计算机工程 ›› 2009, Vol. 35 ›› Issue (3): 139-141.doi: 10.3969/j.issn.1000-3428.2009.03.048

• 网络与通信 • 上一篇    下一篇

基于多核的IPSec并行处理技术研究与实现

刘 磊1,2,孔志印1,赵荣彩2,汪伦伟1   

  1. (1. 北方信息技术研究所,北京100072;2. 解放军信息工程大学信息工程学院,郑州 450002)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2009-02-05 发布日期:2009-02-05

Research and Implementation of Parallel Processing Technology for IPSec Based on Multi-core Processor

LIU Lei1,2, KONG Zhi-yin1, ZHAO Rong-cai2, WANG Lun-wei1   

  1. (1. North Research Institute of Information Technology, Beijing 100072; 2. School of Information Engineering, PLA Information Engineering University, Zhengzhou 450002 )
  • Received:1900-01-01 Revised:1900-01-01 Online:2009-02-05 Published:2009-02-05

摘要: IPSec VPN网关需要进行大量加解密运算,对网络传输带宽产生较大影响。该文提出基于多核处理器的IPSec协议并行处理模型,将IPSec网络报文调度到多个处理器单元上运行,从而提高传输带宽。在Linux操作系统上对该模型进行具体实现,经过测试,在双核处理器上,IPSec VPN网关获得了接近倍速的性能提升。

关键词: IPSec协议, 协议并行处理, 多核

Abstract: Network bandwidth is affected severely because IPSec VPN gateway needs complex cryptographic transformation. This paper puts forward a parallel processing model for IPSec based on multi-core processor. In this model, IPSec packets are assigned to different processor units, so the network bandwidth can be improved. In addition, this model is implemented on Linux operating system. After performance testing, the IPSec VPN gateway which has a dual-core processor gains near double improvement.

Key words: IPSec, protocol parallel processing, multi-core

中图分类号: