Izimfanelo Zomkhiqizo

Ukusebenzisa ama-FPGA njengamaphrosesa wethrafikhi wokuphepha kwenethiwekhi

I-traffic eya noma esuka kumadivayisi okuphepha (izindonga zomlilo) ibethelwa kumaleveli amaningi, futhi ukubethela/ukukhishwa kwemfihlo kwe-L2 (MACSec) kucutshungulwa kusendlalelo sesixhumanisi (L2) amanodi enethiwekhi (amaswishi namarutha).Ukucubungula ngale kwe-L2 (ungqimba lwe-MAC) ngokuvamile kufaka phakathi ukucozulula okujulile, ukuqanjwa komhubhe we-L3 (IPSec), kanye nethrafikhi ye-SSL ebethelwe ngethrafikhi ye-TCP/UDP.Ukucubungula iphakethe kuhilela ukuhlukanisa nokuhlukaniswa kwamaphakethe angenayo kanye nokucutshungulwa kwevolumu enkulu yethrafikhi (1-20M) ngokuphuma okuphezulu (25-400Gb/s).

Ngenxa yenani elikhulu lezinsiza zekhompiyutha (ama-cores) adingekayo, ama-NPU angasetshenziselwa ukucubungula iphakethe lejubane eliphakeme, kodwa ukubambezeleka okuphansi, ukusebenza okuphezulu kokucubungula kwethrafikhi okunokwehla akunakwenzeka ngenxa yokuthi ithrafikhi icutshungulwa kusetshenziswa ama-MIPS/RISC cores nokuhlela ama-cores anjalo. ngokusekelwe ekutholakaleni kwabo kunzima.Ukusetshenziswa kwezinsiza zokuphepha ezisekelwe ku-FPGA kungaqeda ngempumelelo le mikhawulo ye-CPU ne-NPU-based architectures.

Ukucutshungulwa kokuphepha kwezinga lohlelo lokusebenza kuma-FPGA

Ama-FPGA alungele ukucutshungulwa kokuphepha okusemgqeni kuma-firewall esizukulwaneni esilandelayo ngoba ahlangabezana ngempumelelo nesidingo sokusebenza okuphezulu, ukuguquguquka, kanye nokusebenza kokubambezeleka okuphansi.Ngaphezu kwalokho, ama-FPGA angaphinda asebenzise imisebenzi yokuphepha yezinga lohlelo lokusebenza, engaqhubeka nokulondoloza izinsiza zekhompyutha futhi ithuthukise ukusebenza.

Izibonelo ezijwayelekile zokucutshungulwa kokuvikeleka kwesicelo kuma-FPGA zifaka

- Injini yokukhipha i-TTCP

- Ukuhambisana kwenkulumo evamile

- Ukubethelwa kwe-asymmetric (PKI) ukucubungula

- Ukucutshungulwa kwe-TLS

Ubuchwepheshe bokuphepha besizukulwane esilandelayo obusebenzisa ama-FPGA

Ama-algorithms amaningi akhona asymmetric asengozini yokufakwa ebucayini ngamakhompyutha we-quantum.Ama-asymmetric security algorithms afana ne-RSA-2K, RSA-4K, ECC-256, DH, kanye ne-ECDH yiwona athintwa kakhulu amasu e-quantum computing.Ukusetshenziswa okusha kwama-asymmetric algorithms kanye nokumiswa kwe-NIST kuyahlolwa.

Iziphakamiso zamanje zokubethela kwe-post-quantum zifaka indlela yokufunda nge-Ring-on-Error Learning (R- LWE)

- I-Cryptography Yokhiye Womphakathi (PKC)

- Amasignesha Digital

- Indalo Key

Ukuqaliswa okuhlongozwayo kokubethela kokhiye basesidlangalaleni kuhlanganisa imisebenzi ethile yezibalo eyaziwayo (i-TRNG, isampula yomsindo we-Gaussian, i-polynomial addition, i-binary polynomial quantifier division, ukuphindaphinda, njll.).I-FPGA IP yamaningi alawa ma-algorithms ayatholakala noma angasetshenziswa ngokuphumelelayo kusetshenziswa amabhulokhi wokwakha e-FPGA, njengezinjini ze-DSP ne-AI (AIE) kumadivayisi akhona kanye nesizukulwane esilandelayo se-Xilinx.

Leli phepha elimhlophe lichaza ukuqaliswa kokuvikeleka kwe-L2-L7 kusetshenziswa i-architecture ehlelekayo engasatshalaliswa ukuze kusheshiswe ukuphepha kumanethiwekhi onqenqema/ukufinyelela kanye nezinqamuleli zomlilo zesizukulwane esilandelayo (NGFW) kumanethiwekhi ebhizinisi.