Thursday, June 9, 2016

IDC: Worldwide Security Appliance Market Continues to Grow

The total security appliance market showed positive growth in both vendor revenue and unit shipments for the first quarter of 2016 (1Q16), marking the eleventh consecutive quarter of year-over-year growth, as worldwide vendor revenues in the first quarter increased 5.5% year over year to $2.47 billion, while shipments grew 9.0% year over year to a total of 580,007 units, according to IDC's Worldwide Quarterly Security Appliance Tracker.

Some highlights for Q1 2016:

  • The UTM market generated $1.25 billion in revenues for year-over-year growth of 16.9% 
  • Intrusion Detection and Prevention (IDP) generated revenues of $372 million and 3.8% annual growth
  • The Firewall, Content Management, and Virtual Private Network (VPN) categories experienced a slow start to the year with year-over-year revenue declines of 4.2%, 6.7% and 24.2%, respectively.
  • The United States market represented 43% of the total security appliance market revenue globally and is experienced year-over-year growth of 7.3% in 1Q16. 
  • Western Europe is the second largest region with 21% of total worldwide revenues and year-over-year revenue growth of 4.3%. 
  • Asia/Pacific (excluding Japan) accounted for 18% of worldwide revenues and showed a slight decline of 0.9% compared to the same quarter of 2015.

"There has been a sharper decline than expected in many of the markets as the global economy is having an effect on the security market and shaping the growth rate to be lower than expected," said Elizabeth Corr, Research Analyst, Security Products at IDC.

Nokia to Acquire Gainspeed for Virtualized Cable Architecture

Nokia agreed to acquire Gainspeed, a start-up specializing in DAA (Distributed Access Architecture) solutions for the cable industry via its Virtual CCAP (Converged Cable Access Platform) product line. Financial terms were not disclosed.

Gainspeed's Virtual CCAP enables cable operators to increase the capacity of their existing HFC (Hybrid Fiber Coax) infrastructure and rapidly deploy new services, while simultaneously reducing space and power requirements in the headend. The solution also enables cable operators to migrate their networks to a software-driven, all-IP architecture.

Gainspeed's design eliminates the physical CCAP by leveraging SDN and NFV to distribute the CCAP’s functions to other devices and locations in the network. This centralizes routing, control and management in the data center or cloud and pushes
the physical layer, DOCSIS processing and RF modulation into the node, deep within
the access network

Gainspeed is based in Sunnyvale, California and has approximately 70 employees.

Federico Guillen, president of Nokia's Fixed Networks business group, said: "We are very excited to have Gainspeed, the technology leader in its field, joining us. Cable is one of the fastest growing areas in our fixed networks business, and we are committed to delivering a complete solution set to cable operators. Gainspeed's Virtual CCAP perfectly complements our leading fiber access solutions for cable MSOs."

  • Gainspeed is headed by Krish Padmanabhan, who previously was Senior Vice President of Products and Solutions at Harmonic Inc., where he oversaw overall strategy for its video playout and compression portfolio.
  • Gainspeed was founded in 2012 by Shlomo Rakib (previously co-founded Novafora and Terayon Communication Systems, where he invented the SCDMA technology that was the basis for DOCSIS 2.0), Jeff White (previously president of Hatteras Networks),  Mark Stalica (previously Vice President of Strategic MSO Accounts for Metaswitch Networks), and Drew Perkins (previously a co-founder at Infinera, On-Fiber Communications, Lightera Networks, FORE Systems, and InterStream).

Fortinet to Acquire AccelOps for Security Monitoring

Fortinet agreed to acquire AccelOps, a start-up based in Santa Clara, California, that specializes in network security monitoring and analytics solutions. Financial terms were not disclosed.

AccelOps’s virtual appliance software monitors security, performance and compliance in local and virtualized infrastructures, resulting in a unified view of the environment. The software discovers, analyzes and automates IT issues across multi-tenant or single networks, spanning servers, devices, storage, networks, security, applications and users.

Fortinet said the acquisition extends Fortinet’s recently announced Security Fabric strategy by enhancing network security visibility, security data analytics and threat intelligence across multi-vendor solutions. AccelOps solutions will become FortiSIEM and become part of the Fortinet Security Fabric, providing customers with greater visibility across both Fortinet and multi-vendor security solutions.

“Fortinet and AccelOps share a common vision of providing holistic, actionable security intelligence across the entire IT infrastructure. Our mission has always been to help our customers make security and compliance management as effortless and effective as possible. The synergies between AccelOps’s solutions and Fortinet’s Security Fabric vision and thought leadership will ensure that our customers are protected with the most scalable and proven global threat intelligence, security and performance analytics and compliance and control across all types of network environments with multiple security and networking vendor products,” stated Partha Bhattacharya, founder and chief technology officer, AccelOps.

Blueprint: Endpoint Visibility in the IoT

A Five-Step Action Plan for Securing the Network in the Age of IoT by Tom Kelly, CEO, AccelOps A report from BI Intelligence projects that Internet of Things (IoT) deployments will create $421 billion in economic value for cities worldwide in 2019. Cities will enjoy benefits such as improved traffic flow, a reduction in air pollution and better public safety. This is just one example of the advancements the IoT will bring to all sectors. However,...

Blueprint: Three Predictions for Network Monitoring in 2016

by Tom Kelly, CEO, AccelOps Why do armies set up look-outs all around their camps? Why do people read their horoscopes and shake magic eight-balls? Simple: they want to see what’s coming. In business, it’s incredibly helpful to be able to accurately forecast needs and set strategy. In the network security and performance arena of the business, it’s table stakes. While there’s no crystal ball that can tell us everything, one thing is certain:...

AccelOps Builds Threat Intelligence into its Actionable Security Platform

AccelOps, a start-up based in Santa Clara, California, introduced threat intelligence capabilities for its integrated IT and operational visibility platform. The existing AccelOps virtual appliance software monitors security, performance and compliance in cloud and virtualized infrastructures on a single screen. It automatically discovers, analyzes and automates IT issues in machine and big data across organizations’ data centers and cloud resources,...

