System and processing method based on IPSec hardware firewall in IPv6

Abstract

The invention provides a system based on an IPSec hardware firewall in IPv6. The system comprises an Ethernet module, a data package filter module, a CAM module, a network mask RAM module and a coordination control module. The Ethernet module is used for receiving and sending a data package from the Ethernet. The data package filter module is used for detecting whether information contained in the data package from the Ethernet meets requirements or not. The CAM module is used for storing the information contained in the data package from the Ethernet, and carrying out fast data matching on the information contained in the data package. The network mask RAM module is used for storing source IP information and target IP information. The coordination control module is used for initializing the data in the network mask RAM module and the data in the CAM module, and coordinating information transmission between the connecting modules. By means of the system, IP data processing efficiency and accuracy can be improved, so that the network safety is enhanced for users.

Description

technical field [0001] The invention relates to the technical field of hardware firewalls, in particular to a system and processing method based on IPSec hardware firewalls under IPv6. Background technique [0002] In the Internet era, data transmission and communication through the Internet has become a part of people's lives, and the network has increasingly become a hidden danger to network information security due to its inherent openness and interconnectivity. At the same time, the network has increasingly become a strategic target of national information warfare. Therefore, network security technology has become an important part of the national strategic defense force. [0003] With the vigorous development of the Internet, as of December 2013, the number of Internet users worldwide has reached 2.27 billion, but the IPv4 protocol can only provide about 250 million IP locations. Although technologies such as network address translation and classless inter-domain rout...

AI Technical Summary

Problems solved by technology

[0005] In view of this, it is necessary to propose a system and method based on IPSec hardware firewall under IPv6 to improve the security of IP data in view of the fact that the current IPSec network security protocol is difficult to effectively process the data from the external network under the IPv6 protocol. High processing efficiency and correct rate to enhance the security of the network for users

Images