Port 10Gbps Ethernet Content Matching Network Adapter

Port 10Gbps Ethernet Content Matching Network Adapter

IS4511M is 10Gbps Ethernet Content Matching Network Adapter based on the two PCI-E cards interconnection architecture directly using XAUI over HDMI cable, which carries the OCTEON^TM Plus CN5650 multicore processor and the NetLogic Microsystems NETL7^TMknowledge-based processor. As the critical enabler for DPI packet processor, IS4511M delivers the optimized solutions for a wide variety of network applications.

IS4511M is the content matching network adapter and has the configuration of inserting into PCI-E two slots, which is comprised of IS4511P based on CN5650 and IP4000E based on NLS1008.

With one 10Gbe SFP+, IS4511P provides the programmable functionality which is covered with the wide range of network applications. IP4000E allows a host CPU or IS4511P to inspect every bit of traffic traversing the network with the predefined rules of the signature database at speed up to 10Gbps by XAUI or PCI-E interface. The XAUI interface allows IP4000E to insert the results of content processing operations as a header when the original packet is retransmitted on the XAUI interface.

The subsequent packet processor with IS4511P received a packet which is already tagged with information about the contents of the packet and the previous packet with the same flow. This significantly reduces or eliminates the need for resource-intensive recursive processing within IS4511P or host CPU. IP4000E is programmed for the rules or signatures of interest by a host CPU attached to the PCI-Express interface.

IS4511M is designed to integrate into the leading platform with solutions of upgraded security search of protocol abnormalities and detection of unusual attack pattern for identifying threats.

Key Features

• Two port 10 Gbps SFP+ transceivers
• Cavium Octeon plus Multi Core Processor CN5650 (12 cores, 750MHz)
• 4- or 8-lane PCI Express host interface
• 4GB DDR2 DRAM packet memory through SO-DIMM
• 16MB flash memory
• 10Gbps knowledge based content processor
• Stateful & stateless of string matching capability
• Regular Expression based pattern matching
• PCRE rules up to 9000 (average 20 symbols per a rule)
• Easy to integrate API

Applications

• Traffic monitoring and accounting
• Flow Analysis and Recording of IP traffic
• Data Recording of network traffic
• Data Capture, Logging and Forensic Analysis
• High Performance Network Security such as IDS, IPS, Anti-DDoS, UTM, etc.
• Customer-driven Wire-speed Packet Processing
• Deep Packet Inspection Systems