Introduces cloud-native application traffic visibility by dynamically monitoring VM, container and public cloud environments
Big Switch Networks has announced significant updates to its SDN-based Big Monitoring Fabric (Big Mon) product line. The company is introducing BigSecure Architecture, a dynamic, high-performance cyber-defence platform that enables Terabit attack mitigation. The company is also extending Pervasive Visibility use cases for cloud-native application traffic, which includes dynamic monitoring of VM, Containers and Public Cloud environments.
Big Switch will host a special launch webinar on Wednesday, December 14 at 10am PT. The webinar will highlight BigSecure Architecture, cloud-native application monitoring use cases and new features in Big Monitoring Fabric 6.0. To register: http://bit.ly/2gCgM8V.
“Our mission is to provide next-generation data centre networking solutions so that our customers can experience the true benefits of a software-defined data centre,” said Douglas Murray, CEO, Big Switch Networks. “With our introduction of BigSecure Architecture and cloud-native application monitoring, we are arming customers with next-generation data centre security and visibility solutions they need to defend their networks and monitor their cloud-based applications.”
In January of 2016, Big Switch announced USD$48.5M in Series C funding, which included participation from existing and new investors and brings the company’s total funding to USD$94M. In the latest quarter, the company saw annual software subscriptions grow by more than 267% year-over-year and had multiple customer deals in excess of USD$1MM. Customers are located across North America, APAC and EMEA regions in more than 25 countries and are in verticals that include technology, financial services, government, media, telecom and higher education. Customers include: Verizon, the U.S. Federal Government, Intuit, Nomura Research Institute, American Fidelity, National Instruments, CleanSafeCloud, Digita Oy, 10 of the 15 largest telcos in the world, multiple global financial services firms, media companies, a Fortune 25 software company and a Fortune 5 oil and gas company.
BigSecure – A dynamic cyber-defence architecture for Terabit attack mitigation
The volume, cadence and sophistication of cyber-attacks is rapidly increasing on large organisations including cloud providers, service providers and software-as-a-service (SaaS) providers. Attackers have started to compromise tens of thousands of Internet of Things (IoT) devices to create armies of “botnets,” which collectively send large-scale malicious traffic to disrupt critical internet-based services. Recently, the self-spreading Mirai malware compromised over one hundred thousand internet-connected video cameras to generate over 1 Terabit of distributed denial of service (DDOS) attack to Domain Name Service (DNS) service provider, blocking multiple high-profile Internet domains for hours. It has become necessary for organisations to deploy cyber-defence mechanisms to protect against massively distributed attacks without breaking their security budget.
With Big Switch’s BigSecure Architecture organisations are able to deploy a dynamic, high-performance cyber-defence solution, at affordable price points. The solution enables existing security tools to leverage an externalised elastic attack mitigation infrastructure consisting of the underlying network and a pool of x86-based compute resources. Specifically, the BigSecure Architecture includes:
Once BigSecure Architecture is instantiated, a security tool detects a high-bandwidth attack and interacts with the Big Monitoring Fabric Controller via programmatic APIs to redirect incoming traffic for elastic mitigation. Depending on the type of attack, the Big Mon Controller activates SDN fabric and compute resources for attack mitigation, reconfigures the service chain to redirect traffic to mitigation infrastructure, and load-balances traffic across a cluster of Big Mon service nodes and NFV tool farm for scale-out performance. The combination of SDN fabric, Big Mon service nodes and NFV tool farm performs Layer-7 scans of network traffic and blocks those packets/flows that contain attack signatures. With BigSecure, security teams are able to deploy dynamic cyber-defence architecture that provides elastic, Terabit-scale attack mitigation capability at an affordable price while continuing to leverage best-of-breed security tools.
In addition to Terabit-scale mitigation, BigSecure Architecture also exports flow telemetry (NetFlow, sFlow) of network traffic to anomaly-detection/traffic visibility systems, which provide the ability to detect, classify, and traceback a variety of attacks.
Cloud-native application monitoring
The rise of cloud-native applications, in the form of virtual machines (VMs) and containers, has driven up east-west traffic within the data centre, leading to tremendous visibility and security challenges. When applications are deployed in public clouds, consistent architecture for application traffic visibility becomes necessary.
Big Switch pioneered the “monitor every rack” use case for comprehensive east-west traffic monitoring of bare-metal and VM traffic at affordable price points. With this release, Big Switch introduces new capabilities in Big Monitoring Fabric, leveraging programmatic interactions, to enable pervasive visibility and security of any workload, anywhere. Specifically:
Big Monitoring Fabric Release 6.0
Big Monitoring Fabric is a next-generation network packet broker (NPB) that leverages SDN principles, Open Networking switches and a high-performance x86-based DPDK service node to provide feature-rich, scale-out data centre monitoring at up to 50% lower cost than traditional NPBs. Big Monitoring Fabric supports 1G, 10G, 40G and 100G for the most demanding and high volume network monitoring and security environments. Customer use cases for Big Monitoring Fabric include: monitor every rack, monitor every location, monitor mobile/LTE networks and DMZ/Extranet Inline security. Big Monitoring Fabric Release 6.0 includes:
Integration with leading Technical Solution Partners
Big Monitoring Fabric Release 6.0 is currently in beta and will be generally available in Q1, 2017.
