NSA 7150 Is A Multi-Purpose Appliance Enabling Enhanced Security

Application • Edge AI
September 16, 2021

Summary

The NSA 7150 functions as a multi-purpose security appliance for diverse enterprise and telecom deployments requiring hardware acceleration and cryptographic optimization. The 2U rackmount platform integrates dual 3rd Generation Intel Xeon Scalable processors (up to 40 cores each) with native Intel QAT (Quick Assist Technology) acceleration for security operations. Eight PCIe slots support modular configuration including 1G-200G Ethernet LAN modules, QAT offload cards, and wireless connectivity (Wi-Fi, 4G LTE, 5G FR1). The architecture delivers up to 1.2Tb aggregate Ethernet bandwidth while maintaining thermal and power efficiency across security-intensive workloads. This flexibility enables deployment in cyber security, network function virtualization infrastructure (NFVI), and 5G private/public network environments.

Problem / Requirements

Security-focused deployments require appliances capable of executing computationally intensive cryptographic operations without compromising throughput or introducing latency variance. Organizations operating network function virtualization infrastructure need hardware platforms that accelerate encryption, decryption, and authentication functions across multiple virtual network functions. 5G private network operators require appliances supporting simultaneous security enforcement and cellular connectivity integration. Legacy security platforms exhibit CPU saturation under high-throughput inspection requirements, necessitating platform consolidation without functional degradation.

Technical Approach

NEXCOM addressed security acceleration requirements through integrated Intel QAT technology paired with high-core-count processors and modular expansion architecture. QAT hardware offloads AES (Advanced Encryption Standard), SHA (Secure Hash Algorithm), and RSA operations to dedicated processing units, freeing CPU cycles for inspection logic. The dual-socket Xeon configuration provides adequate processing capacity for simultaneous execution of security functions and virtual network appliance workloads. Modular PCIe expansion enables QAT offload card deployment for applications requiring asymmetric scaling of cryptographic versus compute capacity.

Implementation Notes

QAT integration operates at the hardware instruction level, transparent to security applications without requiring kernel driver modifications beyond standard Intel QAT framework integration. LAN modules supporting up to 200G Ethernet eliminate network I/O bottlenecks in high-throughput security inspection scenarios. Wireless modules (4G LTE, 5G FR1) integrate through dedicated PCIe interfaces, enabling appliance deployment in security-enforcing network architecture without separate cellular gateway equipment.

The platform supports multiple simultaneous deployments addressing distinct security requirements: inline intrusion prevention, VPN termination, DPI (Deep Packet Inspection), and malware detection. The 2U form factor accommodates full heat dissipation for sustained cryptographic workload execution without thermal throttling.

/table

Challenge | Solution

CPU overhead reducing throughput in security operations | Intel QAT hardware acceleration for AES, SHA, RSA algorithms

Inflexible platform architecture limiting function diversity | 8 PCIe slots supporting modular LAN, QAT, wireless modules

Cryptographic asymmetry between demand and capacity | Optional QAT offload modules for additional acceleration

Cellular connectivity requiring separate equipment | Integrated 4G LTE and 5G FR1 module support

Compute bottlenecks in NFVI environments | Dual 40-core processors enabling parallel virtualized functions

/endtable

Key Takeaways

Intel QAT acceleration demonstrates measurable throughput improvements for cryptographic operations, reducing CPU saturation in high-inspection-rate scenarios. Dual Xeon Scalable processors provide sufficient capacity for multiple concurrent security functions without resource contention. Modular LAN configuration supports bandwidth scaling from 1G upward to 200G without platform redesign. Integrated wireless modules eliminate separate network equipment for private 5G deployments. 1.2Tb aggregate Ethernet connectivity matches network bandwidth to processor throughput, preventing I/O bottlenecks in high-performance scenarios.

Contact NEXCOM

For specifications, availability, and technical inquiries, contact NEXCOM via the official website.

Specifications Snapshot

/table

Specification | Details

Processor | Dual 3rd Gen Intel Xeon Scalable (up to 40 cores each)

Security Acceleration | Intel QAT for AES, SHA, RSA operations

PCIe Expansion | 8 slots for modular LAN, QAT, wireless modules

Ethernet Bandwidth | Up to 1.2Tb cumulative through modular LAN options

LAN Modules | 1G/10G/25G/100G/200G options

Wireless Options | Wi-Fi, 4G LTE, 5G FR1 modules

Form Factor | 2U rackmount

Target Use Cases | Cyber security, NFVI, 5G private/public networks

Heat Dissipation | Optimized for sustained cryptographic workloads

/endtable

Contact
Thank you! Your submission has been received!
Submit another form
Something went wrong while submitting the form.