Method and apparatus for implementing IPSec engine in IXDP2851

摘要

Provided are an apparatus and method for implementing an IPSec engine in IXDP2851. The apparatus for implementing an IPSec engine in IXDP2851 which is an IXP2850 network processor development platform, includes: a packet classifier/forwarding microblock classifying packets into an inbound packet and an outbound packet, using received packet information; determining whether IPSec processing should be performed on the inbound packet and the outbound packet, and performing packet forwarding on a packet not requiring the IPSec processing; an outbound IPSec processing microblock; an inbound IPSec processing microblock; and an IPSec forwarding microblock receiving packet information of a packet subjected to IPSec processing and performing forwarding on the corresponding packet. Therefore, by separately processing packets requiring IPSec processing and packets not requiring IPSec processing, it is possible to implement an IPSec engine without influencing a processing speed of general packets not requiring IPSec processing.