Based On Multi-core Network Processor P4080 Research And Implementation Of Ipsec Protocol

With the rapid development of internet, network security is increasingly prominent. IP Sec, which can be embedded in IP and insure the security of network layer, is an important protocol combination in the field of network security. However, because of the growing demand on bandwidth, a new challenge to the IPSec realization is the performance. With the structure of multicore and datapath acceleration architecture, the new generation network processor represented by P4080 can not only support programmable ablity like general processor, but also perform near to ASIC. Considering the characteristic above, it will be applied widely in the future and the main platform to realize the IPSec.An IPSec realization plan based on the P4080 platform is designed in this thesis. Firstly the content of IPSec including background, principle, encapsulation format and data process flow is researched, according to documents RFC 2401 and RFC 2406. Secondly, hardware architecture of P4080 is described, especially the characteristic for network process such as mulitcore, CoreNet, FMan, QMan and so on. Thirdly, the whole plan is discussed in detail from how to set up the development entironment, the software module division to every module design. Besides the protocol algorithm, there is an introduction on the ways to call DPAA API to reduce the payload of software and how to configure the SEC to finish the job encryption, decryption, authentication and anti-replay, which is the most complicated in IPSec process. Finally, the function and performance of the design is tested. Based on the test results analysis, it is proved that this design can realize the function encryption, decryption, authentication and anti-replay correctly as protocol requests, and get wirespeed throughput at Gbit level.