METHOD AND APPARATUS FOR IMPLEMENTATION IPSEC ENGINE IN IXDP2400

摘要

The present invention relates to IPSec engine implementation, in the IPSec engine implementation device in IXDP2400, transmitting received packet information out the destination address of the IP header of the packet their inbound packet and not themselves using the outbound packet in IXDP2400 to classify, and determines whether the IPSec processing on the inbound packet and the outbound packet, the inbound packet and the outbound among packets packet is IPSec processing performed is the outbound packet a packet that does not require IPSec processing from router micro block to perform packet forwarding for; The router in the micro block inbound packet is inbound IPSec processing to perform the IPSec processing on the packet received by receiving the packet information from the router micro block if it is determined that the IPSec processing needs to transfer back to the router micro block micro-blocks; And outbound IPSec processing for the router in the micro block outbound packets and perform the IPSec processing on the packet received by receiving the packet information from the router micro block if it is determined that the IPSec processing needs to transfer back to the router micro block It is composed of; micro block. Therefore, by processing the IPSec processing has isolated the packet and the packet does not require the necessary processing speed of the normal packet that does not require IPSec processing, the IPSec engine can be implemented without little effect.