论文部分内容阅读
有限的资源限制了在LCNA设备中完整的实现IPSec协议,在协议实现中要求简化协议功能或裁剪协议模块。同时有限的计算能力也限制了IPSec的吞吐率,需要简化协议处理流程。分析了AH协议和ESP协议及传输模式和隧道模式功能上的重复,给出简化协议实现的建议,以使协议能适应有限的ROM空间。然后以减少代码量和提高处理效率为目标,提出了协议的实现方法。最后在实现的基础上讨论并分析了使用IPSec传输数据时的性能。
Limited resources limit the complete implementation of the IPSec protocol in LCNA devices and require simplified protocol functions or tailored protocol modules in the protocol implementation. At the same time limited computing capacity also limits the throughput of IPSec, the need to simplify the protocol processing flow. Analyzes the duplication of AH protocol, ESP protocol, transmission mode and tunnel mode, and gives the suggestion to simplify the protocol implementation so that the protocol can adapt to the limited ROM space. Then to reduce the amount of code and improve processing efficiency as the goal, put forward the realization of the agreement. Finally, based on the realization of the discussion and analysis of the use of IPSec data transmission performance.