Research On A Realize Of IPSec Protocol Base On OCTEON Processor

IPSec(Internet protocol security) is an industrial standard network securityagreement, It provide transparent security services for IP network, protect the TCP/IPcommunication from eavesdropping or malicious modification. IPSec two basicobjectives: to protect IP data table security and provide effective protective measuresagainst cyber attacks.Currently, in many network security technology, IPSec-based VPN protocoltechnology can provide a more complete system security measures. IPSec VPNgateway based on the protocol can be used to build virtual private network or intranet.VPN represents the highest form of today’s network evolution, which combines theadvantages of traditional data network performance and the structural advantages ofshared data network. Combining IPSec technology of VPN, can realize securitycommunication for different network.The multicore processor includes a plurality of processing units, can build aplatform with parallel processing capabilities, increasing processor computing power.Each processing unit has a separate cache and I/O resources, interconnect through aninternal bus. The OCTEON processor uses16-core processor, one core run Linuxsystem, responsible for the process of the implementation, the other15core run SEsystem is responsible for processing the forwarding data packet. The OCTEON canprovide16times power of the Single-core processors in theory.The research topic of this paper is to design a security gateway can be used tocreate virtual private network. The gateway using IPSec protocol as a network layersecurity protocol. The IPSec protocol mainly consists of three parts: security protocols,Network Key Exchange (IKE) and encryption. The paper first analyzes the VPNnetwork applications and the architecture of IPSec protocol, explicit the functions andcontact of the various components of the IPSec protocol, and then analyze the variouscomponents of the relevant agreements. Then combine the VPN and IPSec toconstructs a security gateway system. Analysis the security gateway’s position andfunction in Femto system, illustrate the design specification of the security gateway’shardware and software architecture, improve the data stream processing, SA, SP,andShared memory management module design. Finally through the security gateway test and test data analysis, analysis thesecurity gateway current performance status, and some advise to further improve theperformance of security gateway are put forward.