Implementing High Performance VPN Router using Cavium-s CN2560 Security Processor

Authors: Sang Su Lee, Sang Woo Lee, Yong Sung Jeon, Ki Young Kim

Abstract:

IPsec protocol[1] is a set of security extensions developed by the IETF and it provides privacy and authentication services at the IP layer by using modern cryptography. In this paper, we describe both of H/W and S/W architectures of our router system, SRS-10. The system is designed to support high performance routing and IPsec VPN. Especially, we used Cavium-s CN2560 processor to implement IPsec processing in inline-mode.

Keywords: IP, router, VPN, IPsec.

Digital Object Identifier (DOI): doi.org/10.5281/zenodo.1081535

References:

[1] "Security Architecture for the Internet Protocol," RFC 2401, 1998
[2] Eric J. Johnson and Aaron R. Kunze, "IXP2400/2800 Programming," Intel Press, ch 2
[3] "Nitrox-II Security Processor Hardware Manual," Cavium Networks, Doc:CN2xxx-HM
[4] Bill Carlson, "Intel Internet Exchange Architecture and Applications," Intel Press, ch 1