High Speed Packet Processing for Data Streams from Sensors

Collect the data from the INGRESS at 10 Gbps and process in parallel by utilizing the majority of the CPU cores available.

Solution Description

The incoming data stream from the NIC will be sent directly to the user space application using DPDK.
The VPP application runs in user space and receives the incoming packets.
The user plug-in handles the streaming data and processes it as required.

Approach to High Speed Packet Processing for Sensor Data

Approach-to-High-Speed-Packet-Processing

VPP Implementation

The incoming data stream from the NIC will be sent directly to the user space application using DPDK.
NIC uses the technology of Receive Side Scaling ( RSS ) to distribute among multiple cores using separate buffers
The VPP application runs in user space and receives the incoming packets.
Each core of each processor in the dual processor mode will have its own VPP processing
Layer 2 – Layer 4 processing done by VPP in built nodes
The user plug-in handles the streaming data algorithm and processes it as required.

High Speed Packet Processing for Next Gen Firewall

One of the most critical key performance indicators for the successful development of NGFW is achieving peak performance while maintaining a raw throughput of 155Gbps where multiple features are to be supported.

High-speed-packet-processing2

Solution Description

Packet processing speed, scale, efficiency, and software defined flexibility for networking and security are achieved by a high speed packet processing engine.
The basis of this high speed engine is Vector Packet Processing (VPP).
VPP involves packet processing graph which processes an entire vector of packets through a graph node, before moving on to the next node.
fd.io is an initiative from Linux Foundation which uses VPP for high speed packet processing.
In the above model, new plug-in modules can be introduced for new functionalities by adding new graph nodes.

Outcome and Benefits Delivered

clearly articulate the outcome and business benefits achieved or delivered. Avoid using generic niche words. Include as much metrics as much possible. For example use % savings, % reduction so on
Try including info graphics to convey the benefits delivered (in a quantified way)

Approach to High Speed Packet Processing for Next Gen Firewall

Next firewall

Data Plane and Control Plane of NGFW

Data-Plane-and-Control-Plane

VPP Implementation for High Speed Packet Processing - NGFW

The incoming data stream from the NIC will be sent directly to the user space application using DPDK.
NIC uses the technology of Receive Side Scaling ( RSS ) to distribute among multiple cores using separate buffers
The VPP application runs in user space and receives the incoming packets.
Each core of each processor in the dual processor mode will have its own VPP processing
Layer 2 – Layer 4 processing done by VPP in built nodes
The user plug-in implements the Intrusion Detection and Prevention by Deep Packet Inspection
The control plane handles the connection management in NGFW. It runs in one of the cores.