Loading…
DPDK Summit 2025
8-9 May 2025 | Prague, Czech Republic
Learn More and Register To Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for DPDK Summit 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Central European Time. To see the schedule in your preferred timezone, please select from the drop-down at the bottom of the menu to the right.

The schedule is subject to change.
Thursday May 8, 2025 14:05 - 14:35 CEST
Intrusion Detection and Prevention Systems (IDS/IPS) play a vital role in securing modern-day networks. However, as network speeds increase, software-based IDS/IPS like Suricata need to evolve to sustain their high performance in these new high-speed environments. Our work aims to accelerate open-source Suricata IDS by utilizing the rte_flow API in DPDK.

By taking advantage of rte_flow, we improve performance through various optimizations, such as encapsulation stripping or filtering user-predefined traffic.

To support Suricata's bypass of undesired flows, e.g., elephant or encrypted flows, we have also looked into the dynamic insertion of rte_flow rules. The new rte_flow support in Suricata enhances Suricata's already existing software filtering capabilities by adding a prefiltration step directly to the network card.

We evaluated Suricata's performance with our project Suricata-CI, an open-source toolset capable of testing Suricata with different traffic profiles.

This talk demonstrates how hardware acceleration can enhance network analysis efficiency in high-speed environments, showcases tools used to test these features, and presents the results we have achieved.
Speakers
avatar for Adam Kiripolský

Adam Kiripolský

Software engineer, Cesnet
Adam Kiripolský is a computer science student at the Faculty of Informatics, Masaryk University in Brno, Czech Republic. He is part of a research group at CESNET, where he focuses on accelerating Suricata using DPDK’s rte_flow API. Outside of research, he enjoys traveling, exploring... Read More →
avatar for Eliška Červinková

Eliška Červinková

software engineer, Cesnet
Eliška is in her second year at the Faculty of Information Technology at BUT. She now manages Suricata-CI, the open-source testing framework, for their research group. One of her hobbies is coffee.
Thursday May 8, 2025 14:05 - 14:35 CEST
ABC Ballroom

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Share Modal

Share this link via

Or copy link