Overview
Modern networks face unique challenges - growing cyber threats, exploding traffic volumes, and the complexity of cloud-first architectures. As applications migrate to public and private clouds, 40G and 100G data center links drive huge East-West inter-VM traffic, making cost-effective network visibility harder than ever.
To address this, Cirries developed the DART AI Virtual Packet Broker (VPB) - a software-only solution designed for agility, scale, and efficiency. VPB enables operators to tap, aggregate, groom, and distribute packet flows in the exact format required by their security and observability tools, without costly hardware dependencies.
In AWS, DART VPB passively collects packet data at speeds up to 10 Gbps, scaling with application demand. Because it's agentless, deployment is simple - no installs required on end-user devices.
Advanced capabilities include:
Packet trimming: Reduce frame length by up to 75% to minimize congestion.
Packet slicing: Removes sensitive payload data to support compliance-focused deployments (e.g., HIPAA or PCI DSS).
Protocol stripping: Normalize GRE/MPLS traffic to maximize tool efficiency.
The result: Accurate data, delivered at scale - improving security, analytics, and performance visibility across hybrid cloud environments.
Highlights
- Lightweight & Flexible: In-workload virtual tap for copying traffic in AWS, independent of applications. Provides visibility across container nodes, VMs, cloud subnets, and physical infrastructure - seamlessly feeding existing monitoring and security tools.
- Application-Aware Intelligence: L4- L7 DPI filters identify and enforce premium services, align resources fairly, and maintain performance - enhanced with GRE/MPLS protocol stripping.
- Optimized for Compliance & Scale: Packet slicing and trimming reduce payloads and frame lengths by 75-95%, ensuring HIPAA/PCI compliance, lowering storage costs, and preventing tool overload in high-volume virtual networks.
Details
Unlock automation with AI agent solutions

Features and programs
Financing for AWS Marketplace purchases
Pricing
- Monthly subscription
- $45.375/month
Vendor refund policy
90 days
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Cirries VPB Agent – Container Edition
- Amazon EKS
- Amazon EKS Anywhere
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
First version for DART AI VPB agent 1Gbps
Additional details
Usage instructions
Automated Test procedure from AWS CLI:
EC2 environment: Download setup script from:
https://download.cirries.com/cirries_div_aws_mp/ec2_setup.shÂ
give executable permission: chmod +x ec2_setup.sh
chage key file for ssh. If not present create new one.
run script from AWS CLI: ./ec2_setup.sh <collector_IP>
Description:
This script automatically creates a temporary EC2 instance using the latest Ubuntu 22.04 AMI, installs Docker, and runs the Cirries Diverter container from ECR.
EKS environment:Download setup script from: https://download.cirries.com/cirries_div_aws_mp/eks_setup.shÂ
Download daemonset yaml file from: https://download.cirries.com/cirries_div_aws_mp/AWSEKS1Gbps.yamlÂ
give executable permission: chmod +x eks_setup.sh
run script from AWS CLI: ./eks_setup.sh <collector_IP>
Once set up is done apply yaml using kubectl: (note: change collector_ip in yaml)
kubectl apply -f AWSEKS1Gbps.yaml
Description:
This script creates a temporary EKS cluster with two nodes.
Collector set up (on remote node):
REMOTE_IP=<Host public or private IP where container is running>
SRC_IFACE=ens5/eth0
VXLAN_ID=100
VXLAN_PORT=4789
VXLAN_IFACE=vxlan100
$sudo ip link add $VXLAN_IFACE type vxlan id $VXLAN_ID dev $SRC_IFACE remote $REMOTE_IP dstport $VXLAN_PORT
ip link set vxlan100 up
Post deployment verification:
tcpdump -i vxlan100 -nn
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on vxlan100, link-type EN10MB (Ethernet), snapshot length 262144 bytes
12:38:38.732140 IP 192.168.5.43.45321 > 3.227.59.45.4789: VXLAN, flags [I] (0x08), vni 100
IP 192.168.5.43.45321 > 3.227.59.45.4789: VXLAN, flags [I] (0x08), vni 100
Product demo video available here: https://app.guidde.com/share/playbooks/24QTu1ZUduXnEThd3fnpT4?origin=gg8gNCZQHzU1ulN7mYAmPJvYCot2Â
Download and follow steps from here to run DART AI VPB 1Gbps with your application (manual test procedure section): https://download.cirries.com/Cirries_VPB_Complete_User_guide_1Gbps.pdfÂ
Support
Vendor support
After subscribing to the DART AI Virtual Packet Broker please complete the following steps:
-
Download and complete the Cirries Customer Information Form: http://download.cirries.com/Cirries_Customer_Information_V1.pdfÂ
-
Fill in your:
- Company and contact details
- AWS Account ID
- Technical and Business Contacts
-
Email the completed form to: support@cirries.comÂ
-
After submission, you will receive:
- Product activation confirmation
- Configuration assistance
- Access to Cirries technical support and updates
For technical support and registration assistance: Email: support@cirries.com Website: https://www.cirries.comÂ
You must complete the Cirries Customer Information Form to enable product registration and support access.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products

