XELERA NET

Accelerate IPsec up to 400Gbps with SmartNIC Offload

Xelera Net is a SmartNIC software which accelerates IPsec, TLS, and DDoS detection applications.

Picture showing a security shield in neon green

What is Xelera Net?

Xelera NET is a SmartNIC software suite that accelerates IPsec network security by offloading encryption and decryption workloads from CPUs to SmartNIC hardware.

Designed for high-throughput datacenter networks, Xelera NET enables secure networking at 400Gbps bandwidth while maintaining low latency and high session scalability.

SmartNICs are programmable network interface cards that offload networking and security workloads from CPUs to dedicated hardware accelerators, enabling significantly higher network performance.

Key Performance Metrics

  • 100 to 400 Gbps IPsec encryption and decryption
  • Up to 16,384 IPsec sessions
  • Integration with Linux networking stack and strongSwan
Xelera Net Logo
technical consultation

Problem: CPU-Based IPsec Encryption Limits Network Throughput

As datacenter infrastructure moves toward 100GbE networking, IPsec encryption increasingly becomes a performance bottleneck.

When encryption workloads compete with application workloads for CPU resources, infrastructure performance and efficiency can be affected. This can negatively affect both network throughput and overall infrastructure performance.

Common challenges include:

  • High CPU utilization during encryption and decryption
  • Reduced throughput for encrypted network traffic
  • Limited scalability when handling thousands of secure connections
  • Competition between security workloads and application workloads

Infrastructure teams need a way to maintain secure networking while sustaining high-bandwidth encrypted traffic in modern datacenter environments.

Solution: CPU-Based IPsec Encryption Limits Network Throughput

Xelera Net provides a SmartNIC-based framework for accelerating IPsec security functions.

The solution offloads compute-intensive encryption and decryption tasks from CPUs to SmartNIC hardware, enabling secure networking at high bandwidth.

Xelera Net includes:

  • An Inline Accelerator that offloads IPsec processing to SmartNIC hardware
  • A software-based IPsec accelerator that scales workloads across CPU cores
  • Integration with existing IPsec key exchange tools, such as strongSwan

This architecture allows infrastructure teams to deploy IPsec acceleration without redesigning their existing networking environment.

SmartNIC-Accelerated IPsec for High-Performance Infrastructure

Xelera Net enables high-throughput, low-latency IPsec processing by offloading encryption and decryption workloads from CPUs to SmartNIC hardware, while maintaining compatibility with standard networking environments.

High-Throuput
Networking

100 - 400Gbps IPsec encryption and decryption

Scalable IPsec
Sessions

Up to 16,384 encryption and decryption  sessions

Standards-Based
Cryptography

AES-GCM 128 / 256 RFC 4303 compliant IPsec ESP

Platform
Integration

Linux and FreeBSD drivers DPDK-enabled networking stack API for security association and policy management

IPsec Performance Benchmark Results​

Xelera Net performance was evaluated using an RFC2544 throughput benchmark.

The test environment included SmartNIC hardware processing encrypted traffic between network ports while traffic integrity and throughput were measured using a network analyzer.

Key results include:

  • Full-duplex IPsec throughput of 100 to 400 Gbps encryption and decryption
  • No packet loss during throughput testing
  • Latency is measured in the microsecond range

These results demonstrate the ability of the SmartNIC architecture to sustain high-bandwidth encrypted traffic.

Deploy IPsec Acceleration Without Redesigning Your Infrastructure

Xelera Net is designed to integrate into existing infrastructure without requiring invasive system changes.

Compatibility with Existing infrastructure

Xelera Net works with commonly used infrastructure components, including:

  • Linux networking stack
  • strongSwan for IPsec key exchange
  • Prometheus-compatible monitoring
  • DPDK- enabled networking

Evaluate SmartNIC-Accelerated IPsec

Book a technical consultation to discuss how Xelera Net
can accelerate encrypted networking in your infrastructure.

benchmark reportconsult us

Latest Product news