cPacket cVu-V Series VM/Cloud-based Monitoring and Virtual Packet Brokering

cVu-V Solution The cVu-V series is a flexible set of virtual appliances for a 2-in-1 network monitoring and a network packet brokering solution under 10G east-west/north-south and cloud traffic. It integrates network performance monitoring (NPM) with network packet brokering (NPB) to enable organizations to cost-effectively and quickly find network infrastructure issues and reliably feed performance and security virtual tools, enabling visibility you can trust. The cVu-V product family seamlessly integrates with cPacket’s cStor-V series packet capture and analysis virtual appliances and cClear-V single-pane-of-glass analytics virtual platform to provide the highest level of network visibility for end-to-end security/performance monitoring, network troubleshooting, regulatory compliance, and capacity planning across the hybrid environment.

Financial services, retail, manufacturing, government, defense, Internet Service Providers, managed-services providers, telecommunications, and mobile operators are implementing digital strategies and need network data monitoring for application/user performance management and security investigation. cPacket’s cVu-V reduces tool sprawl and IT spending by consolidating network traffic and providing the right feed to the right tools in the right form in an easily deployable, scalable, and cost-effective manner.

Key Benefits

cPacket cVu-V series combines a number of key technical features, building upon cPacket’s industry-leading monitoring pedigree to maximize performance and analysis-based metrics. cVu-V helps organizations deliver on a wide range of application/network performance and security requirements via a powerful combination of benefits, including but not limited to the following.

Versatile Usage

cVu-V is designed for versatility such that it can be deployed from branch offices/remote sites to data centers to public clouds with a seamless experience. cVu-V can be run in the Network Function Virtualization (NFV) environment in the virtualized branch offices in the Single-Root Input/Output Virtualization (SR-IOV) mode to monitor/feed the LAN/WAN traffic to NFV-based tools. In the virtualized SDDC data center, cVu-V can run as a VM on top of mainstream hypervisors for complete east-west traffic visibility and selectively forward the right traffic to the right virtual tools. As most enterprises move to the cloud, lack of visibility becomes the main challenge. cVu-V can run as a cloud-based instance to provide Visibility-as-a-Service (VaaS).

cVu-V enables you to: • Achieve operational agility through

real-time intelligence across the virtual/cloud infrastructure feeding the right traffic to the right tools

• Simplify the monitoring strategy

through consolidation, data services, and intelligent forwarding, reducing tool-sprawl, and traffic blind-spots

• Monitor, analyze, and forward

network traffic as the source of truth for performance and security related investigations and audit-trails

• Process data to maximize tool

efficiency before forwarding including decapsulation, filtering, slicing, deduplicating, time-stamping, and load-balancing

• Integrate and deploy with leading

security tools and SecOps workflows through Open monitoring architecture with RESTful API integration

• Access performance/security

analytics anytime/anywhere using single-pane-of-glass visibility with customizable KPI dashboards

• Reduce mean-time-to-resolution

for application, user, and network performance issues

Data Sheet

Flexible Deployment

cVu-V series virtual appliance and cloud instances are made available in flexible combinations of performance, features, and virtual connectivity options to enable pay-as-you-grow choices. The end result is an easy to manage, cost-optimized solution that makes the best use of compute and provides both breadth and depth of network data to drive analytics and improve application/user/network performance and security. Complete visibility across north-south and east-west traffic paths across branch, data center, and cloud enables hybrid enterprises for business-ready operations.

Optimal Performance

It is hard to match the performance of a hardware-based cVu solution and the balance of optimal performance and cost that is usually desirable for virtual/cloud deployments. With cVu-V, optimal monitoring performance can be achieved under 10Gbps under specific conditions, supporting both today and tomorrow’s network requirements with a future-proof approach that is cloud-ready as virtual environments continue to expand. Many of the physical cVu features can be leveraged in pure software-defined deployments such as filtering, slicing, deduplication, decapsulations, load-balancing, and timestamping. cVu-V can be cost-effectively deployed anywhere in the network, whether on top of Commodity of-the-Shelf (COTS) server, or as cloud-based instance run on Infrastructure-as-a-Service (IaaS).

