The Power to Harness the Big Cloud: impressive performance

Leading Product Architecture in the Industry — delivering Terabit capacity, flexible resource allocation, and linear increase of performance

The Eudemon8000E-X uses the core router-level hardware platform and Crossbar routing and switching technology with Terabit expansion. Therefore, the service processing performance can be smoothly upgrade to Terabit level without chassis replacement.

The Eudemon8000E-X provides modularized components. Based on the dual NPs, the interface module ensures the line rate forwarding of interface traffic. Based on the multi-thread architecture, the SPU ensures the high-speed concurrent processing of multiple services, such as NAT, ASPF, Anti-DoS, and VPN to break through the performance bottlenecks of the CPU. LPUs and SPUs function separately. The overall performance increases linearly with the addition of SPUs, which provides flexible service processing capability.

Leading Performance — protecting key services of customers effectively

With the revolutionized system architecture, the Eudemon8000E-X is takes the leading role in the indexes of throughput, number of connections per second, and maximum number of concurrent connections. The single-slot firewall performance of the Eudemon8000E-X reaches 20 Gbit/s for IMIX traffic and 5 Gbit/s for small packets (64 bytes). The single-slot DDoS protection capability and VPN throughput is 20 Gbit/s and 12 Gbit/s respectively. The maximum number of connections per second is 500,000, and the maximum number of concurrent connections is 8,000,000. Because the Eudemon8000E-X uses the dedicated traffic splitting technology, the overall performance increases linearly with the addition of SPUs. When the Eudemon8000E-X is configured with 10 SPUS, the firewall throughput is 10 times of a single SPU. The throughput reaches 200 Gbit/s for IMIX traffic and 50 Gbit/s for small packets (64 bytes). The DDoS protection capability and VPN throughput reaches 200 Gbit/s and 120 Gbit/s respectively. The maximum number of connections established per second is 5,000,000, and the maximum number of concurrent connections is 80,000,000.

Perfect Reliability — hierarchal management and full redundancy ensuring service continuity

Network security is a key point in enterprise operating. To ensure the service continuity on the high-speed network, the Eudemon8000E-X uses unique hierarchal management technology separating management, monitoring, and data providing high hardware reliability. The Eudemon8000E-X also supports active/standby networking, active/active networking, interface aggregation, VPN redundancy, and SPU load balancing. Meanwhile, the Eudemon8000E-X also provides unique dual-MPU active/standby switchover providing the firewall with high-end router reliability to ensure the service continuity at key nodes. The mean time between failures (MTBF) of the Eudemon8000E-X is as long as 500,000 hours, and the failover time is less than 0.1 second. These ensure the consistent and stable operating of services.

The Intelligence to Protect the Cloud: dedicated security

Professional Anti-DDoS — ensuring network and service security

In 2010, the DDoS attack bandwidth exceeds 100 Gbit/s, which witnessed a 100% increase comparing with that in 2005. Since new attacks targeting the HTTP, HTTPS, SIP, and DNS attacks evolves rapidly, the traditional Flow-based attack detection is on the brink of invalidity. The DPI-based detection mechanism of the Eudemon8000E-X analyzes the packets by bytes, building a seven-layer filtering structure. The seven-layer filtering structure can accurately detect attacks including flood attacks, application-layer attacks, scanning attacks and sniffing attacks, and malformed packet attacks. Meanwhile, the Eudemon8000E-X responds to attacks within seconds, and provides a defense capacity of up to 200 Gbit/s. Therefore, the Eudemon8000E-X can defend against various DDoS attacks.

Professional IPS — preventing external intrusion

The core technologies of the IPS are embodied in the detection engine performance, signature identification efficiency, and integrated processing performance. With the advanced IPS detection engine and mature signature database, Huawei Eudemon8000E-X defends against various threats, including system vulnerabilities, unauthorized automatic download, spoofing software, spyware/adware, abnormal protocols, and P2P anomalies. A single vulnerability-based signature covers thousands of attacks. Supplemented with the globally deployed honeypot system, the Eudemon8000E-X can capture the latest attacks, worms, and Trojan horses features, providing zero-day attack defense capability. Moreover, the practicability of the IPS is significantly promoted. The Eudemon8000E-X uses internal off-line and "one board one feature" technologies; certain necessary service traffic is split to the dedicated SPU. In so doing, the service processing capability is improved; furthermore, the traffic processing does not affect the basic services of the firewall, ensuring in-service continuity.

Professional DPI — Application Management and Control

Because of the massive applications at cloud data centers, how to implement network data transparency and visualization for pre-event risk control becomes significantly vital. DPI of the Eudemon8000E-X uses packet feature inspecting technology and protocol analyzing technology to analyze the data in the application layer thoroughly. This technology is high effective against more than 500 kinds of worms and 350 zombie tools, and can accurately identify up to 850 application protocols of over 20 categories, such as P2P, VoIP, chatting, video, game, and stock. The DPI technology offers multi-dimensional control measures specific to time, application, user, bandwidth, and connection number, effectively providing bandwidths for mission-critical applications, improving bandwidth usage and working efficiency, blocking zombie traffic, preventing against worm infection to make application visible and controllable.

The DPI technology provides periodically database update from a professional maintenance team.

Comprehensive IPv6 Security — providing a secure IPv6 network deployment

The IPv4 addresses are already exhausted, and the smooth transition to IPv6 while ensuring the service experience is necessary. The Eudemon8000E-X supports IPv6 routes, IPv6 ACL, IPv6 anti-DDoS features, and IPv6 IPSec accesses providing a secure solution for users to implement the IPv4-to-IPv6 evolution. Meanwhile, the Eudemon8000E-X also supports the IPv4-to-IPv6 transition technologies, such as NAT44 (4), DS-Lite, 6RD, and NAT64 providing an effective, flexible, reliable, and economic network transition and service evolution solution.

Comprehensive security — providing comprehensive security features with a single Eudemon8000E-X

The Eudemon8000E-X integrates professional anti-DDoS, IPS, and IPv6 security defense on a single device addressing the problems caused by external attacks and providing perfect network transition solution. The integration maximizes the ROI, and reduces the deployment, management, and maintenance cost.

The Agility to Adapt to the Cloud: dynamic policies

Virtualization is the path for the cloud computing to be deployed at IDCs. Virtualization maximizes resource usage to achieve maximal profits. Meanwhile, dedicated devices are required to ensure the virtualization security. The Eudemon8000E-X provides professional and comprehensive security functions and maximum resource virtualization. The Eudemon8000E-X supports a maximum of 4094 virtual firewalls and virtualized IPS functions ensuring the security of the virtualized data and services. The virtualized VPN technology supports massive secure accesses for enterprises and terminal users ensuring the cloud channel security.

The flexible resource allocation and address flapping technologies can easily adapt to the situations of dynamic resource change and address flapping of enterprises and terminal users in the cloud by implementing corresponding security policy flapping. These technologies enable dynamic security defense meeting the requirements of flexibility and dynamic security of cloud data centers.

IDC

Egress of the Campus Network

Broadcasting & Television (at the Carrier Network Border)