IPSEC MESSAGE PROCESSING METHOD AND DEVICE BASED ON SECURITY ASSOCIATION

摘要

Disclosed is an IPSec message processing method based on the security association, including: distributing Internet Protocol Security (IPSec) messages to each thread according to the security association (SA) to which each IPSec message belongs, wherein IPSec messages belonging to the same SA are distributed to the same thread. Further correspondingly disclosed is an IPSec message processing device based on the security association. The present invention can achieve cooperative processing of anti-replay and order preserving, avoiding carrying out order preserving in the inbound direction using a universal thread, simplifying the processing flow, and improving the forwarding efficiency.