Optimize Packet Processing in order to Scale CPU Bound Network Monitoring/Cyber Security Applications at 10, 40 and 100GE
Save CPU Cycles to Enable Application Performance & Significant Cost Savings
Snort, Suricata and other open source engine application developers working with CPU bound network monitoring and cyber security applications can now enable a powerful FPGA-based host CPU offload feature called Flow Shunting. Flow Shunting optimizes packet processing in order to scale such software applications at 10, 40 and 100GE.
Flow Shunting reduces the number of packets an application must process to provide complete, dynamic control over traffic flows forwarded from the FPGA to the application.
Benefits of Flow Shunting:
- Flow Shunting: allows an application to programmatically turn packet transmission on or off-for a given flow (based on 5-tuple), forward, drop, redirect flows (blacklist matching)
- Cost Savings: due to reduced disk space requirements & CPU optimization
- Preserve CPU Cycles: eliminate processing of unwanted traffic flows
- Scale Network Security Applications: such as Snort, Suricata and others