SCALING SURICATA PERFORMANCE TO 100 GBPS WITH NAPATECH SMARTNICS
Accelerating Suricata with Napatech stateful flow processing technology.
Suricata is a free open source, mature, fast and robust network threat detection engine. The Suricata engine is capable of real time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM) and offline PCAP processing.
50% DATA REDUCTION WITH BUILT-IN DEDUPLICATION
Duplicate packets are a major burden for today’s network monitoring and security applications. In worst cases, more than 50% of the received traffic is sheer replication. Find out how Napatech’s intelligent deduplication capabilities solve this by identifying and discarding any duplicate packets, enabling up to a 50% reduction in application data load.
SYMANTEC DATA LOSS PREVENTION (DLP)
The maximum processing capability of Symantec DLP is 300 Mbps for Windows and 650 Mbps for Red Hat, using a general-purpose Network Interface Card (NIC). However, accelerated by Napatech SmartNICs, Symantec DLP performance can be multiplied to handle as much as 4 x 900 Mbps. By taking on heavy pre-processing and filtering tasks, the SmartNIC enables users to scale their DLP solution to continually protect and secure their data, even at ultra-high network speeds.
UP TO 14x WIRESHARK PERFORMANCE INCREASE
As capable as Wireshark is at inspecting and analyzing network protocols, it will only be as effective as its implementation. Napatech has created a hardware acceleration solution that alleviates the load on the CPU and thereby greatly increases Wireshark capture performance.
SCALING TREX TRAFFIC GENERATION PERFORMANCE
As for any other traffic generation solution, the ability for TRex to reliably generate packets at line rate across all packet sizes is paramount. Whether simply packet blasting or replaying PCAP files for testing, the ability to send traffic for small packets at the maximum speed is a prerequisite. Napatech has created a hardware acceleration solution, based on the Napatech Link™ Capture Software, that alleviates the load on the CPU and thereby greatly increases TRex performance.
INCREASING SURICATA PERFORMANCE
Suricata is an ideal example of the type of critical enterprise security application that can achieve better performance through hardware acceleration. Optimized to capture all network traffic at full line rate, with almost no CPU load on the host server, Napatech SmartNICs demonstrate substantial lossless performance advantages for Suricata compared to a standard Network Interface Card.
4x SURICATA PERFORMANCE INCREASE FOR INTEL
Suricata IDS detects known threats, policy violations and malicious behaviors. However, as capable as Suricata is in reactively protecting a network, it will only be as effective as its implementation. Examining the contents of every network packet is extremely CPU-intensive, especially for a multi-gigabit traffic load. And this is often the limiting factor in Suricata performance: the packet processing on the CPU. In addressing this challenge, Napatech has created a hardware acceleration solution that alleviates the load on the CPU and thereby greatly increases Suricata performance.
3x n2disk PERFORMANCE INCREASE FOR INTEL
A prerequisite for n2disk™ to be successful is that all network packets are captured with zero loss. But with a multi-gigabit traffic load, standard server deployments struggle to keep up. In addressing this challenge, Napatech has created a hardware acceleration solution that alleviates the load on the CPU and thereby greatly increases n2disk™ performance. This has been achieved by making the Napatech Link™ Capture Software available for the Intel Programmable Acceleration Card (PAC) with Intel Arria 10 GX FPGA.
7x WIRESHARK PERFORMANCE INCREASE FOR INTEL
The ability to capture and analyze traffic at lossless rates is of the utmost importance for Wireshark to be successful. To decode all traffic, it is a fundamental requirement that Wireshark “sees everything”. If any traffic is missed, full protocol analysis is not possible. And if the capture server is overburdened and too slow to handle the incoming packet rate, packets are discarded, and information lost forever.
4x TREX PERFORMANCE INCREASE FOR INTEL
Napatech has created a hardware acceleration solution that greatly increases TRex performance. Optimized for lossless transmit and receive, the solution demonstrates substantial performance advantages for TRex compared to a standard Network Interface Card: 2x traffic generation performance and 4x traffic reception performance.
GUARANTEED ZERO PACKET LOSS WITH 60% THROUGHPUT IMPROVEMENT FOR INTEL
Napatech Link™ Capture Software for the Intel Programmable Acceleration Card guarantees zero packet loss and deterministic performance under all conditions. This allows enterprises and government organizations to build affordable, yet reliable network management, security and test and measurement solutions based on low-cost servers.
GUARANTEED ZERO PACKET LOSS WITH 60% THROUGHPUT IMPROVEMENT
The challenge of building your own network management, security, or test and measurement solution is that low-cost servers, and in particular standard Network Interface Cards (NICs), are not ideal for these kinds of applications. Issues such as packet loss and non-deterministic performance undermine analysis efforts. Napatech Link™ Capture Software addresses precisely these issues with a solution that guarantees zero packet loss and deterministic performance under all conditions.
RECONFIGURABLE ACCELERATED RAN FOR 5G
With 5G on the horizon, mobile network operators are hungry to make the shift from proprietary hardware to standard server platforms. But to realize the promise of 5G, a new level of performance is required at the hardware layer. Napatech’s Reconfigurable Accelerated RAN solution allows network operators to reimagine their infrastructure by alleviating CPU bottlenecks and increasing system performance by a factor 10.
NAPATECH SMARTNIC SOLUTION FOR HARDWARE OFFLOAD
The Napatech SmartNIC solution for hardware offload provides a compelling alternative to proprietary solutions and a faster time-to-market compared to developing an in-house FPGA-based offload solution without having to compromise on flexibility or performance.
NTOP – NAPATECH 1-100G SECURITY ANALYSIS PLATFORM
This is a description of the joint solution from ntop and Napatech, enabling enterprises to build efficient and accurate systems to track, trace, monitor and alert traffic traversing the network, even at 100G. The solution offers the combined power of a flow-centric and packet-centric solution in a single standard server, providing a powerful and cost-effective basis for advanced multi-dimensional security solutions.
NAPATECH AND VELOCIMETICS ACCELERATE FINANCIAL TRADING PERFORMANCE
Combining Napatech SmartNICs with Velocimetrics analysis software, users can capture data with nanosecond precision time stamping at multiple points throughout complex trading environments and achieve exceptional, real-time operational oversight across end-to-end business flows.
TRAFFIC REPLAY UP TO 100G LINE RATE
Napatech FPGA SmartNICs enable network engineers and developers to capture and replay traffic with nanosecond precision. Rather than basing tests on synthetic data, the replay feature makes it possible to recreate actual traffic scenarios that have caused network issues such as outages, breaches, Quality of Service (QoS) problems, etc. This provides real-world causality and offers the best possible outset for improving and hardening your infrastructure.
NAPATECH SMARTNIC SOLUTIONS FOR VIRTUAL SWITCH ACCELERATION
This document provides an outline of the various Napatech solutions for accelerating virtual switching applications, such as Open Virtual Switch (OVS). A range of virtual switch solution options are available, designed to provide performance without compromising flexibility.