性能和安全是網(wǎng)絡(luò)安全設(shè)備設(shè)計(jì)的兩個(gè)主要問題，在網(wǎng)絡(luò)設(shè)備中通過IPSec 來提供安
全功能已成為一種迫切需要。本文針對IPSec 中的SPDB 和SADB 數(shù)據(jù)庫查找和維護(hù)造成的性能瓶頸問題，提出了一種由CAM 和SRAM 分別完成查找和讀取的查表流水線方案，該方案可將數(shù)據(jù)庫維護(hù)對數(shù)據(jù)處理的影響降到最低限度。
關(guān)鍵詞：IPSec TCAM 包分類
An Research on TCAM-based IPSec Lookup Solution KE Xiang-dong HUANG Jian-hua
(National Digital Switching System Engineering & Technological R&D Center, ZhengZhou, 450002) Abstract: High performance and security is main aims of network security equipment design, so implementing IPSec to provide security function is an urgent demand. This paper proposes an novel memory architecture based on CAM and SRAM to address the performance weakness of the SPDB and SADB searching operation. This solution can minimize the impact on data path processing when updating the databases.
Keywords: IPSec TCAM IP Classification