Use our mobile site at: m.ITbriefing.net    Follow ITbriefing.net: Follow ITbriefing on Twitter   Follow ITbriefing via Facebook   Follow ITbriefing via RSS 
Netronome Primes High-Performance Firewalls Based on eBPF/XDP as Data Center Operators Upgrade From Iptables


 Tags:   Networks                This was published: 16 Apr 2018 - 10:06 pm         Print article: Printer friendly page
          

Netronome Primes High-Performance Firewalls Based on eBPF/XDP as Data Center Operators Upgrade From Iptables - on DefenceBriefing.net

RSA CONFERENCE -- Netronome, a leader in high-performance intelligent networking solutions, today announced the release of eBPF/XDP offload for Agilio SmartNICs. This provides a foundation for building high-performance, kernel-compliant firewalls, DDoS protection and load balancing products that complement and build on the momentum in the Linux community to drive highly secure, scalable applications needed to optimally secure the exponential growth of users, devices and data. The unique upstreamed, kernel-based Netronome offload and just-in-time (JIT) compiler, combined with the existing low power Agilio® CX 10/25/40GbE SmartNICs, Agilio CX 25/50GbE OCP v2.0 SmartNICs and the new Agilio FX 10/25GbE SmartNICs, allow operators building infrastructures for data center core and enterprise edge applications to marry the benefits of the eBPF framework with transparent hardware acceleration, resulting in up to 10X higher price/performance benefits and 3X power savings.



The new high-performance offload provides an interface to any technology stack that utilizes the underlying flexibility and scalability of eBPF with the performance of XDP. XDP allows users to eliminate kernel bypass through the provision of performance at the base of the kernel stack, eliminating the need for users to have to choose between scalability and performance.

“The new cloud native world of containers needs fast in-kernel networking and security policy enforcement,” said Thomas Graf, founder of the Cilium project. “Programs using eBPF can be changed on the fly and can be transparently offloaded to hardware, combining the flexibility of software-defined data planes with the efficiencies of hardware. eBPF enables Cilium to provide secure microservices with a simple and efficient way to define and enforce both network-layer and application-layer security policies based on container/pod identity.”

“Many useful eBPF networking applications have been created by the Linux community; for example DDoS mitigation apps, load balancers, and more recently, the new bpfilter project for firewalls,” said Alexei Starovoitov, upstream BPF subsystem co-maintainer. “The ability to flexibly run these applications using multiple interfaces in the kernel, and now also in hardware, opens many new possibilities in how this technology can be used in the near future.”

“eBPF is a highly exciting and rapidly growing key part of the Linux kernel. Thanks to its flexibility and performance eBPF allows for a vast number of use cases in different areas such as tracing, security and networking. In particular in networking, eBPF/XDP has become a game changing technology. By providing an in-kernel, high-performance programmable datapath with extremely low per packet costs, XDP is suitable for tailoring custom applications in the field of DDoS mitigation, firewalling, load-balancing, monitoring or any sort of networking stack pre-processing,” said Daniel Borkmann, who maintains the BPF subsystem with Mr. Starovoitov. “The ability to easily offload such eBPF programs entirely into a SmartNIC takes the performance to another level by providing line-rate processing without affecting application performance.”

“The extremely important shift to eBPF/XDP for securing valuable user data is happening now at large data centers,” said Niel Viljoen, CEO and founder of Netronome. “As one of the top networking companies contributing to the Linux community in this vital space, we are proud to be in the forefront bringing true software-defined security with hardware acceleration to the industry as it braces for the tsunami of data growth from new applications and devices.”

By using the proposed bpfilter mechanism, traditional netfilter-based approaches used for implementing security will be easily transferrable to the more flexible, higher performance BPF-based environment. This ensures compliance with existing security management and orchestration tools, yet provides the ability to change dynamically, making it more suitable for ephemeral environments like with containers and edge computing. The Linux community is actively driving these innovations, bringing significant benefits to data center operators as they upgrade their infrastructures for tighter security.

For users who do not run Linux as the host kernel, the new Agilio FX 10/25GbE SmartNIC, which combines the NFP-4000 processor with a quad-core Arm v8, makes it possible to run BPF on the NFP with the Arm running Linux. As a result, vital eBPF/XDP-based security and load balancing features can now be implemented with a broad set of host operating systems.

