100G Network Traffic Capturing Filter and Packet Broker Optimize Security of Traffic Flow

100G Network Traffic Capturing Filter and Packet Broker Optimize Network Security of Traffic Flow

1. Product Background

The NetTAP® Network Packet Broker with Nework Traffic Analysis Visibility to Optimize Your Network, it is network data visualization control device developed by Chengdu Shuwei Communication Co., Ltd.(short as: NetTAP®) is a comprehensive product of the whole visual data collection, data unified scheduling management, pretreatment and redistribution.Network elements which can realize different location, different exchange routing node link centralized collection of data receiving, processing engine, through the analysis of the device's built-in high-performance data will be collected original data accurate identification, analysis, statistical summary and tag, the original data redistribution output, monitoring equipment to meet all kinds of analysis in data mining, protocol analysis, signal analysis, security analysis, risk control, etc. The required flow rate.

2. Intelligent Traffic Processing Abilities​

ASIC Chip Plus Multicore CPU

1.8Tbps intelligent traffic processing capabilities

100GE Data Acquisition & 100GE Packet Capturing

25GE * 48 ports plus 100GE * 6 ports, Max Rx/Tx duplex processing, up to 1.8Tbps Traffic Data Transceiver at same time, for network Data Acquisition, simple Pre-processing

Data Replication

Packet replicated from 1 port to multiple N ports, or multiple N ports aggregated, then replicated to multiple M ports

Data Aggregation

Packet replicated from 1 port to multiple N ports, or multiple N ports aggregated, then replicated to multiple M ports

Data Distribution & Packet Broker

Classified the incoming raw data accurately and discarded or forwarded different data services to multiple interface outputs according to the whitelist, blacklist or user’s predefined rules.

Data Filtering

Supported L2-L7 packet filtering matching, such as SMAC, DMAC, SIP, DIP, Sport, Dport, TTL, SYN, ACK, FIN, Ethernet type field and value, IP protocol number, TOS, etc. also supported flexible combination of up to 2000 filtering rules.

Load Balance

Supported load balance Hash algorithm and session-based weight sharing algorithm according to L2-L7 layer characteristics to ensure that the port output traffic dynamic of load balancing

UDF(User Defined Function) Match

Supported the matching of any key field in the first 128 bytes of a packet. Customized the Offset Value and Key Field Length and Content, and determining the traffic output policy according to the user configuration

Single Fiber Rx/Tx

Supported the single fiber Rx/Tx based on ports 10G, 25G, 40G, 100G working mode, to meet the requirement of single fiber data Rx/Tx in back-end devices, and can reduce the access cost of optical fiber materials for user to collect and distribute a large number of links.

Network Message Disitribution & Packet Distribution

A message splitting method based on multiple hash is characterized as follows: the method USES two hash algorithms to calculate two hash results respectively, USES one of the hash results to search the result of the spatial primary table as the benchmark index, and USES the other hash result to search the result of the spatial subtable as the auxiliary index to modify the benchmark index.

NetTAP® Visibility Platform

Supported NetTAP® Matrix-SDN Visual Control Platform Access

1+1 Redundant Power System(RPS)

Supported 1+1 Dual Redundant Power System

NT-FTAP-54ECX Network TAP NPB.pdf

3. Typical Application

Data Center Of Area:

Telecom,

Broadcasting,

Government,

Finance,

Energy,

Power,

Petroleum,

Hospital,

School,

Enterprise

And Other Industries

NetTAP® Network Optimization Solution

- More application for 25G/50G/100G, bandwidth crazy growing

- Virtualized cloud computing drives both north-south and east-west traffic growth

- Main applications based on B/S architecture, with higher bandwidth requirements, more interaction open, and business changes faster

- Network operation and maintenance: single network management - network performance monitoring, network backtracking, anomaly monitoring - AIOPS

- More security management and control, such as IDS, DB Audit, Behavior Audit, Operation and Maintenance Audit, Data-oriented Management and Control,

Virus Monitoring, WEB Protection, Compliance Analysis and Control

- Network Security – from Access control, Threat Detection and Protection to the core of Data Security

4. Specifications

*THE MORE ADVANCED FUNCTIONS WILL BE LAUNCHED SOON*

NetTAP® (Full named Chengdu Shuwei Communication Technology Co., Ltd.)was established in 2007. Focusing on the Research and Development of Network TAPs/NPBs Communication Equipment, Data Security Analysis Equipment, which provides products and solutions in Big Data Acquisition, Data Storage, Data Monitoring, Data Processing and Data Analysis for Telecom, TV Broadcasting, Government, Education, IT, Finance, Bank, Hospital, Transportation, Energy, Power, Petroleum, Enterprise and other industries.

NetTAP® has launched various types of high-density devices such as: Fast Gigabit, 10 Gigabit Ethernet Network Traffic Replication, Aggregation, Distribution Network TAPs/NPBs (Network Packet Broker), intelligent Hybrid Traffic Network TAPs, 25G, 40G, 100G, etc. high density and Performance Network TAPs/NPBs(Network Packet Broker).

NetTAP® has a hardware production plant, all the communication products have complete Software and Hardware Independent Intellectual Property Rights, with complete Copyright Registration and Product Certification.

MATRIX NetInsight™ - A Fully Function Network Visibility Control Platform

MATRIX NetInsight™ Network System Value

1- Data Acquisition with centralized planning, eliminate monitoring blind spot

2- Free distribution of data, saving analysis of the overall investment

3- Data Security Control, Reduce the risk of disclosure

4- Overall Traffic visible, Abnormal Located more accurate, Fault analysis more useful

MATRIX NetInsight™ Function Architecture

1- User Interaction Layer

2- Big Data Analysis Layer

3- Data Storage Layer

4- Analysis Visibility Layer

5- Data Acquisition Layer

Zain Cloud Project of Saudi Arabia Telecom