Will coming 'third wave' of ARM-based processors for the data centre break Intel's monopolistic grip on this sector?

Preamble - basic facts about ARM

ARM (Advanced RISC Machine) uses reduced instruction set computing (RISC) architecture in its cores which offer relatively low power consumption, typically smaller die size, lower cost, faster clock speed and usually easier development, while Intel's market-dominant Xeon devices are complex instruction set computing (CISC) x86 processors targeted at the non-consumer workstation, server and embedded system markets. Rather than compete with Intel directly, ARM licenses its technology to other silicon companies. The biggest single and very substantial disadvantage of RISC architecture is that it cannot directly run x86 applications.
 ARM is estimated to have an 85% share of the apps processor market, a 65% share of the computer peripheral s market, a 90% share of the hard-disk and SSD market, and a 95% share of the automotive apps processor market. ARM is seeking to extend its 85% share of mobile processors and enter the data centre and networking space. Intel dominates the data centre server space and has just withdrawn from mobile space. Broadcom dominates the data centre switching space and has withdrawn from the mobile space, but may be eyeing an entrance into data centre servers with help from ARM.

ARM is a relatively small company compared to Intel whose revenue in 2015 was $55.4 billion, but ARM is growing quite fast whereas Intel revenue for the year was down around 1% on 2014. Since 2007, ARM has grown its overall market share in all of the markets in which it competes from 17% to 37% and revenue has more than tripled. Intel's market share, specifically in SC in recent years, has been roughly static in the range 15-16%.

On December 28, 2015 Intel closed its $16.7 billion acquisition of FPGA specialist Altera, whose sales in 2015 were around $1.6 billion, potentially adding around 3% to Intel's annual sales level. Because of its size, Intel's business outlook is much more dependent on total SC market growth than ARM. The global semiconductor market in 2015 was $335.2 billion, down 0.4% on the all time peak in 2014. On June 7, 2016 WSTS released its new semiconductor market forecast generated in May 2016 which forecasts the world semiconductor market to be down 2.4% in 2016 at $327 billion, with growth returning in 2017 and 2018. Intel's market share, specifically in SC in recent years, has been roughly static in the range 15-16%. Intel's Q1 2016 sales, including one full quarter of Altera, were $13.7 billion, up 7% year on year compared with $12.8 billion in Q1 2015 hinting at a slight improvement in its competitive position.

Specifically, ARM on February 10th reported full year revenue of $1,488.6 million (slightly under 3% of Intel's), up 15% from $1,292.6 million in 2014. ARM's Q4 2015 revenue was $407.9 million, up 14% YoY compared to $357.6 million, confirming a steady growth rate. This 14% trend was seen to be continuing when on April 20th ARM reported Q1/2016 revenue of $398.0 million compared with $348.2 million in Q1/2015. It reported a 2015 operating margin of 51.6%, up 1.3 points compared to 50.3% in 2014, and PBT of $511.5 million, up 24% compared to $411.3 million in 2014.

Operationally in the first quarter 2016, ARM reported 39 processor licences signed by a broad range of companies including leading SC vendors and OEMs. Target applications included mobile computing, automotive, networking infrastructure and servers, with strong demand for its most advanced technology with 8 licences signed for ARM Cortex-A technology for its high-performance and high efficiency application processors. It also noted 2 Mali multimedia processor licences signed, including licences for advanced graphics and display processors, and 4.1 billion ARM-based chips shipped, up 10% year-on-year.

New ARM-based processors aimed at the huge data centre opportunity

In recent weeks, there has been a parade of new ARM-based processors aimed at cloud data centres and network infrastructure. These 'forward-looking' product unveilings from the likes of AppliedMicro, Broadcom, Cavium and others, promise better performance and significant improvements in power efficiency over comparable Intel Xeon processors when this next generation of ARM-based processors become available late in 2016 or early 2017. The new chips license the core processor design from ARM Holdings, the British multinational semiconductor and software design company headquartered in Cambridge. The product announcements really come as no surprise, since ARM has been pursuing the market for 64-bit processors aimed at the data centre since at least 2012.

Two previous generations of ARM processors have since entered the market, and while they have seen some success in specialised applications with tier 2 OEMs such as Inventec, Gigabyte and Wistron, they have not gained enough market traction to become a mainstay of the modern data centre. For instance, AppliedMicro began sampling its first generation X-Gene 'Server on a Chip' processor in early 2013, including to HP for its Moonshot server. Despite early publicity, and a follow-up HeliX 2 embedded processor based on the ARMv8-A 64-bit architecture, Intel Xeons have kept ahead of the competition.

For 2015, ARM estimated that it captured 15% of market for processors designed for networking infrastructure, a broad category in which it includes base stations, switches, routers and servers for data centres and cloud platforms. Looking more closely at ARMv8-A based servers, ARM Holdings’ 2016 Roadshow presentation acknowledges less than a 1% market share as of the end of 2015, compared with its 85% of the mobile processing business (smartphones, tablets and laptops) and 25% share of the market for processors aimed at embedded intelligence, such automotive, industrial and other smart devices. So if the first two waves of ARM processors aimed at network infrastructure yielded a measly market share, will the third wave do any better?

The current 15% share is market reality and not the company's growth target. In its 2016 Roadshow presentation, ARM states a goal of capturing 45% of an addressable $16 billion networking infrastructure market in 2020. The company already has design wins in wireless access systems, wired access systems, aggregation/core products, security and some high-end data centres, and to push this further ARM will need to introduce new technology for physical IP, processor architecture and implementations, as well as tools and analysis to optimise SOCs for servers. Some licensees active in this market include Annapurna, AMD, AppliedMicro, Broadcom, Cavium, Marvell, NXP, and Texas Instruments. Other licensees include Altera, Avago, Freescale, HiSilicon, IBM, Qualcomm, and Xilinx.

