一种在线网络安全处理器SoC的IPSec加速器  

An IPSec Accelerator for Online Network Security Processor SoC

作　　者：郭金星[1,2] 乌力吉[1,2] 牛赟[1,2] 王自强[1,2] 贾雯[3] 张春[1,2] 

机构地区：[1]清华信息科学与技术国家实验室,北京100084 [2]清华大学微电子学研究所,北京100084 [3]深圳清华大学研究院,广东深圳518057

出　　处：《微电子学》2016年第1期90-94,共5页Microelectronics

基　　金：国家自然科学基金资助项目(61371011);深圳市基础研究项目(JCYJ20130401173716277)

摘　　要：对高速在线网络安全处理器中IPSec协议处理部分进行设计,完成了传输模式和隧道模式下网络数据包的认证头(AH)和安全封装载荷(ESP)处理。对IPSec加速器的可配置性和功能进行了FPGA验证,并在一款单通道10Gb/s在线网络安全处理器中实现了AH协议传输模式IPSec加速器的ASIC验证。测试结果表明,在200MHz时钟频率下,单个AH协议模块在传输模式下的数据吞吐率达到1.5Gb/s,通过并行的方式可以满足不同性能的网络安全需求。The IPSec protocol processing part in the online high speed network security processor was designed,which could process AH and ESP of network packets under both transmission mode and tunnel model.Besides,the configuration and function of the IPSec accelerator was verified with FPGA,and the ASIC verification of the IPSec accelerator which could implement AH protocol under transmission model in a single channel online network security processor with 10Gb/s date rate was also completed.The simulation results showed that the throughput data rate reached 1.5Gb/s in a single AH protocol block under transmission mode at a clock frequency of 200 MHz.It could meet the network security requirements with different performances by parallel method.

关 键 词：IPSEC 认证头 封装安全载荷 网络安全处理器 

分 类 号：TN432[电子电信—微电子学与固体电子学]