IPsec/TLS Multi-Protocol PDU Processor

The IPsec/TLS Multi-protocol PDU Processor addresses today's security needs for a wide range of applications, including residential gateways, VPN and gateway appliances, LTE small cells, terminal servers and thin clients.

Network security protocols are computationally intensive, typically consuming a high percentage of the application processors' processing power. The IPsec/TLS Multi-protocol PDU Processor is a versatile processor, with a highly configurable architecture that can be tuned to provide the exact functionality required for specific applications, while allowing SoC manufacturers to efficiently balance power, performance and area.

The IPsec/TLS Multi-protocol PDU Processor offers Gigabit range performance by parsing and processing the ESP/AH and SSL/TLS/DTLS packet transforms, performing the cryptographic operations and maintaining the security state in a structure designated as a Security Association (SA). The internal state-of-the-art DMA engine has the ability to efficiently gather a packet from a fragmented memory buffer for processing, operate on the packet, then scatter the processed packet back to a fragmented memory, while avoiding memory copies to make fragmented packets/records contiguous. The level of protocol processing, plus the addition of SA management by the protocol engine directly in system memory, minimizes the overhead on the application processor, thus allowing today's high bandwidth requirements to be easily achieved in a wide range of networking applications.

Many applications have low latency requirements for certain data traffic. The IPsec/TLS Multi-protocol PDU Processor supports enhanced traffic management via the Quality-of-Service (QoS) feature which allows latency sensitive traffic to be placed into high priority queues and simultaneously manage larger packets through the low priority queues to ensure that the overall system performance objectives are achieved.

The IPsec/TLS Multi-protocol PDU Processor is delivered with software development kits, tools and drivers to allow for a seamless system integration into embedded Linux environments, ARM-based platforms and other systems.