IPSec is a suite of protocols that adds security to communications at the IP level. Protocols within the IPSec suite make extensive use of cryptographic algorithms. Since these algorithms are computationally very intensive, some hardware acceleration is needed to support high throughput. In this paper we discuss a scheduling algorithm for distributing IPSec packet processing over the CPU with a software implementation of the cryptographic algorithms considered and multiple cryptographic accelerators. This algorithm also provides support for quality of service. High-level simulations and the related results are provided to show the properties of the algorithm. Some architectural improvements suitable to better exploit this scheduling algorithm are also presented.

A QoS-enabled packet scheduling algorithm for IPSec multi-accelerator based systems / A. Ferrante, V. Piuri, F. Castanier - In: Proceedings of the 2nd conference on Computing frontiers 2005, Ischia, Italy May 04 - 06, 2005. / Mateo Valero, Alex Ramirez. - New York : ACM Press, 2005. - ISBN 1595930191. - pp. 221-229 (( Intervento presentato al 2. convegno ACM International Conference on Computing Frontiers (CF2005) tenutosi a Ischia, Italia nel 2005 [10.1145/1062261.1062298].

A QoS-enabled packet scheduling algorithm for IPSec multi-accelerator based systems

A. Ferrante;V. Piuri;
2005

Abstract

IPSec is a suite of protocols that adds security to communications at the IP level. Protocols within the IPSec suite make extensive use of cryptographic algorithms. Since these algorithms are computationally very intensive, some hardware acceleration is needed to support high throughput. In this paper we discuss a scheduling algorithm for distributing IPSec packet processing over the CPU with a software implementation of the cryptographic algorithms considered and multiple cryptographic accelerators. This algorithm also provides support for quality of service. High-level simulations and the related results are provided to show the properties of the algorithm. Some architectural improvements suitable to better exploit this scheduling algorithm are also presented.
Settore ING-INF/05 - Sistemi di Elaborazione delle Informazioni
2005
Book Part (author)
File in questo prodotto:
Non ci sono file associati a questo prodotto.
Pubblicazioni consigliate

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/2434/8741
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 6
  • ???jsp.display-item.citation.isi??? ND
social impact