An Introduction to the Emulex Network Xceleration Solution – FastStack™ Sniffer10

1Emulex Confidential - © 2012 Emulex Corporation 1Emulex© Corporation 2012

Emulex Technology Webcast Series


Logistics

Attendees will be placed on mute during the presentation

Please use the WebEx’s Q&A feature to submit questions at any time

For a copy of this presentation please send an e-mail to:[email protected]

Please visit emulex.com/webcasts for list of our upcoming webcasts

Emulex Confidential - © 2012 Emulex Corporation

FastStackTM Sniffer10G

For superior network analytics & cyber-security


Agenda

Background

High Performance Networking

What Matters in Lawful Intercept & Network Analytics

FastStack Sniffer10G Overview

Conclusion and Q/A session


Emulex Background

Emulex solutions are used and offered by the industry’s leading server and storage OEMs

– An ever-expanding interoperability ecosystem– High scalability with support for small and large environments

Industry leader in the Fibre Channel Storage market– The performance expected of high demand environments– Tools to maximize the efficiency of your resources– Reliability that is second to none

The leader in converged networking solutions, providing enterprise-class connectivity for servers, networks and storage

– Deployment flexibility that minimizes management expenses– High scalability with support for small and large environments– #1 in 10GbE Port Shipments– Requests for higher performance solutions for specific vertical markets


Myricom Background

Leading provider of adaptable Ethernet Solutions for vertical markets requiring extreme performance

Pioneer in HPC – Interconnect technology since 1994

Unique, adaptable hardware and software architecture

One of the first to deliver general-purpose 10GbE adapters– Processor-based architecture, highly programmable– Allows for firmware and API development for high performance applications– Solutions offer performance, time-to-market customer advantages

Low latency networking – low CPU overhead solutions


High Performance Networks (HPN)

Challenges of High Performance Networks– Extremely low latency– Massive packet rate processing capability– Capability to stream large numbers of data sets

The Solution:– Emulex OneConnect® Network Xceleration (NX) solutions

• OneConnect OCe12000-DX family of high performance10GbE NICs– Windows, Linux, Apple OSX support

• FastStack family of network accelerators– FastStackTM DBLTM

– FastStackTM Sniffer10GTM

– FastStackTM VideoPumpTM


FastStack™ Network Acceleration

Accelerate and improve data streaming Line-rate streams with low CPU usage via packet pacing Scalable: Support in excess of 25,000 streams at 3Mb/s Markets: Video content delivery, IPTV, Telcos and Network providers

Superior latency performance: 2.9µs for UDP, 3.8µs for TCP Predictable performance Markets: Financial High Frequency Trading (HFT)

High throughput, lossless packet capture and analysis Packet capture and wire speed packet injection - 14.88 Mpps Markets: Analytics for network security and surveillance, financial,

measurement and packet generation, DDoS defense appliances

FastStack DBL

FastStack Sniffer10G

FastStack VideoPump


What Matters in Lawful Intercept & Network Analytics

• Broader deployment• Create more robust/secure environments

Cost Effective

• Line rate throughput (up to 14.88 Mpps)• Process more “rules” through your application• Capture - regardless of packet size• Injection – for network infrastructure monitoring and probing

High Performance

• Compatible with industry standard-interface – libpcap• Functions on an industry-standard 10Gb-E PCIe adapter• Easily programmable• Support Windows and Linux

Flexibility and efficiency


FastStack Sniffer10G Overview

Lossless packet capture/injection enabling superior network analytics

Flexibility

- Enables Deep Packet Inspection (DPI)

- Multi-core awareness

- Flexibility of how data can be analyzed

- Supports packet capture and injection at 14.88Mpps (Million packets per second)

High Performance

- Kernel by-pass architecture

- Delivers line rate, loss less packet capture and injection without introducing latency

- Provides lossless packet capture regardless of packet size

Cost Effective

- No specialized capture hardware (ie: Appliance)

- In “Sniffer Mode”, packet-rate sensitive firmware runs on MIPS-like processor on the adapter

- Leverages industry standard 10GbE


Sniffer10G Architecture

Kernel By-pass No context switching Zero copy


Maximum Receive Packet Rate (Mpps)

SNF API: –14.88Mpps, line rate–Lossless packet capture–Documentation and support for

customization

SNF libpcap: –14.88Mpps, line rate–Lossless packet capture–Sniffer10G links/hooks for libpcap

Through OS Kernel: – Less than 4Mpps– In-kernel packet capture– Application does not support SNF

API or libpcap

Through OS

SNF libpcap

SNF API

Mpps


Intrusion Detection & Protection

Network Surveillance & Monitoring

Sniffer10G – Technology Application

Target Markets

Value Prop

Complete network visibility 100% packet capture More cost effective vs. FPGA

adapters: 10X ASP More energy efficient vs. FPGA

adapters: 2-3X power

Lossless packet capture No missed threats Increased network availability

Government agencies TELCO Appliance vendors

Security appliance Large commercial customers


Sniffer10G Ecosystem

SURICATA

BufferBuffer

Workers…

Worker 1Worker n+1

Suricata

Packets


Resources on Emulex.com

Product pages– Product landing pages

Resources– Datasheets– FastStack Sniffer10G solution– Competitive assessment

http://www.emulex.com/products/network-xceleration-nx-solutions/faststack-sniffer10g/overview.html


FastStack Sniffer10G – Summary

Key enablers for:– Network surveillance & monitoring– Intrusion detection & protection – Network performance analysis

Provides:– Streamlined integration – Line rate lossless packet capture and injection – Leverages 10GbE network infrastructure– Cost effective deployment of robust network monitoring


FastStack™ Sniffer10G™ Products and Pricing

Emulex Part Number Description MSRPDual Port 10GbE

OCe12102-DX Emulex OCe12102-DM Dual-Port 10GbE Adapter $795

OCe12102-DX-SNF2 Emulex OCe12102-DM Dual-Port 10GbE Adapter bundled with FastStack™ Sniffer10G™ Software

$1,090

Single Port 10GbE

OCe12101-DX Emulex OCe12101-DM Single-Port 10GbE Adapter $395

OCe12101-DX-SNF2 Emulex OCe12101-DM Single-Port 10GbE Adapter bundled with FastStack™ Sniffer10G™ Software

$690

Software Only

FastStack™ SNF2-License FastStack™ Sniffer10G™ Software License $295

OneConnect Transceivers

OCe10100-OPT OneConnect dual channel optical transceivers (Short Reach Optical) (2/pkg) $420


3rd Generation CNA Technology

#1 in 10GbE port shipments

Efficient power design

Optimized for virtual servers – Universal Multi-Channel, and SRIOV

Protocol offloads – TCP, TOE, iSCSI, FCoE

Network SolutionsStorage Solutions

9th Generation Fibre Channel Technology

Over 12 million adapter ports installed world wide

Bullet-proof driver stack

Backward compatibility

Rock-solid reliability

Superior management capabilities

High Performance Network Solutions

Optimized to meet the requirements of vertical markets:

Low latency

Lossless packet capture

Video/content delivery

Versatile and scalable

One adapter, multi-applications

Putting It All Together One Company

19Emulex Confidential - © 2012 Emulex Corporation

Q/A


Thank You for Participating

Click http://www.emulex.com/company/events/webcasts.html to:– View this webcast– View past webcasts– Register for upcoming webcasts

http://www.emulex.com/company/events/webcasts.html

http://www.emulex.com/company/events/webcasts.html