IXP1200在IP加密机的应用研究

随着因特网的迅速发展，数据包的处理和加密应用成为公共网络上安全通信的一个研究热点。目前，传统的基地PC的IP加密机实现存在着功能不能灵活扩展的弱点以及对数据包的处理速度达不到线速的缺点。本文采用IXP1200网络处理器作为硬件平台来开展对IP加密机进行研究。通过主动计算元素来灵活地扩展新的网络服务功能，并且通过对IXP1200网络处理器的微引擎的分工与加密卡的协作来提高数据包的处理速度和加密处理速率，以满足安全通讯中高吞吐量的要求。

THE APPLICATION OF IXP1200 NETWORK PROCESSOR IN VIRTUAL PRIVATE NETWORK

With the development of Internet,the packet processing and cryptographic applications become an important issue of secure communication in the Internet.The traditional virtual private network(VPN)based on PC can not be extended flexibly and also has a disadvantage of processing packet slowly.This paper takes the IXP1200 network processor as the hardware platform of the VPN.Such VPN can extend the network service functions easily by adapting the active computing element and process packets in a line speed by dividing the Microengine and cooperating with the encrypt card.So that it can meet high throughput demands in secure communication.Our system can also be expanded easily to provide new network services.