Design And Implementation Of Gigabit IPSec VPN Based On IXP2400 Network Processors

Intel corporation is one of the main manufacturers which develop network processors. IXP2400 is the second-generation network processor which Intel develop based on IXP1200. It typically uses distributed multi-processor and multi-thread architecture, and provides a new hardware plane for the application from level 2 to level 7. So, it was paid more attention to by the industry in the beginning.Virtual private network is WAN technology arised in recent years. VPN provides private communication which uses kinds of network technology based on public Internet, and more flexible and scalable solution which confirms security, reliability and administrability. IP Security protocol(IPSec)is the open network security protocol which IETF established based on cryptology. IPSec VPN is one of the most popular modes which is used to build secure VPN .Based on the national 973 research project, The Obtaining and Monitoring of High Speed Network Information, this paper analyzes detailedly the character of Intel IXP2400 network processor and the architecture of IPSec VPN, and then put forward a kind of design and implementation scheme of the gigabit IPSec VPN based on Intel IXP2400 network processor.