The Agilio SmartNIC family fully and transparently offloads virtual switch and router datapath processing for networking functions such as overlays, security, load balancing and telemetry, enabling servers used for networking and cloud computing to conserve critical CPU cores for application processing while maintaining significantly higher networking throughput.

Available today, users can download the Agilio eBPF/XDP offload solution via the Netronome support site.

Visit Netronome at the RSA Conference

Netronome will be exhibiting at the RSA Conference, April 16-20, at booth 2610 with details about the need for more dynamic and performant security solutions and how such challenges can be addressed with its Linux upstreamed eBPF/XDP solutions. Netronome will also showcase the new Agilio FX SmartNIC and its applicability toward enhancing security for bare metal servers.

Supporting Resources

Article source - Business Wire, all right reserved. Copyright 2018
Trademarks, logos, pictures and other items may be copyright of firms mentioned in this article.



 


Other related articles, tagged Networks

· SAP Ariba Makes Manufacturing Awesome   (04/23/18)
· MobiWeb Awarded Excellence of the Year at the Le Fonti Awards Ceremony in Hong Kong   (04/23/18)
· Enapter Showcases its Anion Exchange Membrane (AEM) Electrolyser at HANNOVER MESSE 2018.   (04/23/18)
· Top Emerging Trends in the Global Humidity Sensor Market | Technavio   (04/22/18)
· Maxar Technologies’ DigitalGlobe Integrates Highest Resolution Satellite Imagery from WorldView-4 into SecureWatch™ and Celebrates 20th Defense and Intelligence Subscriber to the GEOINT Platform   (04/22/18)
· Jade Global to Exhibit at COLLABORATE 18: Technology and Applications Forum for the Oracle Community in Las Vegas, Nevada USA   (04/22/18)
· FIRST® Kicks Off World’s Largest Celebration of Young Innovators and Changemakers   (04/22/18)
· 19 California Schools & Community Centers to Receive Volunteer Makeovers as Part of 17th Annual “Comcast Cares Day”   (04/21/18)
· More Than 5,000 Volunteers to Support Nearly 60 Community Projects across Colorado on Comcast Cares Day   (04/21/18)
· Grid-connected PV Systems Market - Growth Analysis and Forecast | Technavio   (04/21/18)

>>>More articles  >>>

Latest tech videos:



· Maxar Technologies" DigitalGlobe Integrates Highest Resolution Satellite Imagery from WorldView-4 into SecureWatch™ and Celebrates 20th Defense and Intelligence Subscriber to the GEOINT Platform (2018-04-22 13:26)

DigitalGlobe, a Maxar Technologies company (formerly MacDonald, Dettwiler and Associates Ltd.) (NYSE: MAXR; TSX: MAXR), announced today that with the complete integration of DigitalGlobe’s WorldView-4 satellite imagery into SecureWatch, the company’s powerful, cloud-based geospatial intelligence (GEOINT) platform, customers can now access more of the world’s highest resolution satellite imagery.


· Jade Global to Exhibit at COLLABORATE 18: Technology and Applications Forum for the Oracle Community in Las Vegas, Nevada USA (2018-04-22 11:26)
Jade Global to Exhibit at COLLABORATE 18: Technology and Applications Forum for the Oracle Community in Las Vegas, Nevada USA - on DefenceBriefing.net

Who: Jade Global, a leading enterprise technology partner for Oracle Cloud integration, consulting & IT outsourcing, will be sponsoring and exhibiting at the COLLABORATE 18 Conference on April 22-26th 2018 at the Mandalay Bay Resort and Casino, Las Vegas. COLLABORATE 18 is a technology and applications forum for the Oracle community packed with hundreds of real-world case studies and 1,200+ panels by and for Oracle users. This high-energy conference is designed to provide in-depth education and training. Jade Global will be located at Booth 1012 in the Exhibition showcase, where you can meet their Oracle subject matter experts and learn about Jade Global’s extensive portfolio of Oracle services and solutions including Financials, Revenue Management, Enterprise Resource Planning (ERP), Supply Chain Management (SCM), Human Capital Management (HCM), Product Lifecycle Management (PLM), Project Portfolio Management (PPM), Warehouse Management (WMS), Enterprise Performance Management (EPM), Business Intelligence (BI) and PAAS both on Cloud and on-premise environments.


