NoviFlow Resources

NoviWare Tofino-Based Data Sheet

• Barefoot/Tofino Chipset
• Support for multiple whiteboxes (eg. Stordis, TradeDX)
• Very high throughput (6.5Tbps)
• TCAM/DRAM for large flow counts (up to 300K)

NoviWare NP-Based Data Sheet

• Mellanox NP-5 Chipset
• Multiple port configurations with speeds of 1, 10, 40, and 100 Gbps
• Up to 400 Gbps throughput
• External TCAM/DRAM for very large flow counts (up to 7 million flow entries)

NoviWare FlowShaper Data Sheet

Traffic Managment H-QoS Feature

• an optional add-on to NoviWare
• leverages Traffic Management and Hierarchical Quality-of-Service (H-QoS) capabilities of the same network processors already deployed around the world in chassis-based edge routers
• packages this capability in a 1U enclosure
• makes NoviSwitches ideal platform for implementing QoS-based services at a fraction of the price of conventional solutions
• benefits from the advanced SDN architecture of NoviWare, giving it many advantages over traditional H-QoS solutions, including:
  • Match fields in the SDN industry, and even makes it possible for users to define new match fields, even in the packet payload
  • more flexible classification (more varied sources of classification) as NoviWare implements the most complete set of OpenFlow
  • ability to track to 1 million meters using these flexible flow classifications and associated policies (Drop, DSCP Remark) compliant with RFC2697 srTCM and RFC2698/ MEF 5 trTCM
  • flows can be placed into any of 16 queues per class and a maximum of 46,000 classes for a total of 736,000 queues, and can then be forwarded through a 4-level hierarchy where traffic shaping is applied based on priority and rate limits, with 1 GB of deep DRAM buffer memory used for traffic shaping and Weighted Random Early Detection (WRED) providing for congestion avoidance

NoviSwitch 2122 – Data Sheet

NoviSwitch 2122 (100 Gbps, WAN Edge & Core)

• 400 Gbps throughput, powered by Mellanox NP-5 NPU
• 22 data plane ports – 2 x 100GE and 20 x 10GE
• Powerful Intel Core i7-4700EQ quad-core 2.4GHz CPU
• Up to 6M exact match flow entries
• Up to 1M wildcard match flow entries
• Up to 40k flow-mods/sec
• H-QoS

NoviSwitch 2128 – Data Sheet

NoviSwitch 2128 (40 Gbps, WAN Edge & Core)

• 400 Gbps throughput, powered by Mellanox NP-5 NPU
• 28 data plane ports – 4 x 40GE, 4 x 10GE and 20 x 1GE
• Powerful Intel Core i7-4700EQ quad-core 2.4GHz CPU
• Up to 6M exact match flow entries
• Up to 6M wildcard match flow entries
• Up to 40k flow-mods/sec
• H-QoS

NoviSwitch 2150 – Data Sheet

NoviSwitch 2150 (Ethernet Access and Aggregation)

• 256 Gbps throughput (full-duplex), powered by Mellanox NP-5 NPU
  50 data plane ports – 2 x 40Gbps QSFP+ and 48 x 1 GE SFP
• Powerful Intel Core i7-4700EQ quad-core 2.4GHz host CPU
• Up to 6M exact match flow entries
• Up to 1M wildcard match flow entries
• Up to 40k flow-mods/sec
• H-QoS

NoviSwitch 21100 – Data Sheet

NoviSwitch 21100 (Ethernet Access and Aggregation)

• 256 Gbps throughput, powered by Mellanox NP-5 NPU
• 100 data plane ports – 4 x 40GE QSFP+ and 96 x 1GE 1000baseTX
• Powerful Intel Core i7-4700EQ quad-core 2.4GHz CPU
• Up to 6M exact match flow entries
• Up to 1M wildcard match flow entries
• Up to 40k flow-mods/sec
• H-QoS

NoviWare CyberMapper Security Load Balancer Data Sheet

• Orders of magnitude better performance up to 6.4 tbps in a single Intel/Barefoot Tofino-based switch and port speeds up to 100 Gbps
• Increased capacity per filtering point and ability to filter on up to millions of rules
• Non-destructive load balancing and failover. Ideal for stateful Cybersecurity Servers, DPI Engines, and Web Content Filtering Clusters
• Multiple NoviSwitches can be installed throughout the network for load-balancing/mitigation/enforcement at network ingress/egress points
• Evolved security architecture separates analytics and detection from mitigation/enforcement
• Protocol white lists offloads protocol types that do not need analysis

NoviWare CyberMapper Dynamic Packet Broker Services Option Data Sheet

• Terabit Throughput Services: The most disruptive feature of the Dynamic In-Line Packet Broker Services is Terabit performance, offering a new level of throughput at a far more affordable price point.
• Dynamic Tap/Select Services: NoviFlow’s DIPB Services deliver the ability to dynamically initiate and manage taps and filter network traffic via SDN. Functions include bump-in-wire, dynamic taps (simple or bi-directional), dynamic filter (traffic steering), select on encapsulated IP Header, and select on Protocol.
• In-switch Load Balancing to service Tool devices and VNFs with different throughput capabilities, easily accommodating environments where a number of Tools have been added over time and thus vary in capabilities. Enables dynamic scaling of Tool Farms in real-time, and non-destructive fail-over while protecting stateful information (metadata) about flows as virtualized tools are spun up or down in response to changes in traffic.

