Monday, January 10, 2011

Cavium Now Offers DPI s/w

 
Cavium is going up in the DPI food chain. The chip manufacturer that has offered so far packet processing chips ("Cavium Networks OCTEON II CN68XX" - here), is now announcing "TurboDPI™, the  industry’s first off-the-shelf multi-function security software solution optimized for OCTEON II processors. TurboDPI utilizes Cavium Networks patent pending new Uniscan™ technology that is incorporated in all multi-core OCTEON II processors to simultaneously block malicious or inappropriate URLs, identify hundreds of widely used protocols and applications, help block thousands of different intrusion attempts and locate over a hundred thousand varieties of virus and malware threats, all with just a single scan of the data stream, enabling the highest performance at up to 40Gbps"

See "Cavium Networks Introduces TurboDPI – A Complete Solution Integrating Protocol Analysis, Application Recognition, URL Filtering, IDS/IPS and Anti-Malware" - here.

"Cavium’s TurboDPI solution consists of carrier-grade, deep packet inspection software which can be utilized inline or out of band to detect hundreds of protocols including Internet (HTTP, FTP etc), Email (IMAP, POP3, SMTP etc.), Web 2.0 (Facebook, Myspace, etc), Multimedia (Flash, Quicktime, Youtube, etc), Peer to Peer (Bittorrent, eDonkey, etc) and Voice and Messaging (Skype, GoogleTalk, Yahoo, etc).. OEM customers can utilize their own in-house signatures and rules or combine with best of breed  anti-malware technology providers such as Kaspersky Lab to create a single solution for protocol analysis, application recognition, URL filtering, intrusion prevention and anti-malware".

Note that Qosmos, a provider of DPI s/w package, is presented at Cavium's partner page (here) and supports the same Cavium processors (see "Qosmos announces support for Cavium Networks OCTEON™ Multicore MIPS64® based processors"- here)


2 comments:

  1. Azi, you are right to qualify: 'company announced'. We have looked at DPI solutions and the best featured and well performing is from Qosmos.
    Cavium can probably deliver better performance, but at the loss of product features and code maturity.
    I will like to know if TurboDPI is a derived port from openDPI open-source GPL project.

    from comments I heard, the uniscan HFA in octeon-2 has a hard time keeping graph locked in available space, and ends up performing poorer than DFA in 1st generation cn3860. It may suffer from same cache thrashing issues, that happens on other low cache cpus.


    independent testing is a Must.

    Jagan

    ReplyDelete
  2. A while ago I had a post EEMBC's imitative to define a standard DPI performance benchmark. As Cavium is a member of this organization, I am sure that once the "DPIBench" is established Cavium will provide us with the results.

    http://broabandtrafficmanagement.blogspot.com/2010/07/dpibench-benchmark-for-measuring-dpi.html

    ReplyDelete