introducing the flareon ultra sfn8500 adapter family · – zero-copy capture to disk (pcap format)...
TRANSCRIPT
![Page 1: Introducing the Flareon Ultra SFN8500 Adapter Family · – Zero-copy capture to disk (pcap format) – Line-rate forwarding at 40G – Accelerates libpcap, Snort, IDS, IPS, CSS *](https://reader035.vdocuments.us/reader035/viewer/2022081612/5f1a2d65791bd421796f2a8c/html5/thumbnails/1.jpg)
1
Introducing the Flareon Ultra SFN8500Adapter Family
June 13th, 2016
Davor Frank
Senior Solutions Architect
![Page 2: Introducing the Flareon Ultra SFN8500 Adapter Family · – Zero-copy capture to disk (pcap format) – Line-rate forwarding at 40G – Accelerates libpcap, Snort, IDS, IPS, CSS *](https://reader035.vdocuments.us/reader035/viewer/2022081612/5f1a2d65791bd421796f2a8c/html5/thumbnails/2.jpg)
2
We provide application visibility, acceleration and security, all on a single platform
Reduced Business Risk
Accelerated ROIDramatically Lower OPEX Enhanced DistributedData Security
Faster Business Insights
![Page 3: Introducing the Flareon Ultra SFN8500 Adapter Family · – Zero-copy capture to disk (pcap format) – Line-rate forwarding at 40G – Accelerates libpcap, Snort, IDS, IPS, CSS *](https://reader035.vdocuments.us/reader035/viewer/2022081612/5f1a2d65791bd421796f2a8c/html5/thumbnails/3.jpg)
3
Onload • Onload accelerates:– Latency sensitive applications AND– Highly threaded and horizontally scaled applications
• TCP & UDP (unicast & multicast)• Pipes• TCP and UDP loopback• Select(), poll() and epoll() • White/blacklisting/DDOS protection• Remote monitoring• New TCPDirect API
• Onload is compatible:– Standard BSD sockets API– No changes to applications needed– Many languages (Java) / Middleware– Standard protocols on the network
• Onload supports:– Precision timestamps– Bonding (active-back and LACP) (teamd)– VLANs– SRIOV acceleration (Guest VM / Container)– Insane FPGA offload
Kernel
Application
NETWORK ADAPTER
Application
VNIC
TCP/IP STACK
Driver
TCP Direct Onload
VNIC VNIC
![Page 4: Introducing the Flareon Ultra SFN8500 Adapter Family · – Zero-copy capture to disk (pcap format) – Line-rate forwarding at 40G – Accelerates libpcap, Snort, IDS, IPS, CSS *](https://reader035.vdocuments.us/reader035/viewer/2022081612/5f1a2d65791bd421796f2a8c/html5/thumbnails/4.jpg)
4
SFA7942Q Application Onload Engine
• Onload TCP/UDP– Insane 240ns tick to trade with Solarflare ANTS*
• Capture– 8GB on-board buffering– 64 capture channels– Header matching & hash-based spreading– Zero-copy capture to disk (pcap format)– Line-rate forwarding at 40G– Accelerates libpcap, Snort, IDS, IPS, CSS
* Not STAC Benchmarks
• 2x QSFP+– 2x 40GbE
– 8x 10GbE
• Half length PCIe
• Stratix V A7 FPGA
• 4x 800MHz DDR3
• Stratum 3E TCXO
• Open Source FDK Reference Designs
![Page 5: Introducing the Flareon Ultra SFN8500 Adapter Family · – Zero-copy capture to disk (pcap format) – Line-rate forwarding at 40G – Accelerates libpcap, Snort, IDS, IPS, CSS *](https://reader035.vdocuments.us/reader035/viewer/2022081612/5f1a2d65791bd421796f2a8c/html5/thumbnails/5.jpg)
5
SFN8500 Highlights• Next Generation Adapter
– 10G and 40G, Dual and quad port• Fully symmetrical
– 44% latency reduction• < 900ns Ethernet, <1000ns TCP/UDP
– 3x packet rate increase• 2x10G and 1x40G line rate capture
– 42% bandwidth increase• 2x40G full bidirectional, with increased microburst resilience
• Precision time on all adapter SKUs– Stable Stratum 3E oscillator– Hardware time stamps every frame– Time synchronization via PTP and PPS– Synchronises host clock and adapter clocks
• Tamper resistant– Secure boot from flash, secure debug, secure key management
• Overlay Network Acceleration– VXLAN, NVGRE, Geneve, Cloudstack, OVS
* Not STAC Benchmarks
![Page 6: Introducing the Flareon Ultra SFN8500 Adapter Family · – Zero-copy capture to disk (pcap format) – Line-rate forwarding at 40G – Accelerates libpcap, Snort, IDS, IPS, CSS *](https://reader035.vdocuments.us/reader035/viewer/2022081612/5f1a2d65791bd421796f2a8c/html5/thumbnails/6.jpg)
6
Not STAC Benchmarks
44% TCP latency reduction fromcurrent 7122 with 8500/TCPDirect
<1000ns UDP / TCP on more exotic(or old!) platforms
TCP
UDP
![Page 7: Introducing the Flareon Ultra SFN8500 Adapter Family · – Zero-copy capture to disk (pcap format) – Line-rate forwarding at 40G – Accelerates libpcap, Snort, IDS, IPS, CSS *](https://reader035.vdocuments.us/reader035/viewer/2022081612/5f1a2d65791bd421796f2a8c/html5/thumbnails/7.jpg)
7
SFN8500 Family Adapters
• Common hardware platform– High performance
– Precision time
– Security ready
• Optional software license SKUs
• Backwards compatible with SFN7xxx
• SFN8522 & 8542 samples available now