Saisei FlowCommand delivers advanced Network Performance Enforcement software with cutting-edge real time network visibility, analytics and control capabilities. By implementing Saisei, network managers are able to increase customer experience through our Next Generation Quality of Service & Host Equalization capabilities, whilst reducing operational expenditure – all through a flexible, cost-effective software solution running on commodity hardware or in a virtual environment.
FlowCommand uses patented flow-engine technology that literally changes the way that TCP/IP network traffic under its control behaves. All other networking, security and analytics solutions are forced to operate at the mercy of random, best-effort routed IP data packet transmission. We changed those rules. In doing so, we were able to completely re-engineer how flow control, security and visibility can be realized when using “domesticated” TCP/IP flows.
FlowCommand runs on x86 processors atop commodity hardware, either as a bump-in-the-wire on a server in the data-forwarding path or as a VM under hypervisor control. The software can monitor up to 5 million concurrent data flows on a 10G link 20 times per second. As a multi-bump installation our software can manage up to 40G.
While examining the flows it can apply any combination of up to 40 bandwidth, business and security policies to each flow and execute those policies in under one second.
Saisei FlowCommand Plus, FlowCommand and FlowVision subsume or replace some of the functionality of older, stand-alone appliances, such as WAN optimizers, packet shapers, application delivery controllers, APMs, NPMs, IDSs, next-gen firewalls and more.
It has added security and control features designed specifically for service providers and for the largest of distributed enterprise customers. Specifically, FlowCommand Plus offers our full set of flow-based security capabilities, including comprehensive data exfiltration controls, real-time DDoS controls, and spotting and throttling Botnet activity in real time as attacks begin. FlowCommand is a Linux software suite that can run on x86 processor cores on bare metal commodity servers, or as a VM under hypervisor control (VMware or KVM), or both. It can monitor and control data flows between two virtual servers, between two physical networks or between a virtual network and a physical network. These networks can be legacy TCP/IP networks or SDN/NFV-based networks. FlowCommand Plus also includes an intuitive RESTful API plus GUI and CLI interfaces, making it easy to integrate into third-party systems, such as orchestration tools for SDN and NFV.
Among the service provider features specific to FlowCommand is a unique capability called Fair Sharing. Technically a form of host equalization, Fair Sharing instantly solves the problem of a small group of users attempting to take a disproportionate amount of available bandwidth. When faced with rogue users or peer-to-peer applications, such as BitTorrent and Encrypted BitTorrent, FlowCommand can classify all host flows as a “single” flow and give it exactly the same percentage of available bandwidth that every other flow in the network receives. Or, it can completely block specific traffic if that is the policy.
Fair Sharing can also be applied differently to different classes of applications. In this case, critical business applications can be grouped together and assigned a high percentage of the available bandwidth with the remaining bandwidth being equally divided among the remaining flows.
When FlowCommand is in control of mission-critical network links, every single flow is associated in real-time with the:
It has the innovative capabilities and features of FlowCommand Plus without the service provider and large enterprise elements, such as REST-API and security augmentation features.
The control, visibility, security, ease of use and third-party integration you need, without the stuff you don’t.
All the scalability and performance of FlowCommand are included in FlowVision, which can either sit in-line like FlowCommand or can run off of a network tap or SPAN/mirror port. FlowVision is ideal for real-time investigation of network issues and comes with comprehensive reporting capabilities across more than 40 metrics and includes in-depth historical reporting.
FlowVision can be easily upgraded to FlowCommand or FlowCommand Plus to realize all the potential of next-generation Network Performance Enforcement.
See FlowCommand’s user policy control available through the host policy map configuration element.
Edgardo Lopez, First Cagayan Converge Data Center, Inc. Chief Technology Officer
Daniel Soh, Assistant General Manager, Sunway Digital Wave
Joohwan Kim, NHN Entertainment Infra Operation Team Leader
Raymond Miranda, Network Specialist at Fort Bend County Libraries
Zeus Kerravala, Founder and Principal Analyst, ZK Research
MITCH WAGNER, West Coast Bureau Chief, Light Reading
Howard Solomon, former editor of ITWorldCanada.com and Computing Canada
Jim Frey, vice president of research, Enterprise Management Associates