基于Intel IXP2400和GP-CPU的NAT系统的设计和实现  

Design and implementation of a NAT system based on intel IXP2400 and GP-CPU

作　　者：司靓[1] 于晓娟[2] 李昀晖[1] 

机构地区：[1]北京交通大学电子信息工程学院 [2]中国人民解放军防化指挥工程学院,北京102205

出　　处：《电子技术应用》2008年第4期105-109,共5页Application of Electronic Technique

基　　金：北京市自然科学基金资助项目(No.4062026);Intel"IXA大学合作计划"资助项目

摘　　要：提出了一种基于可编程网络处理器IXP2400和GP-CPU的NAT/NAPT的实现方案,设计并实现了基于Intel IXP2400和GP-CPU所组成的具有安全防火墙功能的NAT系统。针对该NAT系统进行了性能分析,它能够支持六十多万并发TCP/UDP的连接容量与全线速为2Gb/s以太网连接速率,有效提高了NAT/NAPT的操作速度,克服了传统NAT实现方案中的性能瓶颈。In this paper, an implementation scheme was put forward, which is called NAT/NAPT based on programmable network processor IXP2400 and GP-CPU. Meanwhile, the NAT system which has firewall function and contains Intel IXP2400 and GP-CPU was designed and implemented. The performance analysis of the NAT system was made, it is found that the NAT system can support more than six hundreds of thousands of concurrent TCP/UDP sessions and sustain the full line rate on two Gigabit Ethernet links, and effectively improve the performance of NAT/NAPT processing and overcome the bottleneck of performance in traditional implementation of NAT.

关 键 词：网络处理器 IXP2400 NAT NAPT 微引擎 

分 类 号：TP332[自动化与计算机技术—计算机系统结构] TP393.08[自动化与计算机技术—计算机科学与技术]