Third wave ARM-based Solutions


On May 30th Cavium of San Jose, California announced its second generation ThunderX2 processor, which scales up to 54 cores with up to 3.0 GHz core frequency, making it a high-end, high-performance processor, for data centre workloads such as storage, network and secure compute workloads in the cloud. The ThunderX2 will offer fully out-of-order (OOO) cores, single and dual socket configurations, very high memory bandwidth, large memory capacity, integrated hardware accelerators, fully virtualised core and IO, scalable Ethernet fabric and feature rich I/O's supporting 25 Gbit/s. One variant of the chip will include Cavium's 5th generation NITROX technology with acceleration for IPSec, SSL, Anti-virus, Anti-malware, firewall and DPI. This family is optimised for secure web frontend, security appliances and cloud RAN type workloads. Similar hardware-based accelerators designed into the chip could give a performance advantage to this specialized silicon over Intel's more general purpose Xeons.

However, although the ThunderX2 announcement was accompanied by very positive generalised endorsements of Cavium's approach by a broad array of involved companies, namely AMI,  Canonical, E4, FreeBSD, Gigabyte, Inventec, Linaro, NGINX, Red Hat and SUSE, so far as is known no Tier 1 vendors have as yet committed to either the first or second generation of the product. Moreover, although Cavium has indicated that ThunderX2 will be built using a 14 nm FinFET SC process, (compared to 28 nm for the previous generation), which might seem to put it on a par with Intel's latest Xeon E5-2600 v4 (Broadwell) processor launched in March, also being built on a 14 nm process, not only will the Cavium chip not be built in volume until late 2017, while the Intel device is immediately available, but on the day of the announcement top server companies such as Dell ,Hewlett Packard Enterprises, and Lenovo were eager to make it clear they were on the ball and using the Intel chip.

The reason for such a very early announcement by Cavium further points up the difference between the two companies. Intel customers generally expect and receive regular predictable outputs from a pipeline of Intel products. They expect Intel to anticipate their needs and deliver appropriate technology upgrades regularly and on time  and it usually does. With a relatively small company like Cavium (sales in Q1 2016 $101.9 million) they need a degree of extra reassurance.

Applied Micro Circuits 

In November 2015 Applied Micro of Santa Clara, California (whose sales in 2015 were $159.3 million, and $41.1 million in its first quarter of 2016, its fifth successive quarter of growth) announced its X-Gene 3 Server-on-a-Chip, which will combine 32 high performance ARMv8-compatible CPU cores in a single socket. The device aims to deliver performance competitive with mainstream high-end Xeon E5/E7 processors in a similar TDP envelope. It will offer eight DDR4 memory channels for addressing one Tbyte of RAM, outpacing the Xeon E5 in memory bandwidth, making it well suited to hyperscale workloads such as in-memory databases, big data, machine learning, web search and HPC. X-Gene 3 is expected to sample in the second half of 2016, with production shipments in the second half of 2017.

Part 2


At the 2015 Annual Hot Chips 27 conference in August 2015 this relatively unknown Chinese start-up, located in Guangzhou surprised attendees by introducing two families of ARM-based processors for server applications: Mars, aimed at applications characterised by high performance, high volume of memory, high bandwidth memory access, high bandwidth I/O access and a requirement for large scale cache coherence; and Earth, aimed at high density computing applications requiring low cost and high power efficiency but requiring moderate performance.

Mars is a 640 sq mm chip built on a TSMC 28 nm process which operates at up to 2 GHz and draws up to 120 W with an architecture based on 8 panels, each containing 8 x Xiaomi ARMv8-based cores.

The chip is rated at 512 GFlops. According to research director Charles Zhang, the company aspires to be a leading-edge processor and ASIC maker in the Chinese IT sector and will be working on two classes of ARM-based processors - one aimed at scale-up machines, another aimed at scale-out machines used in hyperscale and cloud computing.

In the presentation at Hot Chips he cited improvements in all areas for the next generation CPU but mentioned no numbers.

According to Wikipedia, Phytium has already produced the FT-1500A chip, an ARM64 SoC which includes 16 cores of ARMv8 processor, a 32-lane PCIe host, 2 GMAC on-chip Ethernet controller and a GICv3 interrupt controller with ITS support. The 'FT' in the device name seems to stand for FeiTeng, directly linking Phytium (presumably an anglicisation) to the FeiTeng range of processors developed under Professor Xing Zuocheng of the National University of Defense Science and Technology of Changsha, Hunan Province, a top military academy and national research university. 2,400 of the previous generation chip, the FeiTeng1000, are used in China's Tianhe2 Supercomputer in the Chinese National Super Computer Center in Guangzhou, which with 3.12 million cores and a capability of 33.86 petaflop/s was, as of July 2015, rated by the Top 500 HPC listing organisation as the world's fastest supercomputer.

While the Mars chip in its present form does not have a sufficient edge to make much of an impact on Intel's current position, it is necessary to recognise that as part of its 13th 5 Year Plan approved March 2016 the Chinese government committed $100 -$150 billion in public and private funds towards the objective of catching up technologically with the world’s leading firms by 2030 in the design, fabrication and packaging of chips, so it can cease being dependent on foreign supplies. In 2015, the government also announced that by 2025 it wanted local firms to be producing 70% of the chips consumed by Chinese industry. According to McKinsey, in 2015 only around 12% of the chips used in Chinese production were designed by local fabless Chinese companies, so there is a long way to go.

Despite the probably almost unlimited funding available, Chinese attempts to buy their way into the global industry have met serious political resistance in both the U.S. and Taiwan. However, that seems to mean that existing domestic semiconductor companies such as Phytium and market leader HiSilicon will for the next few years be able to scale up research, development and production facilities to whatever level they wish. Moreover, there are domestic security limitations on Intel's exporting its highest level technology to China, which possibly opens up some opportunities for Phytium and following some bad publicity about international security practices China is likely to establish increasingly tighter controls on the designs and designers of intelligent components used in the country's mission-critical systems, which would strongly favour local design and production.
(NB: An important point in this context is that on January 16th 2016 it was announced that Qualcomm and the provincial government of the southern Chinese province of Guizhou had established a $280 million capitalised joint venture 55% owned by the province and 45% by Qualcomm to focus on the design development and sale of advanced chipset technology in China. The population of Guizhou is around 35 million and its GDP in 2014 $151 billion - higher than Hungary, the Ukraine or Morocco.)

