＂ in order to obtain fully control of the intellectual property.

关 键 词：防火墙 Intelx86架构 ASIC架构 NPU架构 SOC宽带NPU 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]