· FIRST® Kicks Off World"s Largest Celebration of Young Innovators and Changemakers (2018-04-22 07:06)
FIRST® Kicks Off World’s Largest Celebration of Young Innovators and Changemakers - on DefenceBriefing.net

This week, more than 15,000 students from around the world traveled to Houston, putting their innovation skills to the test at the annual FIRST Championship Presented by Qualcomm® Incorporated, held at the George R. Brown Convention Center, Minute Maid Park and Discovery Green.


· 19 California Schools & Community Centers to Receive Volunteer Makeovers as Part of 17th Annual "Comcast Cares Day” (2018-04-21 16:26)

On Saturday, April 21, more than 5,000 local Comcast NBCUniversal employees and their families, friends and community partners will “make change happen” as they volunteer to improve 19 California schools and community centers as part of the 17th annual Comcast Cares Day. This year, volunteers from the Northern Bay Area down to the Central Valley also are part of and celebrate a significant milestone of Comcast Cares Day – reaching 1 million volunteers since the program began in 2001.


· More Than 5,000 Volunteers to Support Nearly 60 Community Projects across Colorado on Comcast Cares Day (2018-04-21 14:26)
More Than 5,000 Volunteers to Support Nearly 60 Community Projects across Colorado on Comcast Cares Day - on DefenceBriefing.net

On Saturday, April 21, more than 5,000 local Comcast NBCUniversal employees and their families, friends and community partners will “make change happen” as they volunteer at nearly 60 project sites in 16 cities throughout Colorado as part of the 17th annual Comcast Cares Day. This year, volunteers in Colorado will also be a part of and celebrate a significant milestone of Comcast Cares Day – reaching 1 million volunteers since the program began in 2001.


· Grid-connected PV Systems Market - Growth Analysis and Forecast | Technavio (2018-04-21 13:06)
Grid-connected PV Systems Market - Growth Analysis and Forecast | Technavio - on DefenceBriefing.net

Technavio’s latest market research report on the global grid-connected PV systems market provides an analysis of the most important trends expected to impact the market outlook from 2018-2022. Technavio defines an emerging trend as a factor that has the potential to significantly impact the market and contribute to its growth or decline.


· Global Educational Robots Market - Entry of Global Industry Players to Boost Growth | Technavio (2018-04-21 12:46)
Global Educational Robots Market - Entry of Global Industry Players to Boost Growth | Technavio - on DefenceBriefing.net

Technavio’s latest market research report on the global educational robots market provides an analysis of the most important trends expected to impact the market outlook from 2018-2022. Technavio defines an emerging trend as a factor that has the potential to significantly impact the market and contribute to its growth or decline.


· RSA Conference 2018 Closes 27th Year Bringing Top Information Security Experts Together to Debate Critical Cybersecurity Issues (2018-04-21 01:06)
RSA Conference 2018 Closes 27th Year Bringing Top Information Security Experts Together to Debate Critical Cybersecurity Issues - on DefenceBriefing.net

RSA Conference, the world’s leading information security conferences and expositions, today concluded its 27th annual event in San Francisco.


· SmugMug Announces Intent to Acquire Flickr (2018-04-21 00:06)
SmugMug Announces Intent to Acquire Flickr - on DefenceBriefing.net

SmugMug, the largest, most comprehensive, independent photo management platform in the world, today announced it has agreed to purchase Flickr, the online photo management and sharing application. Together, SmugMug and Flickr represent the world’s most influential community of photographers, marrying SmugMug’s deep industry expertise and strong digital tools with Flickr’s global tribe of tens of millions of photographers. Following the close of the transaction, the brands will continue to operate as separate entities with the shared goal of providing photographers with both a place to fit in and a place to stand out. SmugMug and Flickr believe that all photographers—from the hobbyist to the prosumer to the professional—belong together.


· ADTRAN Appoints John Neville as Senior Vice President of Sales (2018-04-20 22:46)
ADTRAN Appoints John Neville as Senior Vice President of Sales - on DefenceBriefing.net

ADTRAN®, Inc., (NASDAQ-NMS: ADTN), a leading provider of next-generation open networking solutions, today announced that John Neville has been appointed as senior vice president of sales.


