CN215987299U

CN215987299U - Network security device

Info

Publication number: CN215987299U
Application number: CN202122141764.0U
Authority: CN
Inventors: 刘念
Original assignee: Beijing Huadian Zhongxin Technology Co ltd
Current assignee: Beijing Huadian Zhongxin Technology Co ltd
Priority date: 2021-09-06
Filing date: 2021-09-06
Publication date: 2022-03-08
Anticipated expiration: 2031-09-06

Abstract

The present disclosure relates to a network security device comprising: a processor (10) for executing a predetermined program; the signal conversion and expansion module (20) is used for converting PCIe signals output by the processor into SATA signals and dividing the converted SATA signals into N paths for output; n-1 SATA signal interfaces (30) which are connected with the 1 st to N-1 th output ends of the signal conversion and expansion module in a one-to-one correspondence manner and are used for connecting SATA interface storage equipment; the output selection module (40) is used for selectively outputting the SATA signals transmitted by the signal conversion and expansion module between two output ends; the mSATA connector (50) is connected with the first path of output end of the output selection module; the signal conversion module (60) is connected with the second output end of the output selection module; and a CF connector (70) connected with the signal conversion module. Therefore, the requirements on the storage capacity can be met, and rich interface types can be ensured.

Description

Network security device

Technical Field

The present disclosure relates to the field of network security control technologies, and in particular, to a network security device.

Background

Interfaces for storage media in existing network security devices mainly include a Serial Advanced Technology Attachment (SATA) interface, a mini version SATA (msata) interface, and a Compact Flash (CF) interface.

For the network security equipment which simultaneously supports a plurality of SATA interface storage media, mSATA interface storage media and CF interface storage media, the storage interface form is relatively comprehensive, and a client can select to use according to specific use requirements and habits, so that the deployment is convenient. However, the multi-channel interface requires multi-channel interface resources, which results in the waste of high-speed interface resources of the upstream processor and the shortage of bus resources of other functional modules.

SUMMERY OF THE UTILITY MODEL

The purpose of the disclosure is to provide a novel network security device, so that the requirement of the normal storage capacity of the whole machine can be met while convenience is provided for the whole machine in storage selection, bus resources are saved, and excessive conversion cost is avoided.

In order to achieve the above object, the present disclosure provides a network security device, including:

a processor for executing a predetermined program;

the signal conversion and expansion module is connected with the processor and used for converting PCIe signals output by the processor into SATA signals and dividing the converted SATA signals into N paths for output, wherein N is more than or equal to 2;

the N-1 SATA signal interfaces are connected with the 1 st to N-1 th output ends of the signal conversion and expansion module in a one-to-one correspondence manner and are used for connecting SATA interface storage equipment;

the output selection module is connected with the Nth output end of the signal conversion and expansion module and used for selectively outputting the SATA signal transmitted by the signal conversion and expansion module between the two output ends;

the mSATA connector is connected with the first path of output end of the output selection module and is used for connecting mSATA interface storage equipment;

the signal conversion module is connected with the second output end of the output selection module and used for converting the SATA signal transmitted by the output selection module into a CF signal and outputting the CF signal;

and the CF connector is connected with the signal conversion module and is used for connecting CF interface storage equipment.

Optionally, the processor is of type FT 2000.

Optionally, the signal conversion and expansion module is of the model ASM 1064.

Optionally, the output selection module is of model ASM 1480.

Optionally, the signal conversion module is of the type JM 20330.

Through the technical scheme, PCIe signals output by the processor are converted into SATA signals, the converted SATA signals are divided into N paths to be output, one of the N paths is selectively output by the routing output selection module between two output ends, the first path is used for being connected with mSATA interface storage equipment, and the second path is converted into CF signals by the signal conversion module and then is used for being connected with CF interface storage equipment. Thus, one output of the processor is capable of connecting N-1 SATA interface storage devices and one of a mSATA interface storage device or a CF interface storage device. The method not only can meet the requirement on storage capacity, but also can ensure rich interface types, is convenient for customers to deploy and use, saves bus resources and avoids excessive conversion cost.

