网络安全与数据治理2024,Vol.43Issue(11) :13-18.DOI:10.19358/j.issn.2097-1788.2024.11.003

基于高性能FPGA的超高速IPSec安全设备设计与实现

Design and implementation of ultra high-speed IPSec security device based on high performance FPGA

姬胜凯 王硕 黄毅龙 杨志明 马赋宁 徐程
网络安全与数据治理2024,Vol.43Issue(11) :13-18.DOI:10.19358/j.issn.2097-1788.2024.11.003

基于高性能FPGA的超高速IPSec安全设备设计与实现

Design and implementation of ultra high-speed IPSec security device based on high performance FPGA

姬胜凯 1王硕 1黄毅龙 1杨志明 1马赋宁 1徐程1
扫码查看

作者信息

  • 1. 中国电子信息产业集团有限公司第六研究所,北京 100083
  • 折叠

摘要

基于高性能FPGA提出了一种超高速IPSec安全设备的设计方案;此方案在以CPU作为控制中枢的基础上,利用高性能FPGA配合高速接口实现100G的IPSec安全传输,同时利用高性能FPGA和噪声源芯片实现国密算法对高速数据进行加解密.搭建测试环境对样机进行测试,测试结果表明,超高速IPSec安全设备可完成高达82 Gb/s吞吐率的IPSec安全传输,整个系统延时达90 μs级.

Abstract

A design scheme for an ultra high speed IPSec security device based on high-performance FPGA has been proposed.On the basis of using CPU as the control center,this scheme utilizes high-performance FPGA combined with high-speed interface to achieve 100G IPSec secure transmission,while utilizing high-performance FPGA and noise source chip to implement national security algorithm for encryption and decryption of high-speed data.Building a testing environment to test the prototype,the test results indicate that,the ultra high speed IPSec security device can achieve IPSec secure transmission with a throughput of up to 82 Gb/s,and the entire system latency can reach 90 μs level.

关键词

超高速/IPSec/FPGA

Key words

ultra High-speed/IPSec/FPGA

引用本文复制引用

出版年

2024
网络安全与数据治理
华北计算机系统工程研究所(中国电子信息产业集团有限公司第六研究所)

网络安全与数据治理

影响因子:0.348
ISSN:2097-1788
段落导航相关论文