基于fpga的高速ipsec协议实现技术研究-计算机应用专业论文.docxVIP

中田科学技术人学坝lj学位论文 中田科学技术人学坝lj学位论文 摘韭 摘要 随着国际互联网络的迅猛发展，网络应用的不断丰富，Internet已经从最初以 学术交流为目的而演变为商业行为，例络安全性需求同益增加，高速网络安全保 密成为关注的焦点，在安全得到保障的情况下，为了满足网速无限制的追求，高 速网络硬件加密设备也必将成为需求热点。另一方面， IPSec协议被广泛的应用 于防火墙和安全网关中，但对IPSec协议的处理会大大增加网关的负载，成为千兆 网实现的瓶颈。本文便是针对上述现状，研究基于高性能FPGA实现千兆IPSec 协议的设计技术。 目前，国外IPSec协议实现已经：占片化，达到几千兆的速率，但是国内产品多 以软件实现，速度难以提高。本文采用的基于FPGA的iPSec技术方案，采用硬件 实现隧道模式下的IPSec协议，为IP分组及其上层协议数据提供机密性、数据完 整性验证以及数据源验证等安全服务。在以VPN为实施方案的基础上，构建了以 KD IPSec为设备原型阻IPSec协议为出发点的千兆网络系统环境模型，从硬件体 系结构到各个模块的划分以及各个模块实现的功能这几个方面描述了KD IPSec 实现技术，最后描述了一些关键模块的FPGA设计和和仿真。所有处理模块均在 Xilinx公司的FPGA芯片中实现，处理速率超过1Gb／s。 关键宇： IPSec，先进加密标准，可编程门阵列、千兆网 中周科学技术人学硕：】：学位论文Abstract 中周科学技术人学硕：】：学位论文 Abstract Along with the rapid development of the Internet and its applications， Intemet has already transited to a commercial behavior from its initial purpose as academic communications．This transition requires the higher network securitN SO that maintaining the security of the high speed network attracts great attention．Under the condition of well keeping the network security,in order to pursue the higher network speed，the high speed hardware encoding equipment will be required．On the other hand，IPSec protocol has been widely used in fire wall and security gateway,which however increased the load of the network gateway and results in a bottleneck of the achieving the Gigabit network．Regarding the current situations mentioned above，this thesis studied the designing technique to achieve Gigabit IPSec protocol based on high performance ofFPGA。 At present，the overseas IPSec protocol has been chiplized and reaches the rate of several Gigabit．Howeveg the domestic product is mostly realized by the software SO that it is difficult to increase the speed．This thesis realized the tunnel mode IPSec protocol with hardware based on the FPGA technology．It provided security services for the validation of confidentiality and integrity of the data in IP and its high level protocol。A system environment model is constructed under the IPSec prot