Fast IPsec: a high-performance IPsec implementation

Authors:
Samuel J. Leffler
Affiliations:
Errno Consulting
Venue:
BSDC'03 Proceedings of the BSD Conference 2003 on BSD Conference
Year:
2003

Citing 3
Cited 2

Reasoning about SMP in FreeBSD

BSDC'03 Proceedings of the BSD Conference 2003 on BSD Conference
Cryptographic device support for FreeBSD

BSDC'03 Proceedings of the BSD Conference 2003 on BSD Conference
Tagging data in the network stack: mbuf_tags

BSDC'03 Proceedings of the BSD Conference 2003 on BSD Conference

Cryptographic device support for FreeBSD

BSDC'03 Proceedings of the BSD Conference 2003 on BSD Conference
Q-ESP: a QoS-compliant security protocol to enrich IPSec framework

NTMS'09 Proceedings of the 3rd international conference on New technologies, mobility and security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Fast IPsec is an implementation of the IPsec protocols [Kent & Atkinson, 1998a] for FreeBSD that was designed for high performance. In particular the protocols use the OpenBSD Cryptographic Framework, as ported to FreeBSD [Leffler, 2003], so any cryptographic hardware is automatically used to accelerate their operation. Fast IPsec, running on a uniprocessor system with a single Broadcom BCM5822 cryptographic processor, has demonstrated throughput of more than 400 megabits/second when acting as an IPsec terminator. This is more than 50% higher than any other freely available IPsec implementation.