Industry partnerships and projects to open the market 

To accelerate its entry into network infrastructure, ARM is working with a number of open source projects, including the OpenDataPlane project. This initiative aims to produce an open-source, cross-platform set of application programming interfaces (APIs) for the networking data plane. Other supporters include Broadcom, Cavium, Cisco, Ericsson, Freescale, MontaVista, Nokia, Wind, Texas Instruments and ZTE.

In May, ARM announced its participation in an industry effort to develop a specification for a new Cache Coherent Interconnect for Accelerators (CCIX). This interconnect technology specification will ensure that processors using different instruction set architectures (ISA) can coherently share data with accelerators and enable efficient heterogeneous computing, significantly improving compute efficiency for servers running data centre workloads. Other companies supporting this include AMD, Huawei, IBM, Mellanox, Qualcomm and Xilinx.

Also in March 2016, ARM and TSMC announced a multi-year agreement to collaborate on a 7 nm FinFET process technology, which includes a design solution for future low-power, high-performance compute SoCs. This deal expands the long-term foundry partnership beyond mobile devices to include next-generation networks and data centres. It also sets the stage for possibly a fourth-wave of ARM-based processors aimed at the data centre.

A further opportunity for ARM may be China, which has been known to encourage IT solutions developed by Chinese firms as a matter of national security policy, especially in preference to Qualcomm, Intel, Microsoft and other dominant U.S. players. In April 2016, a China-based Green Computing Consortium (GCC) was formed with the goal of establishing a deep ecosystem in China for big data, enterprise and cloud computing platforms based on the ARM architecture. Under this consortium, ARM is working with Alibaba, Baidu, China National Software and Service, Dell. Guizhou Huaxintong, the joint venture company of Guizhou and Qualcomm Hewlett Packard Enterprise/H3C (HPE), Lenovo and Phytium.

RISC vs CISC battle continues 

Finally, one should note that Intel once flirted with RISC architecture. Ten years ago Intel decided to sell off its nascent Xscale communications and applications processing division, which was developing solutions for the then new category of smartphones and personal digital assistants. The RISC-based Intel Xscale technology had found early success with then super start Research in Motion (RIM), which was planning to use an Intel PXA9xx communication processor codenamed Hermon in a new Blackberry 8700 device. Another Intel PXA27x applications processor, codenamed Bulverde, had prime design wins in the Palm Treo smart phone, the Motorola Q and other devices of the day (the Xscale mobile processor group sale occurred six months ahead of Steve Jobs' unveiling of the iPhone in January 2007).

Marvell was the purchaser of this seemingly successful Intel division, paying $600 million in cash plus the assumption of some liabilities. Some 1,400 employees transferred from Intel to Marvell and there was the possibility of Intel becoming a supplier of ARM-based mobile processors. The strategic reasoning for the sale given by Intel at the time was so that it could focus its investments on its core businesses, including high-performance, low-power Intel Architecture-based processors and emerging technologies for mobile computing, including WiFi and WiMAX. WiMAX struggled for years in the vain hope of challenging LTE as the future of mobile broadband. The bet on x86 architecture for mobile devices did not turn out so well either, with Intel only recently deciding to give up altogether on x86 mobile processors.

As the third wave of ARM-based processors for servers and network infrastructure comes to market, ARM seems more patient than its larger rival. Its plan is than an army of licensees will develop specialised solutions for specific data centre workflows. There is also hope that its 85% share of mobile processors can be leveraged to accelerate its entrance into data centre infrastructure.


There is already huge discussion in business literature about how to dislodge an incumbent, but it is to be observed that any such advice cannot be that good since senior U.S. ICT companies like Microsoft, Intel, Cisco, HP and IBM all look capable of hanging on for at least a decade and probably more, even though they show many signs of weakness and in all cases difficulty in renewing themselves internally. However, looking at it from the challenger point of view there are no easy options either.

The problem that a company like ARM and its large ecosystem has in dislodging an incumbent vendor, particularly one as big, rich and savvy as Intel, is that the challenger's products do not merely have to be better than those of the market leader but they have to be so much better that users of the existing product see it as a 'no brainer' to make the necessary changes in design. What that no-brainer advantage premium might actually be in percentage or operational terms varies depending on circumstances, such as the absolute size of the business involved, average design cycle, the immediate usually substantial onetime costs of making the change, and the longer term drawbacks of moving from a well-proven business relationship to a probably less certain one.

However, on the evidence that percentage is clearly quite large and difficult to achieve against an adversary as competent as Intel. Moreover, unless the advantage involved is so unique that it is unmatchable the incumbent usually still has 'last-mover' advantage, i.e. ,the time and space to make a carefully calculated counteroffer which may not necessarily match the challenger's offer but reduce it below the no brainer level, which would force the customer to make a change. So it is much too early to bet against Intel surviving most of the assaults on its data centre business fortress.

ADVA Backs DIMENSION Project for Lasers on Silicon

ADVA Optical Networking announced its support and participation in the Directly Modulated Lasers on Silicon (DIMENSION) project, which aims to create a platform for single-chip electro-optical integration. The research involves lasers built with active III-V materials embedded into silicon photonics chips.

The four-year DIMENSION project is funded by the European Union’s Horizon 2020 research and innovation program and coordinated by Dresden University of Technology with participation from partners in Germany, Switzerland, Greece and the UK. The two research centers included are Innovations for High Performance Microelectronics and Athens Information Technology. The large industry partners are ADVA Optical Networking, Optocap and IBM Research – Zurich.

