Architecture

The overall architecture of Kunpeng BoostKit for IDA consists of Kunpeng hardware, openEuler OSs, BoostIDA, mainstream open-source information security solutions, and applications developed by independent software vendors (ISVs). Specifically, BoostIDA includes Ultrascan/KDADK-MMPM for rule matching, Kunpeng TAG (KTAG) for AI-based traffic classification, Kunpeng Anomaly Data Detector (KADD) for AI-based malicious traffic detection, and Data Plane Development Kit (DPDK) for traffic capture. Mainstream open-source solutions include intrusion detection and prevention systems (IDPS) solutions such as Snort/Suricata and application firewall solutions such as ModSecurity/LlamaFirewall.

Figure 1 shows the overall architecture of Kunpeng BoostKit for IDA.

Figure 1 Overall architecture

**Table 1** Components of the overall architecture
Component	Description
Kunpeng hardware	Provides Kunpeng servers and modules powered by Kunpeng processors, in-house NICs, and data processing units (DPUs).
openEuler OSs	Supports mainstream commercial and open-source OSs.
BoostIDA	Provides application acceleration capabilities, including Ultrascan/KDADK-MMPM for rule matching, KTAG for AI-based traffic classification, and KADD for AI-based malicious traffic detection.
BoostCore basic library	Provides basic acceleration capabilities, including DPDK for traffic capture, Abstract Syntax Notation One (ASN.1) for structural serialization, Hyper Media Performance Primitives–Enhanced Voice Services (HMPP–EVS) for audio decoding, and glibc for system acceleration.
Applications	Includes mainstream open-source solutions (Suricata, Snort, and ModSecurity) and ISV-developed applications.
Scenarios	Includes fine-grained data distribution, IDP, application firewalls, etc.