Global Sources
EE Times-Asia
Stay in touch with EE Times Asia
EE Times-Asia > Processors/DSPs

Inline security processor family touts Gigabit Ethernet interfaces

Posted: 21 Oct 2005 ?? ?Print Version ?Bookmark and Share

Keywords:cavium networks? nitrox ii? cn2800? security processor? processor?

Cavium Networks' new NITROX II CN2800 family of stand-alone security processors combine a high level of integration and new algorithms for next generation multi-gigabit VPN/Firewall Equipment, L4+ Switches, wireless LAN switches and storage security appliances.

The CN2800 supports both inline and look-aside system architectures in a fully integrated standalone chip. It has two SPI-4.2 interfaces to support 10Gbps I/O or eight integrated Gigabit Ethernet interfaces.

The family contains security protocol processors that can handle a variety of protocols including IPsec, SSL and WLAN security and multi-protocol at the same time. It also has a general purpose CPU that provides capability to process security control plane protocols such as IKEv1/v2.

The CN2800 processor supports a variety of symmetric, asymmetric and hashing protocols including SHA2-224, SHA2-256, SHA2-384, SHA2-512 and AES variants including GCM (Galois Counter Mode). The NITROX II CN2800 family is software compatible with the existing NITROX II security processors.

According to Cavium, this is the only product line in the marketplace to offer SHA2-384 and SHA2-512 algorithms. Other key features include IP packet fragmentation and re-assembly support and NAT traversal over UDP.

Requirements for high level of integration at increasing performance levels for security processors are going up as density of networking equipment increases in data centers and Telco companies. Additionally, new security algorithm requirements are emerging for equipment to be deployed in the marketplace by 2008. These include SHA-2 and AES-GCM. AES-GCM is expected to be the encryption algorithm widely used for IPsec VPN applications as it provides an efficient implementation for confidentiality and data origin authenticity together with and support for data speeds over 10Gbps, according to Cavium Networks.

Both IPv4 and IPv6 support are included. The CN2800 Security Processor family provides a seamless migration path for current NITROX II Security Processor customers as it has the same software APIs. The Software Development Kit (SDK) for the chip includes a software API along with drivers for Linux and reference applications.

Samples for the NITROX II CN2800 Security Processor Family will be available starting Q1 '06. Pricing will range from $250 to $725 for quantities greater than 5K. The development kit for the processor will be available in Q1 2006 as well.

- Marty Gold


Article Comments - Inline security processor family tou...
*? You can enter [0] more charecters.
*Verify code:


Visit Asia Webinars to learn about the latest in technology and get practical design tips.

Back to Top