NoviMapper

Security Load Balancer | Scalable Network Security

OVERVIEW

NoviFlow’s NoviMapper implements elastic, dynamic scaling of cybersecurity and network services into the Terabit scale by implementing a powerful Load Balancer, packet filtering and telemetry solution that runs on high-performance programmable network fabrics. NoviMapper simplifies network architecture at the edge by replacing hardware appliances and network TAPs by packet processing rules and software executing directly in the network switch, using the network to intelligently direct traffic to only only the right services and applications, and in the order required to meet customer SLAs. Benefits include reducing hardware costs, enabling the scaling of services, reducing the cyber-attack surface, and greater network robustness.

The NoviMapper solution achieves this unprecedented performance, flexibility, and scale by leveraging the power of programmable match-action pipelines, white-box hardware, and open standard interfaces such as gRPC and P4Runtime. NoviMapper runs on standard COTS servers, and is deployed with select white-box switches running the powerful Intel/Barefoot Tofino, to deliver a fully programmable network fabric in a simple, scalable, compact form factor, and at a fraction of the price of conventional networking solutions.

NoviMapper: High-Performance Security Load Balancer

BENEFITS
FEATURES

Dynamically scales clusters of cybersecurity servers or application virtual machines for higher performance, even into the Terabit range
NoviMapper filters and balances traffic across arrays of network appliances or virtual machines without the cost of external load balancing appliances and it Improves performance of security applications by moving policy enforcement into network fabric itself
Reduces Denial of Service attacks by filtering known bad actors before traffic can enter the network fabric and network appliances
Faster time to market and easy integration via REST APIs of IP Reputation feeds and Cyber Security DPI server mitigation
Accelerated performance and reduced costs of existing Cyber Security DPI and Analytics solutions.
Significantly reduces network complexity, latency and costs via Scale-Out NoviSwitch and white-box hardware deployed anywhere in the network with unlimited linear scalability
Protects investments in network hardware and allows for faster introduction of new features because the entire stack from the switch silicon to the application is programmable
Leverages white-box hardware and Open Standards such as OpenFlow, gRPC and P4-Runtime for maximum economies of scale

Orders of magnitude better performance up to 6.4 tbps in a single Intel/Barefoot Tofino-based switch and port speeds up to 100 Gbps
Increased capacity per filtering point and ability to filter on up to millions of rules
Non-destructive load balancing and failover. Ideal for stateful Cybersecurity Servers, DPI Engines, and Web Content Filtering Clusters
Multiple NoviSwitches can be installed throughout the network for load-balancing/mitigation/enforcement at network ingress/egress points
Evolved security architecture separates analytics and detection from mitigation/enforcement
Protocol white lists offloads protocol types that do not need analysis