基于IXP2400网络处理器的网络防护系统设计和实现

网络处理器是专门用来执行数据处理和转发的高速可编程处理器,随着网络的飞速发展,网络处理器在网络交换及网络通信设备中的应用必将越来越广泛。IXP2400是Intel公司新推出的第二代网络处理器产品。首先根据当今网络的发展趋势,引入了IPv6的概念,针对新协议对网络安全的需求,提出了设计IPv6 / IPv4网络防护系统的必要性;同时,在详细介绍Intel IXP2400网络处理器硬件组成和结构的基础上,阐明了在IXP2400上实现IPv6 / IPv4网络防护系统的可能性。接着分析了在网络处理器上实施安全策略的一般方法,并针对其不足提出一个改进的系统设计方案,建立系统的软硬件结构模型,并对具体实现进行了详尽阐述。最后总结评估了整个系统的特性和能够实现的功能。

Design and Realization of Network Protection System Based on IXP2400 Network Processor

Network processor (NP) is a kind of high-speed programmable processor used for data processing and forwarding. With the rapid development of Internet, network processor is surely to be used more and more in network equipments. IXP2400 network processor is a second-generation network processor from Intel Corporation. This paper first introduces the concept of IPv6, and aiming at the security requirements of this new protocol, it brings forward the necessity of designing an IPv6 / IPv4 network-safeguard system. On the basis of describing the hardware architecture and features of the IXP2400 NP in detail, this paper at the same time explains the possibility of designing an IPv6 / IPv4 network-safeguard system using IXP2400 network processor. The paper goes on to analyze the traditional ways to implement safeguard strategy, and brings forward an improved system design solution to overcome its shortcomings. Based on this solution the paper then constructs a hardware and software structure model and describes in detail the overall design of IPv6 / IPv4 network-safeguard system based on IXP2400 network processor. Finally, this paper summarizes and evaluates the performance of the whole system and the functions that can be realized.