ADVA said the DIMENSION project could lead to cost-efficient components needed to optimize data center interconnect (DCI) transport and create the next generation of data centers.

“Improving efficiency in the DCI couldn’t be more vital given the increasing demand for cloud computing and the growing scale of the internet of things,”commented Michael Eiselt, director, advanced technology, ADVA Optical Networking. “Much of our recent innovation has centered on enhancing the DCI, such as our FSP 3000 CloudConnect™ solution. By integrating the three distinct technologies of silicon photonics, electronics and active photonics, we’re giving data centers what they need to meet tomorrow’s needs. It’s great to be working closely with other European companies and institutions to make this vital breakthrough a reality. It also provides fantastic opportunities for university students who get to be at the forefront of innovation and help make a significant impact on the industry.”

Coriant Brings a New IP/MPLS Router for the Metro Edge

Coriant introduced a compact IP/MPLS routing optimized for the metro edge and pre-aggregation networks.

The Coriant 8625 Smart Router, which is packaged in a compact and power-efficient form factor, is designed for the delivery of consumer and business services in a broad range of mobile and fixed network applications, including IPTV distribution, mobile gateway, and LTE/LTE-A and 5G-optimized backhaul. The router is designed to scale up to 1 Tbps of capacity (full duplex), and in its initial release supports capacity of up to 400 Gbps and dense IP/Ethernet service interfaces (1G, 10G). The 8625 Smart Router supports a mix of IP and Ethernet services, such as IP VPNs, VPLS, and Ethernet pseudowires, with significant buffering capacity for bursty data applications as well as advanced traffic management features with hierarchical QoS support for flexible end-user service definition. It also includes integrated synchronization capabilities optimized for LTE/LTE-A backhaul applications and emerging 5G network architectures, including IEEE1588v2 and Synchronous Ethernet.

The rollout includes a converged IP-Optical offering – the Coriant 8625-O – that combines Coriant's suite of IP/MPLS routing features with pluggable optical layer flexibility and cost efficiencies.

"As end-user mobile and cloud applications drive ever-increasing capacity demands in access and aggregation networks, operators face the ongoing challenge of cost-efficiently scaling network infrastructure without sacrificing service performance," said Mikko Hannula, Director of Product Management, Coriant. "The 8625 is an ideal solution that meets the logical scalability and low latency transport requirements of evolving aggregation applications, while providing the operational efficiencies and service agility of SDN programmability and network slicing to cater to the different requirements of heterogeneous services."

Nokia Supplies IP/MPLS + DWDM for Swissgrid

Nokia supplied an IP/MPLS network overlaid on an optical network to Swiss electricity transmission system operator Swissgrid for the management of its electrical grid, which has a length of 6,700 km covering 140 substations. The "Grid Control Network" additionally interconnects power plants, data centers and offices.

In a turnkey project, Nokia implemented two IP/MPLS -based networks, one an operational network and the other a business communications network. They are both overlaid on an encrypted DWDM and Coarse Wavelength Division Multiplex (CWDM) network, also from Nokia. The IP/MPLS network features Nokia's 7705 Service Aggregation Router portfolio, with features tailored to support critical applications required by utilities as well as the 7750 Service Router portfolio. The xWDM network layer, based on the Nokia 1830 Photonic Service Switch, provides optical intrusion detection and on-the-fly low latency wavelength encryption for the operational and business communications network. This means that potential physical intrusions on the fiber cable can be detected and located. In case of an intrusion, sensitive data are nevertheless protected through embedded optical layer encryption (AES-256).

Nokia said its solution is supporting mission-critical operational services such as Supervisory Control and Data Acquisition (SCADA) systems, Teleprotection, video surveillance via closed-circuit TV (CCTV), site access control and intrusion detection. This will allow Swissgrid to maintain the highest level of reliability, safety and security across the entire grid. The network is also enabling business communications between electricity substations and Swissgrid locations for tasks such as office local area network (LAN) and voice over IP (VoIP) in a highly secure way.

When fully deployed in partner sites outside of Switzerland in 2016, the "Grid Control Network" will be the key element in the exchange of electricity between Swissgrid's network in Switzerland and sites in Germany, Austria, Liechtenstein, Italy and France.

Intelsat 31 Successfully Launched

Intelsat 31 was successfully launched aboard an International Launch Services (ILS) Proton Breeze M rocket from the Baikonur Cosmodrome in Kazakhstan.

Intelsat 31 is a 20-kilowatt class Ku-and C-band satellite built by Space Systems Loral (SSL). The Ku-band payload, known as DLA-2, is designed to provide redundancy for DIRECTV Latin America’s distribution services in South America and the Caribbean. The C-band portion enhances Intelsat’s existing C-band service infrastructure serving Latin America.

Wednesday, June 8, 2016

HPE Expands its Cloud Portfolio

Hewlett Packard Enterprise rolled out a set of major updates to its cloud portfolio, including:

  • HPE Helion Cloud Suite, a new software suite enabling customers to deliver and manage their full spectrum of applications -- from traditional, virtualized, cloud native and containers -- across a broad range of infrastructure environments. HPE Helion Cloud Suite includes full-stack automation to enable rapid delivery of IT services and applications, and provides a common simplified, self-service storefront for IT and developers. It also includes a complete development environment supporting DevOps processes for traditional and cloud-native applications.
  • HPE Helion CloudSystem 10, an engineered hardware and software solution to build and rapidly deploy an enterprise grade cloud environment for a full range of workloads and offering a deep integration with HPE OneView 3.0 for automatic provisioning of cloud resources from bare metal infrastructure. It delivers hosting, automation and orchestration of traditional and cloud-native workloads. This pre-integrated solution, brings together HPE hardware, storage, networking, software and services into one package.
  • HPE Helion Stackato 4.0, a complete and open application development platform-as-a-service (PaaS) solution, powered by Cloud Foundry, designed to speed the delivery of cloud native applications.
  • HPE Cloudline 3100 Server, offering industry leading economics for service providers. The CL3100 meets cloud service providers' dense storage requirements for Hadoop/Cassandra/compute workloads. The CL3100 (1U) storage server is 75 percent smaller than the CL5200 storage server (4U), requiring a smaller footprint.
  • New HPE Technology Services offerings for IT transformation and workload migration

"No enterprise has a one size fits all approach to cloud -- every customer wants solutions that help them drive their business faster and cut costs across their full spectrum of applications," said Bill Hilf, senior vice president and general manager, HPE Cloud. "Organizations require their own right mix of traditional IT, private, managed and public clouds and the flexibility to support applications spanning different technologies, architectures and delivery models. The HPE Helion portfolio gives customers a simple, powerful set of options, offering the breadth and coverage they need."

