基于硬件加密的嵌入式VPN网关实现

处理速度成为制约基于软件加/解密的VPN网关性能提高的瓶颈。文中提出了网络主处理器和加密卡并行处理IPSec数据的嵌入式VPN网关实现方案。在该实现方案中，IPSec数据包的加/解密以及认证等高强度的计算均由硬件加密卡完成，而使网络主处理器更专注于对IPSec数据包的封装处理。试验数据表明，这种实现方案运行稳定，能够满足高速网络的需求。

Implementation of embedded VPN gateway based hardware data encryption

With increasing requirements of network applications,software data encryption/decryption for VPN gateway becomes bottleneck of the processing speeds.In this paper,a novel architecture for embedded VPN Gateway based on network processor,coupled with Cryptography card is proposed.The main idea is that the significant and computing intensive portion of the computation,such as encryption/decryption and hash calculation of IPSec data,are implemented by the hardware Cryptography card,while the network processor is dedicated to encapsulating IPSec data.The experimental results show that the architecture can work steadily and has a good performance in high speed.