ULTRA HIGH-SPEED PACKET PROCESSING FOR ADVANCED … · 2021. 3. 5. · IntellaView HyperEngine...
Transcript of ULTRA HIGH-SPEED PACKET PROCESSING FOR ADVANCED … · 2021. 3. 5. · IntellaView HyperEngine...
ULTRA HIGH-SPEED PACKET PROCESSINGFOR ADVANCED NETWORK MONITORING
D A T A S H E E T
IntellaView HyperEngine Packet Processor
FEATURESAdvanced packet processing solutions High-performance 600Gbps:
• Sixconfigurableserviceengines• Real-time processing across 1G/10G/40G/100G feeds
Select a feature per service engine:
•Duplicatepacketremoval• NetFlow generation• Deep Packet Inspection*• AdvancedPacketSlicing*• GTP Correlation*
The HyperEngine Packet Processor enablestheIntellaViewplatformtodeliveradvancedfeaturesforultra-high-speednetworkinfrastructures.Itaddssuperior,industry-leadingprocessing power to the IntellaView for real-time packet processing and deliveryofstreamlinedpackettraffictovariousnetworkmonitoringandsecuritytools.Thisenhancednetworkvisibilitysignificantlyincreasestheefficiencyandeffectivenessofthenetworksecurity,analyticsandperformancemonitoringsolutions.
EachHyperEnginebladeadds600Gbpsofhigh-performanceprocessingservicetoIntellaViewnetworkvisibilitysystems.Trafficsourcescanbeaggregatedto the HyperEngine Packet Processor to performadvancedprocessing. TheIntellaViewHyperEngineofferssixhigh-performance,multi-threadednetworkprocessorswithflexibleuser-selectableserviceoptions.TheseserviceenginesprovideconvenientconfigurationofadvancedpacketprocessingfeaturesincludingdeduplicationandNetFlowgenerationfornetworkmonitoring.
HyperEngine packet processor includes six multithreaded network processors eachsupportingupto100Gbpscapacity.Easilyaggregatetrafficfromotherbladesforserviceprocessing.
Packet Deduplication Selectanyserviceenginetoviewconfiguration.Shown here is the deduplicationscreen thatprovidesfullcustomizationofduplicatematch conditions and timewindowsize.
NetFlow GenerationProcesspacketsfrommultipleportstoremoveduplicatesorgenerate NetFlowrecords,directingtrafficofinteresttosecurityandperformancetools.
NetFlow V5, V9 and IPFIX
TheHyperEnginemonitorsnetworktrafficandisanidealsourceforgeneratingNetFlowrecords.Itcanoff-loadprocessingfromroutersandotherproductionequipmenttoincreaseefficiencyandsavecosts;plus,consolidatingNetFlowsourcesreducesnetworktrafficandsimplifies themonitoringarchitecture.
ConnectanysystemtraffictothesixserviceenginesforNetFlowsourceprocessingofunsampledorsampledtrafficflowrecords.Theunsampledflowrecordscontaindataofeverypacketinthedatastreamforacompleterepresentationofthetraffic.
PROCESSING FEATURES
Packet Deduplication
Completevisibilityoflargedatacenternetworksinvolvesviewingtrafficatseveralmonitoringpoints.Whilethisincreasesoverallvisibility,somepacketswillbemonitored atmultiplepointscreatingduplicatepacketsthatcan overloadnetworkmonitoringtoolsandaffectreporting.Removingduplicatepacketsimprovesmonitoringtoolefficiency,accuracy,anddatastorageoptimization. Thisenablesmonitoringtoolstoprovidegreatervisibility whileloweringoverallcosts.
TheHyperEngine,with600Gbpsofprocessingcapability,monitorseverypacketinthehigh-speeddatastream toremoveduplicatesandimprovetoolefficiency. TheHyperEngineenablesduplicatematchingacrosslayers 2,3,and4headers,andsupportsalarge,configurablewindowsizeofupto500ms.Configurableoptionsalsoincludefieldsforadeduplicationalgorithmandinclusion/exclusionoptionsforcommonencapsulationsusedindatacenters.AnotheroptionallowstheconfigurationtoignoreparticularLayer4TCPand/orUDPheaderfields.Theseconfigurationoptionsprovideadditionalflexibilitytotheusertocustomizewhatisactuallyconsideredaduplicatepacket.
NETWORK VISIBILITY FAMILYINTELLAVIEW
Up to two front-facing controller cardswithatouchscreencanbe installedtoprovidefailoveroperation foruninterruptedcontinuity.