IEEE SDN and EIT Digital Plan 5G Open Testbed Community

A new Open Testbed Community (OTC) aimed at stimulating 5G innovation is getting underway with the backing of IEEE Software Defined Networks (IEEE SDN), a cross-society IEEE worldwide program addressing the main techno-economic aspects concerning SDN and Network Functions Virtualization (NFV), and EIT Digital, the leading European digital innovation and entrepreneurial education organization.

The organizers hope the testing will spur important work on performance, orchestration and validation. This is an open initiative, and all stakeholders are encouraged to help shape this important work. A goal of this work will be to set clear, achievable deliverables in the spirit of agile software development.

Roberto Minerva of Telecom Italia, the Chairman of the workshop stated: “We estimate that the combination of these new Open Federated Testbeds and the IEEE Testbed Catalog will result in a 50% reduction in the time to test network functions, applications, services and even new, disruptive business models.”

Marko Turpeinen of EIT Digital’s Silicon Valley Hub said: “EU-USA collaboration on the future of networks and 5G paves the way for a host of multi-lateral initiatives with industry, academic research and innovators on a wide range of key technology challenges. We look forward to engage fully on this cooperation path with IEEE.”

Progress for 25, 50 and 100G Ethernet

The 2550100 Alliance, an industry group working together to bring solutions to market based on new 25, 50 and 100Gb Ethernet technology, announced the following six milestones:

  1. Dell became the first company with general availability of 25GbE solutions spanning servers and networks. Dell will be marketing their PowerEdge servers with QLogic 25GbE adapters and Dell Z9100-ON top-of-rack switches,
  2. The alliance completed its first SolutionFest on April 27 with the participation of Cumulus, Dell, Finisar, Ixia, Kaminario, QLogic, Teledyne LeCroy and Veeam. The event yielded 40 reference architectures. 
  3. Three companies (Ixia, QLogic and Teledyne LeCroy) have opened  2550100 Solution Labs. 
  4. In only one year since its inception, membership in the 2550100 Alliance has grown to over 140 companies.
  5. The alliance has become a global community with members in North America, Europe and Asia.
  6. Crowd-sourced reference material from members and non-members is now available to industry watchers at

“The new generation of 25, 50 and 100 Gb Ethernet technology bolsters enterprise performance and workload management required by hyperscale, cloud service providers and high performance computing,” said Ravi Pendekanti, Vice President of Server Product Management at Dell. “Proven reference architectures, or blueprints, are helping speed the pervasive adoption of 25GbE technology. Regardless of ecosystem, customers now have a clear path to designing and deploying I/O intensive computing environments, an essential step in building a future-ready data center.”

Embotics Raises $12 Million for Multi-Cloud Software

Embotics, a start-up based in Ottawa, raised $12.1 million for its multi-cloud management software for public and private cloud environments.

The Embotics vCommander integrates into private, public or hybrid infrastructure to empower enterprises and service providers to deliver ITaaS, intelligent automation and enhanced IT governance and control, without locking them into a single platform.

The funding came from Arrowroot Capital.

“We are thrilled to partner with Arrowroot to support our objective of creating the world’s leading cloud management software company,” said Michael L. Torto, CEO of Embotics. “We continue to execute on our company’s mission of delivering the easiest and most powerful multi-cloud management solutions while driving down operational costs and providing intelligent IT automation and controls for our customers. The investment capital comes at a perfect time to help us step on the gas and speed our growth.”

Midokura Secures $20 Million for Network Abstraction

Midokura announced $20.4 million in Series B funding for its software network virtualization solutions.

Midokura Enterprise MidoNet (MEM)  technology offers an intelligent, software-based network abstraction layer between the hosts and the physical network, thereby decoupling the IaaS cloud from the network hardware.

The Series B funding participation came from Japanese Fintech company Simplex Inc., and existing investors Innovation Network Corporation of Japan (INCJ) and Allen Miner, a member of Midokura’s board of directors. The new funding brings Midokura’s total investment to over $44 million to date.

“Midokura aims to fundamentally transform and automate networking for any public, private or hybrid cloud and container deployment. We are delighted to have the support of our investors in our $20 million Series B funding round, and are poised to build upon our success,” said Dan Dumitriu, co-founder and CEO of Midokura. “We look forward to further developing our globally adopted MEM network virtualization technology to support the world’s appetite for microservices and IoT connected devices, as well as growing our team, strategic business partnerships and valuable channel alliances.”

Solarwinds Brings Visibility in Hybrid IT

SolarWinds release a major update to its flagship Network Performance Monitor (NPM) tool that now gives network administrators the hybrid IT visual insights and analysis needed for visibility into the performance of services across not only the networks they own—but those of their service providers and cloud vendors as well.

Specifically, SolarWinds NPM 12 now features NetPath and Network Insight, providing the ability to view the performance details of and pinpoint bottlenecks on all the networks connecting critical services and applications, whether they be on-premises or in the cloud.

