Paper Abstract and Keywords |
Presentation |
2006-09-15 11:10
Asynchronous IPsec stack for Linux 2.6 kernel: implementation and performance evaluation Keisuke Mera, Takeshi Ishihara, Shigeo Matsuzawa (Toshiba) IN2006-67 |
Abstract |
(in Japanese) |
(See Japanese page) |
(in English) |
Hardware cipher processing of IPsec protocol have been used for reducing the load of IPsec packet processing.
Such a method is being implemented on some OSes including Linux and OpenBSD.
In recent years, reducing CPU load during hardware cipher processing become possible by performing IPsec process and hardware cipher process asynchronously. This method was developed by OpenBSD project, and was ported to FreeBSD and NetBSD.
But, such a method is not implemented on the IPsec stack of Linux 2.6 mainline kernel.
Therefore, we implemented the asynchronous IPsec stack for Linux 2.6 kernel, and evaluated the performance of our asynchronous IPsec stack.
This article shows that the asynchronous IPsec stack is useful for throughput improvement and CPU load reduction of IPsec processing on Linux. |
Keyword |
(in Japanese) |
(See Japanese page) |
(in English) |
IPsec / Linux / non-blocking / asynchronous / hardware offloading / / / |
Reference Info. |
IEICE Tech. Rep., vol. 106, no. 237, IN2006-67, pp. 103-108, Sept. 2006. |
Paper # |
IN2006-67 |
Date of Issue |
2006-09-07 (IN) |
ISSN |
Print edition: ISSN 0913-5685 Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
Download PDF |
IN2006-67 |
Conference Information |
Committee |
IN NS CS |
Conference Date |
2006-09-14 - 2006-09-15 |
Place (in Japanese) |
(See Japanese page) |
Place (in English) |
|
Topics (in Japanese) |
(See Japanese page) |
Topics (in English) |
VPN, NAT, Network security, DDos, P2P, etc. |
Paper Information |
Registration To |
IN |
Conference Code |
2006-09-IN-NS-CS |
Language |
Japanese |
Title (in Japanese) |
(See Japanese page) |
Sub Title (in Japanese) |
(See Japanese page) |
Title (in English) |
Asynchronous IPsec stack for Linux 2.6 kernel: implementation and performance evaluation |
Sub Title (in English) |
|
Keyword(1) |
IPsec |
Keyword(2) |
Linux |
Keyword(3) |
non-blocking |
Keyword(4) |
asynchronous |
Keyword(5) |
hardware offloading |
Keyword(6) |
|
Keyword(7) |
|
Keyword(8) |
|
1st Author's Name |
Keisuke Mera |
1st Author's Affiliation |
Corporate Research & Development Center, Toshiba Corporation (Toshiba) |
2nd Author's Name |
Takeshi Ishihara |
2nd Author's Affiliation |
Corporate Research & Development Center, Toshiba Corporation (Toshiba) |
3rd Author's Name |
Shigeo Matsuzawa |
3rd Author's Affiliation |
Corporate Research & Development Center, Toshiba Corporation (Toshiba) |
4th Author's Name |
|
4th Author's Affiliation |
() |
5th Author's Name |
|
5th Author's Affiliation |
() |
6th Author's Name |
|
6th Author's Affiliation |
() |
7th Author's Name |
|
7th Author's Affiliation |
() |
8th Author's Name |
|
8th Author's Affiliation |
() |
9th Author's Name |
|
9th Author's Affiliation |
() |
10th Author's Name |
|
10th Author's Affiliation |
() |
11th Author's Name |
|
11th Author's Affiliation |
() |
12th Author's Name |
|
12th Author's Affiliation |
() |
13th Author's Name |
|
13th Author's Affiliation |
() |
14th Author's Name |
|
14th Author's Affiliation |
() |
15th Author's Name |
|
15th Author's Affiliation |
() |
16th Author's Name |
|
16th Author's Affiliation |
() |
17th Author's Name |
|
17th Author's Affiliation |
() |
18th Author's Name |
|
18th Author's Affiliation |
() |
19th Author's Name |
|
19th Author's Affiliation |
() |
20th Author's Name |
|
20th Author's Affiliation |
() |
Speaker |
Author-1 |
Date Time |
2006-09-15 11:10:00 |
Presentation Time |
20 minutes |
Registration for |
IN |
Paper # |
IN2006-67 |
Volume (vol) |
vol.106 |
Number (no) |
no.237 |
Page |
pp.103-108 |
#Pages |
6 |
Date of Issue |
2006-09-07 (IN) |
|