性能和安全是網(wǎng)絡(luò)安全設(shè)備設(shè)計(jì)的兩個(gè)主要問(wèn)題，在網(wǎng)絡(luò)設(shè)備中通過(guò)IPSec 來(lái)提供安
全功能已成為一種迫切需要。本文針對(duì)IPSec 中的SPDB 和SADB 數(shù)據(jù)庫(kù)查找和維護(hù)造成的性能瓶頸問(wèn)題，提出了一種由CAM 和SRAM 分別完成查找和讀取的查表流水線(xiàn)方案，該方案可將數(shù)據(jù)庫(kù)維護(hù)對(duì)數(shù)據(jù)處理的影響降到最低限度。
關(guān)鍵詞：IPSec TCAM 包分類(lèi)
An Research on TCAM-based IPSec Lookup Solution KE Xiang-dong HUANG Jian-hua
(National Digital Switching System Engineering & Technological R&D Center, ZhengZhou, 450002) Abstract: High performance and security is main aims of network security equipment design, so implementing IPSec to provide security function is an urgent demand. This paper proposes an novel memory architecture based on CAM and SRAM to address the performance weakness of the SPDB and SADB searching operation. This solution can minimize the impact on data path processing when updating the databases.
Keywords: IPSec TCAM IP Classification