XELERA NET

High-Bandwidth Network Security

Xelera Secure Networks is a software platform which accelerates IPsec, TLS, and DDoS detection applications.

High performance

High network bandwidth  and low latency.

Cost-efficiency

Lower expenditures than dedicated appliances.

Turn-key solution

Seamless integration and management system.

Wide applicability

On-premises and cloud deployment are possible.

Full Offload for Line-Rate
Throughput on 100G Networks

Modern networks must securely transport data packets with a high throughput. Xelera Net accelerates the IPsec network security function. IPsec tends to limit the network throughput when server nodes aggregate a large number of user sessions. Its full IPsec offload provides 2x100Gbps end-to-end bandwidth and frees COTS server CPUs from performance-critical datacenter infrastructure tasks. The acceleration software runs on Xilinx Alveo™ datacenter acceleration and smartNIC hardware.

In addition to the Inline Accelerator, Xelera Net includes a pure software-based IPsec accelerator which does not require additional accelerator hardware. The software-based accelerator saturates 10G network links.

Network Acceleration Suite

The Xelera Secure Network Suite provides multiple high-speed network security functions built on a performance-optimized data plane processing framework. The accelerator is deployed as a turnkey system. It emulates standard network interfaces in the host system in order to integrate seamlessly with third-party software software.

IPsec Accelerator
High-speed IPsec.
Reduction of CPU cores.
DDoS Detection
Low latency packet and flow inspection.
TLS Offload
High-bandwidth TLS.
Reduction of CPU cores.
WireGuard
Accelerating nextgeneration VPNs.

Features

Performance

The Inline Accelerator provides simultaneous 100Gbps IPsec encryption plus 100Gbps IPsec decryption (including the software API, driver and the hardware). The performance is sustained for up to 16k IPsec sessions.

Deployment

The DPDK-enabled Xelera Secure Networks software is deployed on PCIe-attached Xilinx Alveo™ datacenter acceleration and smartNIC hardware. The hardware is reused for different applications besides IPsec.

Full Offload

The Xelera Net Inline Accelerator offloads the compute-intensive IPsec security and network functions on the fast-path to the hardware accelerator, freeing up CPU cores for application workloads.

Software Integration

Xelera Net provides a software API for the IPsec ESP protocol at line-rate. It interfaces with third-party IPsec key exchange tools (such as strongSwan) or its own IKEv2 software.