性能和安全是網絡安全設備設計的兩個主要問題，在網絡設備中通過IPSec 來提供安
全功能已成為一種迫切需要。本文針對IPSec 中的SPDB 和SADB 數據庫查找和維護造成的性能瓶頸問題，提出了一種由CAM 和SRAM 分別完成查找和讀取的查表流水線方案，該方案可將數據庫維護對數據處理的影響降到最低限度。
關鍵詞：IPSec TCAM 包分類
An Research on TCAM-based IPSec Lookup Solution KE Xiang-dong HUANG Jian-hua
(National Digital Switching System Engineering & Technological R&D Center, ZhengZhou, 450002) Abstract: High performance and security is main aims of network security equipment design, so implementing IPSec to provide security function is an urgent demand. This paper proposes an novel memory architecture based on CAM and SRAM to address the performance weakness of the SPDB and SADB searching operation. This solution can minimize the impact on data path processing when updating the databases.
Keywords: IPSec TCAM IP Classification