1. Overviews

• A full visual control of Data Acquisition device(32*40/100GE QSFP28 ports)
• A full Data Scheduling Management device(32*100GE duplex Rx/Tx processing)
• A full pre-processing and re-distribution device(bidirectional bandwidth 3.2Tbps)
• Supported collection & reception of link data from different network element locations
• Supported collection & reception of link data from different switch routing nodes
• Supported raw packet collected, identified, analyzed, statistically summarized and marked
• Supported to realize irrelevant upper packaging of Ethernet traffic forwarding, supported all kinds of Ethernet packaging protocols, and aslo 802.1q/q-in-q, IPX/SPX, MPLS, PPPO, ISL, GRE, PPTP etc. protocol packaging
• Supported raw packet output for monitoring equipment of BigData Analysis, Protocol Analysis, Signaling Analysis, Security Analysis, Risk Management and other required traffic.
• Supported real-time packet capture analysis, data source identification
• Supported P4 programmable chip solution, data compilation and action execution engine system. The hardware level support the recognition of new data types and strategy execution ability after data identification, can be
• customized for packet identification, quick add new function, new protocol matching. It has excellent scenario adaptation ability for the new network features. For example, VxLAN, MPLS, heterogeneous encapsulation nesting, 3-layer VLAN nesting, additional hardware level timestamp, etc.

Typical Application

2. Intelligent Traffic Processing Abilities

ASIC Chip Plus Multicore CPU

3.2Tbps intelligent traffic processing capabilities

100GE Acquisition

32*40/100GE QSFP28 ports Rx/Tx duplex processing, up to 3.2Tbps Traffic Data Transceiver at same time, for network Data Acquisition, simple Pre-processing

Data Replication

Packet replicated from 1 port to multiple N ports, or multiple N ports aggregated, then replicated to multiple M ports

Data Aggregation

Packet replicated from 1 port to multiple N ports, or multiple N ports aggregated, then replicated to multiple M ports

Data Distribution

Classified the incoming metdata accurately and discarded or forwarded different data services to multiple interface outputs according to white list, blacklist or user’s predefined rules.

Data Filtering

Input data traffic can be accurately classified, and different data services can be discarded or forwarded to the output of multiple interfaces by whitelist or blacklist rules. Flexible combination of elements such as Ethernet Type, VLAN tag, TTL, IP seven-tuple, IP fragmentation, TCP flag identification, message characteristics, etc. to meet the deployment requirements of various network security equipment, protocol analysis, signaling analysis, traffic monitoring and so on

Load Balance

Supported load balance Hash algorithm and session-based weight sharing algorithm according to L2-L7 layer characteristics to ensure that the port output traffic dynamic of load balancing

IP Datagram Reassembly

Supported IP fragmentation identification and supports reassembly of IP fragmentation so as to implement L4 feature filtering on all IP fragmentation packets. Implement traffic output policy.

UDF Match

Supported the matching of any key field in the first 128 bytes of a packet. Customized the Offset Value and Key Field Length and Content, and determining the traffic output policy according to the user configuration

100G & 40G Port Breakout

Support for breakout on 100G or 40G ports with 4*25GE or 4*10GE ports for specific access needs

Data Slicing

Supported policy-based slicing (64-1518 bytes optional) of the raw data, and the traffic output policy can be implemented based on user configuration

Tunneling Protocol Identify

Supported automatically identify various tunneling protocols such as GTP / GRE / PPTP / L2TP / PPPOE. According to the user configuration, the traffic output strategy can be implemented according to the inner or outer layer of the tunnel

Packet Capturing

Supported port-level, policy-level packet capture from source physical ports within filter of Five-Tuple field in real time

Packet Analysis

Supported the captured datagram analysis, including abnormal datagram analysis, stream recombination, transmission path analysis, and abnormal stream analysis

VxLAN, VLAN, MPLS, GTP, GRE Header Stripping

Supported the VxLAN, VLAN, MPLS, GTP, GRE header stripping to forward in the original data packet

NetTAP^® Visibility Platform

Supported NetTAP^® Matrix-SDN Visual Control Platform Access

1+1 Redundant Power System(RPS)

Supported 1+1 Dual Redundant Power System

3. Typical Application Structures

3.1 Centralized Collection Replication/Aggregation Application(as following)

3.2 Unified Schedule Application(as following)

3.3 Data Slicing Application(as following)

3.4 Data VLAN Tagged Application(as following)

4. Specifications

NetTAP® (Full named Chengdu Shuwei Communication Technology Co., Ltd.)was established in 2007. Focusing on the Research and Development of Network TAPs/NPBs Communication Equipment, Data Security Analysis Equipment, which provides products and solutions in Big Data Acquisition, Data Storage, Data Monitoring, Data Processing and Data Analysis for Telecom, TV Broadcasting, Government, Education, IT, Finance, Bank, Hospital, Transportation, Energy, Power, Petroleum, Enterprise and other industries.

NetTAP® has launched various types of high-density devices such as: Fast Gigabit, 10 Gigabit Ethernet Network Traffic Replication, Aggregation, Distribution Network TAPs/NPBs (Network Packet Broker), intelligent Hybrid Traffic Network TAPs, 25G, 40G, 100G, etc. high density and Performance Network TAPs/NPBs(Network Packet Broker).

NetTAP® has a hardware production plant, all the communication products have complete Software and Hardware Independent Intellectual Property Rights, with complete Copyright Registration and Product Certification.

MATRIX NetInsight™ - A Fully Function Network Visibility Control Platform

MATRIX NetInsight™ Network System Value

1- Data Acquisition with centralized planning, eliminate monitoring blind spot

2- Free distribution of data, saving analysis of the overall investment

3- Data Security Control, Reduce the risk of disclosure

4- Overall Traffic visible, Abnormal Located more accurate, Fault analysis more useful

MATRIX NetInsight™ Function Architecture

1- User Interaction Layer

2- Big Data Analysis Layer

3- Data Storage Layer

4- Analysis Visibility Layer

5- Data Acquisition Layer

                                                                                       Zain Cloud Project of Saudi Arabia Telecom