VortiQa^® OpenFlow Premium Package Application Development Kit

Overview

The VortiQa^® OpenFlow Premium Package (VortiQa OFPP) Application Development Kit (ADK) is a commercial-grade performance-optimized and hardware accelerated software package targeted at accelerated SDN/OpenFlow switch designs requiring L4 and above protocols including IPv4 Forwarding, IPSec, Firewall and Policy-Based Routing. This ADK conforms to the OpenFlow Switch Specification v1.3 and leverages NXP^® platforms equipped with the Advanced Input/Output processor (AIOP) to provide selective data plane offloading functions, while conserving the General Purpose Processor (GPP) cores for control plane and high-level networking application loads.

This ADK consists of the following components:

IPv4 Forwarding
Policy-Based Routing
OVS Offload
Firewall
IPSec
VXLAN, VXLAN over IPSec

NXP provides these feature-rich market-ready Network Functions (NF) offloads running on NXP communications platform's AIOP. The offload functions running in AIOP can easily be integrated with control plane stacks and applications running in the General Purpose Processor (GPP) cores. Each of the NF offload functions provides control APIs and delivers optimized performance, while offloading computationally intensive processing applications and conserving GPP cores for additional high-level networking applications.

NXP's commitment to addressing networking customers' needs is demonstrated through application-specific software packages and hardware platforms that expedite customer designs to market. In addition to providing comprehensive software solutions, NXP offers commercial services and support around these solutions, allowing customers to focus more on their value-added, differentiating core competencies.

MoreLess

Features

OpenFlow Switch Specification v1.3

Multiple data path support
Multiple Flow tables support
OpenFlow ports support (Standard, Physical, Logical and reserved ports)
Async messages support
Symmetric message support

Open vSwitch Offload

OVS DB support
OVS utils: ovs-vsctl and ovs-ofctl support
OVS Relay Agent support
OF DP Agent data path support
Multiple transport mechanisms (TCP, UDP, and Unix domain sockets)
Support for Nicira extensions – LEARN, RESUBMIT, REGISTERS

IPv4 Forwarding

IPv4 unicast Forwarding
Policy-Based Routing
ICMP Extensions
ARP Response
IP Fragmentation and Reassembly

VXLAN Tunneling

VTEP (VXLAN Tunnel End Point) Termination Support
Multiple VXLAN tunnels support
OpenFlow-based control data path adapter with BR Transport Table Type Pattern (TTP)
BR transport data path: VXLAN, IP Forwarding, and ARP
VXLAN encap/decap using Generic Tunneling encap/decap extensions

IPSec

Auto VPN with strongSwan
Manual VPN with IPXFRM
Tunnel Mode
IKEv1 and IKEv2
OpenFlow-based Control Path adapter with Linux integration modules for IPSec, routing, and ARP
Authentication Algorithms: SHA1, SHA2 (256, 384 and 512), AES-XCBC, None
Encryption Algorithms: DES, 3DES, AES, AES-CTR, NULL
Combined Mode Algorithms: AES-GCM, AES-CCM
Fragmentation and reassembly

VXLAN over IPSec

VXLAN over IPSec control TTP and offload

IP Tables Offload

Connection Tracking
Firewall Rules (Filtering, Mark ID) – Allow/Drop/Reject
OF based control path adapter for IP Tables
OF based IP Tables Datapath
NXP^® L4-L7 Extensions (Session, L3/L4 Header Validation)
NAT (SNAT and DNAT)

Benefits

Commercial-grade offload functions for time-to-market
Performance advantage by leveraging AIOP accelerators
Conserve general purpose cores for high-level functions
No need for add-on accelerators