· Digital Government Services Offer Added Value to Louisiana on Earth Day (2018-04-20 22:46)
Digital Government Services Offer Added Value to Louisiana on Earth Day - on DefenceBriefing.net

Louisiana residents continue to do their part this Earth Day and year-round by taking advantage of online services which help to reduce their impact on the environment. These online services are the most efficient and environmentally friendly way to get the job done and can even save residents time and money.


· ITT to Release First-Quarter Results on May 4 (2018-04-20 22:26)
ITT to Release First-Quarter Results on May 4 - on DefenceBriefing.net

ITT Inc. (NYSE: ITT) will release its first-quarter 2018 financial results at 6:45 a.m. ET, on Friday, May 4, 2018. At 9 a.m. ET, senior management will review financial and operating results, comment on current conditions and answer questions during an investor briefing.


· Absolute Declares Quarterly Dividend (2018-04-20 21:26)
Absolute Declares Quarterly Dividend - on DefenceBriefing.net

Absolute (TSX: ABT), the endpoint visibility and control company, today announced that its Board of Directors declared a quarterly dividend of CAD$0.08 per share on its common shares, payable in cash on May 29, 2018 to shareholders of record at the close of business on May 8, 2018.


· Canadian Industrial Equipment Dealer Uses UltiPro Reporting to Improve Payroll Processes, Support Business Continuity Planning (2018-04-20 21:06)
Canadian Industrial Equipment Dealer Uses UltiPro Reporting to Improve Payroll Processes, Support Business Continuity Planning - on DefenceBriefing.net

Ultimate Software (NASDAQ-NMS: ULTI), a leading provider of human capital management (HCM) solutions in the cloud, announced today that SMS Equipment, a one-stop supplier of a broad range of equipment, production attachments, as well as parts and service, is using UltiPro’s reporting functionality to transform the roles and responsibilities of the Payroll department.


· Global Self-Service Kiosk Market - Overall Reduction in Operational Expenses to Boost Growth | Technavio (2018-04-20 21:06)
Global Self-Service Kiosk Market - Overall Reduction in Operational Expenses to Boost Growth | Technavio - on DefenceBriefing.net

Technavio’s latest market research report on the global self-service kiosk market provides an analysis of the most important trends expected to impact the market outlook from 2018-2022. Technavio defines an emerging trend as a factor that has the potential to significantly impact the market and contribute to its growth or decline.


· CarBlock and YourMechanic Announce Strategic Partnership to Disrupt Auto Repair Space With Blockchain Technology (2018-04-20 20:46)
CarBlock and YourMechanic Announce Strategic Partnership to Disrupt Auto Repair Space With Blockchain Technology - on DefenceBriefing.net

CarBlock, the world’s first blockchain-based transportation solution built on data generated by smart devices, is pleased to announce their new partnership with YourMechanic, the nation’s largest online marketplace for car repair services. This partnership will allow YourMechanic access to expanded vehicle data to better serve their customers and provide more accurate pricing.


· PPC Flexible Packaging Launches New Website as Part of Company Rebrand (2018-04-20 20:06)
PPC Flexible Packaging Launches New Website as Part of Company Rebrand - on DefenceBriefing.net

PPC Flexible Packaging, a leading provider of custom flexible packaging for food and healthcare industries, today announced the launch of its new website. The website redesign is part of the rebranding initiative prompted by the 2017 merger of Fisher Container, LLC (Fisher) and Packaging Products Corporation, LLC (PPC) into the new entity PPC Flexible Packaging.


· Mayor Emanuel Announces project44 to Add 200 New Tech Jobs in Chicago (2018-04-20 19:46)
Mayor Emanuel Announces project44 to Add 200 New Tech Jobs in Chicago - on DefenceBriefing.net

Mayor Rahm Emanuel today joined project44, a global logistics technology company, to announce the company plans to add 200 jobs in Chicago. To accommodate this growth, project44 is moving to a new 40,000-square-foot space in Chicago’s iconic Merchandise Mart. The news follows the company’s recent announcement it has secured $35 million in new funding to continue its growth.




© Website copyright Incandore Limited 2012. All rights reserved. All content copyrights / trademarks remain the property of their respective owners.