The Design And Implementation Of Embedded VPN Gateway In NP Architecture

The performance and cost of network facilities always conflict with each other. The core network facilities often use ASIC technology to provide the high performance. But the low-end facilities have to use the low cost CPU architecture, which perform not so well.NP (Network Processor) technology has great impact on network security facilities. NP technology has the advantage of high performance, extensible, low cost, short cycle, etc. This article describes the design and implementation of a NP architecture VPN (Virtual Private Network) gateway.First, the key technologies of VPN will be discussed, especially the IPSec protocol. Then we will study intensively IxCryptoAcc module of Intel IXP42X. And then the implementation of this gateway will be given out. At last, we will list test data of several typical VPN gateways.The technologies described in this article were syntheses of network security, embedded system and NP technology. These ideas can be used into other NP architecture platform.Some relative technologies have already been put into production, which gives us great convenience and economy value.