Leveraging Access Switching For HPC Monitoring & Security

Transcription

1 Leveraging Access Switching For HPC Monitoring & Security Sharon Besser, VP of Technology Net Optics, Inc. Intelligent Access and Monitoring Architecture

2 Goal Present a methodology and solution of leveraging to overcome current and future HPC monitoring and security challenges 2

3 Net Optics Overview Global Customers Financial, Telco, Enterprise, Government, Healthcare 7,500 Global Deployments US Offices: New York, Atlanta, Seattle, Chicago, Texas, D.C. Global Offices: Germany, Israel, China, Australia, Netherlands 85% of the Fortune % of the Fortune 500 Highlights Founded in 1996, Private, Self-Funded 63 Quarters of Growth & Profitability Strong Management Team Headquarters & Manufacturing: Silicon Valley, USA First Acquisition Completed 2011 Go to Market Strategy 67% Worldwide Channel 15% OEM/Partner Relationships 18% Direct Technology Four new inventions each year 20+ patents and patent pending applications Awards Media Revenue by Geography APAC 16% EMEA 18% BRIC 6% N. America 60% 2010 &

4 What Keeps Our Customers Awake at Night Network must be designed for scalability & agility Capacity & Resources Planning Business Applications Performance End User Experience SLAs Network & Application Performance Virtualization No visibility into the virtualized network Explosive Growth CAPEX Improvements Security must be architected in, not a point solution Compliance Internal/External Intrusions Lawful Interception Cybercrime Security & Compliance Network Speeds Tools & instruments can t keep up Link Saturation Oversubscription 10G 40G 100G 4

5 HPC Unique Monitoring & Security Requirements HPC Infrastructure Large scale monitoring of hardware, software, systems and applications Complicated monitoring system (due to size of infrastructure) Correlation between multiple points of monitoring requires to establish a monitoring network Application specific requirements HPC applications are unique by definition 5

6 Unique Operational Challenges HPC Monitoring Common HPC monitoring deployment challenges: Lack of Tools Quality Cost Availability of 10G monitoring tools and 10G security tools Tools ability to operate at line rate with low latency Volumes of traffic increase complexity New 10G tools (not the 10G network interface cards) Leveraging existing investments of 1G tools Cost of knowledge, migration, operations = TCO Source: Net Optics Customer Advisory Board 7/2010 6

7 Other Technical Challenges Jitter, Oversubscription and Blocking are more severe with 10G/40G (and beyond) networks: Switching Oversubscription If the queue exceeds the size of the physical hardware buffer, packets are dropped Latency and Jitter At any time, only one packet can be transmitted from each physical output port of a switch Resource contention might happen when two packets arrive from separate input ports to the same output port (e.g. uplink) at about the same time 7

8 Access Switching: Do More With Less Load Balancing Share the load between multiple tools Leverage existing / cheap / 1G tools Plan for growth Pre-filter with DPI to detect desired traffic on any port Pre-filtering is a mature technology GRE tunneling Distribute the collection infrastructure Cloud Monitoring Inter-VM and cloud based monitoring 8

9 Use Case: Trading Monitoring Infrastructure Trading environment requires the fastest monitoring architecture Net Optics solutions such as Director xstream, based on Fulcrum Ultra-low latency silicon provides sub-microsecond cut-through copies to the monitoring infrastructure 9

10 When Silicon Is Not Fast Enough Due to advances in HPC instrumentation, customers are asking for monitoring infrastructure solutions that are even faster than the fastest switching silicon: o No additional latency through the device o Copy packet has the exact same latency as the actual packet through the network o 10G of line rate scaling for copy bandwidth, with no impact on the source data 10

11 Use Case: 40G Content Inspection Security Government agency requires implementation of 40G inline content inspection Net Optics xbalancer solution allows to load balance 14 IPS devices with content inspection polices in HA mode w/ state synchronization 12

12 Summary Modern and advanced Access switching technology provides the scalable solution to meet monitoring challenges in HPC environments by focusing on improving collection infrastructure. 13

13 Thank You Net Optics, Inc

14 What Keeps Our Customers Awake at Night Network must be designed for scalability & agility Capacity & Resources Planning Business Applications Performance End User Experience SLAs apptap Indigo Pro Intelligent Products Network & Application Performance Virtualization No visibility into the virtualized network Explosive Growth CAPEX Improvements Phantom Phantom HD Security must be architected in, not a point solution Compliance Internal/External Intrusions Lawful Interception Cybercrime Security & Compliance Network Speeds Tools & instruments can t keep up Link Saturation Oversubscription 10G 40G 100G Director family intelligent Bypass Taps Director family xbalancer 15