New Readers

 Home News and World Report Buyers Guide Global Excellence Technology Case Studies Editorial Awards About Info Security
 

Meeting heavy deep packet inspection demands

 

CURRENT THREAT SCENARIO

The shear growth of traffic and increasing sophistication of threats transported over the internet and service provider networks is truly staggering. Cisco reports that last year they saw a 90% growth in threats originating from legitimate domains. Spam has grown to 200 billion messages a day and accounts for 90% of all email. Eight exabytes (that’s 18 zeros) of IP traffic are generated globally every month.Without Content Security Accelerators, general purpose processors struggle to process even a gigabit of throughput. Unless every bit of every packet is examined worms and viruses can more easily spread unchecked.

ORDER REPRINTS
 
Info Security Products Guide
 
this article
 
COMPARE and print reports
 
RATE products





Tomorrow's Technology Today - Content Security Accelerator


WHAT DOES THIS TECHNOLOGY DO?

The performance demands of Content Security Accelerators have rapidly increased to the point that software-only and FPGA-based products simply cannot keep up. We are already seeing demands for 10 – 40Gb/s systems. LSI previously shipped FPGA –based boards, but has now moved to supplying optimized silicon and boards based on a 90nm process that allows our Tarari Content Processors to operate at 3 - 10Gb/s in a single device – and without the need for additional exotic memories like RLDRAM, SRAM or TCAM – instead standard DDR2 RAM is all that is required to support simultaneous scanning of up to one million rules. This reduces both power and costs – now a two chip solution replaces eleven devices for 3Gb/s performance and can scale to10Gb/s – something not possible before.The new T2000 LSI Tarari Content Processor and new 86xx PCIe board family allows OEMs building security appliances for Unified Threat Management (UTM) and Intrusion Prevention Systems (IPS) to bring products to market faster without worrying about how they can keep up with heavy deep packet inspection demands. They can now concentrate on the real value they add – that is creating innovative systems that can combat the ever growing threats. IDC predicts the Intrusion Prevention Systems market (IPS) to grow from $1.3B in 2006 to $2.6B by 2012, and the Unified Threat Management (UTM) market which combines anti-virus and intrusion prevention is seeing even faster growth from $1B in 2006 to over $3.5B in 2012.Another innovative feature of the T2000 LSI Tarari Content Processor is that it supports dual content processor expansion (CPX) buses that allow two devices to be configured to automatically work in unison. This increases the total throughput and doubles the small packet performance which is especially important on service provider networks. The CPX bus also supports the addition of an FPGA that is managed by the T2000 – which allows additional expansion for future requirements.

Conclusion:

Equipment that utilizes LSI Tarari Content Processors provides significant deep packet inspection headroom that will help ensure longer equipment life spans and reduce the running costs because of the dramatic power savings – approximately 1 watt per Gb/s versus 200 watts per Gb/s when compared to software-only solutions.

LSI Corporation
1621 Barber Lane
Milpitas CA 95035 USA