Abstract:With the development of Internet of Things technology, the security threats faced by the industrial control field are increasing, and strengthening the security protection capabilities of intelligent systems on IoT highways is becoming increasingly important. IPSec VPN tunneling technology can achieve identity authentication and encrypted data transmission, and is an important means to achieve secure data transmission in intelligent systems on Expressway intelligent tunnel system. The commonly used IPSec VPN gateway uses a traditional Linux protocol stack-based approach for data capture, which requires multiple data copies and context switching, resulting in low efficiency of IPSec services. In addition, the commonly used IPSec VPN security gateway is implemented on the basis of the open-source IPSec framework, using internationally recognized algorithms for encryption and decryption, which poses security risks. This article is based on the IPSec protocol, and studies the high-speed network packet capture framework PFRING technology, the fusion technology of national secret algorithm and IPSec protocol. It designs and implements an IPSec VPN IoT security gateway based on national secret algorithm. After experimental verification, the IPSec VPN gateway system constructed in this article has complete functions and better performance than the common open-source IPSec frameworks OpenSwan and strongSwan, and can meet the application requirements of IoT data encryption transmission.

Security policy searching method research of IPSec VPN based on multi-core network processor

Fastpath-based VPN Gateway over Network Processor

A Multi-tunnel VPN Concurrent System for New Generation Network Based on User Space

Accelerating Implementation of IKEv2 by Using Security Coprocessor

A Configurable IPSec Processor for High Performance In-Line Security Network Processor

An IPSec Accelerator Design for a 10gbps In-Line Security Network Processor

A High Performance Parallel Ipsec-Vpn Gateway Design

Towards high-performance IPsec on cavium OCTEON platform

Design and Implementation of Embedded VPN Gateway System

A 10 Gbps In-Line Network Security Processor Based on Configurable Hetero-Multi-cores

Design of a high performance network security processor

Towards Efficient Security Policy Lookup on Many-Core Network Processing Platforms

Implementation of Embedded VPN Gateway Based Hardware Data Encryption

Design and Implementation of IPsec VPN IoT Gateway System in National Secret Algorithm

Implementation and Performance Evaluation of IPSec VPN Based on Netfilter

Towards High-Performance Network Intrusion Prevention System on Multi-core Network Services Processor

Research of the Implementation of IPSec Protocol Based Network Prosessor

Intrusion prevention system based on multicore-processor

A Gbps IPSec SSL Security Processor Design and Implementation in an FPGA Prototyping Platform.

Design of an IPSec IP-Core for 10 Gigabit Ethernet Security Processor

Multi Core SSL/TLS Security Processor Architecture Prototype Design with automated Preferential Algorithm in FPGA