基于IXP425的安全網(wǎng)關(guān)的設(shè)計與實(shí)現(xiàn).pdf

1、武漢理工大學(xué)碩士學(xué)位論文基于IXP425的安全網(wǎng)關(guān)的設(shè)計與實(shí)現(xiàn)姓名：胡玥申請學(xué)位級別：碩士專業(yè)：通信與信息系統(tǒng)指導(dǎo)教師：李方敏20050301武漢理工人學(xué)碩士學(xué)位論文AbstractTheInteracthasenteredanewera，andbecomeapartofourlifedaybyday；howeverthesecurityproblemitbringshasalsobecomeincreasinglyinevitable

2、，whichwehavetopayattentiontoEmbeddedSystemasasafetylow—cost，efficientplatformhasbeenwidelyusedinvariousfields，andofcoursenetworksecurityisoneofthemVPNtechnologyandFirewaUTechnology，astWOofthemostimportanttechnologies，hav

3、ebeenwidelyusedinnetworksecufityareaThesecuritygatewaydescribedinthispaper，implenmentstheVPNfunctionandFirewallfunctiononanembeddedsystemTheauthorhasmainlyfinishedthefollowingstudyandwork：1Thehardwaredesignofthesecurityg

4、atewaybasedonNetworkProcessorIXP425andPCIEncryptionCardSafeXeel1741IXP425asoneofthelatestNetworkProcessorwhichhasatwomicrocorestructure，integratinganXSCALEcoreworksat533MHZandthreeNetworkProcessingEngines，Canprocesstheda

5、tafromnetworkatwirespeedEncryptionCardSafeXcel1741speciallydesignedfornetworksecurityapplications，candealwithencryption／decryptioncalculationwithahighspeedThePCIconnectionbetweenIXP425andSafeXcel174Imakesthemcooperatetog

6、etherandalsomakesthesecufitygatewayagoodperformance2Thesoftwaredesignofthesecuritygateway，includesimplementationsofIPSecProtoc01FirewallandIllegalVPNDetectionWjththeusageofthehookfunctionsuppliedbyVxWorksNetworkStack，the

7、abovefunctionsusingthemethodcalledPump—inLinehavebeenachievedTheencryptionandhashcalculationOfAHESPandIKEareprocessedbytheEncryptionCarddatatransmissionbetweenI)(P425andEncryptionCardusesDMAmode，whichincreasesthetransmis

8、sionspeed3BasedontheanalysisoffoiTnerresearch，theauthorindicatesthattheperfomaancebottleneckofthesecuritygatewayisthedeficiencytoprocesstheencryptioncalculation，andthencomesupwiththearchitectureofthecooperationoftwoproce