A10 Thunder Series Application Delivery Controller (ADC)

Transcription

1 A10 Thunder Series Application Delivery Controller (ADC) Overview

2 Thunder ADC Solutions to Enhance Your Business Availability Acceleration Security Scale Web and key infrastructure Reduce downtime Ensure business continuity Provide fast and responsive services Competitive advantage Drive down CAPEX and OPEX Protect against advanced and emerging attacks Protect brand and guard against revenue loss Meet required compliance standards 2

3 Solutions

4 Enterprise Data Center Application availability To maintain uptime SLB, GSLB, high-availability (HA), Health-checks, more Application acceleration For equipment consolidation and faster user experience Caching, compression, network optimization, more Application security services For brand and asset protection while enhancing your existing security FWLB, WAF, SSL services, more Backup Data Center Availability: GSLB High-availability Health-checks A10 ADC Security: DDoS Mitigation WAF DAF AAM Acceleration: SSL Offload TCP Reuse RAM Caching Compression Web App DNS Other App 4

5 DMZ Security Solutions Scaling security devices and encrypted communications SSL Intercept: Eliminate encryption blind spot and scale security appliances FWLB and SSL offload, more Defend against emerging DDoS attacks Network and application protection Selectively apply dynamic security chains Traffic steering and advanced ADC services A10 ADC A10 ADC Firewall Load Balancing DDoS Mitigation WAF DAF AAM Traffic Steering aflex Scripting SSL Offload Firewalls IDS/IPS DLP Other Firewall Load Balancing SSL Intercept Data Center Internal Users 5

6 Service Provider Solutions Optimized network efficiency and services Traffic steering and service chaining Enhanced service availability Load balancing for Web, caches, Diameter, SIP, IPv4/IPv6 more Service Provider Networks 6

7 Solving Customers Critical Business Challenges ADC services for millions of customers Improved reliability over legacy Cisco ACE load balancers while keeping costs down. Data center efficiency with large traffic volumes Best value to sustain very high traffic volume with the least capital and operational expense, and all required features. Powering multiple internal and external services Multi-tenancy consolidates internal applications and external web servers ADC environment, reducing OPEX and CAPEX. Reducing costs by consolidating legacy appliances A10 ADCs enable consolidation of racks of legacy load balancers for operational efficiency and ease of management. 7

8 Enhancing Key Applications Microsoft Exchange and Lync certified, tested integrations include SharePoint, IIS & more Oracle Deployment guides for Application Server, E-business Suite, PeopleSoft Enterprise, Oracle Siebel CRM, WebLogic SAP Reliability, security & performance certified for Business Objects Explorer (BOE), SAP Netweaver Portal & SAP CRM VMware VMready certified, VMware View Other Blackboard, Apache & more 8

9 Application Availability

10 Application Availability Highly available applications and data centers High performance server load balancing: Scaling capacity for peak loads Global server load balancing (GSLB): Intelligence for global operations Health-checks: Complete application fault detection High availability: For uninterrupted operation 10

11 Performance and SLB: Scaling Capacity for Peak Loads Large capacity to handle high traffic volumes in 1RU Up to 150 Gbps throughput 5 M new sessions/sec 256 M concurrent sessions Benefits: Optimized for maximum performance with ACOS Hardware offload All-inclusive performance on hardware appliances A10 ADC ACOS performance No restrictions Hardware offload Data Center 11

12 High Availability: For Uninterrupted Operation Eliminates the ADC as a point of failure Benefits: Sub-second failover Active-standby, active-active or N+1 options Stateful failover to preserve sessions A10 ADC Data Center 12

13 Health-checks: Complete Application Fault Detection Ensures servers are able to handle users as intended Benefits: Users always receive the optimal experience Ensures all components needed are functioning Network, application (HTTP, DNS, more ) or database health-checks A10 ADC Unreachable Component down e.g. database Traffic directed to active server 13

14 GSLB: Intelligence for Global Operations Provides multi-data center resiliency Benefits: Enables disaster recovery on failure or active-active data centers Optimizes users to the best performing data center (e.g. response time, geo-location, more ) Ensures user s Web experience is the fastest A10 ADC Geo Site Data Center 14

15 Application Acceleration

16 Application Acceleration Application acceleration for a faster user experience and optimized utilization Technology for Application Acceleration TCP Optimization: Improve application performance Compression: Optimize any bandwidth level SSL Acceleration: Secure applications RAM Caching: Faster page loads equal more revenue 16

