The Design And Implementation Of The Encryption Card Driver System Based On Multi-Core Router

With the rapid development of network technology, network equipment can only for simple data transmission has been unable to meet the growing market demand. As 4G, cloud computing, mega data, Internet finance and other business integrated into the data communications network, people put forward more requirements for network equipment. Take the router as an example, in addition to realize the most basic data forwarding function, to deal with computer viruses, we need to implement the firewall function in router. To access the wireless network, we need to implement the function of WLAN. To guarantee the security of data transmission, we need to implement the function of data encryption in router. The realization of these new requirements put forward higher request to the network equipment manufacturers.In front of these needs, traditional single core processors have become powerless. Through the multi-core processors to improve the overall performance of the network equipment has become a trend. This paper is aimed at multi-core router and designs the encryption card driver system based on distributed system. First of all, the thesis defines the background and significance of the encryption algorithm in router and introduces the development of router.Then the thesis summizes the multi-core processor, distributed system and VxWorks operating system. Next, according to the physical relationship between the multi-core router and the encryption card, the logic relationship between the encryption card and the multi-core router and the packet sending and receiving process are abstracted. According to the process of message sending and receiving, the encryption request message, the decryption request message, the encryption response message, the decryption response message, the random request message and the random response message are designed. In addition the design principle and the meaning of the frame format are explained in detail. Using Tornado integrated development environment, the VxWorks embedded real-time operating system and C language I implemented the driver design between IPSec layer and hardware encryption card based on multi-core which including card initialization module, data transceiver module,debug module and so on. The data encryption and decryption process using asynchronous pipeline design. This design can give full play to the advantages of the parallel processing of multi-core processor, and meet the forwarding rate of high performance router. In addition, this design optimizes the random acquisition process, and uses the software cache to obtain the random of 2K, which greatly improves the efficiency of the establishment of the encryption tunnel. Finally function test and performance test are performed. The test shows that the design achieves the expected goal.Through this study, the encryption card driver system based on multi-core router is realized which supporting high-speed encryption and decryption. It has a certain practical significance to strengthen the construction of network information security in our country and can promote the development of information security technology.