Affording the Upgrade to Higher Speed & Density

Transcription

1 Affording the Upgrade to Higher Speed & Density Ethernet Summit February 22, 2012

2 Agenda VSS Overview Technology Q&A 2

3 Corporate Overview World Leader in Network Intelligence Optimization Deployed in 80% of Tier 1 telecom operators worldwide Deployed in over 1,200 service providers, enterprises, and governments worldwide Best in Class Innovation Leader in product breadth addresses entire universe of network intelligence tools Leader in product depth from basic test access solutions to the most advanced system-based packet manipulation and tool optimization technologies The only vendor with a platform approach true high-scale, flexible, and redundant system architecture Exceptional Market Share Growth Profitable and 2X annual growth for past 6 years Named 2011 Top 50 Fastest Growing Companies in Silicon Valley Founded in 2003 HQ in San Mateo, CA 160+ employees (~60 in R&D & QA) Venture backed by Battery Ventures All products developed and manufactured in Silicon Valley Global technology & channel partner network Global sales/support presence in China, Japan, Singapore, UK, Italy, France, Scandinavia V111213A 3

4 VSS Selected Customers Telecom* Enterprise* Government* *Partial List Only 4

5 IT s Strategic Response to Increasing Complexity Data Explosion 100G core, FTTH, LTE Video, SAN, IPTV, IMS P2P, M2M Data Ctr Virtualization Control / user plane complexity Economics Budget constraint (CAPEX+ OPEX) ROI Revenue / traffic gap Management overhead Network Intelligence Performance monitoring Network acceleration Security monitoring Security enforcement Network Convergence Multi vendors Multi service layers Hybrid cloud networks Unified communications Tool Performance Tool Scalability Tool Congestion Tool Convergence Network Performance & Security Tool Optimization V111213A 5

6 Network Intelligence Optimization System Inline Acceleration Tools Performance Analytics Tools Inline Security Tools Security Analytics Tools Network Tool Layer QoS/Packet Shaping Traffic Compression Traffic Caching Network Analysis Probe Application Analysis Probe VoIP/UC Analysis Probe Data Loss Prevention Next-Generation Firewall Intrusion Prevention (IPS) Data Recording Probe Forensics Analysis Probe Lawful Interception Probe Web Acceleration SSL Acceleration WAN Acceleration Network Discovery Scanning Probe Flow Data Analysis Probe Meta-Data Analysis Probe DDOS Prevention Secure Web Gateway Compliance Audit Scanning Probe Intrusion Detection (IDS) Probe Network Intelligence Optimization Layer App Servers 10G Switching/ Communications Layer App Servers 10G 10G Cloud App Servers 10G 6

7 Product Building Blocks For Modular Simplicity Easy/Economical to Start Small, Future Proof to Grow Big Start as small as one tool and one network link Cloud Distributed modular architecture means you pay only as you grow Plug-N-Play Expansion Scales Easily To Multiple Tools / Tool Types Thousands of Network Links LANs, WANs, Clouds 1G/10G/40G/... over Copper/Fiber Multiple Geographies / Domains V111213A 7

8 Selective Aggregation Monitoring Tools Work Best With The Correct Traffic Input traffic to monitor output control One-to-multiple network ports to one-to-multiple monitor ports 1-to-1 1-to-Many Many-to-1 Many-to-Many Reduce costs Improve efficiency of tools Reduce number of monitor interfaces required

9 Flow/Session-Aware Load Balancing Distribute Traffic Across Multiple Tools Per IP Session Even distribution of traffic across multiple links Highly granular balancing (multiple criteria) Maintain session consistency Fault-tolerant Monitor 10G networks with existing tools Fully leverage Gigabit tools Prevent oversubscription on monitor ports

10 Link-Level Visibility Speed & Media Conversion Step up or step down in speeds, fiber to copper media High Data Burst Buffering Dedicated extended buffering to ensure capturing of microburst traffic Granular Capacity Measurement Microburst detection with sub-ms level network utilization statistics reporting Time & Port Stamping Packet level ingress Information, enabling granular latency monitoring & measurement Synchronized to NTP, PTP, GPS, etc. VLAN Tagging Tag packets with VLANs prior to forwarding to tools Time & Port Stamps 10

11 Intelligent Stacking System Benefits Fault tolerance visibility layer Scalable architecture Increased tool efficiencies and ROI by delivering more traffic to tools from multiple devices Increase port density in an organic manner in sync with needs Capabilities Auto-discovery Any input to any output Redundant mesh architecture High availability (n+n) tools support Multi-link throughput per route Auto health check Central management via API Monitoring & Security Tools Visibility Layer Powered by vstack 11

12 What Makes VSS Unique? A single solution based on a modular, systems-based architecture to optimize the entire universe of Network Intelligence (NI) tools Reduced Risk Exposure 100% access = total performance visibility & protection coverage Higher Network Quality Improved availability & performance for network & tools Faster / Higher ROI 50% more efficient use of tool resources Up to 80% reduction in tools CAPEX Regained Agility Simplified complexity accelerates IT flexibility & operational efficiencies 12

13 Back-up Slides 13

14 Traffic Delivery & Grooming Hardware Filtering Layers 2 to 4 header-based filtering and user custom filtering Flow Load Balancing Layers 2 to 4 load balancing across multiple ports and balancing groups Conditional Packet Slicing Selectively remove packet payload from specific places in the packets Protocol Stripping & De-encapsulation Remove specific protocols from packets Packet Deduplication Remove duplicates of packets to reduce false positives in tools IP Slicing RTP Slicing 14

15 Advanced Traffic Grooming GTP & MPLS Inner L3/L4 Balancing Load balance GTP-U and MPLS traffic based on inner user L3/L4 information with GTP or MPLS encapsulation. GTP IMSI Balancing Load balance GTP-C & GTP-U traffic based on mobile subscriber ID (IMSI) IP Packet Fragment Reassembly Re-assemble IP fragments into original packet to reduce processing cycles by tools DPI-based Filtering Dynamic search for user-identifying objects, applications or natural patterns IMSI MAC IP UDP GTP-C Payload TEID MAC IP UDP GTP-U IP TCP Payload 10 Fragmented Packets Re-assembled Packets 10 15