The SolarWinds NPM 12 network monitoring software visually maps hybrid network paths alongside on-premises data. For example, NetPath gives IT professionals whose organizations use cloud-based applications such as Salesforce® the ability to identify the exact location of a performance issue—whether on the internal LAN, with a WAN provider or on the cloud application vendor’s own network—and provides actionable insights for resolution. Specific NetPath features include:

  • Dynamic and visual hop-by-hop analysis of critical paths and devices along the entire network delivery path—on-premises, in the cloud or across hybrid IT environments.
  • Specific, actionable information to resolve network issues regardless of network ownership.
  • Automatic and dynamic thresholds to identify unhealthy critical paths and network nodes, providing an estimated 50 percent faster time to resolution.
  • Visualized critical path performance over time for historical views of network latency.
  • Identification of device configuration changes along critical paths when integrated with SolarWinds Network Configuration Manager.
  • Immediate insight into the traffic travelling across flow-enabled devices impacting network performance when integrated with SolarWinds NetFlow Traffic Analyzer.

“Applications, whether on-premises or in the cloud, are the heart of business, but they’re useless without the networks that connect them to end users,” said Christoph Pfister, executive vice president of products, SolarWinds. “Until now, the capabilities to monitor the performance of those networks regardless of ownership were impossible within a single tool—traceroute tools are typically blocked from accessing service provider networks, and cloud monitoring tools don’t have adequate visibility into on-premises infrastructure performance. With NetPath and Network Insight, SolarWinds NPM 12 is delivering the dynamic visibility and actionable insights IT professionals need to effectively manage all the networks impacting the applications their organizations rely on in a hybrid IT world—every node, every path, every network.”

Skyport Appoints Kelly Seelig as CMO

Skyport Systems, a start-up offering secure infrastructure solutions, has appointed Kelly Seelig to the position of chief marketing officer (CMO).

Previously, Seelig served as vice president of marketing and communications for BlueJeans Network and as senior vice president of global marketing for BlueSnap. She formerly held marketing positions at two other notable Silicon Valley startups, including cleantech company Bloom Energy.

Skyport Raises $30 Million from GV and Cisco

Skyport Systems announced a $30 million round of funding led by GV (formerly known as Google Ventures), with participation from Cisco Investments, Thomvest Ventures, Northgate Capital and InstantScale, as well as existing investors Index Ventures, Sutter Hill Ventures and Intel Capital. This Series C round brings total Skyport funding to $67 million. Skyport, which is based in Mountain View, California, specializes in secure infrastructure for protecting...

Video: Apps, Virtualization, Security and the Cloud

Art Gilliland, CEO of Skyport Systems, discusses Application, Virtualization, Security and the Cloud at RSA 2016. When you think about isolating applications or workloads, you want to be able to put security around them. Virtualization gives you a compartment to do that. But companies really need to think about how to manage those environments. Skyport addresses this challenge by bringing the new security perimeter all the way down to the application. YouTube:...

Skyport Offers Hardened Servers for Microsoft Active Directory.

Skyport Systems announced a turnkey solution to deliver a hardened implementation of Microsoft Active Directory. Through a partnership with Ascent Solutions, Skyport SkySecure delivers bundles for data center Active Directory production forests, highly secure ‘Red Forest’ administrative zones and cloud access DMZ authentication services.  Skyport said this provides a clean source computing platform with secure boot and ongoing malware and rootkit...

Skyport Names Art Gilliland as CEO

Skyport Systems, a start-up offering "hyper-secured" servers, announced the appointment of Art Gilliland to the position of CEO. Gilliland most recently served as senior vice president and general manager of enterprise security at Hewlett-Packard. Prior to that, he held a number of top management positions at Symantec, including senior vice president and general manager of the Information Security Group. He earlier served as vice president of products...

Tuesday, June 7, 2016

Cisco: 22% CAGR Growth in Global IP Traffic from 2015-2020

Global IP traffic will nearly triple at a compound annual growth rate (CAGR) of 22 percent over the next five years as more than a billion new Internet users come online and new applications take hold, according to the Cisco Visual Networking Index (VNI) Complete Forecast for 2015 to 2020.

Some highlights:

  • Globally, M2M connections are calculated to grow nearly three-fold from 4.9 billion in 2015 to 12.2 billion by 2020, representing nearly half (46 percent) of total connected devices.    
  • Global IP traffic is expected to reach 194.4 exabytes per month by 2020, up from 72.5 exabytes per month in 2015. The global annual run rate will reach 2.3 zettabytes by 2020—up from 870 exabytes in 2015.
  • Global broadband speeds will nearly double from 24.7 Mbps in 2015 to 47.7 Mbps by 2020.
  • By 2020, 71 percent of total IP traffic will originate with non-PC devices including tablets, smartphones, and televisions, compared to 47 percent in 2015. 
  • By 2020, smartphones will generate 30 percent of total IP traffic, while PC’s total IP traffic contribution will fall to 29 percent.
  • Internet video will increase four-fold between 2015 and 2020.
  • Online gaming will be the fastest growing residential Internet service, growing from 1.1 billion users in 2015 to 1.4 billion users by 2020.
  • In 2015, Wi-Fi and mobile-connected devices generated 62 percent of Internet traffic (Wi-Fi: 55 percent; cellular: 7 percent; fixed: 38 percent). By 2020, Wi-Fi and mobile-connected devices will generate 78 percent of Internet traffic (Wi-Fi: 59 percent; cellular: 19 percent; fixed: 22 percent).

Cisco has been publishing its annual Cisco Visual Networking Index since 2006.  Highlights of previous forecasts can be found here:

GSA: Global LTE Subscribers Top 1.29 Billion

The number of LTE subscribers worldwide exceeded 1.29 billion as of the end of Q1 2016, according to GSA, the Global mobile Suppliers Association, and based on data from Ovum.

Alan Hadden, Vice President, GSA said: “LTE subscriptions were signed up during Q1 2016 at an average of 2 million per day and the rate is accelerating. LTE is now connecting over 1 in 6 mobile subscribers worldwide (17.4%).”

