Name
Abstract | ||
|---|---|---|
IPSec is a suite of protocols that adds security to communications at the IP level. Protocols within the IPSec suite make extensive use of cryptographic algorithms. Since these algorithms are computationally very intensive, some hardware acceleration is needed to support high throughput. IPSec accelerator performance may heavily depend on the dimension of the packets to be processed. In fact, when packets are small, the time needed to transfer data and to set up the accelerators may exceed the one to process (e.g. to encrypt) the packets by software. In this paper we present a packet scheduling algorithm that tackles this problem. Packets belonging to the same Security Association are grouped before the transfer to the accelerators. Thus, the transfer and the initialization time have a lower influence on the total processing time of the packets. This algorithm also provides the capability of scheduling grouped packets over multiple cryptographic accelerators. High-level simulations of the scheduling algorithm have been performed and the results for a one-accelerator and for a two-accelerator system are also shown in this paper. |
Year | DOI | Venue |
|---|---|---|
2007 | 10.4304/jcm.2.2.53-60 | JCM |
Keywords | Field | DocType |
index terms—cryptographic accelerators,ipsec,packet scheduling algorithm,small packets.,hardware accelerator,high throughput,security association,indexing terms,scheduling algorithm | Out-of-order delivery,IPsec,Computer science,Scheduling (computing),Network packet,Computer network,Security association,Encryption,Hardware acceleration,Throughput,Distributed computing | Journal |
Volume | Issue | Citations |
2 | 2 | 1 |
PageRank | References | Authors |
0.37 | 6 | 3 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Antonio Taddeo | 1 | 41 | 7.74 |
| Alberto Ferrante | 2 | 78 | 13.68 |
| Vincenzo Piuri | 3 | 859 | 100.65 |