Click here to learn
about this Sponsor:
Home  |  News  |  Articles  |  Polls  |  Forum

Keywords: Match:
Giant firewall runs Linux
Oct. 30, 2007

Crossbeam Systems has started shipping a massive chassis-style, "unified threat management" (UTM) system based on an open Linux OS. The X-Series UTM server runs the company's Linux-based "XOS" OS, and targets highly scalable firewalls and other security applications for large data centers and service providers.

Spread the word:
digg this story
The X-Series UTM competes with high-end UTM systems such as Juniper Networks's SSG, but is more open, thanks to a Linux-based OS, Crossbeam says. The company's "XOS" Linux implementation is claimed capable of "seamlessly" unifying the resources of up to 100 separate processing cores spread out over up to 14 blades, enabling admins to tune available resources for optimal processing of specific individual traffic streams.

There appear to be three X-Series models, including a half-size 7-slot X45 model, a full 14-slot X40 model, and a 14-slot X80 model with optional 48-volt power supply (typical of telecom carrier infrastructure).


Crossbeam X45, X80, and X40 models

Each X-Series chassis can be populated with various mixes of control, data, and application processing blades, in order to achieve the desired performance. The application processing blades can be configured singly or in groups to provide services such as XML transformations, firewalling, content filtering, IDS (intrusion detection), URL filtering, AV (audiovisual) proxy serving, and so on.


Crossbeam Xseries architecture

The X-Series blades include:
  • NPM-8600 -- network processor module based on 64-bit MIPS cores and FPGA-based NPUs (network processor units); said to support up to eight 10Gbps or 40 1Gbps Ethernet interfaces

  • APM-8600 � application processor module based on Intel Xeon processors

  • CPM-8600 � control processor module based on Intel Xeon processors, with support for dual SATA drives in a RAID configuration
The X-Series devices are managed via a web browser interface served up by the control module. The interface offers a "virtual representation" of the system, as shown in the screenshot below.


Crossbeam XSeries control interface

XOS is described as a "hardened" version of Linux that can run from disk or flash. It appears to use a proprietary IPC (interprocess communications) protocol called "X-Stream" (no pun intended, we're sure). There's also some kind of virtualization layer aimed at abstracting applications, interfaces, and networks.

According to Crossbeam, the 8600 enables huge costs savings from consolidating smaller content security farms. It also enables data centers to seamlessly integrate combinations of Layer 2 transparent and Layer 3 proxied or terminating applications, helping to simplify troubleshooting and reduce "appliance sprawl." Its RAID-mirrored on-board storage and separately switched high-speed control plane are ideal, says Crossbeam, for content and other Web-based applications that need both local- and off-box network storage. Latency as low as fifty microseconds is touted as adequte for VoIP application processing. The company boasts support for "all major network security categories," including firewalls, VPNs, content filtering, and Web application protection software such as malware scanning.

Marketing VP Throop Wilder stated, "Crossbeam continues to provide the only open, enterprise-class security platform."

Availability

The 8600 X-Series is available immediately. Pricing was not disclosed.



Related Stories:


(Click here for further information)


7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.

4 Legal Reasons to Control Internet Access
The Internet is obviously a valuable resource for many organizations. However, many are exposed to legal liability concerns because they fail to control Internet access. Learn if you're safe in this white paper.

Rapidly Resolve J2EE Application Problems
Whether you are in the process of building J2EE applications or have J2EE applications already running in production, you must ensure that they deliver the expected ROI. Learn how in this white paper.

Load Testing 2.0 for Web 2.0
There are many unknowns in stress testing Web 2.0 applications. Find out how to test the performance of Web 2.0 in this white paper.

Build Better Games Online
For the game infrastructure providers, life is complex. Making money from games has become more complicated. Why? Find out in this white paper.

Building a Virtual Infrastructure from Servers to Storage
This white paper discusses the virtual storage solutions that reduce cost, increase storage utilization, and address the challenges of backing up and restoring Server environments.

Gaining Faster Wireless Connections with WiMAX
Welcome to what is quickly becoming the hyperconnected world where anything that would benefit from being connected to the network will be connected. Learn more in this white paper.

Is Your Desktop a Security Threat?
The new wave of sophisticated crimeware not only targets specific companies, but also targets desktops and laptops as backdoor entryways into those business’ operations and resources. Learn how to stay safe in this white paper.

Increasing SAN Reliability by 100 Percent
Storage area networks (SAN) are a strong part of storage plans. Learn how to increase your reliability and uptime by 100 percent in this case study.

 


Got a HOT tip?   please tell us!
Free weekly newsletter
Enter your email...
Click here for a profile of each sponsor:
PLATINUM SPONSORS
GOLD SPONSORS
(Become a sponsor)

ADVERTISEMENT
(Advertise here)

Check out the latest Linux powered...

mobile phones!

other cool
gadgets
HOWTOs: from DevShed & IBM DeveloperWorks:



BREAKING NEWS

• Balanced XIP and the AXFS filesystem
• ARM-based controller has StackableUSB expansion
• Intel multi-core threading library supports Sun Studio
• Multi-protocol wireless mesh gateway runs Debian
• Embedded Linux is doomed. DOOOMED!
• Article explores Linux hot-patching utility
• Sun demo's RIA tools on Android
• Panel PCs support PoE, Linux
• New Palms on horizon?
• Embedded track added to Linux conference
• Ubuntu ported to a PDA
• Linux-friendly SBC hosts dual quad-core Xeons
• Embedded Linux SQL database adds Java, C# bindings
• Lightweight, embedded graphics framework rev'd
• Shock resistant automation computer runs Linux


Most popular stories -- past 30 days:
• Ubuntu ported to ARM
• Linux still top embedded OS
• Linux gains new architecture support
• Linux 2.6.25 release bolsters ARM
• Linux-based diskless notebook costs under $300
• Low-cost MP3 player gains fancy Linux port
• Dutch UMPC runs Ubuntu Linux
• Mini-notebook boasts Linux, near-fullsize keyboard
• PC/104 module runs x86 Linux on 1.85 Watts
• Low-cost Linux-based NAS device supports RAID 1
• Free router distro gains wild WiFi features


Linux-Watch headlines:
• Running a small business on desktop Linux
• Sun launches OpenSolaris
• Via tiptoes toward openness
• Linux certification comes to Italy
• Installing Ubuntu Hardy Heron as a web hosting server
• Black Duck Buys Koders
• Open source conference co-locates with Ubuntu show
• Ubuntu 8.04 ready to challenge Windows
• KDE Linux reaches 52 million Brazilian kids
• Free x86-based Linux router distro rev'd


Also visit our sister site:


Sign up for LinuxDevices.com's...

news feed

Home  |  News  |  Articles  |  Polls  |  Forum  |  About  |  Contact
 
Use of this site is governed by our Terms of Service and Privacy Policy. Except where otherwise specified, the contents of this site are copyright © 1999-2008 Ziff Davis Enterprise Holdings Inc. All Rights Reserved. Reproduction in whole or in part in any form or medium without express written permission of Ziff Davis Enterprise is prohibited. Linux is a registered trademark of Linus Torvalds. All other marks are the property of their respective owners.