2. Vineyard Networks’ Vision:
To be the global technology leader
in next-generation
Deep Packet Inspection (DPI)
solutions.
3. What does Vineyard do?
Vineyard develops and delivers
Next-Generation Deep Packet Inspection
OEM solutions for integration into
Network Infrastructure and Telecommunications
platforms globally.
5. What’s the deal with DPI?
The demand for network bandwidth is increasing
dramatically! Users want access to applications of
all kinds and they want it FAST!
That means…
More network data
More money to spend
More security risks to deal with
More traffic monitoring, prioritization and
analysis required
Which is why:
“DPI is increasingly being
DPI is the only solution that provides complete
incorporated into larger
visibility of your network to determine IF, WHEN
solutions…creating opportunities for
and HOW applications and protocols should be
suppliers that offer DPI technology on
traversing the network.
an OEM basis” – Infonetics, April
2012
6. Why OEM DPI?
DPI technology is highly specialized
It’s expensive to develop and
maintenance intensive
Time to market (initial development)
of 2-3 years
Very few vendors and engineers have a
background in DPI technology
7. Our DPI Solution
Network Application Visibility Library (NAVL)
NAVL is … A real-time, layer-7 classification engine delivered as a
software library / SDK
Implementation User Space Library
Supported OS Linux, FreeBSD, Cavium Simple Executive,
Windows
Supported CPU Architectures Intel x86_32, x86_64, Cavium Octeon II Series
Application Coverage 804 application/protocol signatures
Application/Protocol Updates 15+ per month *dynamically loaded
Performance 40Gbps + (Intel Xeon 10 HT cores)
Throughput 2-4Gbps per core
Memory Footprint Library: 5MB Per Thread: 1MB Per Flow: 1KB
Custom Definition API YES
Metadata Extraction YES
8. NAVL
Framework
NAVL consists of 2 core
components:
1. The Engine - Contains
classification toolkit, handles IP-
defragmentation & TCP
Reassembly
2. The Plug-ins - Dynamic system
of .plg files containing packet logic
for classification
9. How does NAVL work?
NAVL receives Packet or Data
streams via API calls to the
engine.
TCP creates Inspection Chain for
each new connection and
provides classification state.
Leverages variety of detection
techniques and extensive plug-in Features:
set to provides results: • Thread-safe library
• Flow ID • Zero-Copy interface
• Application/Protocol Stack • High performance across
• Associated Attributes single or multiple cores
10. NAVL Classification
Plug-ins push information onto the
application stack as traffic details Sub-classifications
are discovered.
provided as well:
Sample Attributes include:
11. How does Vineyard deliver DPI
technology?
1. Technology Alliances are established to drive NAVL DPI
into the platform to deliver it via the channel
OR
2. NAVL DPI technology is licensed firsthand
to network infrastructure and telecom vendors
around the world
12. Driving DPI into the Platform
Our technology alliance consists of Strategic Partnerships with industry
leading network vendors who have integrated Vineyard’s DPI engine into
their platform to power next-generation networking solutions:
13. Licensing our technology
We also establish partnerships with vendors who license our
DPI technology directly for integration into their own solutions:
14. NAVL
Evaluation
FREE Evaluation of the
NAVL Engine provides:
Sample Code
Integration support
Sample Applications
• Capreader
• Netfilter Queue
• Libpcap
Access to Trace File
Repository
15. Vineyard AppLabs
An online resource for Application Intelligence Data
Browse our
Filter apps application &
by traffic type
category, ris database
k
level, produc
tivity level &
application
tags
View
application
details and
attributes
www.applabs.vineyardnetworks.com
16. Vineyard’s Value Proposition
NAVL offers: Which means:
• A complete Packet Inspection • Reduced time to market by
engine 1-2 years
• Signature Plug-ins ~ à la carte • NO in-house development
• Steady stream of updates • Minimal staffing needs
• Ongoing maintenance • A significant competitive
• Continued integration and advantage
support
