Cavium unveiled its new family of NITROX V security processors & adapters aimed at enterprise networking equipment and virtualized cloud data centers, where increasing east-west traffic flows are driving high performance, symmetric encrypted bandwidth requirements. In addition, SaaS providers such as search engines, email services and social networking services are now encrypting customer data they receive over the Internet using SSL and new crypto schemes such as Perfect Forward Secrecy (PFS). Another major trend is the need for high performance data compression with excellent compression ratios for data center traffic, driving the need for better security processors.
The NITROX V security processors integrate up to 288 purpose-built security cores with high performance compression engines and virtualization hardware with PCI-Express Gen 3 and Interlaken interfaces. The company says this delivers 3 to 10 times greater performance than alternative solutions within the same power envelope.
Some highlights
- Up to 288 RISC Security Cores – Support up to 100Gbps of security performance simultaneously with 120K RSA Ops/sec for 2048 bit keys or 300K P256 ECC Multiply Ops/sec.
- Compression Engines – Enhanced Compression/decompression acceleration – 100 Gbps. Support for GZIP, PKZIP, Inflate and Deflate algorithms. Also includes support for LZS Compression that is widely used for Storage applications.
- High bandwidth IO – Supports 100 Gbps of traffic. PCI-Express Gen3 x8 and Interlaken x8 interfaces.
- Virtualization support – Single Root IO Virtualization (SR-IOV) feature with up to 256 Virtual Function support.
- Latest security features – Supports a wide variety of protocols including IPsec, SSL, TLS 1.x, DTLS and ECC Suite B. Also supports a wide variety of algorithms including several variants of AES, 3DES, SHA-2, SHA-3, RSA 2048, RSA 4096, RSA 8192, ECC p256/p384/p521, Kasumi, ZUC and SNOW 3G.
- SSL performance with 120K RSA Ops/Sec and 300K P256 ECC Ops/sec and bulk encryption performance of 100 Gbps for a variety of different protocols,
- Flexibility to support emerging algorithms and protocols.
- The single-chip NITROX V processors do not require external memory enabling lower cost, power and real-estate.
