HyperScan

Home > Products > HyperScan

HyperScan is a pattern matching engine that performs Deep Packet Inspection (DPI) and Regular Expression (Regex) matching on network traffic. Supporting millions of simultaneous patterns and matches concurrently, this high-speed software engine uses advanced knowledge of CPU caches and SIMD instructions sets to achieve up to 30Gbps of content scanning performance. HyperScan is also optimized to keep the relevant data in L1 and L2 cache to ensure maximum operational efficiency.

HyperScan is an easy to integrate software engine intended for networking and security products (appliance, server blades, switches, routers etc) that are required to perform content inspection. Technical documentation relating to integration and testing is available for all qualified customers interested in evaluating the product.

What's Unique About HyperScan

HyperScan is the fastest and most comprehensive pattern matching and acceleration software library of it’s kind. In addition to serving as a complete drop-in replacement to libPCRE (a widely used matcher for Perl-compatible regular expressions), HyperScan provides the following unique differentiators:

• Up to 663X faster than libCPRE even on extremely complex patterns
• Low latency performance, especially compared to hardware pattern matchers
• Better scanning algorithms - underlying architecture and technology is significantly better than published state-of-the-art literature
• Multicore CPU ready and highly scalable (low-end to high-end)
• Very easy to integrate and portable
• Utilizes advanced compilation technology to ensure small memory footprint for large signature databases
• Supports streaming
  • Allows matching across multiple data writes to a stream
  • Needs only a small, constant-sized stream record.
• Robust and Expressive
  • Can use a wide range of regular expression constructs (libpcre syntax).
  • No 'combinatorial explosion', no backtracking.
• Very easy to Integrate and Portable
  • Works on 32-bit and 64-bit systems
  • OS independent
  • Operates on multiple CPU architectures: Intel, Cavium/MIPS, RMI/MIPS

HyperScan Performance

HyperScan is tested and benchmarked using a wide range of signatures (patterns) extending from widely used open source databases to signatures to tier-1 vendors (IPS, AV, Content Filtering). The following diagram shows some of these results on a variety of platforms and core numbers, to demonstrate the linear scalability of the HyperScan solution.