 |
 |
|
 |
"We were very impressed by the technical expertise and rigorous testing methodology that ITS employed while conducting this test." -- Oded Comay, CTO of ForeScout Technologies
|
 |
|
|
Sarvega XML Guardian Gateway &
XML Speedway Accelerator
December 2004
Test No. ITS04003
|
|
|
Product Overview
Sarvega’s XML Guardian™ Gateway is a Web services security appliance that provides Authentication, Authorization and Auditing (AAA) capability for XML Web services, ensures message integrity and confidentiality, and protects against internal and external XML Web services threats.
Sarvega XML Speedway™ Accelerator is a high-speed XML Web services appliance that offloads expensive, CPU-intensive XML processing tasks from the server infrastructure. It reduces server costs with wire-speed performance, a scalable architecture and the ability to meet service-level agreements (SLAs) for performance-driven applications.
Sarvega’s XESOS™ is the common core technology for both products. XESOS is a hardware-independent technology that uses XML EventStream™--a patent-pending, specialized, high-performance, low-footprint, binary XML representation. Sarvega uses several patent-pending XML processing and security optimizations, such as:
- Zero-copy XML encryption and XML signatures
- Dynamic and extensible schema validation
- Streaming fully standard-compliant XPath
- Adaptive XML canonicalization
- Abstract stack machine (ASM)-based XSL transformation
XML acceleration and XML Web services security are quickly becoming the key components of high-speed transactional XML Web services environments. Providing rapid response time while offloading the computational requirements of XML is critical to eliminating bottlenecks in today’s demanding XML Web services-based application environments.
Web services, used extensively for integration within and outside firewalls, are typically protected by a gateway solution. Reducing the overhead of ensuring security to the absolute minimum is critical to the scalability of Web services.
|
|
Results Snapshot
- High transaction rate XML security processing, including XML Signatures, XML Encryption and WS-Security.
- Greater than 800-Mbps performance for XML processing with the ability to accelerate a wide range of workloads and transaction sizes.
|
|
Independant Validation Claims
During September and October 2004, Independent Testing Services powered by Network Computing Labs™ (ITS) was contracted by Sarvega Inc. (www.sarvega.com) to independently validate specific capabilities of the Sarvega XML Guardian Gateway and XML Speedway Accelerator appliances.
The following performance claims of Sarvega were subject to open and independent testing verification:
- XML Signatures:
- Verify XML signatures on small (2 KB) documents at a rate in excess of 1,700 transactions per second (TPS) using a 1024-bit RSA key.
- Very large (up to 50 MB) documents can be signed using XML signatures.
- XML Encryption:
- Encrypt a single SOAP <body> (3DES) at greater than 1,700 TPS.
- XML Signatures with Encryption based on OASIS WS-Security 1.0 Specifications:
- Sign the <body> of the SOAP documents using a 1024-bit key and then encrypt (3DES) at more than 1,000 TPS.
- Sign and then encrypt any element within the SOAP <body> and then encrypt any element within the SOAP <body> at 950 TPS--no significant degradation when compared to securing the entire <body>.
- XSL Transformation:
- Simple transformations exhibit greater than 800-Mbps throughput performance.
- Financial services transformations can be processed at up to 5,000 TPS.
- XSL transformation for a very large (300 MB) XML document is supported.
- XML Validation:
- Provides greater than 800-Mbps throughput for simple schema validation.
|
Results Summary
The Sarvega XML Guardian Gateway and XML Speedway Accelerator processed a wide variety of transaction sizes and types, ranging from small, financial services digital signatures and encryption at high transaction rates to greater than 800-Mbps throughput for XSL transformation XML Schema Document (XSD) validation. Whether processing 2-KB OASIS WS Security-compliant XML signatures and XML encryption or 300-MB XSL transformations, the Sarvega XML Guardian Gateway and XML Speedway Accelerator demonstrated processing far beyond performance claims.
|
|
|
|
