Article Details

Abstract

Aiming at the increasing demand for network transmission rate and security in current data communication systems, this paper proposes a high-speed secure transmission scheme based on DPDK. The scheme takes the multi-core CPU as the control center and uses Data Plane Development Kit (DPDK) technology to realize network data processing in user space, avoiding frequent data copying between kernel space and user space. Moreover, it utilizes the CPU affinity characteristic to bind threads to different CPU cores to improve CPU resource utilization and achieve high-speed network data processing. Meanwhile, the system implements data encryption and decryption based on the IPsec protocol suite and domestic cryptographic algorithms, ensuring data security during transmission. Experimental results show that the system achieves high-speed and secure processing of data packets, verifying the feasibility of the scheme.

Keywords

high-speed; security; DPDK; IPsec

References

1. [1] Man Maoli, Luo Lei, Tian Hui, etc High performance mobile communication network IPSec based on DPDK [J]. Modern Information Technology, 2022, 6 (5): 76-78
2. [2] Hu Wei, Yang Chun, Li Wen Transplantation and Evaluation of DPDK on Domestic Loongson Platform [J]. Communication Technology, 2020, 53 (7): 1832-1836
3. [3] Zhao Huanhuan, Zhang Genquan, Zhang Huixin Message transmission framework based on DPDK hybrid interrupt polling mode [J]. Radio Communication Technology, 2018, 44 (3): 319-322
4. [4] Zhu Heqing DPDK [M]. Beijing: Machinery Industry Press, 2016
5. [5] Jiang Haisu, Chen Qingkui Multi port parallel communication mechanism based on DPDK [J]. Small Microcomputer Systems, 2020, 41 (5): 1053-1058
6. [6] Li Kai Research on Dynamic Load Balancing Technology Based on DPDK [D]. Harbin: Harbin Institute of Technology, 2017
7. [7] Wu Cheng Research and Implementation of User Mode IPSec Protocol Stack [D]. Xi'an: Xi'an University of Electronic Science and Technology, 2014
8. [8] Zhang Yue Research and Implementation of State Security IPSec VPN Security Mechanism [D]. Xi'an: Xi'an University of Electronic Science and Technology, 2018
9. [9] Zhang Xiao Research on National Secret Algorithm Based on Hyperhybrid Reconfigurable Computing Array [D]. Zhengzhou: Zhengzhou University, 2020
10. [10] Li Yanran, Yan Limin Reconfigurable Design of State Secrets Algorithm SM4 and ZUC Based on FPGA [J]. Journal of Shanghai University: Natural Science Edition, 2024, 30 (3): 503-511

About the authors

Yang Huan (1992-), male, Manchu ethnicity, from Chengde, Hebei, engineer, bachelor's degree, research interests include embedded software design and information security; Li Bin (1991-), male, Han ethnicity, from Shijiazhuang, Hebei, engineer, master's degree, research interests include information security and security system design; Wang Shuo (1988-), male, Han ethnicity, from Baoding, Hebei, senior engineer, master's degree, research interests include electronic information and information security; Ji Shengkai (1990-), male, Han ethnicity, from Heze, Shandong, engineer, master's degree, research interests include information security and security system design; Huang Yilong (1988-), male, Han ethnicity, from Qinhuangdao, Hebei, senior engineer, master's degree, research interests include electronic information and information security.