Izimfanelo Zomkhiqizo

Imishini eguquguqukayo iyisinqumo esifanele

Ukusebenzisa amadivayisi we-Xilinx kumadivayisi okuphepha esizukulwane esilandelayo akugcini nje ngokubhekana nezinkinga zokudlula kanye nokubambezeleka, kodwa ezinye izinzuzo zihlanganisa ukunika amandla ubuchwepheshe obusha njengamamodeli okufunda omshini, I-Secure Access Service Edge (SASE), kanye nokubethela kwe-post-quantum.

Amadivayisi we-Xilinx ahlinzeka ngenkundla efanelekile yokusheshisa ihadiwe kulobu buchwepheshe, njengoba izidingo zokusebenza zingenakuhlangatshezwana nazo ngokusetshenziswa kwesoftware kuphela.I-Xilinx iqhubeka nokuthuthukisa futhi ithuthukisa i-IP, amathuluzi, isofthiwe, nemiklamo yereferensi yezixazululo ezikhona nezilandelayo zokuphepha kwenethiwekhi.

Ngaphezu kwalokho, amadivayisi we-Xilinx anikezela ngezakhiwo zememori ezihamba phambili embonini ezinohlelo lokugeleza lokusesha okuthambile kwe-IP, okubenza kube yisinqumo esingcono kakhulu sokuphepha kwenethiwekhi nezinhlelo zokusebenza zokuvikela umlilo.

Ukusebenzisa ama-FPGA njengamaphrosesa wethrafikhi wokuphepha kwenethiwekhi

I-traffic eya noma esuka kumadivayisi okuphepha (izindonga zomlilo) ibethelwa kumaleveli amaningi, futhi ukubethela/ukukhishwa kwemfihlo kwe-L2 (MACSec) kucutshungulwa kusendlalelo sesixhumanisi (L2) amanodi enethiwekhi (amaswishi namarutha).Ukucubungula ngale kwe-L2 (ungqimba lwe-MAC) ngokuvamile kufaka phakathi ukucozulula okujulile, ukuqanjwa komhubhe we-L3 (IPSec), kanye nethrafikhi ye-SSL ebethelwe ngethrafikhi ye-TCP/UDP.Ukucubungula iphakethe kuhilela ukuhlukanisa nokuhlukaniswa kwamaphakethe angenayo kanye nokucutshungulwa kwevolumu enkulu yethrafikhi (1-20M) ngokuphuma okuphezulu (25-400Gb/s).

Ngenxa yenani elikhulu lezinsiza zekhompiyutha (ama-cores) adingekayo, ama-NPU angasetshenziselwa ukucubungula iphakethe lejubane eliphakeme, kodwa ukubambezeleka okuphansi, ukusebenza okuphezulu kokucubungula kwethrafikhi okunokwehla akunakwenzeka ngenxa yokuthi ithrafikhi icutshungulwa kusetshenziswa ama-MIPS/RISC cores nokuhlela ama-cores anjalo. ngokusekelwe ekutholakaleni kwabo kunzima.Ukusetshenziswa kwezinsiza zokuphepha ezisekelwe ku-FPGA kungaqeda ngempumelelo le mikhawulo ye-CPU ne-NPU-based architectures.

Ukucutshungulwa kokuphepha kwezinga lohlelo lokusebenza kuma-FPGA

Ama-FPGA alungele ukucutshungulwa kokuphepha okusemgqeni kuma-firewall esizukulwaneni esilandelayo ngoba ahlangabezana ngempumelelo nesidingo sokusebenza okuphezulu, ukuguquguquka, kanye nokusebenza kokubambezeleka okuphansi.Ngaphezu kwalokho, ama-FPGA angaphinda asebenzise imisebenzi yokuphepha yezinga lohlelo lokusebenza, engaqhubeka nokulondoloza izinsiza zekhompyutha futhi ithuthukise ukusebenza.

Izibonelo ezijwayelekile zokucutshungulwa kokuvikeleka kwesicelo kuma-FPGA zifaka

- Injini yokukhipha i-TTCP

- Ukuhambisana kwenkulumo evamile

- Ukubethelwa kwe-asymmetric (PKI) ukucubungula

- Ukucutshungulwa kwe-TLS