Freescale s UTM Security Appliance Solutions

Transcription

1 June, 2010 Freescale s U Security Appliance Solutions FTF-NET-F0788 Karthik Ethirajan NMG Software Products Division Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink

2 Agenda U Market U Security Appliance Solutions Summary Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 2

3 What is an U Appliance? System Integration (Customer and/or SI partner) Anti-x IPS IPSec VPN U Appliance Firewall Network Protocols 3 rd Party Linux OS L2 Cache SMP L2 Cache Power Architecture Core Power Architecture Core D-Cache I-Cache D-Cache I-Cache COTS or Custom H/W (QorIQ Processors) Diagram Key: Functions from FSL Functions from Ecosystem Partner/Customer Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 3

4 Where is U Appliance Deployed? ENTERPRISE NETWORK Logging Console Admin Console Security Domain 4 Other Internal Users MARKETING SUBNET Marketing Users MALICIOUS HACKERS Security Domain 2 BRANCH OFFICE Internet VortiQa Software DoS Attacks Access Control Lists Confidential Data U-4080 U-2020 Security Domain 1 U-1020 Security Domain 3 Finance Users HOMEOFFICE App Server Server EDI Server Web Confidential Server Data FINANCE SUBNET Trojan Attack MPC8315 TELECOMMUTER Policies for individual security domains Policies for Individual users Policies for user groups Allow remote access Allow access to web server Deny access to finance server Deny access to confidential data Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 4

5 Security Appliances Market CY10 $6B TAM, 2.5Mu Security Appliances 3,000 $7,000 2,500 $6,000 Units ('000s) 2,000 1,500 1,000 $5,000 $4,000 $3,000 $2,000 Revenue ($ Mil) 500 $1,000 0 CY05 CY06 CY07 CY08 CY09 CY10 CY11 CY12 CY13 CY14 $0 Units Revenue Region: Worldwide (All), North America, EMEA, Asia Pacific, CALA Product Type: Integrated Security Appliances and Software, Network-Based IDS/IPSProducts Source: Infonetics Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 5

6 Small Enterprise/SME FW Throughput: 1-2 Gbps VPN tunnels: 2K FW/IPS sessions: 100K FW policies: 1k; sessions/s:5k VPN: 500Mbps; Tunnels/sec: 10 Firewall/IPS: 500Mbps 1Gbps Anti Virus: 100 HTTP obj./sec Mid-/High-end Enterprise FW throughput: 2-5 Gbps VPN tunnels: 10K FW/IPS sessions: 250K FW policies: 5k; sessions/s:15k VPN: 1-2 Gbps; Tunnels/sec: 50 Firewall/IPS: 1-2 Gbps Anti Virus: 500 HTTP obj./sec Mid-end Enterprise Freescale QorIQ and VortiQa solutions for: High Growth Security Appliance Market SoC or Multicore w/crypto Datacenter/Carrier FW throughput: 6 10 Gbps VPN tunnels: 100K FW/IPS sessions: 1 Million FW policies: 10k; sessions/s:100k VPN: 5-10Gbps; Tunnels/sec: 500 Firewall/IPS: 4-8 Gbps Anti Virus: 2500 HTTP obj./sec High-end Enterprise Multicore w/crypto and RegEx Datacenter/Carrier Infrastructure Multicore w/ Crypto and RegEx Small Business Small Enterprise SoC w/crypto Notes on Performance / Cost Estimates: Subject to hardware configuration; may vary substantially All performance numbers are target numbers as estimated to be required for individual deployments and are estimated with VortiQa software product; subject to interpretation and detailed analysis PowerQUICC MPC83xxE processor family QorIQ P1 and P2 processor family OS and BSP Linux VortiQa software for enterprise equipment PowerQUICC MPC85xxE processor family QorIQ P4, P5 processor family OS and BSP Linux and/or LWE VortiQa software for service provider equipment Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 6

7 How QorIQ Platforms and VortiQa Products Align QorIQ Platforms/Products QorIQ P5 PRODUCTS P5020 P5010 QorIQ P4 PRODUCTS: P4080 QorIQ P3 PRODUCTS P3041 QorIQ P2 PRODUCTS: P2020 P2010 QorIQ P1 PRODUCTS: P1020 P1010 P1011 Metro Carrier Edge Router Unified Threat Management Service Provider Routers Converged Media Gateway Integrated Services Router IMS Controller VoIP Carrier-Class Media Gateway VortiQaSoftware Products Network Admission Control SSL, IPSec, Firewall Network Attached Storage Radio Network Control Wireless Media Gateway Storage Networks Access Gateway Home Media Hub Serving Node Router (GSN) Basestation Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 7

8 U Security Appliance Solutions - Focus Markets SSL, IPsec, Firewall Storage Networks IMS Controller Security appliances U appliances IPS/IDS appliances Content security appliances Routers (secure and VPN) Secured switches Business gateways Service Provider Routers Integrated Services Routers Unified Threat Management Network Admission Control Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 8

9 Agenda U Market U Security Appliance Solutions Summary Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 9

10 Security Appliance Program: Value Proposition Production-ready BOM and performance optimized fully integrated solutions NETWORKING OEM VortiQa Software HARDWARE ODM/CM END USER PRODUCT (OEM Branding + Channel + Support) PRODUCTION READY SECURITY SOFTWARE APPLICATION (Software Platform + Integration with Freescale Silicon + Integration testing + Regression testing + Certifications, where applicable) QorIQ or MPC silicon based H/W Platform (PCBA + OS and Board support package) QorIQ silicon: P4080, P2020, P2010, P1020 (+) VortiQa software for enterprise equipment (+) EcosystempPartners SOLUTION OUTCOME: Cost optimized: U appliance portfolio, from lowend to high-end, from major ODMs (2-4 Gbps to 20 Gbps) Ready to ship: FCC, UL and CE certified Performance: performance optimized software Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 10

