• 日本語
• 한국어
• 简体中文
• English

IPSec/SSL/VoIP

Virtual Private Networking (VPN) technology has been in use for over twenty years now and Elliptic has developed a broad spectrum of solutions for this market segment. For low performance applications, customers usually choose individual symmetric IP cores and sequence the cores directly by the embedded processor. As the bandwidth requirement increases however, customers must employ engines offering more offload.

Elliptic's most powerful packet processing engines for IPsec are the SPP-230, the SPP-330 and the CLP-30. The SPP-230 and SPP-330 security engines are well suited for a variety of applications, including mobile backhaul, LTE small cells, residential gateways, VPN and gateway appliances, terminal servers and thin clients, and they address the security, performance and cost needs as operators transition to 4G networks to support the growing mobile data traffic. The CLP-30 offers increased throughput options and has the ability to implement multiple pipelines, multiple DMA ports as well as IPv6 support. The CLP-30 can scale up to 10 Gbps of throughput.

Most applications require IPsec processing from hundreds of Mbps to Gbps range and target cost sensitive markets. Elliptic's CLP-600 Security Protocol Accelerator (SPAcc) is perfect for this requirement. This engine implements two AMBA/AHB/AXI interfaces, state-of-the-art scatter-gather DMA, optimal processing of the cipher/hash operations, interrupt coalescence and has the unique attribute that it can be configured at build time with additional cipher/hash options to support other security protocols such as SRTP, SSL/TLS/DTLS, WiMAX and 3GPP. This flexibility has propelled this engine together with the SPP-330 to become Elliptic's most popular VPN solutions.

To complement the IPsec product portfolio, Elliptic also offers SSL, TLS and DTLS record processing engines. SSL/TLS VPNs have taken market share away from IPsec and as such SoC designers frequently add SSL capability to their VPN solution to cover both markets. The SPP-200 PDU processor is a perfect solution for medium performance gateway applications in the 100 Mbps to 1 Gbps range. The SPP-330 IPsec/TLS Multi-protocol PDU Processor is another alternative solution that provides support for multiple protocols.

To guide customers in the integration of the hardware IPsec engines into Linux IPsec, Elliptic offers the ESS-03 Linux IPsec Middleware. Licensed as C source code, developers can quickly implement a VPN solution with offload capability then fully optimize the solution based on the final target environment.