Enable Flow Classification Performed Inside an FPGA (as opposed to software)
Track up to 32 Million Unique IP Flows in Demanding Cyber Security / Network Monitoring Applications
Accolade offers 1-100GE FPGA-based Host CPU Offload and 100% Packet Capture PCIe NIC’s and Platforms that enable FPGA-based Flow Classification. The following are a few high-level flow classification characteristics offered:
- Can track up to 32 million unique IP flows per adapter
- Actions such as forward, drop or redirect can be requested on a per flow basis
- Both directions of a flow are tracked and recorded
- Information such as total packet count, byte count and the last time a packet was seen is maintained for every flow
How does it work?
The whitepaper below describes the various mechanisms involved when a single packet arrives into the flow classifier. Keep in mind that an FPGA must perform these procedures for every packet that arrives without dropping or altering a single packet. All of this must be performed flawlessly at up to 100Gbps speeds.
Use Cases and Papers
In order to implement FPGA-based Flow Classification some basic software integration (and sometimes customization) is required. There are many vendors that provide “raw” FPGA-based NICs, leaving the customer to figure out what to do with the hardware. Learn how Accolade’s in-house developed host CPU offload feature sets can bring a cyber security/network monitoring application to market in record time: