2
Agenda
Hyperscan Ecosystem Overview
Hyperscan Roadmap
Hyperscan Performance
nDPI Case Study
New open source DPI on FD.io: Universal DPI
3
Hyperscan:
An industry fastest Regular Expression, Literal Matching Algorithm on Intel platform
Operating
Systems
Intel
Architectures
Applications
Language
Bindings
Integrated Open Source Solutions and User Cases（40+ Customers, 37 Open Source Projects)
...
Seamless Support from Atom to Xeon processor
...
Linear Core Scalability, Intel Optimized
OS X
IDS/IPS
SD-WAN/DPI
Web Application Firewall
Spam Filtering
System
Github
Clickhouse
Database
• DFA wide-state
compression to reduce
bytecode size
• Improve runtime handling
for literal patterns
• Improve runtime scheduler
4
Hyperscan Roadmap
• Logical Combination
• Chimera (PCRE compatible)
• Windows Support
• Literal Matching APIs
• Purely negative logical
combination support
• Windows Shared Library
Support
Hyperscan 5.0
(Shipped)
Hyperscan 5.2
(Shipped)
Q3’18
Q1’19 Q3’19
• Icelake Optimizations
(AVX512, VBMI, GFNI)
• Universal bytecode (Seamless
support across multiple IA
platforms)
• Capturing Support
2020
nDPI/Hyperscan
Integration
* Hyperscan is supported on all Intel Platform from Atom, Core to Xeon Scalable Processor Family
Web Application Firewall
Integration (ModSecurity,
NAXSI)
Hyperscan 5.1
(Shipped)
Universal DPI Solution
Hyperscan 5.3
(In development)
5
Release 5.2 (Q3’19)
Literal Matching APIs
A new set of APIs hs_compile_lit()
and hs_compile_lit_multi() for
literal matching.
No need to convert patterns into
HEX representation to avoid regex
syntaxes.
Simplified and faster compile and
runtime process.
Rulesets
User Defined
/foobar/
/adf/i
/GETHTTP/m
Hyperscan Compiler
hs_compile_lit_multi
Bytecode
(database)
Mode (Block, Stream)
Predefined Flags
#1
#2
#3
评论0