PE340G2DBIR Intel® FM10420 Based

Dual Port Fiber 40 Gigabit Ethernet PCI Express Content Director Bypass Server Adapter Intel® FM10420 Based

Silicom’s 40 Gigabit Ethernet PCI Express content aware director Bypass server adapters is designed for servers and high-end appliances.

The Silicom content aware director server adapter is designed with an on board smart routing architecture that enables packets to be redirected or dropped based on defined rules.

The Silicom’s 40 Gigabit Ethernet content aware packet director reduces host system process since only packets that are defined to be targeted to the host systems are routed to the host; other packets can be routed to the other port or can be dropped by the content aware hardware routing architecture.

The Silicom’s 40 Gigabit Ethernet content aware packet director is targeted to network applications that needs to process, monitor or bypass packets based on defined rules. The adapter supports three main modes of operation: Content Aware Bypass, Content Aware TAP and content Aware filtering NIC.

Content Aware Bypass

Silicom’s 40 Gigabit Ethernet content aware director provides intelligent packet redirection capability where rules specify which packets are directed to the host system and which packets are directed to the other port (Bypass).

Content Aware TAP

Silicom’s 40 Gigabit Ethernet content aware director provides intelligent packet redirection capability where all packets are directed to the other port (Bypassed) and rules specify which packets are copied to the host system ( TAP).

Content Aware Filtering NIC

Silicom’s 40 Gigabit Ethernet content aware provides intelligent packet redirection capability where rules specify which packets are directed to the host or dropped.

The Silicom 40 Gigabit Ethernet PCI Express content director server adapter is based on Intel FM10420 Ethernet controller and a L3 switch router. T

he Silicom’s 40 Gigabit Ethernet PCI Express adapter is based on standard L2 driver and with the content director engine reduces CPU host system processing.

The Silicom 40 Gigabit Ethernet PCI Express content aware server adapter offers simple integration into any PCI Express X16 to 40Gigabit Network.

PE340G2DBIR Intel® FM10420 Based

Dual Port Fiber 40 Gigabit Ethernet PCI Express Content Director Bypass Server Adapter Intel® FM10420 Based

Content Aware Director:

• Provides intelligent packet redirection capability where rules specify which packets are directed to the host system and which packets are directed to the other port (Bypass)
• Provides intelligent packet redirection capability where all packets are directed to the other port (Bypassed) and rules that specify which packets are copied to the host system ( TAP)
• Provides intelligent packet filtering / drop capability where rules specify which packets are directed to the host or dropped
• Provides redirection rules that can be defined using source IP/ destination IP / Source Port / Destination Port / VLAN tuples
• Redirection and packet filtering / drop are performed by the hardware itself in wire speed and do not require any software and CPU host system power processing
• Intelligent redirect mechanism is controllable via software
• Intelligent routing mechanism is controllable via software
• Support 2x40G / QSFP+ ports
• 40G QSFP+ Ports support 40GBase-SR4 and 40GBase-LR4

Bypass / Disconnect:

• Bypass / Disconnect Ethernet ports on Power Fail, System Hangs or Software Application Hangs
• Software programmable Bypass, Disconnect or Normal Mode
• On Board Watch Dog Timer (WDT) Controller
• Software programmable time out interval
• Software Programmable WDT Enable / Disable counter
• Software programmable Bypass Capability Enable / Disable
• Software Programmable Disconnect Capability Enable / Disable
• Software Programmable mode (Bypass, Normal or Disconnect mode) at Power up
• Software Programmable mode (Bypass, Normal mode) at Power off
• Independent Bypass operation in every two ports
• Emulates standard NIC

Common Key features:

• Host Interface:
• PCI Express X16 lane
• Support PCI Express Base Specification Revision 3.0, 8GT/s, 5GT/s or 2.5GT/s

Intel FM10420 Features:

