Netcope Session Filter

Netcope Session Filter Netcope Session Filter (NSF) is a session-oriented hardware accelerator based on Netcope's programmable SmartNIC FPGA hardware. A key feature of NSF is stateful filtering-based packet manipulation, which offers a significant advantage over per-packet stateless processing. NSF perceives network traffic as a set of network flows. It is able to track hundreds of thousands of these flows, and the software application decides whether a flow is interesting or not. If it is, the flow is processed accordingly. If not, it instructs the firmware to drop the remaining packets of this particular flow so that they do not burden CPU cores any more. The combination of this high performance hardware with the Netcope Session Filter makes it possible to build a powerful solution even for 100G Ethernet networks based on commodity multi-core servers. Typical Applications Acceleration of DPI-based (deep packet inspection) systems (IDS, IPS, UTM...) Application-specific statistics (time-based, TCP flags, etc.) Acceleration of lawful interception systems Acceleration of DDoS mitigators Forensic analysis of network traffic (dynamic zoom-in) In-hardware stateful firewall 200Gbps software load balancing

For more information on Netcope Session Filter talk to Sarsen Technology Ltd