Halayen Samfur

Amfani da FPGAs azaman masu sarrafa zirga-zirga don tsaro na cibiyar sadarwa

Traffic zuwa ko daga na'urorin tsaro (firewalls) ana ɓoyayye ne a matakai da yawa, kuma ana sarrafa ɓoyayyen ɓoyewa/decryption L2 (MACSec) a layin hanyar haɗin yanar gizo (L2) nodes na cibiyar sadarwa (masu sauya sheka da masu amfani da hanya).Yin aiki fiye da L2 (Layin MAC) yawanci ya haɗa da zurfafa zurfafa bincike, ɓarnawar rami na L3 (IPSec), da ɓoyayyen zirga-zirgar SSL tare da zirga-zirgar TCP/UDP.Gudanar da fakitin ya ƙunshi ƙididdigewa da rarraba fakiti masu shigowa da sarrafa manyan kuɗaɗen zirga-zirga (1-20M) tare da babban kayan aiki (25-400Gb/s).

Saboda ɗimbin albarkatun ƙididdiga (cores) da ake buƙata, ana iya amfani da NPUs don sarrafa fakitin sauri mafi girma, amma ƙarancin latency, babban aikin sarrafa zirga-zirgar ababen hawa ba zai yiwu ba saboda ana sarrafa zirga-zirga ta amfani da muryoyin MIPS / RISC da tsara irin waɗannan abubuwan. bisa samunsu yana da wahala.Amfani da na'urorin tsaro na tushen FPGA na iya kawar da waɗannan iyakoki na tsarin gine-ginen CPU da NPU yadda ya kamata.

Gudanar da matakan tsaro na aikace-aikace a cikin FPGAs

FPGAs suna da kyau don sarrafa tsaro ta layi a cikin tacewar wuta na zamani na gaba saboda sun sami nasarar biyan buƙatu don babban aiki, sassauci, da aiki mara ƙarfi.Bugu da kari, FPGAs kuma na iya aiwatar da ayyukan tsaro matakin aikace-aikace, wanda zai iya ƙara adana albarkatun kwamfuta da haɓaka aiki.

Misalai na gama-gari na sarrafa tsaro na aikace-aikace a cikin FPGA sun haɗa da

- TTCP kashe injin

- Daidaita magana akai-akai

- Asymmetric encryption (PKI) aiki

- TLS aiki

Fasahar tsaro na gaba-gaba ta amfani da FPGAs

Algorithms na asymmetric da yawa suna da rauni don daidaitawa ta kwamfutoci masu yawa.Algorithms na tsaro asymmetric kamar RSA-2K, RSA-4K, ECC-256, DH, da ECCDH sune dabarun ƙidayar ƙididdiga suka fi shafa.Ana bincika sabbin aiwatar da algorithms asymmetrics da daidaitattun NIST.

Shawarwari na yanzu don boye-boye na jimla sun haɗa da hanyar Koyon Kuskuren Ring-on-LWE (R-LWE) don

- Rubutun Maɓalli na Jama'a (PKC)

- Sa hannu na dijital

- Mabuɗin halitta

Ƙaddamar da aiwatar da cryptography na maɓalli na jama'a ya haɗa da wasu sanannun ayyukan lissafi (TRNG, Gaussian noise sampler, polynomial ƙari, binaryar ƙididdige ƙididdigewa, ninkawa, da dai sauransu).FPGA IP don yawancin waɗannan algorithms yana samuwa ko za a iya aiwatar da su da kyau ta amfani da tubalan ginin FPGA, kamar DSP da injunan AI (AIE) a cikin na'urorin Xilinx masu wanzuwa da na gaba.

Wannan farar takarda ta bayyana aiwatar da tsaro na L2-L7 ta amfani da tsarin gine-ginen da aka tsara wanda za'a iya tura shi don haɓaka tsaro a cikin hanyoyin sadarwa na gefe / shiga da kuma tacewar wuta na gaba (NGFW) a cikin cibiyoyin sadarwar kasuwanci.