New VPN/firewall security solution supports Embedded Linux
Jun 4, 2002 — by LinuxDevices Staff — from the LinuxDevices Archive — viewsAtlanta, GA; Supercomm 2002 — (press release excerpt) — SSH Communications Security today announced an integrated VPN and firewall security toolkit optimized for network edge and network access devices. The new toolkit supports VxWorks, Nucleus, Linux, and NetBSD.
The SSH QuickSec Toolkit includes full IPSec (Internet Protocol Security) based VPN (Virtual Private Network) functionality, an integrated stateful inspection firewall with support for multiple Application Level Gateways, dynamic addressing & configuration, integration to existing AAA (Authorization Authentication Accounting) infrastructures. It also includes support for legacy tunneling technologies such as L2TP (Layer Two Tunneling Protocol) and NAT (Network Address Translation). It is the industry's only toolkit to include NAT Traversal, which is essential for full end-to-end network security in real world network environment. NAT Traversal is the IETF (Internet Engineering Task Force) endorsed method SSH pioneered for overcoming IPSec and NAT compatibility problems.
The code is compact and portable to a number of key RTOS (Real Time Operating System) and hardware environments. Embedded systems typically set hard constraints for memory usage. SSH QuickSec Toolkit minimizes the amount of dynamic, runtime memory allocations and allows developers to fully parameterize the system for different usage patterns. Specific offloading APIs support cryptographic coprocessors and NPU (Network Processing Unit) hardware when available.
This article was originally published on LinuxDevices.com and has been donated to the open source community by QuinStreet Inc. Please visit LinuxToday.com for up-to-date news and articles about Linux and open source.