基于多核MIPS64芯片的综合安全网关设计与实现  

Implemention and Design of Integrated Security Gateway Based on Multi-Core MIPS64

作　　者：邓林[1] 余刘琅[1] 韩江洪[1] 

机构地区：[1]合肥工业大学信息中心,安徽合肥230009

出　　处：《微电子学与计算机》2008年第2期28-31,35,共5页Microelectronics & Computer

基　　金：教育部博士点基金项目(20050359004)

摘　　要：针对当前安全设备在面对日益复杂的多形态网络行为和攻击应用上存在的低效率和低功能,提出一种面向下一代网络的高性能、分层次、并行处理的多功能综合安全网关体系结构。该体系结构以多核MIPS64安全处理芯片为基本核心模块,采用X86作为资源调度管理,以MIPS64cavium芯片内嵌的针对TCP数据包深度检查和模式识别的硬件完成网络数据流的高速检测,以PCI express X16总线实现线速处理网络数据流量,以双通道DDR2和Ultra320SCSI完成海量数据流的内部处理和存储。实际测试表明新型安全网关具有极好的效果。Architecture of the multifunctional integrated security gateway is proposed in view of the situation that the low efficiency and low capacity of the safety device when encountering the complex network behavior and attacks. The sole core or multi-core Security chip MIPS64 is used as the key module, X86 is used as the source management, the hardware which embedded in MIPS 64 cavium for TCP data packet deep inspection and pattern search is used to check the network data stream in high speed . PCI express X16 is employed to process data flow, DDR2 and Ultra 320 SCSI are utilized to internally process and store the mass data stream at line speed rate. It is a multifunctional integrated security gateway with high performance, multi-layer and parallel processing directing at NGN. The experiment shows that the gateway is very effective.

关 键 词：MIPS64 多核处理器 线速 综合安全网关 深度检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]