Leipzig, Germany. 20 April 2022 – ipoque GmbH, a Rohde & Schwarz company, has launched R&SvPACE, its vector packet processing (VPP)-native deep packet inspection (DPI) engine. This is designed to meet the IP traffic visibility needs in cloud computing environments. As a cloud-optimised module, R&SvPACE powers virtualised and cloud-native functions (VNFs/CNFs) such as 5G user plane functions with real-time, deep traffic insights.
R&SvPACE combines traditional DPI techniques such as statistical/heuristical and behavioural analyses with metadata extraction and encrypted traffic intelligence (ETI) to accurately and reliably identify and classify protocols, applications, and services. Advanced ETI techniques include machine learning, deep learning, and high-dimensional data analysis. They enable traffic inspection in the cloud to be extended to encrypted traffic, including using protocols and techniques such as TLS 1.3, TLS 1.3 0-RTT, ESNI, ECH, DoT and DoH. R&SvPACE can also handle traffic that is obfuscated and anonymised, for example traffic that is delivered via CDNs and VPNs, and traffic that is masked by randomisation and domain fronting.
Built on the capabilities and comprehensive features of R&SPACE2, the renowned scalar packet processing (SPP)-based DPI engine by ipoque, R&SvPACE features a comprehensive, frequently updated signature library and well-defined APIs for integration. It also provides support for first packet classification using smart caching techniques. With VPP at its core, R&SvPACE pushes DPI processing speeds to the next level with an improved average clocks-per-packet ratio which leads to a speedup of up to 3 times. It also boasts a memory footprint of less than 400 bytes per 5-tuple connection and 700 bytes per network endpoint. Additionally, it enables thread-safe endpoint access across multiple worker cores.
“The shift towards the cloud calls for packet processing technologies capable of delivering the speeds, latency and cost efficiency necessary to support growing traffic volumes and the breadth of applications hosted and delivered from the cloud. The adoption of VPP, which involves vector-based batch processing using a locally-stored vertex memory cache, significantly reduces CPU and energy consumption, allowing our DPI technology to deliver unrivalled performance and scalability in cloud and virtualised environments,” says Dr. Martin Mieth, VP engineering at ipoque.
R&SvPACE equips network functions ranging from policy control and traffic management to analytics functions with application awareness. This allows for granular traffic rules and policies to be applied not only to applications types, but also to different services such as messaging, chat and video. It also provides cloud security tools such as firewalls, IDS/IPS and UTM with timely insights on suspicious and anomalous traffic patterns for an effective detection of cyberthreats and fraud.
VNF/CNF vendors deploying R&SvPACE benefit from ipoque’s extensive experience and expertise in implementing DPI for various network types. By licensing the OEM DPI engine R&SvPACE, vendors can significantly improve their time-to-market, realise major capex/opex savings, and future proof their traffic detection capabilities. They are also able to capitalise on the continuous advancements by ipoque in the DPI market while taking advantage of the superior support and service that is adapted to the customers’ exact needs.
Comment on this article below or via Twitter: @VanillaPlus OR @jcvplus
