Cyberspies force firms to tailor networks
Of all the lasting effects of Edward Snowden’s leaks, there’s one photo that leaves a particularly strong mark. In it, U.S. federal employees in T-shirts and bluejeans are seen intercepting network equipment from Cisco Systems Inc. at a shipping facility. The feds in the photo, their faces obscured, were reprogramming the machines to spy on people’s activities.
The image captured a deeply held paranoia within Silicon Valley’s biggest Internet companies: In an era of increasingly sophisticated nation-state hacking, how can users trust that network infrastructure isn’t compromised before it’s dropped off at the company loading docks?
This fear has created a sense of urgency for Apple, Google, Facebook and other technology giants that have been devising their own alternatives to Cisco, which controls more than half of the market for network equipment. After the photo was published, Cisco filed a public complaint with the White House, arguing that spying by the National Security Agency was hurting U.S. companies. Cisco told Bloomberg it doesn’t work with governments on backdoors for its products and maintains tight checks on its processes and supply chain to assure customers of their security.
While Cisco’s dominance isn’t in danger of slipping any time soon, the industry’s creeping concerns over cybersecurity have created an opening for new businesses and equipment-design divisions inside large companies. In the three years since the Snowden leaks, networking software and equipment startups raised $6.35 billion, a 47 percent increase over the prior three years, according to researcher CB Insights.
“We’ve lost confidence in the vendors in the wake of the Snowden revelations, and that is a weakness and an opportunity,” said John Kindervag, a vice president at market analysis firm Forrester Research.
One company that’s benefiting is SnapRoute Inc., which was founded by a former manager of Apple’s global data center network. The startup makes a cheaper, simpler network switch than the ones Cisco sells. And unlike most switches, it’s opensource, allowing customers to look for bugs, performance glitches or backdoors that might allow a government to peek inside.
Facebook is also a founding member of the Open Compute Project, which develops and shares open-source data center designs. It launched the project in 2011 after revealing details about a data center it built in Prineville, Ore., using only Facebook-designed servers, power supplies and backup systems. Google, Apple, Goldman Sachs and Microsoft are now members. So is Cisco. It’s playing along with a potential competitor because Cisco Chief Executive Officer Chuck Robbins has said the company needs to be “part of every technology discussion that our customers want to have.”
The high cost of traditional networking products was the main reason for Amazon.com’s investment into creating its own equipment.
“It was cost that caused us to head down our own path,” James Hamilton, vice president and distinguished hardware engineer for Amazon Web Services, said at a conference in November. “Networking gear is really expensive.”
By 2020, spending on opensource and self-built switches and other network technologies will account for at least 20 percent of the global data center market, up from less than 2 percent last year, according to researcher Gartner Inc. Big Switch Networks, Cumulus Networks, Pluribus Networks and SnapRoute are among the companies cultivating a niche that’s putting pressure on leaders Cisco and Juniper Networks and their proprietary code, said Naresh Singh, an analyst at Gartner.
The giants are already under pressure from software-based networking alternatives like SnapRoute’s, and the adoption of open-source tools from mega users, such as Facebook and Goldman Sachs, poses an even bigger threat to their businesses, Singh said. Cisco said some companies balk at using opensource network equipment, citing maintenance “complexity and hidden costs.”
SnapRoute founder Jason Forrester said the idea for his company came from a key discovery he and his colleagues at Apple made when they began designing their own networking software and switches. Forrester (no relation to the market research firm) left Apple in 2015 but declined to talk in detail about his work there.
“Switching wasn’t as hard as Cisco and others led customers to believe,” he said at SnapRoute’s offices in an industrial part of Palo Alto, Calif., located 10 miles from Apple’s campus.
Switches from SnapRoute are $30,000 to $40,000 cheaper than comparable brand-name models, Forrester said. And whereas switches from Cisco and other big suppliers can have tens of millions of lines of code, SnapRoute’s has just 22,000, he said. This means fewer features, so SnapRoute may not be an attractive option for some companies. But the simpler code makes it easier for customers to sift through it in search of hidden spying devices.