Implementing High Performance VPN Router using Cavium-s CN2560 Security Processor

IPsec protocol[1] is a set of security extensions developed by the IETF and it provides privacy and authentication services at the IP layer by using modern cryptography. In this paper, we describe both of H/W and S/W architectures of our router system, SRS-10. The system is designed to support high performance routing and IPsec VPN. Especially, we used Cavium-s CN2560 processor to implement IPsec processing in inline-mode.

Authors:

• Sang Su Lee
• Sang Woo Lee
• Yong Sung Jeon
• Ki Young Kim

Keywords:

• IP
• router
• VPN
• IPsec.

References:

[1] "Security Architecture for the Internet Protocol," RFC 2401, 1998
[2] Eric J. Johnson and Aaron R. Kunze, "IXP2400/2800 Programming,"
Intel Press, ch 2
[3] "Nitrox-II Security Processor Hardware Manual," Cavium Networks,
Doc:CN2xxx-HM
[4] Bill Carlson, "Intel Internet Exchange Architecture and Applications,"
Intel Press, ch 1