The Design And Implementation Of Security Router Based On Network Processor

Current and future's network devices require not only high flexility, but also high performance. GPP (General Purpose Processor) achieves all kinds of functions through running correlative software, so can fit the high flexility require easily. But GPP's high performance is poor. ASIC (Application Specific Integrated Circuit) can fit the high performace require easily, but it's programmable character is very limited, can not fit the various network applications. In these conditions, network processor is produced. Generally, NP (Network Processor) consists of several microengines and several co-processors. At the same time, it provides a programmable condition for upper applications. So network devices based on network processor can achive not only high performace, but also high flexility.This paper, based on Military High-Performance Security Router project, mainly talks about the design of security router based on network processor. These include: architecture of security router, software techniques and applications of network processor, packets filter and encryption/decryption technologies in network processor based security router. Based on these researched contents, a security router model machine based on Intel's IXP1200 is designed and implemented. It's route, packet filter, and encryption/decryption functions are tested in this paper. The test result indicates that we have achived the expected target.At the same time, self-contained security router's design and implementation are an enormous and complex work. Future's work is given at the end of the paper.