2023企业上云暨算云融合产业大会-软硬一体云系统论坛-从内生安全智能网卡到S-DPU-沐创集成电路李桧.pdf

1、从内生安全智能网卡到S-DPU网络安全芯片领域的领跑者沐创内生安全智能网卡是什么？内生安全智能网卡的下一代S S-DPUDPU沐创内生安全智能网卡解决了什么问题？沐创内生安全智能网卡应用范例从内生安全智能网卡到S-DPU沐创智能网卡是什么？01技术方向：沐创智能网卡之路通过可重构计算技术实现了网络安全服务的卸载；能够显著降低数据中心云计算服务提供商TCO产品介绍：N10智能网卡芯片平台架构Switching/Routing EngineNPUMPE40G MAC10G MAC10G MAC10G MAC10G MACSecurity EngineRPURPURPURPUPCIE Gen 3.0

2、 x8DMA Engine40G MAC10G MAC10G MAC10G MAC10G MACNIC MODQoS EngineVEBTunneling EngineBMCNIC MODQoS EngineVEBTunneling EngineBMCFlow EngineTCAMFlow EngineTCAMNIC MODQoS EngineVEBTunneling EngineBMCFlow EngineTCAM特性数量1G/10G接口8个40G接口2个25G接口2个，通过SIP/Gearbox支持RPU（微码编程）16个微码引擎。流转发引擎（ACL 交换）2个NPU 模块(深度报文解析)

3、RISC-V x 4产品介绍：N10智能网卡芯片架构图0 1 2 34 5 6 7PCIe 3.0 x8DMAProcessing CoresSwitchFLow EnginesIngress ProcessingEngress Processing 4?RISC-V贤让 终盔盅哺鳟 16淋徉啷镘 终，晶 终IPSec，TLS晶TCAM 衤媵慨媒烂 衤媵殓褓辆稼QoS TCO，TSO，PFC 衤媵殓褓偿郝鳟 RCO焱疰衤媵慨 RSS焱疰香稼舒 衤媵殓褓 8192鲚偿郝 40G阻慨槔劲 疬赍SM1/2/3/4 疬赍RSA，AES，SHA256 疬赍淋鳍 疬赍40G晶铸贤劲 疬赍8列10G瓒8列1

4、G 疬赍凉列40G 疬赍凉列25G楂卣 数据处理层 数据交互层 硬件接口层产品定位：N10智能网卡也是标准网卡VXLAN/NVGRE SRIOV（MAC EVB）网络卸载TSO/LSO/CHCKSUM主机RSS、RSS/VXLANDPDK 标准驱动（PF/VF）内核态标准驱动（PF/VF）PXE启动NC-SI/BMC 边带管理功能标准网卡特性沐创智能网卡解决了什么问题？02高性能：国产化服务器加速生掣靠恹蹒鲸让CPU可编程：高效灵活的协议处理高安全：国密的端到端的安全传输CoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCo

5、reCoreCoreCoreCoreCoreCoreCoreCoreHostN10PEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPENetworkSecurityCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreHostN10PEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPENetworkSecurityCoreCoreCoreCoreCoreCoreCoreCo

6、reCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreCoreHostSecurityNICASICNetwork螭褓铸褓螭褓螭褓N10舨掷虹垃淋疬赍IPSec瓒MACSec碍终俭掷虹从?凹六蜿疬赍枳盅哺掷虹盔架构特点：可编程网卡特性沐创智能网卡应用案例03eth_header(14+4X B)new_ip_header(20B)old_ip_header(20+4X B)ip_pkt_payloadesp_padding(015B)pad_len&next_header(2B)esp_header(8B)ICV(32B)e