Share Email Print
cover

Proceedings Paper

A high performance parallel IPSec-VPN gateway design
Author(s): Weiming Li; Zhitang Li; Yunfeng Xie
Format Member Price Non-Member Price
PDF $14.40 $18.00
cover GOOD NEWS! Your organization subscribes to the SPIE Digital Library. You may be able to download this paper for free. Check Access

Paper Abstract

IPSec (IP Security) provides a standard, robust, and extensible mechanism in which to provide security to IP and upper-layer protocols. But the encryption and message authentication services provided by IPsec require significant computation time. Consequently, IPsec can degrade performance obviously. The paper presents a parallel hardware structure of high performance IPSec VPN gateway to speed up the IPSec packets process, and introduces the IPSec software design in detail includes modified FreeS/WAN IPSec implementation and extended Internet Key Exchange protocol. The result of network performance test proves that the structure can fulfill the need of gigabit fast network. The paper also proposes multiple small packets assembling algorithm which is used to accelerate small packets process. The algorithm significantly improves the performance of small packets.

Paper Details

Date Published: 28 September 2006
PDF: 10 pages
Proc. SPIE 6354, Network Architectures, Management, and Applications IV, 635432 (28 September 2006); doi: 10.1117/12.688171
Show Author Affiliations
Weiming Li, Huazhong Univ. of Science & Technology (China)
Zhitang Li, Huazhong Univ. of Science & Technology (China)
Yunfeng Xie, Huazhong Univ. of Science & Technology (China)


Published in SPIE Proceedings Vol. 6354:
Network Architectures, Management, and Applications IV
Yong Hyub Won; Gee-Kung Chang; Ken-ichi Sato; Jian Wu, Editor(s)

© SPIE. Terms of Use
Back to Top