11-16-2010 06:20 AM
with SRX for Data Center (1400/3x00/5x00) we have clear data-plane vs control-plane separation. There are SPC/NPC/IO cards/etc ...
How is it in case of branch office models ? From SRX100 to SRX650; what features are HW accelerated/offloaded to dedicated hardware component (crypto...); similar to J series forwarding done with real time software thread ? How many CPUs/cores are in SRX650 ?
11-16-2010 06:30 AM
On all SRX Branch platforms (SRX 100 to SRX 650) there is a clear separation of control plane and data plane functionality.
All Branch platforms run on multicore processors. On all platforms one core is used for control plane functinality and the rest of the cores for data plane.
For eg on an SRX650 1 core is used for control plane and 11 cores are used for data plane.
There is no separate crypto accelerator on any of the Branch platforms. The Network processors on each of these platforms have inbuilt crypto acceleration.
However all platforms (HM models on srx210 and srx240) except the SRX100 have a special REGEX hardware accelerator used for UTM (express AV) and IDP.
11-16-2010 06:50 AM
good & fast answer ! multicore processors == Network processors in your answer ? REGEX hardware accelerator - is it one function of network processor or dedicated component ?
Sorry, used to play with HW some time ago, just curious. Now only left with IS-IS/MPLS and all that boring software staff
11-16-2010 06:55 AM
crypto acceleration is built into the network processor.
the regex accelerator (PME - pattern matching engine) is a separate hardware piece(dedicated component).