Big Switch will host a special launch webinar on Wednesday, December 14 at 10am PT. The webinar will highlight BigSecure Architecture, cloud-native application monitoring use cases and new features in Big Monitoring Fabric 6.0. To register: http://bit.ly/2gCgM8V (if you are unable to join the webinar at 10am PT, please register for the webinar and we will send you a link to the recording, following the webinar).
“As the threat landscape intensifies, data centres are demanding next-generation solutions to monitor pervasively and withstand massive cyber-attacks while operating within flat budgets,” said Prashant Gandhi, VP and Chief Product Officer, Big Switch Networks. “With the introduction of BigSecure Architecture, our customers are now armed with best-of-breed and dynamic cyber-defence at Terabit scale to combat massively distributed cyber-attacks. And with Big Mon’s innovations to programmatically monitor cloud-native applications such as containers and public cloud, we are enabling unprecedented any-workload-any-where visibility at affordable price points.”
“We wanted to build a dedicated Ethernet monitoring network for critical video delivery services and to easily tap various measurement points around the network. First we looked at traditional Network Packet Brokers (NPBs) but soon realised that we needed a more flexible and scalable solution. Big Switch solutions allow us to start small and grow as needed and it is easy to use and deploy, and offers all the features we need,” said Leimio Antti, System Designer, IP Networks, Digita Oy. “We can easily tap any fibre connection in the network and quickly see if we have problems in video quality. Big Monitoring Fabric can aggregate monitoring traffic and forward it to centralised measurement devices. This simplifies and speeds up our operations and troubleshooting. We can also add inline security monitoring on the same system and troubleshoot network issues effectively with Big Monitoring Fabric.”
“Organisations are compelled to defend their data centre assets from massively distributed DDoS attacks,” said Raj Jalan, Chief Technology Officer at A10 Networks. “The A10 Thunder Threat Protection System (TPS) with Big Switch’s Big Monitoring Fabric leverages SDN controls to deliver a scale-out and operationally simple threat protection solution for enterprise customers. A10 Thunder TPS detects and mitigates complex DDoS attacks while utilising the BigSecure SDN fabric to mitigate terabit scale amplification attacks at the edge.”
“Edgecore Networks’ partnership with Big Switch continues to flourish as more customers around the world are choosing disaggregated hardware and software solutions to modernise their data centre networks to better serve their business needs,” said Jeff Catlin, VP of Technology, Edgecore Networks. “Edgecore open network switches coupled with Big Cloud Fabric and Big Monitoring Fabric products provide customers with flexible and intelligent SDN solutions that enable rapid provisioning of new applications while meeting requirements to better monitor and secure their networks. The introduction of BigSecure and its new use cases show Big Switch’s commitment to innovation, which complements Edgecore’s leadership in open network hardware, providing our customers with SDN solutions that address real world problems.”
“With the exponential growth in VM and container-based deployments of cloud-native applications, the volume of East-West traffic is exploding – making it harder than ever to monitor and manage,” said John Leon, Vice President of Business Development, ExtraHop. “In partnership with Big Switch’s SDN capabilities, ExtraHop provides the ability to stream wire data off of the network. This gives customers a data-driven, highly scalable, and comprehensive view of their entire IT environment, allowing IT to maximise network and application performance, availability, and security.”
“Riverbed SteelCentral and Big Switch together provide intelligent and scale-out solutions for rapid resolution of network and application performance,” said Nik Koutsoukos, VP Product Marketing, at Riverbed, “We see tremendous opportunity to accelerate customer demand for our end-to-end performance monitoring by leveraging a software-defined architecture for operational simplicity and deep visibility.”
About Big Switch Networks
Big Switch Networks is the Next-Generation Data Centre Networking Company. We disrupt the status quo of networking by designing intelligent, automated and flexible networks for our customers around the world. We do so by leveraging the principles of software-defined networking (SDN), coupled with a choice of industry-standard hardware. Big Switch Networks has two solutions: Big Monitoring Fabric, a Next-Generation Network Packet Broker, which enables pervasive security and monitoring of data centre and cloud traffic for inline or out-of-band deployments and Big Cloud Fabric, the industry’s first Next-Generation switching fabric that allows for choice of switching hardware for OpenStack, VMware, Container and Big Data use cases. Big Switch Networks is headquartered in Santa Clara, CA, with offices located in Tokyo, Sydney, London and Istanbul. For additional information, email firstname.lastname@example.org, follow @bigswitch, or visit www.bigswitch.com.
Big Switch Networks, Big Cloud Fabric, Big Monitoring Fabric, BigSecure, Big Chain, Switch Light OS, and Switch Light VX are trademarks or registered trademarks of Big Switch Networks, Inc. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners.