Linux network appliance adds crypto engine  

Posted by Daniela Mehler

Linux network appliance adds crypto engine

Taiwanese network-appliance integrator AR Infotek has announced a Linux-ready network security appliance with a cryptographic security engine. Based on an Intel Pentium M EP80579 ("Tolapai") SoC clocked up to 1.2GHz, the Teak 3020 sports four gigabit Ethernet ports and dual USB ports.

( Click for larger view of Teak 3020 )

The Teak 3020 is targeted at applications including SSL VPN network security control, and network testing and emulations systems, says AR Infotek. Previous Linux compatible Teak systems have included the Teak 5010 and the Teak 3258 , which could be configured with Pentium/Celeron and AMD Geode LX processors, respectively. Like many other recent network security appliances, however, including recent Win Enterprises Systems , the Teak line has moved to the Intel Pentium M EP80579 ("Tolapai") system-on-chip (SoC).

Teak 3020 customers can configure their systems with EP80579 SoCs clocked from between 600MHz and 1.2GHz, says the company. The SoC is paired with an unspecified security coprocessor, which is said to support ciphers, hash, and the public key encryption (see figures below). The security co-processor appears to use Intel's QuickAssist co-processor interface, which was designed to enable the attachment of custom FPGAs "directly to the FSB" (front-side bus).

Linux network appliance adds crypto engine

Linux network appliance adds crypto engine


Teak 3020 security engine "inline" and "lookaside" package architectures
(Click either to enlarge)

The appliance offers a single DDR2 socket for configurations of up to 2GB of memory, and can be configured with up to four gigabit Ethernet ports, three of which interface directly with the Tolapai controller, says the company. Two of the ports offer LAN bypass, letting customers reset software to enable or disable mode, regardless of whether the power is on or off, says AR Infotek.

A hard drive bay supports a 2.5-inch SATA hard disk drive (HDD), and a CF expansion socket is also provided. For general expansion, the Teak 3020 is said to include a mini-PCI Express slot, and the appliance offers dual USB 2.0 ports, and a serial console port, all front facing.

Previous Teak systems have supported FreeBSD and Windows operating systems in addition to Linux, but AR Infotek only mentions Linux support for the Teak 3020. The system even ships with "extra Linux drivers" for LAN bypass and other functions (see below).

Specifications listed for the Teak 3020 include:Processor -- Intel Pentium M 600MHz to 1.2GHz EP80579 (Tolapai)
Security engine processor:Ciphers -- AES , 3DAES , ARC4
Hash -- MD5, SHA-1, SHA-224-256-384-512, HAMC
Public Key -- RSA, DSA, DH, SSL/TLS, TRNGMemory -- up to 2GB (w/o ECC) 400/533/667/800Mhz DDR2 in single SODIMM channel
Flash expansion -- 1 x CF storage socket
Expansion -- 1 x Mini-PCI Express slot
Storage -- drive bay for 2.5-inch SATA HDD
Networking -- up to 4 x gigabit Ethernet (3 x from EP80579 LAN engine; 1 x from Intel 82573L PCI-E LAN controller); two of the ports offer pre-set LAN bypass
USB -- 2 x USB 2.0 (front facing)
Serial -- 1 x DB-9 Series Console (front facing)
Extra Linux drivers:LAN by-pass
Watchdog timer
System status LED control
Push-button shutdownPower -- 60W adapter; AC input 90 ~ 264 V full range at 47 ~ 63Hz; DC output 12V; power jack
Operating temperature -- 32 to 104 deg. F (0 to 40 deg. C)
Dimensions -- 10.8 x 5.7 x 1.7 inches (275 x 144.5 x 43.5mm)
Operating system -- LinuxAvailability

AR Infotek did not provide further details on the pricing or availability of the Teak 3020. Further information may be found here .


Mission computer runs Linux on Atom
VoIP recording appliance runs Linux

This entry was posted on 6:37 AM .