11 U Security Appliance Solutions - Portfolio U Appliance ODM Freescale Processor Cores Core Frequency Schedule Features CAK-1000 Portwell QorIQ P GHz August 2010 Small enterprise value systems; highest performance with lower power in its class CAK-2000 Portwell QorIQ P GHz/1.2 GHz NCP Series 3120/5260/7560 VPX6-187 SifoWorks G400/G600 SifoWorks DU100P GP3SSA 8555 GP3SSA 8541 Advantech & O2 Security Curtis Wright O2 Security O2 Security Silicon Turnkey Silicon Turnkey August 2010 Mid enterprise, low power systems QorIQ P GHz TBD High-end enterprise or service provider systems QorIQ P GHz TBD High-end enterprise in Military & Aerospace MPC8540 PowerQUICC III MPC8572E PowerQUICC III MPC8555 PowerQUICC III MPC8541 PowerQUICC III MHz/1 GHz Now Small to mid enterprise GHz Now Mid-enterprise IPS based deployments MHz Now Small enterprise MHz Now Small enterprise ODM sample boxes are available now Schematics and Gerber files are available for Freescale prototype of U-2020 Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 11

12 Freescale U Appliance Performance Winning performance and system cost U Appliance Firewall IPsec VPN AES32-SHA1 IPsec VPN 3DES-SHA1 IPS SW DFA U-8315 (MPC8315, 400 MHz, 1 core) VortiQa software for SOHO/residential gateway U-8377 (MPC8377, 800 MHz, 1 core) VortiQa software for SOHO/residential gateway U-1011 (P1011, 533 MHz, 1 core) VortiQa software for enterprise equipment U-1020 (P1020, 800 MHz, 2 cores) VortiQa software for enterprise equipment U-2020 (P2020, 1.2 GHz, 2 cores) VortiQa software for enterprise equipment U-4080 (P4080, 1.5 GHz, 8 cores) VortiQa software service provider equipment 675 Mbps 175 Mbps 174 Mbps N/A 1.5 Gbps 658 Mbps 616 Mbps N/A 1.8 Gbps** N/A Mbps** 219 Mbps** 2 Gbps** N/A Mbps** 441 Mbps** 4 Gbps 1.3 Gbps 1.3 Gbps 593 Mbps 20 Gbps* 10 Gbps 10 Gbps N/A Performance numbers are measured or estimated for big packet size traffic Firewall performance is saturated at line rate *performance estimates based on cycle-accurate model **estimates based on P2020 test data ++ data not clooected, similar to 3DES-SHA1 Detailed Freescale VortiQa performance papers and live demos available for customers under NDA Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 12

13 U-2020 Offers 4x Performance Freescale prototype design has 5 Gbe ports Portwell 1U design has 6 GbE ports 2 pair bypass segments Up to 4 GB DDR3, 64-bit 32 MB flash 1 mini PCIe slot 2 USB 2.0 ports <30W power consumption Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 13

14 U-8377 Appliance ~$100 BOM BOM MPC8377E $28.00 LV Power Supply $ MB Flash $2.25 DDR2 Socket $1.50 GE Ports $2.65 GE Switch $7.00 Debug (RS232) $0.85 SATA Connector $1.00 Mini PCI $1.43 Misc ICs, LED, R,C,L $8.00 PCB $6.00 Assembly $7.00 Total PCBA $ G DDR2 Memory SO-DIMM $20.00 Power Supply $4.50 Enclosure $4.50 Total $ % Cost Advantage over x86 based Appliance Power x86 BOM Cost is for 25K volume BOM does not include SATA Hard disk Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 14

15 Agenda U Market U Security Appliance Solutions Summary Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 15

16 Customer Engagement Model Flexible approach to engage partners and customers FREESCALE PARTNER CUSTOMER 1. Joint marketing and sales calls with partners 2. Deliver security appliances for evaluation and initial product development; customer to use partner for volume manufacture 3. Deliver silicon and silicon roadmap 4. License of hardware schematics and other details 5. License BSP, OS and other enablement software 6. License VortiQa software as a complete suite or applicable modules 1. Joint marketing and sales calls with Freescale 2. Deliver security appliances for evaluation and initial product development 3. Option: COTS hardware delivery and negotiate appropriate terms with the customer 4. Option: Custom hardware delivery and negotiate appropriate terms with the customer 5. Modify BSP, OS according to customer requirements, where applicable 1. Evaluate Freescale silicon 2. Evaluate Freescale VortiQa software 3. Evaluate COTS hardware from partners 4. HW product development: a) COTS hardware from the partner; b) Custom hardware from the partner; c) Own manufactured hardware from other manufacturer 5. SW product development: a) Port existing software porting to Freescale silicon; b) License VortiQa software; c) Port other 3 rd party software; d) Port open-source software Xyz Xyz Xyz Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 16

17 Summary Unlock the potential of multicore processors and built-in acceleration engines Speed time to market with an integrated networking and security software product line Deliver innovative and differentiated services using our solutions-centric approach Customer Solutions = QorIQ and PowerQUICC Processors + VortiQa Software + Ecosystem products and services Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 17

18 For More Information Reg. U.S. Pat. & Tm. Off. BeeKit, BeeStack, CoreNet, the Energy Efficient Solutions logo, Flexis, MXC, Platform in a Package, Processor Expert, QorIQ, QUICC Engine, SMAROS, TurboLink 18

19