Flow Shunting

Keeping up with the deluge of data is a classic problem for almost every offline security appliance: particularly at 10, 40 and 100G speeds. Security applications such as Suricata and others are all CPU bound and thus their performance is directly related to the number of packets the application has to process.

To solve the problem, Accolade introduced a unique “Flow Shunting” feature preserving critical CPU cycles to enable application performance and significant cost savings.

At a high level, Flow Shunting allows an application to programmatically turn packet transmission on or off—for a given flow (based on 5-tuple). In other words, the application can decide from which flow(s) it does and does not want to receive data traffic. By intelligently “toggling” the flow shunting switch, an application can greatly reduce the amount of data it has to analyze, thereby freeing up CPU resources for more pressing tasks.

Key Benefits of Flow Shunting:

  • Offload host CPUs from processing unnecessary traffic.
  • Scale network security software applications such as Snort and Suricata
  • Cost savings from reduced disk space / CPU utilization requirements.
  • Eliminate processing (or storage) of unwanted traffic flows.

Learn how Flow Shunting reduces the number of packets the security application has to process to enable complete, dynamic control over which traffic flows are forwarded from FPGA adapter to application.

About Accolade

Accolade is the technology leader in FPGA-based Host CPU Offload and 100% Packet Capture PCIe NIC’s and Scalable 1U Platforms. Accolade’s line of 1-100GE products enable 100% packet capture, flow classification, flow shunting, deduplication, packet filtering and more. Our customers are global leaders in network monitoring & cybersecurity applications as well as in the network test and measurement, telecom and video stream monitoring markets.

FPGA Acceleration Features

100% Packet Capture | Flow Classification | Flow Shunting | Precise Time Stamping | Packet Merging | Packet Slicing | Packet Parsing | Packet Filtering | Deduplication | Host Packet Buffer | Packet Steering | Direct Memory Access (DMA) | Statistics (RMON1)

Free Product Evaluation

Resolve all your host CPU offload bottlenecks. Share Your Technical Requirements with our FPGA and software experts to tailor the optimal solution. Accolade offers a 60 day free product evaluation for qualified customers to fully test and evaluate our products.