Seculayer SOAR Records 2 Million EPS Performance on Clustering Server

Seculayer (CEO Jeon Joo-ho) announced that its self-developed SOAR solution eyeCloudXOAR v4.0 achieved data collection performance exceeding 2 million EPS in a clustering environment, according to the results of an official certification test.

Seculayer had already passed verification for data processing exceeding 2 million EPS in a single server environment three years ago (2019 TTA certification test), making the focus on improving clustering performance and validating it through an official certification body particularly significant.

Seculayer is already collecting and processing over 40TB (7PB over 6 months) of data daily from the National Information Resource Management Institute, the largest big data center in Korea, and has been operating over 300 big clusters stably for more than 8 years, showcasing its core technology and proving clustering capabilities through this test.

The performance guarantee range that can be operated based on a single server is realistically about 20,000 to 40,000 EPS, and upgrading a single server (Scale-up) has its limitations and cost-effectiveness issues. Therefore, it is essential to have the capability for infinite server expansion (Scale-out) as needed, with processing performance increasing multiplicatively and search performance being consistently maintained during server expansion.

The Korea Testing Certification Agency (KOTCA) conducted a data processing/search performance test based on a clustering environment for eyeCloudXOAR at the end of last year and announced the results on the 20th.

The test results showed that data collection and storage performance exceeded 2 million EPS, indexing performance recorded over 1 million EPS, and the average speed of various types of data searches was 0.301 seconds. It was proven that as servers were added, data throughput increased multiplicatively and search performance improved. This test was based on a 100% standard for data integrity and encryption algorithm operation verification.

Data processing performance tests for big data processing platforms are often conducted on single servers; however, the performance test for eyeCloudXOAR was conducted in a clustering configuration environment, which is a distinctive feature. SOAR (Security Orchestration Automation and Response) solutions are often operated based on clustering configurations for massive data collection and automated threat response, making performance verification in such environments essential.

Yoo Jin-sang, Executive Director of Seculayer's Technology Research Institute, stated, “It has been proven that eyeCloudXOAR consistently increases performance multiplicatively according to the number of expansions compared to a single server, even in large-scale clustering environments.” He added, “With the results of this performance test, customers who need to process and respond to millions of threat events daily can proceed with product adoption and review with greater peace of mind.”

Meanwhile, the Korea Testing Certification Agency, which conducted the test, is an accredited certification body that has received international certification as a testing organization in the software field from the Korea Accreditation Board (KOLAS).

Additionally, Seculayer has provided reports and the latest patch files regarding the globally recognized Log4j vulnerability through Github (https://github.com/seculayer/Log4j-Vulnerability), and is currently coordinating with client companies using vulnerable versions for patch upgrades and other remedial measures.