System and operation method of ipsec embedded firewall based on ipv6

Abstract

The invention provides a system of an IPSec (Internet Protocol Security) embedded firewall based on an IPv6 (Internet Protocol Version 6). The system comprises an Ethernet module for receiving and sending a data packet on the Ethernet, CAM (Content Addressable Memory) modules for matching data and judging whether the data meet a requirement or not, TCAM (Ternary Content Addressable Memory) modules for quickly matching an IP address range, a CPU (Central Processing Unit) management control module which is used for initializing all the CAM modules and all the TCAM modules, interacts with a network firewall module in real time to realize a data packet filtering algorithm, adopts a reasonable high-efficiency splitting strategy for the IP data packet and coordinates the Ethernet module, the CAM modules, the TCAM modules and the network firewall module according to a control signal, and the network firewall module used for realizing control on a clock, carrying on a specific function under each corresponding clock, determining to skip and output a state according to signals generated by the Ethernet module, the CAM modules and the TCAM modules and processing all the modules in sequence according to a change of the clock. According to the system of the IPSec embedded firewall based on the IPv6, the matching processing speed is increased, and the accuracy is improved.

Description

technical field [0001] The invention relates to the technical field of embedded firewalls, in particular to an IPv6-based IPSec embedded firewall system and an operating method thereof. Background technique [0002] IPSec plays a pivotal role in network security technology and is also a long-term research direction for secure networking. IPSec can provide proactive protection and prevent attacks on private networks and the Internet. IPSec provides IP and upper-layer protocols with security services such as integrity, data source identity authentication, anti-replay attack, and confidentiality of data content. Therefore, the research and implementation of IPSec protocol is helpful to protect the security of network communication in people's daily life and work, which has important commercial value and practical significance. With the popularization and development of the network, how to deal with the characteristics that the Internet is vulnerable to various security threat...

AI Technical Summary

Problems solved by technology

However, the distributed firewall is based on the assumption that "the local protected host is trustworthy". However, in reality, not all local users are trustworthy, and even if the local users are trustworthy, some worms such as Code Red etc. can turn trusted users into untrusted

Images