Platform

Zero-Copy Fast Path

Packets never leave the NIC DMA region. The engine reads, classifies, and forwards from the same shared-memory ring — without a single kernel copy.

GA14 Gbps

HOW IT WORKS

Walk through a single flow

1Packets land directly in shared-memory rings mapped from the NIC into the engine's address space.
2A single worker walks the ring by index — no packet buffer allocation, no socket queue.
3Decisions — pass, drop, or re-inject — are made and executed in place on the same ring.
4Batches of packets are processed together for cache-friendly traversal.

UNDER THE HOOD

Technical notes

Why this architecture?

Traditional inspection stacks copy every packet from the NIC into kernel buffers, then again into userspace. Zedmos eliminates both copies by mapping the NIC ring directly into the engine — every stage of inspection, from DPI to TLS to policy, operates on the same memory.

Platform preflight

Before the engine starts, a validation routine inspects the interface for native fast-path capability. Unsupported combinations surface a clear fallback path, with no surprise during production runtime.

METRICS

Measured numbers

Throughput

14 Gbps

CPU at 10 Gbps

~2.5 %

Per-packet cost

~1.5 ns

Other capabilities that plug in here

Platform

Hardware Acceleration

Intel 1/10 GbE multi-queue, NIC preflight, CPU affinity — 10× cache-miss reduction.

Routing

Encrypted Overlay on the Fast Path

Kernel driver patched so encrypted overlay peers can join the same fast path. Opt-in on bare-metal deployments; standard SASE still defaults to the kernel socket path.