Security

Accelerating VPN Gateway with Acronics SolutionsTechnologies on the Acronics Solutions FPGA Programmable Acceleration Card

Overview

Acronics Solutions’s FPGA-based IP security (IPSec) solution provides up to 100 Gbps wire speed in cryptography processing to support VPN Gateway, at ultra-high density with one million Security Associations (SAs). It is also optimized for the ACS FPGA Programmable Acceleration Card (Intel FPGA PAC) to provide flexibility and power and performance advantages.
- Any IPsec Database functions - Security Policy Database (SPD), Security Association Database (SAD) and Peer Authentication Database (PAD)
- TheAnti-replay detection service for inbound packets
- Reassembly of inbound IP packet fragments, IP traffic header processing, or handling of ICMP traffic

Introduction

Targeting network functions virtualization (NFV) and cloud computing applications, Acronics Solutions’s IPSec Acceleration IP Core solution will enable vendors to satisfy 5G IPSec security requirements and achieve the industry’s highest throughput and lowlatency VPN Gateway on a single server enabling better CPU and RAM utilization. Acronics Solutions’s IPSec Acceleration IP Core supports the Intel FPGA PAC for full network interface card (NIC) functionality for 4x 25GbE or 8x 10GbE. Acronics Solutions’s IPSec also supports various virtualization technologies, such as SR-IOV and Virtual Ethernet Bridging (VEB/VEPA).

Business Challenge

As more and more businesses are trusting their mission-critical data to the cloud, providing secure encryption of network data and increasing overall throughput in data centers is critical.

Solution

Acronics Solutions FPGA-based VPN Gateway Acceleration IP Core, optimized for the Intel FPGA PAC provides a fast throughput of VPN Gateway encryption to secure  transmission of data and increase data center network traffic throughput.

Executive Summary

• The VPN Gateway Acceleration IP Core provides acceleration of up to 100 Gbps and supports dynamic workloads on the Intel FPGAPAC
• Ethernet interfaces: 4x 25GbE or 8X 10GbE
• Host interface: two PCI Express* (PCIe*) Gen3 x8 lanes
• Up to 100 Gbps, bidirectional in-line or look-aside acceleration for VPN Gateway for traffic encryption or decryption and authentication
• Various cryptography modes:AES-GCM (128/192/256), AES-CBC (128/192/256), SHA-1/2, and others
• Up to 100K concurrent flows with enhanced DDR4 SDRAM
• Virtualization technologies SR-IOV and VEB for multiple virtual machines (Vms)
• Operating system (OS) support: Linux*, Red Hat* Enterprise Linux OS
• NFV software solutions: Compatible with Data Plane Development Kit (DPDK), Open vSwitch (OVS), vector packet processing (VPP) or FD.io

 

Conclusion

Acronics Solutions FPGA-based IPSec Acceleration IP Core provides the highest IPSec throughput to accelerate encrypted network traffic through the data center. The Intel FPGA PAC is designed to accelerate network traffic and capable of customization to meet the exact needs of your network.