• Single-element 4MB shared memory
• L2/L3/L4/OpenFlow forwarding & ACLs
• Stateless load balancing to CPUs
• Datacenter Bridging (lossless Ethernet)
• 32K 40-bit TCAM entries
• 16K MAC & NextHop tables
• Up to 300Gbps High-bandwidth CPU interface
• 2x 50Gbps 8-lane PCIe interfaces
• Up to 2 40G (4 x 10G)
• 300ns network latency (100GbE)
• 1000nS host-network latency

LAN Features:

• 256 queues per PCIe x8 interface
• SR-IOV (64 VFs per PCIe x8 interface)
• IP/TCP/UDP checksum
• Receive side scaling (RSS)
• TCP segmentation offload (TSO/LSO)
• LEDs indicator for link/Activity

PE340G2DBIR Intel® FM10420 Based

Dual Port Fiber 40 Gigabit Ethernet PCI Express Content Director Bypass Server Adapter Intel® FM10420 Based

Functional Description

Director - Content Aware Bypass

Silicom’s 40 Gigabit Ethernet content aware director Provides intelligent packet redirection capability where rules specify which packets are directed to the host system and which packets are directed to the other port (Bypass).

Figure 1: Content Aware Bypass Functional Block Diagram

Figure 1 illustrates functional block diagram of content aware Bypass:

Figure 1 illustrates functional block diagram of content aware Bypass:
Packets received in port A and meet rule are directed to port B, other packets are directed to port C (Bypass).

Packets received in port C and meet rule are directed to port D, other packets are directed to port A (Bypass).

Director Content Awar TAP
Silicom’s 40 Gigabit Ethernet content aware director Provides intelligent packet redirection capability where all packets are directed to the other port (Bypassed) and rules specify which packets are copied to the host system (TAP).

Figure 2: Content Aware TAP Functional Block Diagram

Figure 2 illustrates functional block diagram of content aware TAP:

Packets received in port A and meet rule are directed to ports B and C (TAP), other packets are directed to port C (Bypass).

Packets received in port C and meet rule are directed to ports D and A (TAP), other packets are directed to port A (Bypass).

Director - Content Filtering NIC

Silicom’s 40 Gigabit Ethernet content aware provides intelligent packet redirection capability where rules specify which packets are directed to the host or dropped.

Figure 3: Content Aware Filtering NIC Functional Block Diagram

Figure 3 illustrates functional block diagram of content aware TAP:

Packets received in port A and meet rule, direct to port B. Packets received in port A and do not meet rule are dropped.

Packets received in port C and meet rule, direct to port D. Packets received in port C and do not meet rule are Dropt.

Director: Rules Classification and capabilities

The Redirector supports the following capabilities:

• Maximum total number of rules is 16K
• Each of the 16K rules can be defined to any port the on board multi-layer switch
• Each rule refers to incoming packet
• Rules are executed per order. First rule that matches will be executed
• Rules can be added and removed on the fly
• Each rule can include one or more classification fields. A rule match will be when all fields defined are match
• Each field can have a bit masking to check part of the classification field
• Per port statistics can be read, like packets count, errors, VLAN, and more
• Rules and action are done in wire speed at any packet size

Rules classification fields

Rules classification is done based on the first 128 bytes of the packets. The following list provides rules classification fields

• MAC address, source & destination
• IPv4 – source & destination IP
• IPv6 – source & destination IP
• L4 Port – source & destination port
• Ethernet Protocol – ethertype
• IP Protocol num
• VLAN ID tagging
• User defined fields
• DSCP – match the different services code point – the six most significant bits of the Type of Service octet (IPv4) or Traffic Class octet (IPv6).*
• IPv6 Flow Label*
• IP length*
• ISL Frame Type*
• ISL USER*
• Source & destination port range*
• VLAN priority*
• VLAN tag type*
• TCP flags*
• TOS – match Type of Service octet (IPv4) or Traffic Class octet (IPv6)*
• TTL field in a IPv4 header or Hop Limit in a IPv6 header*
• *Future SW supports

Execution per rule

The following Executions per rule are supported:

