tnsr-logo-white footer v1.4Port Mirror

tnsr-logo-white footer v1.4

Edge / Border / Core Router

tnsr-logo-white footer v1.4

Site-to-Site IPsec VPN

Port mirroring is a packet capture technique. It allows network packets seen on one port (or an entire VLAN) to be copied to another port, where packet traffic can be analyzed for security or other inspection purposes. In the age of constant and increasingly sophisticated cyberthreats, the demand for full packet traffic analysis is only rising.

  • There are two ways to deploy port mirroring: 1) integrated port mirroring, often referred to as a Switched Port Analyzer (SPAN) port, and 2) external test access point (TAP) designed to mirror the traffic without impeding the flow of the production traffic.

  • The challenge with SPAN ports is there is a limited number available on any given switch or router; and when running at high bandwidth rates, they can be taxing. If processing tradeoffs are required when a switch or router comes under load, the port mirror is the first to be starved, meaning important traffic is not copied and sent to analyzers.

  • TAPs alleviate the processing load on the switch or router, but are very expensive.

  • There is a third issue. When deployed in the cloud, users have no access to cloud provider switch infrastructure tools, and as such, are relegated to a TAP-based solution. Unfortunately, leading tap solutions require agents to be deployed, which introduces even greater deployment and operating costs.

  • TNSR leverages Vector Packet Processing (VPP) to become a cloud gateway with built-in traffic monitoring
    - enable high volume port mirroring in software - without expensive, proprietary 'big-iron'.

  • Deliver traffic to 3rd party security analysis/inspection tools at rates up to 100 Gbps - on premises or in the cloud - and beyond for a fraction of the cost of legacy solutions

  • Additionally, TNSR enables flexible management - familiar CLI or Ansible®, SaltStack®, Puppet®, Chef™programmatic configuration and IT automated management via REST API - slashing traditional operating costs and speeding adds, moves and changes.

  • Flexible deployment options - bare metal, VM, AWS cloud, Microsoft Azure cloud.

  • Flexible licensing - perpetual or subscription.

Key Features

Fully-featured secure-networking software stack

Engineered integration of Vector Packet Processing (VPP), Data Plane Development Kit (DPDK), Free Range Routing (FRR), strongSwan key management, RESTCONF API, Clixon configuration management.

Easy deployment via modern network tunneling

Delivery over GRE (ERSPAN), RSPAN, SPAN or VXLAN - enabling captured traffic to be transported across any Layer 3 domain.

Fast, easy, transparent cloud deployment

100% transparent, no agents, no modifications to user-defined routes.

Eliminates need for TAP or SPAN Port

Performed in software, TNSR provides L3 traffic copies without expensive hardware TAPS or switch/router performance impacting SPAN ports.

 

 

Benefits

price performance resize
deployment managed
vendor freedom v1.2

Unmatched Price-Performance

Software-based packet processing and h/w acceleration integration turbo-charges performance and delivers real-world IMIX, site-to-site VPN price-performance.

Agile Networking Deployment and Management

Deploy TNSR on our hardware or yours, or in the cloud - fast and easy installation, configuration and operations management via CLI or IT automation options.

No More Vendor Lock-in

Based on open source software - eliminating costly, slow to update, proprietary hardware or management tooling.

Port Mirror v1.3

Want to learn more?          Interested in a trial?          Ready to discuss a solution?

More Information

We’re happy to answer any questions you may have verbally - just use one of the CTAs above. But, if you prefer to do your own research by reading, these assets should be helpful!