Abstract:This paper deals with an in-line network security processor (NSP) design that implements the Internet Protocol Security (IPSec) protocol processing for the 10 Gbps Ethernet. The 10 Gbps high speed data transfer, the IPSec processing including the crypto-operation, the database query, and IPSec header processing are integrated in the design. The in-line NSP is implemented using 65 nm CMOS technology and the layout area is 2.5 mm×3 mm with 360 million gates. A configurable crossbar data transfer skeleton implementing an iSLIP scheduling algorithm is proposed, which enables simultaneous data transfer between the heterogeneous multiple cores. There are, in addition, a high speed input/output data buffering mechanism and design of high performance hardware structures for modules, wherein the transfer efficiency and the resource utilization are maximized and the IPSec protocol processing achieves 10 Gbps line speed. A high speed and low power hardware look-up method is proposed, which effectively reduces the area and power dissipation. The post simulation results demonstrate that the design gives a peak throughput for the Authentication Header (AH) transport mode of 10.06 Gbps with the average test packet length of 512 bytes under the clock rate of 250 MHz, and power dissipation less than 1 W is obtained. An FPGA prototype is constructed to verify the function of the design. A test bench is being set up for performance and function verification.

10 Gb/s IP-core for a 100 Gb/s In-Line Network Security Processor

A 10 Gbps In-Line Network Security Processor Based on Configurable Hetero-Multi-cores

A 10Gbps in-line Network Security Processor with a 32-bit embedded CPU

Design of A 10Gb/s in-line scalable Network Security Processor array

An IPSec Accelerator Design for a 10gbps In-Line Security Network Processor

A High-Speed SHA-1 IP Core for 10 Gbps Ethernet Security Processor

Design of an IPSec IP-Core for 10 Gigabit Ethernet Security Processor

Design of a high performance network security processor

A Configurable IPSec Processor for High Performance In-Line Security Network Processor

A Gbps IPSec SSL Security Processor Design and Implementation in an FPGA Prototyping Platform.

A 2-Gb/s/pin Source Synchronous CDMA Bus Interface with Simultaneous Multi-Chip Access and Reconfigurable I/O Capability

Design of an In-line Packet Transceiver for 10 Gb/s Ethernet

Integrated 155M-10Gbps Framer with 22.5gbps Low/High Order Cross Connect SoC

Design of RISC-V CPU for 100 Gbps Network Application

A low-complexity heterogeneous multi-core platform for security soc

A 65nm 39GOPS/W 24-Core Processor with 11tb/s/w Packet-Controlled Circuit-Switched Double-Layer Network-on-chip and Heterogeneous Execution Array

Zodiac: System Architecture Implementation for a High-Performance Network Security Processor

Multi Core SSL/TLS Security Processor Architecture Prototype Design with automated Preferential Algorithm in FPGA

Design of PCI-X Interface for High Speed Network Security Co-processor

A 0.18 Μm CMOS Transmit Physical Coding Sublayer IC for 100G Ethernet

IC Design for 10 Gb Ethernet Physical Coded Subsystem