NoviFlow CyberMapper Scales Network Security – Solution Brief

NoviFlow CyberMapper provides security load balancing and mitigation services for high throughput networks. The NoviFlow solution utilizes Barefoot Networks Tofino™-based switches rated for up to 6.5 terabit-per-second performance.

NoviWare CGNMapper – Solution Brief

CGNMapper is a new product in NoviFlow’s DSC (Domain Specific Controller) portfolio that provides a powerful and economical solution for scaling Carrier Grade NAT tool farms to the ever-increasing throughput demanded by today’s internet traffic. It incorporates a packet processing pipeline architecture optimized specifically to enable multi-Terabit scaling of CG-NAT traffic utilizing commercial CGNAT tool farms.

• Interface to define and modify a Tool Farm of CGN devices.
• NoviFlow Enumerated Hash load balancing technology for distributing packet flow from CPE, with private IP addresses, to devices in CGN Tool Farm.
• Proprietary algorithm that for the life of a Private flow, and its Public Internet response, both are pinned to a specific CGN Tool. This enables the NAT mapping of flows, and the associated database, to be divided and isolated to specific Tools within the Farm.
• Public IP address filtering technology that returns packets form the Internet to the specific Tool that is managing the Private/Public IP mapping for that Public address.

NoviFlow – The Scale Out Router – White Paper

This paper describes how Software Defined Networking (SDN), and specifically the OpenFlow protocol, can be used to build a new category of switches and routers that, whilst being fully functional and reliable, are centrally controlled via software, which makes them much easier to scale and far more economical to operate than traditional “monolithic” routers.

Content:

• An Industry in Transition
• The Scale-Out Router
• Requirements on OpenFlow Forwarding Plane
• Use Case: BGP Scale-Out Router
• Summary

NoviFlow Faucet ACMG – White Paper

ACMQueue – Faucet: Deploying SDN in the Enterprise

Google’s Josh Bailey and Stephen Stuart present Faucet, a compact open source OpenFlow controller which enables network operators to run their networks the same way they do server clusters. Faucet moves network control functions (like routing protocols, neighbour discovery, and switching algorithms) to vendor-independent server-based software, versus traditional router or switch embedded firmware, where those functions are easy to manage, test, and extend with modern systems management best practices and tools. Faucet controls OpenFlow 1.3 hardware including Barefoot Tofino-based switches running NoviFlow’s NoviWare NOS where it can deliver up to 6.4 Tbps of forwarding performance!

NoviFlow – OpenFlow Switches in Legacy Networks – White Paper

OpenFlow Switches in Legacy Networks

This paper describes how an OpenFlow-only switch behaves in legacy networks consisting of host computers, switches, and routers using the Internet Protocol. It is not intended to be a complete description of the subject but rather serves as an introduction to the key functionalities of legacy networks and how they interact with OpenFlow switches.

Content:

• Abstract
• Legacy Network Functionalities
• OpenFlow-Only Switch
• OpenFlow-Only Switch Inter-Operability with Legacy Networks
• Summary

NoviFlow CyberMapper Security Load Balancer – White Paper

This white paper describes how SDN techniques and programmable match-action network processors can be leveraged to optimize cybersecurity applications – and almost any virtualized network function requiring multiple servers – by transferring load balancer, packet broker and telemetry functions directly within the network fabric. It then shows NoviFlow’s CyberMapperSecurity Load Balancer as a reference implementation of these techniques.

NoviWare from NoviFlow. Network Operating System for Programmable Forwarding Planes

The NoviWare™ Network Operating System is the networking industry’s highest performance implementation of SDN, featuring Open, programmable match-action pipelines optimized for high performance switching chipsets such as the Mellanox NP-4 and NP-5 and Barefoot’s 6.5 Tbps Tofino chip. Architected from the ground up to be a reliable, scalable platform for OpenFlow, gRPC, and P4-Runtime, NoviWare offers the industry’s most complete implementation of the OpenFlow 1.3/1.4/1.5 standard as well as a smooth upgrade path to the next generation of PISA architecture based SDN applications and solutions.

NoviSwitch – Programmable pipeline switches for even the largest and most traffic-intensive network deployments

NoviSwitches leverage the NoviWare™ Network Operating System to deliver maximum programmable pipeline capability in a compact form factor with the most complete implementation of OpenFlow v1.3/1.4/1.5 available today as well as key open interfaces including gRPC, SNMP, CLI, and P4-Runtime.

CyberMapper from NoviFlow. Threat Intelligence Gateway | Cyber Security

NoviFlow’s CyberMapper is a high-performance Domain Specific Controller. CyberMapper implements a powerful Threat Intelligence Gateway that can accelerate and scale cybersecurity and packet brokering processes into the Terabit scale in a single switch using open standard interfaces such as OpenFlow, gRPC and P4-runtime.