Some highlights:

  • LTE gained 182 million connections in Q1 2016, almost 4 times faster than 3G/HSPA systems. 
  • 3G/HSPA subscriptions grew by 48 million while GSM subscriptions fell by 120 million in the same quarter. 
  • The number of LTE and LTE-Advanced subscriptions is expected to pass the 3G/WCDMA-HSPA global total in 2020, and possibly sooner. 
  • Over 645 million LTE subscriptions worldwide were gained during the past year, representing 100% annual growth.
  • The Asia region, with over 734 million LTE subscriptions, further grew its share of global LTE subscriptions quarter on quarter to reach 56.9%. 
  • By March 2016 China had passed 511 million LTE subscriptions, adding 96.3 million in the quarter. North America remains the second largest LTE market with 253 million, though its share of the world market further declined 2.6% in the quarter to 19.6% of the global total. The European share of the global total is 14%.
  • 503 operators have commercially launched LTE systems in 167 countries, according to GSA data announced at the end of May 2016. 
  • Around 25% of LTE operators have commercially launched LTE-Advanced service including several LTE operators who are now introducing LTE-Advanced Pro technologies, sometimes referred to as 4.5G, which is established as a major industry trend in 2016. LTE-Advanced Pro systems can support peak downlink speeds up to 1 Gbps and beyond.

Verizon Picks Radisys FlowEngine

Verizon has selected Radisys’ FlowEngine Intelligent Traffic Distribution System for its its SDN-enabled service delivery platform. In its financial reporting, Radisys had previously disclosed the contract to supply its FlowEngine to a tier-one, North American operator.

Radisys’ FlowEngine, which is available on the company's TDE-1000, TDE-500 and TDE-200 platforms, and as a virtualized network function, delivers high performance IP packet classification and flow-based intelligent load balancing for distributing up to 1.2 Tbps of aggregate data traffic across third-party compute server platforms hosting Virtualized Network Functions (VNFs). This enables service providers to support millions of concurrent subscribers and flows.

“With the improved flexibility and programmability, we can accelerate introduction of new services that have large and small traffic flows, including cloud-based applications, video optimization and IoT,” said Damascene Joachimpillai, director, Internet Services Architecture, Verizon Labs. “Radisys’ FlowEngine technology will help us deploy a cost-effective, intelligent front end traffic distributor that normalizes traffic at a single point in the network for high throughput and low latency.”

Radisys said the FlowEngine’s intelligent load balancing and support for open control interfaces, such as the IETF ForCES architecture and ONF OpenFlow, allow real-time policies to be introduced dynamically and programmatically into the network. Certified interoperable with a number of third-party SDN controllers, including Mojatatu Networks’ MojaNET, FlowEngine allows for independent scale and flexibility of network elements by decoupling the control plane from data plane forwarding.

“Our FlowEngine products have been built from the ground up to enable service agility at scale without compromising performance,” said Bryan Sadowski, vice president of FlowEngine Product Marketing, Radisys. “By embracing the SDN disaggregated network model and industry standard control interfaces as well as working with innovative companies like Mojatatu Networks, we help mobile and cable/MSO service providers drive intelligence to the subscriber level, allowing millions of flows to be accessed and enabled through the network in real-time. We worked closely with Verizon on this technology and are excited to be chosen for their programmable edge router network transformation project.”

Video: Building Scalable SDN and NFV Deployments with Radisys’ FlowEngine

Key members of the Radisys FlowEngine team: Bryan Sadowski, VP of FlowEngine Marketing; Andrew Alleman, CTO; and Joseph Sulistyo, Director – Product Strategy and Management describe how the FlowEngine allows operators to innovate and deliver new services with agility and speed.

Symantec Debuts Automotive Anomaly Detection

Symantec is launching a new security product aimed at protecting automobiles from zero-day attacks. The idea is to leverage machine learning to provide passive in-vehicle security analytics that monitor all Controller Area Network (CAN) bus traffic without disrupting vehicle operations, learn what normal behavior is and flag anomalous activity that may indicate an attack.

Key benefits of Symantec Anomaly Detection for Automotive include:

  • Learning the vehicle’s behavior in a deeper, more precise way, enabling automakers to see previously unseen attacks.
  • Automatically prioritizing incidents based on perceived criticality and risk.
  • Automatically detecting anomalies without requiring manufacturers to set rules or create policies.
  • Using minimal memory and CPU power with an analytics solution built from the ground up for vehicles.

“Automotive security threats have gone from theory to reality,” said Shankar Somasundaram, senior director of product management and engineering at Symantec. “Symantec is bringing the world’s most comprehensive portfolio of security technologies to the car. The infrastructure and technology that already helps protect billions of devices and trillions of dollars now protects the car. We’re building long-term comprehensive security all while delivering ground breaking protection for cars today.”

HPE and Docker Announce Alliance

Hewlett Packard Enterprise (HPE) announced a strategic alliance with Docker covering sales, go-to-market, engineering, support, services and knowledge sharing for enterprise data center solutions.

Specifically, HPE is launching a Docker ready server program, which ensures HPE servers are bundled with Docker Engine and support.

"In order to survive and thrive in the idea economy, companies must transform the IT experience so that lines of business and developers can innovate faster, smarter and fearlessly," said Antonio Neri, executive vice president and general manager, Enterprise Group, Hewlett Packard Enterprise. "Hewlett Packard Enterprise is innovating across its entire datacenter portfolio to help customers with that transformation. Together with Docker, we are making it easier for IT to deploy and manage containers, while giving organizations solutions that optimize their investments and power a new generation of applications that are the business."
"The default availability of Docker's technology on every HPE server and HPE's hyper-converged platform enables enterprises to take advantage of the benefits of containerization while leveraging their investments in existing systems and process," said Ben Golub, CEO of Docker. "Having a strategic alliance that starts with Docker Engine but extends to include our commercial end-to-end platform, Docker Datacenter, provides HPE customers with a comprehensive solution that covers all of their requirements over time. Enterprises leveraging this joint solution can achieve immediate efficiencies while focusing on existing applications, which can include a 20X optimization on their infrastructure, while shipping their applications 13X faster."