Open Architecture

The cPacket cVu-V provides detailed performance analytics in real-time to allow users to make informed decisions. This delivers the concurrent combination of traffic redirection, aggregation, filtering, Layers 2-7 protocol and packet processing and load balancing applications without the CPU overload. Unlike other monitoring solutions, cPacket solutions are designed to be integrated with other tools. In addition to performing advanced analysis, real-time forensic data and high resolution meta data are available via RESTful API for back-office automation and integration with security and other performance solutions.

Deployment and Use Case

The cVu-V series comprises of a completely hardware-independent solution in the data center, campus, branch/remote site, telco environment, and public cloud with a range of options available according to connectivity and throughput requirements. The cVu-V series is fully integrated with cPacket cStor-V series virtual packet capture solution and cClear-V analytics engine for centralized single-pane-of-glass analytics through customizable dashboards. cPacket’s visibility tools provide proactive metrics such as application visibility, TCP response-time, round-trip time, retransmits, one-way latency, and micro-burst analysis at high resolution. With cPacket, network/security operators (NetOps/SecOps) can deploy the functionality they need at the locations they need, to monitor and analyze issues remotely or to support DevOps and DevSecOps efforts on-premises and in the cloud. On-premises deployments in the branch offices or data centers support monitoring the network data through DPDK/SR-IOV direct mode, hypervisor based virtual-switching (Virtual Standard vSwitch/Virtual Distributed vSwitch/Open vSwitch) mode or overlay tunnels (VXLAN, ERSPAN). Although cVu-V can be deployed stand-alone, it is recommended to be deployed along with cStor-V series (see cStor-V data sheet) to properly filter and process the right traffic that can also be captured and retained for analysis, greatly improving the resource utilization. Typical deployment in the on-premises network such as in a data center also requires north-south traffic visibility in the physical network to complete the picture. cPacket solution, based on cTap series network TAP (Test Access Point), cVu series 1/10/25/40/100G-enabled Network Packet Broker (NPB), cStor series 1/10/40G enabled capture appliances, and cClear series visualization/analytics complements the virtual solution perfectly, providing 100% visibility across the board regardless of the environment.

Reference design for complete north-south and east-west visibility

In the cloud, cVu-V instances can be deployed elastically as needed for monitoring the traffic for performance, security and capacity planning reasons. Just like on-premises, it is recommended that cVu-V is used along with cStor-V instances to property feed the traffic that needs to be captured and analyzed as well for variety of reasons. At this point, cVu-V and cStor-V are available for demonstration in Amazon Web Services (AWS) and Microsoft Azure cloud with Bring-Your-Own-License (BYOL) option.

Reference design for complete cloud visibility

Models and Options

For scale-as-you-grow, cPacket cVu-V virtual appliances and cloud instances are available in multi-tier as below, along with optimal positioning/deployment recommendation (which may vary depending on the requirements). The sizing is based upon the maximum monitoring rate and features supported which maps to specific number of virtual network interfaces (vNIC), CPU cores, memory and disk space. See the specification section for details. To learn more, visit www.cpacket.com

On-Premises Cloud cVu-V 1 cVu-V 10 cVu-V 1 cVu-V 10 Branch/Remote Site NFV/WAN Edge

Cell Site/Central Office RAN/Backhaul

Data Center/Colocation East-West VM

Financial/Trading East-West VM

Service Provider Access East-West VM/NFV

Cloud Cloud-Instance Cloud-Instance

cPacket cVu-V series positioning guidance

Key Features: On-Premises Cloud cVu-V 1 cVu-V 10 cVu-V 1 cVu-V 10 Traffic Aggregation/Replication Yes Yes Yes Yes

