IPsec-Protected Transport of HDTV over IP

Bellows, P., Flidr, J., Gharai, L., Perkins, C. , Chodowiec, P. and Gaj, K. (2005) IPsec-Protected Transport of HDTV over IP. In: Lysaght, P. and Rosentiel, W. (eds.) New Algorithms, Architectures and Applications for Reconfigurable Computing. Springer: Berlin, pp. 183-194. ISBN 1-4020-3127-0 (doi: 10.1007/1-4020-3128-9_15)

Full text not currently available from Enlighten.

Publisher's URL: http://dx.doi.org/10.1007/1-4020-3128-9_15

Abstract

Bandwidth-intensive applications compete directly with the operating system's network stack for CPU cycles. This is particularly true when the stack performs security protocols such as IPsec; the additional load of complex cryptographic transforms overwhelms modern CPUs when data rates exceed 100 Mbps. This paper describes a network-processing accelerator which overcomes these bottlenecks by offloading packet processing and cryptographic transforms to an intelligent interface card. The system achieves sustained 1 Gbps host-to-host bandwidth of encrypted IPsec traffic on commodity CPUs and networks. It appears to the application developer as a normal network interface, because the hardware acceleration is transparent to the user. The system is highly programmable and can support a variety of offload functions. A sample application is described, wherein production-quality HDTV is transported over IP at nearly 900 Mbps, fully secured using IPsec with AES encryption.

Item Type:Book Sections
Status:Published
Glasgow Author(s) Enlighten ID:Perkins, Dr Colin
Authors: Bellows, P., Flidr, J., Gharai, L., Perkins, C., Chodowiec, P., and Gaj, K.
College/School:College of Science and Engineering > School of Computing Science
Journal Name:New Algorithms, Architectures and Applications for Reconfigurable Computing
Publisher:Springer
ISBN:1-4020-3127-0

University Staff: Request a correction | Enlighten Editors: Update this record