Wind River’s Pattern Matching Engine addresses NFV security
Content Inspection Engine is a high-speed embedded software pattern matching solution that can match large groups of regular expressions against blocks or streams of data. The engine can also search for multiple patterns simultaneously, even when the streams of data are scattered in different memory locations. Content Inspection Engine is a scalable, cost-effective approach that runs entirely in software. It is applicable to applications that need to scan large amounts of data, such as intrusion prevention, antivirus applications, and unified threat management.
According to recent benchmarks, Content Inspection Engine, also marketed as Hyperscan, now delivers pattern matching throughput of over 36 Gbps on the Intel Atom processor C2000 series, using tier-1 original equipment manufacturer (OEM) IPS patterns to scan real-world HTTP traffic. It is a pattern matching library designed to drop into a vendor’s system software release and be used for an entire product line, without requiring any additional software or hardware resources. With scanning performance on high-end Intel Xeon–based platforms exceeding 280 Gbps, these benchmarks demonstrate Content Inspection Engine’s ability to deliver scalable performance, making it a pattern matching technology that can be ued with low-end to high-end security platforms and NFV-based solutions.
Security appliance vendors are under growing pressure to engineer for higher performance in order to meet market needs. Performance bottlenecks are often due to content scanning, including the respective challenges of keeping up with rising volumes of data and increasingly complex new patterns and rule sets. Using Content Inspection Engine, vendors can now improve scanning performance and scalability and uprate their overall network security performance.
“These latest benchmarks validate how software can transform processor real estate into scalable security performance,” said Paul Senyshyn, vice president of communication platforms at Wind River. “Wind River Content Inspection Engine delivers streamlined integration and scalability…[for]… customers embracing the benefits of high speed pattern matching, including a steady stream of new evaluations worldwide.”
Content Inspection Engine extends the benefits of pattern matching as vendors move toward virtual appliances and applications. NFV in the cloud must rapidly scale to meet the high growth and demands of the network without modifying software design. Content Inspection Engine is suited for this challenge of scaling rapidly as increased performance is achieved by simply allocating more resources without the need for software modifications. Appliances that use Content Inspection Engine can live-migrate to another server in less than 300 msec when run on carrier grade Wind River Linux. This capability is critical in scenarios when downtime must be minimised, such as during failover or migration to new equipment when data-centre hardware is refreshed.
Wind River; https://tinyurl.com/102214cie / www.windriver.com
If you enjoyed this article, you will like the following ones: don't miss them by subscribing to :
