Implementing High Performance VPN Router using Cavium-s CN2560 Security Processor
IPsec protocol[1] is a set of security extensions
developed by the IETF and it provides privacy and authentication
services at the IP layer by using modern cryptography. In this paper,
we describe both of H/W and S/W architectures of our router system,
SRS-10. The system is designed to support high performance routing
and IPsec VPN. Especially, we used Cavium-s CN2560 processor to
implement IPsec processing in inline-mode.
[1] "Security Architecture for the Internet Protocol," RFC 2401, 1998
[2] Eric J. Johnson and Aaron R. Kunze, "IXP2400/2800 Programming,"
Intel Press, ch 2
[3] "Nitrox-II Security Processor Hardware Manual," Cavium Networks,
Doc:CN2xxx-HM
[4] Bill Carlson, "Intel Internet Exchange Architecture and Applications,"
Intel Press, ch 1
[1] "Security Architecture for the Internet Protocol," RFC 2401, 1998
[2] Eric J. Johnson and Aaron R. Kunze, "IXP2400/2800 Programming,"
Intel Press, ch 2
[3] "Nitrox-II Security Processor Hardware Manual," Cavium Networks,
Doc:CN2xxx-HM
[4] Bill Carlson, "Intel Internet Exchange Architecture and Applications,"
Intel Press, ch 1
@article{"International Journal of Electrical, Electronic and Communication Sciences:62672", author = "Sang Su Lee and Sang Woo Lee and Yong Sung Jeon and Ki Young Kim", title = "Implementing High Performance VPN Router using Cavium-s CN2560 Security Processor", abstract = "IPsec protocol[1] is a set of security extensions
developed by the IETF and it provides privacy and authentication
services at the IP layer by using modern cryptography. In this paper,
we describe both of H/W and S/W architectures of our router system,
SRS-10. The system is designed to support high performance routing
and IPsec VPN. Especially, we used Cavium-s CN2560 processor to
implement IPsec processing in inline-mode.", keywords = "IP, router, VPN, IPsec.", volume = "1", number = "9", pages = "1384-3", }