Packet Slicing/Truncation Yes Yes Yes Yes

VXLAN/MPLS/VNTag Stripping Yes Yes Yes Yes

VLAN Tag with Inner VLAN Filtering Yes Yes Yes Yes

Filtering Yes Yes Yes Yes

Packet Deduplication Yes Yes Yes Yes

MAC-in-MAC DC Decapsulation Yes Yes Yes Yes

Timestamping Yes Yes Yes Yes

Role-Based Administration Yes Yes Yes Yes

Software Upgrade/Restore Yes Yes Yes Yes

GUI, Serial Console and CLI Yes Yes Yes Yes

SNMPv2c and MIB Yes Yes Yes Yes

TACACS+/RADIUS Authentication Yes Yes Yes Yes

cClear Management/Dashboards Yes Yes Yes Yes

Performance and Capacity:

On-Premises Cloud cVu-V 1 cVu-V 10 cVu-V 1 cVu-V 10 Virtual Port (Management) 1 1 N/A N/A

Virtual Port (Monitoring) 10 25 1 25

Port Speed 1 Gbps 10 Gbps 1 Gbps 10 Gbps

Monitoring Rate < 1 Gbps* < 10 Gbps* < 1 Gbps* < 10 Gbps*

* Projections only. Final specs available by General Availability (GA) and subject to change

Operating Conditions:

Technical Specifications

On-Premises Cloud cVu-V 1 cVu-V 10 cVu-V 1 cVu-V 10 Hypervisor Support VMware ESXi 5.5

or later, RedHat KVM VMware ESXi 5.5

or later, RedHat KVM N/A N/A

Virtual Switch Support VMware VSS/VDS, RedHat KVM OVS

VMware VSS/VDS, RedHat KVM OVS

N/A N/A

Virtual NIC Support VMXNET1, 2, E1000 VMXNET3 N/A N/A

Tunneling Support VXLAN, ERSPAN VXLAN, ERSPAN VXLAN, ERSPAN VXLAN, ERSPAN

High-Performance Mode DPDK/SR-IOV DPDK/SR-IOV N/A N/A

vCPU 4* 8* 4* (AWS T3a.xlarge)

(Azure D4.v3)

8* (AWS T3a.2xlarge)

(Azure D8.v3) Memory 32 GB* 64 GB* 16 GB*

(AWS T3a.xlarge) (Azure D4.v3)

32 GB* (AWS T3a.2xlarge)

(Azure D8.v3)

* Projections only. Final specs available by General Availability (GA) and subject to change

SKU Description

CP_CVU_V_1_10_SUB cVu-V virtual appliance 1-year subscription license (single instance) supporting 10 virtual ports at up to 1Gbps monitoring rate each. Maintenance included.

CP_CVU_V_1_10_PER

cVu-V virtual appliance perpetual license (single instance) supporting 10 virtual ports at up to 1Gbps monitoring rate each. Maintenance included. Maintenance not included.

CP_CVU_V_10_25_SUB

cVu-V virtual appliance 1-year subscription license (single instance) supporting 25 virtual ports at up to 10Gbps monitoring rate each. Maintenance included.

CP_CVU_V_10_25_PER

cVu-V virtual appliance perpetual license (single instance) supporting 25 virtual ports at up to 10Gbps monitoring rate each. Maintenance included. Maintenance not included.

About cPacket Networks cPacket Networks delivers visibility you can trust through network monitoring and packet brokering solutions to solve today’s biggest network challenges. Our cutting-edge technology enables network and security teams to proactively identify issues in real-time before negatively impacting end-users. Only cPacket inspects all the packets delivering the right data to the right tools at the right time and provides detailed network analytics dashboards. Whether you need greater network visibility for security tools or performance monitoring tools, our solutions are designed to overcome scalability issues and reduce troubleshooting time. The result: increased security, reduced complexity, with lower costs, and a faster ROI. Based in Silicon Valley, CA, cPacket enables organizations around the world to keep their business running. Leading enterprises, service providers, healthcare organizations, and governments rely on cPacket solutions for improved agility, higher performance, and greater efficiency. Learn more at www.cpacket.com, the cPacket blog, or follow us on Twitter, LinkedIn, and Facebook. cPacket, cPacket Networks, cClear, cClear-V, cVu, cVu-V, cStor, cStor-V, cTap, SPIFEE, Distributed Monitoring Architecture, and Integrated Monitoring Fabric are trademarks or registered trademarks of cPacket Networks.

Ordering Information