Providing effective and efficient network visibility is becoming increasingly challenging as IT infrastructures grow more complex. Modern networks must not only handle ever-increasing traffic volumes and higher speeds but also meet heightened requirements for security, analytics, and compliance. In this scenario, is it sufficient to use a commodity switch for network monitoring?
Here are three key reasons why a commodity switch is not a substitute for a network packet broker.
1. Limited Buffer Memory and Filter Rules
A network packet broker (NPB) is designed to copy data from one port to another while performing critical tasks like filtering, aggregating, and distributing traffic. In contrast, a commodity switch is built to be cost-effective, which often means less buffer memory and limited filter capabilities. This can lead to packet loss, especially during high-traffic loads.
In network applications, packet loss due to insufficient buffer memory is manageable because the network retransmits the lost packets. However, in network monitoring, every packet counts — lost packets mean lost data, and there is no opportunity for retransmission. Thus, using a commodity switch for monitoring tasks risks data accuracy and completeness.
2. Limited Features and Capabilities
Most commodity switches from major vendors are based on the same chipset or OEM platform, limiting their features and capabilities. Unlike network packet brokers, which offer a wide range of advanced functionalities, commodity switches are restricted in their ability to handle sophisticated monitoring tasks.
For example, a network packet broker can perform session-aware load balancing, IMSI filtering, time stamping, and packet slicing—features essential for effective network monitoring and analysis. Commodity switches lack these capabilities, making them inadequate for modern network environments that demand comprehensive visibility.
3. Inadequate Support for Advanced Network Applications
Modern networks require more than just basic aggregation. For instance, handling complex tasks like GTP load balancing (both IPv4 and IPv6) requires hardware capable of supporting hundreds of rules. Commodity switches often offer only 60-100 rules, which is insufficient for many network environments.
As networks evolve to support higher speeds and diverse service types, they require tools that minimize latency and maximize performance. Network packet brokers are specifically designed to handle such challenges, ensuring efficient use of security and performance tools.
When it comes to network monitoring and visibility, you have two choices: invest in commodity hardware with limited features or choose a purpose-built network packet broker with advanced capabilities at a competitive price. The choice is clear — modern networks need more than just basic aggregation; they need comprehensive visibility and control.