3RU | Upto2blades 5RU | Upto4blades 9RU | Upto8blades
EachoftheACI-4020-C,ACI-4040-Candthe ACI-4080-Ccanbeconfiguredwithuptosixnext-generationswitchfabriccards,providingfullmeshconnectivitywiththebladesthroughthebackplane,andofferingadramaticincreaseinbandwidthpotential,uptofivetimesoverthatachievedinpreviousgenerationproducts.Themorefabriccardsyouinstall,thehighertheblade-to-bladetrafficbandwidth.
The APCON IntellaView Chassis consist of the ACI-4020-C 3RU,ACI-4040-C5RUandtheACI-4080-C9RUchassis,the nextgenerationofAPCONnetworkvisibilityappliances.
Deep Packet Inspection*
TheHyperEngine’sDeepPacketInspectionfeatureenablesdataprivacyandcomplianceforregulationssuchasHIPAAandPCIbyidentifyingandmaskingsensitivedata. Thisfeatureperformsdeeppacketinspection,looking insidethedatapacketandsearchingforspecificdatapatterns,suchassocialsecuritynumbersorcreditcardnumbers.Onceidentified,thematcheddatacanbe maskedandthepacketforwarded,orthepacketcan bedroppedorforwardedunchanged.
AnotheruseofDeepPacketInspectionistheabilitytosearchforknownvirusthreats,andforwardanyidentifiedpacketsdirectlytoasecuritytool.TheDeepPacketInspectionfeaturealsoallowsforimportingaregularexpressionsignaturefiletosimplifyconfiguration.
Advanced Packet Slicing*
Thepacketslicingfeatureremovespacketpayloadthatisnot necessary for certain network performance analysis andanalytictools,thusincreasingtheefficiencyandeffectivenessofthesetools.Italsoensuresdataprivacy forcompliancewithregulationssuchasHIPAAandPCI.
TheHyperEngineadvancedpacketslicingfeature providescustomerstheabilitytospecifythepacket slicelengthbasedonthetypeofpacketaswellaswithconfigurationflexibilitybasedontheirnetworkinfrastructureandrequirements.
The HyperEngine is part of APCON’s IntellaView network visibilitysolutionandiscompatiblewithallsystemsfrom3RUto9RU.Enhancemulti-sitemanagementwithTitancentralizedmanagementtoget24/7visibility.
GTP Correlation* Tobettersupportserviceprovidernetworks,the HyperEngineoffersnewGPRSTunnelingProtocol(GTP)correlationcapabilitythatprovidessubscriber-specific packetdatavisibilityforperformancemonitoring, analyticsandsecuritytools.
19063-0321
APCON, Inc. ▪9255SWPioneerCourt,Wilsonville,Oregon97070+1503–682–4050▪1–800–624–6808▪ apcon.com©2020APCON,Inc.AllRightsReserved. @APCON ▪ company/APCON
APCON SOLUTIONS APCONleveragesitsproprietaryIPanddeepexpertisetoprovideflexible,focusedsolutionsacross • Government • Healthcare • Higher Education • Financial Services • Manufacturing • Telecommunications APCONsolutionsprovidetheflexibilityandmeanstogainvisibilitytodata moreefficiently,resultinginsavingsacrosstheboard,includingtime,resources,andmaintenance.
ABOUT APCON Aprivatelyheldcorporation,APCONisheadquarterednearPortland,Oregon,whereithasoperatedsince1993.APCON’sin-housestaffmanagesproductdesignanddevelopment,manufacturing,qualityassuranceandfinaltesting,customertrainingand long-termservicingofitssolutions—whether for a system with a single switchoraglobalinstallationthat spansacrossmultiplegeographical orcloudlocations.
SERVICE AND SUPPORT APCON’sprofessionalservicesteamofcertifiedengineershasyearsofexperienceoptimizingnetworkvisibilitystrategiesforbusinessesacrosstheglobe.Inadditiontoprovidinginstallationassistanceofexistinganalysistools,thisteamproudlyprovidesaround-the-clocktroubleshootingservicesandsupport.
IntellaView HyperEngine Packet Processor Blade | ACI-4033-E00-1
Performance 6serviceengines;total600Gbps**
Memory 64GBofDDR4perserviceengine
Deduplication ACI-9330-002
NetFlow Generation ACI-9330-004
Deep Packet Inspection* ACI-9330-006
Advance Protocol Stripping* ACI-9330-010
GTP Correlation* ACI-9330-012
Weight 16.5lbs(7.5kg)***
Power 750-900Watts/2560-3072BTU***
Size 17.24”W×17.46”D×1.63”H(43.78W×44.32D×4.11Hcm)
Operating Temp 32to113°F(0to45°C)
Storage Temp -40to158°F(-40to70°C)
Relative Humidity Operating:10-85%;Storage:0-95%noncondensing
*Planned for future release and subject to change. **Performance indicates the network processor capacity. Actual performance varies by the selected feature and packet size.***Weight and power estimates are preliminary and subject to change.