• Drop – when a rule matches the packet will be dropped
• Redirect – when a rule matches redirect the packet to the defined destination port
• Mirror – when a rule matches copy packet also to a defined destination port

Director Advanced Features:

• Port trunking between the Intel port to Intel port connected to it for load balancing between the different Intel ports
• Port trunking between the different External Intel port to the external switch connected to it for load balancing between the different external ports.
• Session balancing with L3/L4 hashing or other mechanism
• ISL (Inter Switch Link) Tagging per port can be added to the packets per configuration
• ISL Tagging can be removed and can be forward to specific port per the ISL index.
• Quality of Service support with the following features:
• Priority levels: 16 internal "switch" priorities, 8 or 16 VLAN priorities (optional use of CFI bit as an extra VLAN priority bit)
• Arbitrary mapping of ingress VLAN priority to an internal VLAN priority
• Arbitrary mapping of an internal VLAN priority to egress VLAN priority
• Arbitrary mapping of internal VLAN priority to switch priority
• Arbitrary mapping of DSCP to switch priority, configurable priority source selection.
• Scheduler: 8 traffic classes, arbitrary mapping of switch priorities to traffic class, deficit weighted round-robin or strict priority.
• Notification: Two congestion notifications can be supported;
• Virtual output queue congestion notification (VCN) and Intel proprietary backward congestion notification (FCN).
• Open Flow support (consistent with OpenFlow protocol standard)
• sFlow support
• User defined Packet transmission with two optional modes: 1. Simple mode - transmit on specific port. 2. Switched mode - where switch determines destination port/ports, or with specific information such as whether or not egress processing rules should be applied.
• Storm Control Management - Switch can support a variety storm controller. Each storm controller can be programmable to define rat, condition (like unicast ICMP frames whose TTL is at most 1), frame type (can be OR’ed), ingress & egress port ports. Actions: do nothing, drops frames to port (according to filter)

*Future SW supports

Bypass / Disconnect

Silicom’s Bypass adapter supports the following mode states: Normal/inline, Bypass/Fail-To-Wire and Disconnect modes.

Normal/Inline mode

In Normal mode, the ports are independent interfaces (see Figure 6: Normal mode, one Bypass pair is illustrated).

Figure 4: Normal Mode Functional Block Diagram

Bypass/Fail-To-Wire mode

In Bypass mode, the connections of the Ethernet network ports are disconnected from the interfaces and switched over to the other port to create a crossed connection loop-back between the Ethernet ports. The connections of the interfaces are left unconnected. (See Figure 7: one Bypass pair illustrated)

Figure 5: Bypass Mode Functional Block Diagram

Disconnect mode

In Disconnect mode, the transmit connections of the interfaces are disconnected from the ports. The switch / router connected to the adapter does not detect link partner (See Figure 8):

Figure 6: Disconnect Mode Functional Block Diagram

Bypass/Disconnect Features:
Silicom’s Bypass server adapter supports software programmable to select Normal, Bypass or Disconnect modes. Silicom’s Bypass adapters supports Disable Bypass, Disable Disconnected capabilities; hence, if those adapters receive Disable Bypass capability / Disable Disconnect commands, the adapter does not Bypass / does not Disconnect its Ethernet ports, The Disable Bypass Capabilities are reserved also after power off. This feature enables to emulate a standard NIC.

Key Features:

• All modes of operation are fully software configured with a well-defined and easy to use API
• Disable bypass/Disconnect for a standard NIC emulation and operation, retained even with power cycle
• Range of Watchdog timer timing, configurable for detecting appliance failure
• Watchdog timer reset function by application or self-reset by the product bypass driver
• Easy to read product status and product features capabilities
• Fast switching between mode with less than 10mS of transit time
• Compatible with all Silicom bypass products, one driver set and command set for all products

PE340G2DBIR Intel® FM10420 Based

Dual Port Fiber 40 Gigabit Ethernet PCI Express Content Director Bypass Server Adapter Intel® FM10420 Based

1V9