3 ms·
There is a 25Gbps XNS in the work. With even more live updating of newly added Aho-Corrasick and Regex algorithm into the FPGA.
by egberts1 3y ago
There is a 25Gbps XNS in the work.
With even more live updating of newly added Aho-Corrasick and Regex algorithm into the FPGA.
- zamadatix 3y agoOh yeah, things can still scale up but the gap ends up remaining the same as the same scaling drives each. Fortinet does some really insane stuff scaling its custom ASICs (+some FPGA, but it's not fast enough for everything so most is in ASIC instead) on e.g. the FG-7121F chassis to get ~500+ Gbps IPS/NGWF throughput. I haven't had excuse to go past their "smaller" fixed platforms which do 40+ though. Naturally you're paying more for that single 500 Gbps (total), of which elephant flows are limited because that's via parallel flow processing, than you would for something like a Nokia 7750 SR-s with ~500x (216 Tbps) that throughput though but such is life when you need to act as an endpoint instead of a router.
- egberts1 3y agoOops, maybe we can add massively parallel FPGA processors should be in there somewhere before the SSL stage. Goal is to do proper reduction of each ASIC/FFPA stage without a packet drop. Meanwhile, your website is dropping SSL connections, zamadatix.