Compact List
Small Cell Integrated Backhaul (SIB) Application Solutions Kit (ASK) for the LX2160A and LS1046A Processors
This 5G small cell integrated backhaul application solutions kit (SIB ASK) offloads the main CPU by sending packets through NXP security hardware and through packet fastpath implemented in hardware or software. Use existing IPTABLES and firewall rules to configure. The CPU cycle savings from fastpaths provides large boosts in CPU utilization, packet throughput, packet latency and even power.
Leverages Linux stack for initial connection processing and session learning.
Bulk of the data traffic is offloaded through fast path engine. Thus provides large boosts in CPU utilization, packet throughput, packet latency and even power.
Hardware based QoS(CEETM) offers strict priority queuing(SPQ) and weighted bandwidth fair scheduling(WBFS)
Software Details
Features
Software Details (NXP Fast-Path Packet Processing)
- Fastpath Packet Engine provides bypass of the Linux Stack saving substantial CPU cycles
- Two fastpath technologies : ASF for CPU-based bypass / DPAA(ASK) for HW based bypass
- No specialized Linux user space programming. Just use Linux (nfconntrack, iptables(firewall rules))
- Excellent integration with NXP hardware security(CAAM) for fast key exchange and fast symmetrical ciphers
- QoS offload through CEETM hardware
IPSEC Features (Fastpath-Enabled)
- ESP (Encapsulation Security Payload)
- Algorithms/Cipher: DES, 3DES, AES 128/192/256, HMA-SHA1, HMAC-SHA256, HMAC-MD5
- Tunnel Mode (Tranport mode handled in slow (not fast) path)
- Security Engine(HW) for Protocol and crypto acceleration
- HW Acceleration for cryptography
- Route based and policy-based VPN
- NAT Traversal
- Extended Sequence Number
- Red-side and black-side fragmentation
- DSCP based Security Association
- Populate from Packet (Hardware Parser)
- Copy/Set/Clear DF and DSCP/QoS bits in outer header
- Persistent tunnels
- Random IV generation for each packet
- PMTU discovery
- Anti-replay
- SA lifetime - time and volume
- PMTU handling during fragmentation
- Inbound policy verification
- Internet Key Exchange (IKE) v1 and v2
- IPv6 ESP passthrough
- IPv4 over IPv6, IPv6 over IPv4 IPsec tunnels
- Dead Peer Detection (DPD)
- SA statistics support
Fastpath-Enabled Networking Features
- IPv4 & IPv6 Forwarding
- VLAN support
- Support of LGW (Local break out) traffic
- Daisy chain support
- IP Fragmentation
- L2 Bridge
- DSCP to VLAN P-bit mapping
- DSCP to FQ QoS mapping
QoS
-
QoS offload through CEETM hardware
- Strict Priority Queuing (SP)
- Weighted Bandwidth Fair Scheduling(WBFS)
- Token Bucket Rate Limiting
- Exception Path Rate Limiting
Introduce High Level Category
- Linux 4.19 and 5.15 kernel versions
Software Details
IPSEC Supported RFC
- RFC 2401 - General IP Security Protocol
- RFC 2402 - Authentication Header Protocol
- RFC 2403 - HMAC-MD5-96
- RFC 2404 - HMAC-SHAl-96
- RFC 2405 - DES-CBC Cipher algorithm
- RFC 2406 - Encapsulation Security Payload Protocol
- RFC 2407 - Domain of interpretation
- RFC 2410 - The NULL Encryption Algorithm and its use with IPsec
- RFC 5084 - Combined Mode Algorithms (AES-CCM and AES-GCM Authenticated Encryptions)
IKE (OpenSource Strong Swan Supported RFC)
-
IKEv1:
- RFC 2407 - Domain of interpretation
- RFC 2408 - Internet Security Association and Key Management Protocol (ISAKMP)
- RFC 2409 - The Internet Key Exchange
- RFC 2412 - OAKLEY
-
IKEv2:
- RFC 7296 - Internet Key Exchange v2 Protocol
- RFC 7427 - Signature Authentication in IKEv2
Downloads
Quick reference to our software types.
1 download
-
Application Example Software
Binaries for QorIQ LS1046A Communications Processor Application Solution Kit - SIB
Note: For better experience, software downloads are recommended on desktop.
1 documents
Compact List