NITROX DPI II CPUs offer 40Gbps deep packet inspection /recognition

Cavium Networks' next-generation NITROX DPI II family of L7 content processors is the industry's first stand-alone "bump-in-the-wire" single-chip, deep packet inspection processor family that can achieve up to 40 Gbps of application recognition and protocol analysis performance. The on-chip Hyper Finite Automata (HFA) engines and optimized TurboDPI software enable high performance and a rich feature set. NITROX DPI II speeds up time-to-market for OEMs building equipment for enterprise, data center, 3G and 4G wireless and service provider applications.

The NITROX DPI II CN18XX family is unique in the market as it can be used in both inline and coprocessor modes. In coprocessor mode it connects over its in-built PCI Express interface to offload general purpose processors, i.e. x86, MIPs or PowerPC based systems that lack such advanced hardware DPI engines. The HFA engines in the CN18XX family support highly complex rules and can process millions of rules without any performance impact.

The new processor family enhances Cavium's Deep Packet Inspection (DPI) product portfolio that includes NITROX DPI, OCTEON II processor family and TurboDPI software. The NITROX DPI II family is fully software and rule-syntax compatible with the DPI engines in Cavium's OCTEON II processor family and the NITROX DPI CN17XX family, offering a wide variety of scalable and compatible system design options to customers.

With the HFA technology offered in NITROX DPI II, equipment manufacturers can more easily integrate DPI inline or as a coprocessor to a variety of CPUs to enable a wide array of features such as protocol analysis, application recognition, intrusion prevention, anti-malware protection, URL Filtering, unified threat management, antivirus gateways, subscriber charging, application aware QOS and service level agreements, usage mon itoring and preventing denial of service.

The new NITROX DPI II family provides a combination of inline support, 40Gbps of application recognition, and no trade-offs between rule complexity and the number of rules supported, all while maintaining 100% compatibility with Cavium's DPI technology incorporated into its OCTEON II family.


NITROX DPI II Family Highlights

• Innovative 3rd generation Hyper Finite Automata (HFA) Deep Packet Inspection engine technology includes revolutionary patented technology that combines both DFA and NFA engines, and automatically directs rules to be handled by the appropriate engine
• Inline, NIC and Coprocessor modes can be used for inline "bump-in-the-wire," intelligent NIC or for host processor offload
• Wirespeed performance delivers from 2 to 40 Gbps performance independent of pattern rule-set size, with support for very large number of patterns for future-proofing designs, also supports fast incremental compilation and hot update capability
• Rule support includes comprehensive Perl-Compatible Regular Expression (PCRE) and POSIX Regex Syntax support including support for capture groups, back references and assertions, for applications such as application recognition, URL filtering, denial of service, antivirus and intrusion protection
• Support for OCTEON II, OCTEON Plus, x86 and other general purpose processors. Ability to offload existing MIPs and PowerPC designs.
• Feature rich TurboDPI software recently announced by Cavium is optimized for NITROX DPI II for inline application recognition

OEM customers can utilize their own in-house signatures and rules or combine with best of breed anti-malware technology providers such as Kaspersky Lab to create a single solution for protocol analysis, application recognition, URL filtering, intrusion prevention and anti-malware.

Availability
NITROX DPI II parts at 2 Gbps, 5 Gbps and 10Gbps performance are sampling in March. 20 Gbps and 40 Gbps parts will be available Mid 2011. Some members of the NITROX DPI II processor family are offered as inline only or coprocessor only configurations. Please contact your Cavium sales representative for additional details or visit www.caviumnetworks.com/nitroxdpi.