CPIC-8955 ACCELERATOR CARD WITH INTEL^® QUICKASSIST TECHNOLOGY: INTEL "COLETO CREEK" PCIE CRYPTOGRAPHIC ACCELERATOR CARD

Intel QuickAssist Technology provides cryptographic and compression acceleration using the Intel "Coleto Creek" 8955 chipset, with CLC. Use this card to add QuickAssist acceleration service capabilities to existing systems easily and at a low cost.

FEATURES

Uses QuickAssist technology to provide up to 50 Gbps of hardware acceleration.¹
With newly-released OpenSSL* 1.1.0 to deliver nearly 35,000 2K RSA TPS.
Makes establishing connections to web services hosted on NGINX lightning fast.
Offload VPN processing from VPN concentrators and software-based firewalls.
Designed for easy drop-in implementation in new and existing equipment.
Standard PCIe 2.2 interface that can be deployed in virtually any major PC, workstation or server platform utilizing a PCIe bus.

OVERVIEW

The Netgate^® CPIC-8955 Accelerator Card allows servers to achieve sustained throughput of up to 50 Gbps. The CPIC-8955 accelerator card features a standard PCIe 2.2 interface that is easily deployed in virtually any major PC, workstation or server platform. By utilizing the PCIe bus, it is ideally suited for PCIe coprocessor-based IPSec or TLS security applications such as SSL, OpenSSL*, and NGINX. Disk optimization and de-duplication tasks also benefit through the data compression functionality.

When it comes to encryption processing and establishing connections, businesses can now achieve up to 3.5X the equivalent TLS performance of an unaccelerated E5 Xeon server with 20 cores when using the new Netgate® CPIC-8955 Accelerator Card.² The Netgate® CPIC-8955 Accelerator Card works with the newly-released OpenSSL 1.1.0 to deliver nearly 35,000 2K RSA TPS,³and up to 50 Gbps of add-in hardware cryptographic acceleration to help offload the performance demands of securing and routing Internet traffic. In addition, the acceleration offload offered by the CPIC-8955 acts to preserve processor cycles for application and control processing.

The CPIC-8955 can offload VPN processing from VPN concentrators and software-based firewalls to improve overall network efficiency while reducing CPU overhead. A single CPIC-8955 accelerator card allows PCIe systems to achieve a sustained throughput of up to 50 Gbps. The CPIC-8955 accelerator features a standard PCIe 2.2 interface that can be deployed in virtually any major PC, workstation or server platform utilizing a PCIe bus and is ideally suited for PCIe coprocessor-based IPSec or TLS security applications such as SSL, OpenSSL, and nginX. Disk optimization and de-duplication also benefit through the data compression functionality.

APPLICATIONS

Server

Intel QuickAssist Technology integrated hardware-acceleration delivers hardware acceleration services for efficient cryptographic and compression performance, enabling you to:

Reduce demands on your server
Support a larger number of secured clients per server
Preserve CPU cycles for other uses

Network

Hardware-accelerating SSL with Intel QuickAssist Technology frees up significant processor cycles, so you can:

Offload compute-intense security protocols
Encrypt information across networks
Support more secure throughput per platform

Big Data

Intel QuickAssist Technology compression/decompression acceleration reduces overall data size so it can be transmitted faster, which allows you to:

Reduce demands on server processors
Harness the value of big data by improving the performance of solutions like Hadoop
Get faster results

Storage

Intel QuickAssist Technology accelerates the compression/depression process so that large amounts of data can be transmitted faster and takes up less storage space, which will:

Help maximize storage space
Improve performance of transmitting data

DETAILS

Description: Cryptographic and compression accelerator using Intel QuickAssist Technology, with CLC
Chipset: Intel Communications Chipset DH8955CL "Coleto Creek"
Supported Ciphers: AES, DES, 3DES, RC4;
Supported Wireless Ciphers: Kasumi, Snow 3G
Supported Hash Algorithms: SHA-1, MD5; SHA-2 (SHA-224, SHA-256, SHA-384, SHA-512);
Supported Authentication Methods: HMAC, AES-XCBC, AES-CCM, AES-XTS
Supported Public Key Functions: RSA operation; Diffie-Hellman operation; digital signature standard operation; key derivation operation;
Supports Elliptic Curve Cryptography (ECDSA and ECDH);
Supports random number generation; and prime number testing
Support compression/decompression functions including: DEFLATE (Lempel-Ziv 77) and LZS (Lempel-Ziv-Stac)
Supports Single Root I/O Virtualization (SR-IOV) for device-passthru in virtualized environments.

Performance:
- Intel QuickAssist Technology Capability: 50 Gbps
- IPSec: 43 Gbps
- SSL: 49 Gbps
- Compression: 20 Gbps
- Kasumi/Snow3G: 24 Gbps
- RSA Decrypt 1k-bit key: 170K ops/sec
- RSA Decrypt 2k-bit key 35K ops/sec
Interface (Bus) Type: PCIe Gen2x16 host interface
Additional Ports: Intel XDP Debug Port
Power: via PCIe connector

SOFTWARE

Intel QuickAssist Drivers, Tools and Utilities
01.org QuickAssist Drivers and Patches
Open Source stacks, including Linux Kernel Crypto framework, zlib and OpenSSL can be found on 01.org
Supported in Linux kernel. (Learn more here.)
DPDK PMD drivers available on dpdk.org (Learn more here.)

HARDWARE SPECS AND MATERIALS

Form factor: PCIe: 6.6 in x 4.25 in
Certifications: FCC Part 15 Class B, CE Class B, IEC-60950, RoHS/WEEE
Operating Temp: 0-50 C
Power: 25W TDP

DOCUMENTATION

Intel QuickAssist Technology: Programming Basics (Video!)
Intel QuickAssist Technology Application Notes, White Papers, Briefs, User Guides, Performance Optimization Guide, etc.
Intel QuickAssist Drivers, Tools and Utilities
01.org QuickAssist Drivers and Patches

WARRANTY AND SUPPORT INFORMATION

One year manufacturers warranty.
All Specifications subject to change without notice.
Subject to export restrictions: Currently can only ship to the USA and Canada.

REFERENCES

1 http://www.intel.com/content/dam/www/public/us/en/documents/guides/communications-chipset-8925-8955-software-programmers-guide.pdf#page=133

2 http://www.intel.com/content/dam/www/public/us/en/documents/solution-briefs/accelerating-openssl-brief.pdf#page=4

3 http://www.intel.com/content/dam/www/public/us/en/documents/solution-briefs/accelerating-openssl-brief.pdf#page=3

CPIC-8955 ACCELERATOR CARD WITH INTEL® QUICKASSIST TECHNOLOGY: INTEL "COLETO CREEK" PCIE CRYPTOGRAPHIC ACCELERATOR CARD

Accelerator Cards

Netgate CPIC-8955 Cryptographic Accelerator Card with QAT