Additional features and advantages of the disclosure will be set forth in the detailed description which follows.

Drawings

The accompanying drawings, which are included to provide a further understanding of the disclosure and are incorporated in and constitute a part of this specification, illustrate embodiments of the disclosure and together with the description serve to explain the disclosure without limiting the disclosure. In the drawings:

FIG. 1 is a schematic diagram of a network security appliance provided in an exemplary embodiment;

FIG. 2 is a schematic diagram of an output selection module provided in an exemplary embodiment.

Detailed Description

The following detailed description of specific embodiments of the present disclosure is provided in connection with the accompanying drawings. It should be understood that the detailed description and specific examples, while indicating the present disclosure, are given by way of illustration and explanation only, not limitation.

Fig. 1 is a schematic diagram of a network security device provided in an exemplary embodiment. As shown in FIG. 1, the network security device 100 may include a processor 10, a signal conversion and expansion module 20, N-1 SATA signal interfaces 30, an output selection module 40, a mSATA connector 50, a signal conversion module 60, and a CF connector 70. The network security device 100 may be a network card, gateway, gatekeeper, or the like.

The processor 10 is used for executing a predetermined program, and the model of the processor 10 may be FT 2000. The predetermined program may be a program matching the function of the network security device, such as a program of a gateway function in the related art.

The signal conversion and expansion module 20 is connected to the processor 10, and is configured to convert a Peripheral Component Interconnect express (PCIe) signal output by the processor 10 into an SATA signal, and divide the converted SATA signal into N paths for output, where N is greater than or equal to 2. The signal conversion and expansion module 20 may be of the type ASM 1064.

The N-1 SATA signal interfaces 30 are connected to the 1 st to N-1 st output terminals of the signal conversion and expansion module 20 in a one-to-one correspondence manner, and are used for connecting SATA interface storage devices.

The output selection module 40 is connected to the nth output end of the signal conversion and expansion module 20, and is configured to selectively output the SATA signal transmitted by the signal conversion and expansion module 20 between the two output ends. The output selection module 40 may be of the model ASM 1480.

The mSATA connector 50 is connected to the first output terminal of the output selection module 40, and is used for connecting to a storage device with an mSATA interface.

The signal conversion module 60 is connected to the second output end of the output selection module 40, and is configured to convert the SATA signal transmitted by the output selection module 40 into a CF signal and output the CF signal. The signal conversion module 60 may be of the type JM 20330.

The CF connector 70 is connected to the signal conversion module 60 for connecting a CF interface storage device.

For example, the input signal of the storage module of the network security device designed based on the feiteng 8-core processor is PCIe 3.0, and is converted into 4 paths of SATA3.0 signals by the SATA host chip. Wherein, 3 paths are standard SATA interfaces, 1 path of SATA3.0 signal is accessed to the control chip and is divided into two paths of alternative SATA signals, 1 path of SATA signal is sent to the mSATA connector, and 1 path of SATA signal is accessed to the conversion chip and outputs CF interface signals to the CF connector. Thus, the network security device 100 has a 3-way standard SATA3.0 interface and supports a 1-way alternative mSATA and CF card interface.

As described above, the chip ASM1064 can be used as the signal conversion and expansion module 20(AHCI chip), and the total number of the port resources is 5. The ASM1064 supports one upstream port and four downstream ports. The upstream port is PCIe 3.0 in 1 way, and the downstream port is SATA3.0 in 4 ways, that is, N is 4. The ASM1046 is an Advanced Host Controller Interface (AHCI) Controller with low latency, low cost, and low power consumption, and a user can cascade various high-speed Input/Output (IO) systems through 4 SATA Interface cascade multipliers, and the ASM1046 can be applied to a server, a high-capacity system storage or monitoring platform.

In practical use, the upstream port can be accessed to PCIe 3.0 signals, the downstream port is 4 groups of SATA3.0 signals, 3 channels of SATA3.0 signals in the downstream port are connected to a standard SATA signal interface, and finally 1 channel of SATA3.0 is accessed to an ASM1480 chip, and the output signal can be selected to the mSATA connector or the CF connector by a SEL signal (shown in fig. 2).

FIG. 2 is a schematic diagram of an output selection module provided in an exemplary embodiment. As shown in FIG. 2, two groups of differential signals of SATA3.0 signal can be respectively connected to A _ in +/A _ in-, B _ in +/B _ in-, and output signals A _ outb +/A _ outb-, and B _ outb +/B _ outb-signals to mSATA connectors, and the output signals A _ outa +/A _ outa-and B _ outa +/B _ outa-signals are connected to a chip 203JM 30 of SATA conversion CF signal, and the output signals are selected from outa (A _ outa +/A _ outa-and B _ outa +/B _ outa-) or from A _ outb +/A _ outb _ outa-) or from SEL signal control bit, and the output is a signal output when SEL signal is low level, and the output is an outb signal output when SEL signal is high level.

PCIe signals are converted as above, and based on a network security platform designed by a Feiteng 8-core processor, optional storage configuration of a 3-path standard SATA interface, a 1-path mSATA interface or a CF interface is realized.

In an embodiment of the disclosure, a chip combination of an ASM1064 and an ASM1480 is adopted on a soar 8-core processor platform to design a storage system supporting a 3-way standard SATA interface and simultaneously supporting 1-way mSATA and CF card selectable, the ASM1064 expands SATA resources, and the ASM1480 realizes signal selection, thereby providing convenience for storage selection of a complete machine and meeting the requirement of normal storage capacity of the complete machine.

The preferred embodiments of the present disclosure are described in detail with reference to the accompanying drawings, however, the present disclosure is not limited to the specific details of the above embodiments, and various simple modifications may be made to the technical solution of the present disclosure within the technical idea of the present disclosure, and these simple modifications all belong to the protection scope of the present disclosure.

It should be noted that the various features described in the above embodiments may be combined in any suitable manner without departing from the scope of the invention. In order to avoid unnecessary repetition, various possible combinations will not be separately described in this disclosure.

In addition, any combination of various embodiments of the present disclosure may be made, and the same should be considered as the disclosure of the present disclosure, as long as it does not depart from the spirit of the present disclosure.

Claims

1. A network security device (100), characterized in that the network security device (100) comprises:

a processor (10) for executing a predetermined program;

the signal conversion and expansion module (20) is connected with the processor (10) and is used for converting PCIe signals output by the processor (10) into SATA signals and dividing the converted SATA signals into N paths for output, wherein N is more than or equal to 2;

n-1 SATA signal interfaces (30) which are connected with the 1 st to N-1 th output ends of the signal conversion and expansion module (20) in a one-to-one correspondence manner and are used for connecting SATA interface storage equipment;

the output selection module (40) is connected with the Nth output end of the signal conversion and expansion module (20) and is used for selectively outputting the SATA signal transmitted by the signal conversion and expansion module (20) between the two output ends;

the mSATA connector (50) is connected with the first path output end of the output selection module (40) and is used for connecting mSATA interface storage equipment;

the signal conversion module (60) is connected with the second output end of the output selection module (40) and is used for converting the SATA signal transmitted by the output selection module (40) into a CF signal and outputting the CF signal;

and the CF connector (70) is connected with the signal conversion module (60) and is used for connecting a CF interface storage device.

2. The network security device (100) according to claim 1, wherein the processor (10) is of the type FT 2000.

3. The network security appliance (100) of claim 1, wherein the signal conversion and expansion module (20) is of the type ASM 1064.

4. The network security appliance (100) of claim 1, wherein the output selection module (40) is of the model ASM 1480.

5. The network security device (100) according to claim 1, wherein the signal conversion module (60) is of type JM 20330.