基于DPDK用户态IPSec网关研究和实现.pdfVIP

Computer Science and Application 计算机科学与应用, 2018, 8(1), 123-129 Published Online January 2018 in Hans. /journal/csa /10.12677/csa.2018.81016 Research and Implementation of User-Mode IPSec Based on DPDK Yangyang Feng China University of Mining Technology, Beijing th rd th Received: Jan. 8 , 2018; accepted: Jan. 23 , 2018; published: Jan. 30 , 2018 Abstract This paper aims at the problems of delay, congestion, small throughput caused due to increasing users and more network traffic demand by using IPSec gateway, analyzes the shortcomings during the IPSec solution process, and puts forward the method of implementation of DPDK gateway based on IPSec in user space. Aiming at the problem of large overhead of traditional programs, we propose to build Cisco VPP as a platform and DPDK as a receiving packets tool to build data processing platform. The test results show that the performance of the IPSec solution of user space based on DPDK is improved effectively compared with the traditional solution. Keywords IPSec, DPDK, User-Space, Performance Boost 基于DPDK的用户态IPSec网关的研究和实现 冯扬扬 中国矿业大学(北京) ，北京 收稿日期：2018年1月8 日；录用日期：2018年1月23 日；发布日期：2018年1月30 日 摘 要 本论文针对在使用IPSec网关时由于用户量不断增加、网络流量需求大的情况下所造成的时延、阻塞、吞 吐量小等问题，分析了内核态IPSec解决方案处理流程中存在的不足，提出了基于DPDK在用户态实现 IPSec网关的方法。针对传统方案处理开销大的问题提出利用思科的VPP作框架，DPDK作收包工具搭建 平台实现数据包在用户态的处理。测试结果表明，基于DPDK 的用户态IPSec解决方案与传统方案相比， 文章引用: 冯扬扬. 基于DPDK 的用户态IPSec 网关的研究和实现[J]. 计算机科学与应用, 2018, 8(1): 123-129. DOI: 10.12677/csa.2018.81016 冯扬扬 性能得到了有效的提升。 关键词 IPSec，DPDK，用户态，性能提升 Copyright © 2018 by author and Hans Publishers Inc. This work is licensed under the Creative Commons Attribution International License (CC BY). /l