A high performance parallel IPSec-VPN gateway design

Weiming Li; Zhitang Li; Yunfeng Xie

doi:10.1117/12.688171

28 September 2006 A high performance parallel IPSec-VPN gateway design

Weiming Li, Zhitang Li, Yunfeng Xie

Proceedings Volume 6354, Network Architectures, Management, and Applications IV; 635432 (2006) https://doi.org/10.1117/12.688171
Event: Asia-Pacific Optical Communications, 2006, Gwangju, South Korea

Abstract

IPSec (IP Security) provides a standard, robust, and extensible mechanism in which to provide security to IP and upper-layer protocols. But the encryption and message authentication services provided by IPsec require significant computation time. Consequently, IPsec can degrade performance obviously. The paper presents a parallel hardware structure of high performance IPSec VPN gateway to speed up the IPSec packets process, and introduces the IPSec software design in detail includes modified FreeS/WAN IPSec implementation and extended Internet Key Exchange protocol. The result of network performance test proves that the structure can fulfill the need of gigabit fast network. The paper also proposes multiple small packets assembling algorithm which is used to accelerate small packets process. The algorithm significantly improves the performance of small packets.

Citation Download Citation

Weiming Li, Zhitang Li, and Yunfeng Xie "A high performance parallel IPSec-VPN gateway design", Proc. SPIE 6354, Network Architectures, Management, and Applications IV, 635432 (28 September 2006); https://doi.org/10.1117/12.688171

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available