High-speed secure virtual private network channel based on network processor and its realization method

Abstract

The invention provides a high-speed and secure VPN channel which is based on a network processor. The VPN channel comprises micro engine clusters, a kernel module, at least one SRAM and a memory controller thereof, at least one DRAM and a memory controller thereof, an MSF module and a Hash unit, wherein, two micro engine clusters are connected in sequence and each micro engine cluster consists of eight micro engines in sequence; two micro engine clusters, the kernel, the MSF and the hash unit are respectively connected with a PCI bush; each SRAM and DRAM are connected with the PCI bush through the respective memory controller and the PCI bush is connected with an administrative system module of an upper computer. The invention adopts a network processor IXP2850 to realize the VNP functions, and effectively shortens the period of the encoding, decoding and verifying of effective loads by sufficiently utilizing a quick-slow data channel formed by the micro engine-kernel and the kernel which is specially for encoding and decoding, and is highly integrated with a router and a firewall, thereby effectively relieving the conflict between the security requirement and the data processing rate.

Description

technical field [0001] The invention relates to the field of network information security, in particular to a high-speed secure virtual private network channel based on a network processor and an implementation method thereof. Background technique [0002] Virtual private network (Virtual Private Network, VPN) refers to relying on ISP and other network service providers, using public networks (such as the Internet, frame relay, etc.) The unreliable public network realizes the security performance similar to that of the private network, thus forming a logical private network. VPN is a functional network, and users have various requirements for this functional network. Some users emphasize the security of data transmission, and some users may require higher transmission rates, so the functions of various private networks are also emphasized. Currently, there are two common technologies for realizing VPN: VPN based on IPSec technology and VPN based on MPLS (Multiprotocol Labe...

AI Technical Summary

Problems solved by technology

However, the encryption technology adopted by IPSec causes conflicts between the IPSec VPN system and the original network security mechanisms (such as firewalls, etc.). In addition, the encryption and decryption during communication will cause a certain delay, which affects the efficiency of network transmission.

Images