关键词: 网络安全, IPSec, 专用指令集处理器, 抗重放, 硬件查找算法

Abstract: With the increasing problem of network security, IPSec protocol has been widely used in many areas. Software implementation of IPSec security protocol has the characteristics of poor security, poor platform adaptability and low performance. Hardware implementation of IPSec security protocol is characterized by poor flexibility and low parallelism. Therefore, this paper based on the analyses of IPSec protocol, proposes a method of implementing of IPSec protocol in combination with ASIP and software. The design of 10Gbps IPSec protocol chip using 40nm CMOS process for hardware implantation which performance up to 10Gbps.

Key words: network security, IPSec, ASIP, anti_duplication, hardware lookup