17 TCP Optimization: Improve Application Performance Reduces TCP connection management overhead TCP reuse (multiplexing) to offload server connection setup and tear down Benefits: Increases overall server capacity Reduction in connections Improved response times less required servers Details: Server TCP stack offload Persistent connection to servers A10 ADC Data Center Many TCP Connections Reduced TCP Connections 17

18 SSL Acceleration: Secure Applications Offloads compute intensive SSL traffic Hardware security processor assist Benefits: Eliminates high SSL CPU overhead from servers Servers support many more transactions per second Simpler certificate management Details: 4096-, 2048-, and 1024-bit keys 2x key size = 3x to 7x drop in legacy SLBs capacity A10 ADC Data Center Secured HTTPS Unsecured HTTP 18

19 RAM Caching: Faster Page Loads Equal More Revenue RAM Cached objects served from the Thunder ADC Eliminates repetitive fetches for frequently requested objects Benefits: Faster response to the end user Reduce connections and server requests Reduce servers due to offloaded traffic Details: Static or dynamic support Extensive object type support A10 ADC Data Center Repeated Requests Served From Cache 19

20 Compression: Optimize Any Bandwidth Level Reduces transmission size for HTTP Smaller payload to transfer to the end user Benefits: Optimize traffic for international, mobile, legacy devices, etc. Faster delivery to end-user Offloads Web server CPU cycles Details: Gzip & deflate encoding support Hardware or software options A10 ADC Compressed Traffic Uncompressed Traffic Data Center 20

21 Application Security

22 Application Security Enhance existing security infrastructure, and protect against the latest threats Web application firewall (WAF): Eliminate common Web attacks DDoS protection: Multi-vector edge protection Application access management (AAM): Add authentication seamlessly SSL intercept: Eliminate the outbound SSL blind spot DNS application firewall (DAF): Protect critical infrastructure 22

23 WAF: Eliminate Common Web Attacks Benefit: Protect web applications Ensure against code vulnerabilities and assist PCI-DSS/HIPAA compliancy Prevent damage to intellectual property, data and applications Advantage: Fully integrated/designed for ACOS No license; single device solution Scalable and high performance 23

24 AAM: Add Authentication Seamlessly Benefit: User authentication required for resource access Enhanced protection and server efficiency Authentication offload Advantage: Supports popular authentication services/stores No adjustment to web servers or infrastructure Seamless integration AAM Authentication Access Access Request Challenge Granted Request Success 24

25 SSL Intercept: Eliminate the Outbound SSL Blind Spot Benefit: Eliminate encryption blind spot to inspect encrypted traffic, including malware and advance persistent threats (APTs) Advantage: Server 4 3 encrypted Optimized decryption with dedicated security processors for CPU intensive 2048-bit keys Offloads firewalls that can t scale SSL decryption Freedom to work with any traffic inspection/mitigation device Inspection/ Protection A10 ADC 5 DLP UTM IDS Other 2 A10 ADC decrypted 1 6 encrypted Client 25

26 DAF: Protect Critical Infrastructure Benefit: Uninterrupted DNS services Protects vulnerable infrastructure Ensures infrastructure cannot be a weapon against a 3rd party Advantage: Blocks non-dns traffic (up to 70%) Surge protection Full DNS command set (aflex and built-in) Redirection for honey pots Regular Clients Perform as Expected Optional Malicious and Invalid Traffic Redirection Zombies Infected Clients Generating Requests Malicious and Invalid Non-DNS Traffic on Port 53 Denied Surge Protection Allowed DNS Infrastructure Result = Reduced and Optimized CPU Usage 26

27 DDoS Protection: Multi-vector Edge Protection Benefits: Large-scale DDoS protection Advanced protection features Predictable operations Advantage: Full DDoS defense covers network and application attacks Hardware DDoS protection for common attacks SYN flood protection to 200 M per second Infrastructure Geographic Connection L7 Slow Rate aflex SYN More DDoS L7 Limiting Flood Attacks Control Protection Limiting 27

28 Thunder Management

29 Comprehensive Management Options Comprehensive management options for operational simplicity and reduced management cost CLI and GUI: Ease of Use and Management aflex: Comprehensive DPI and traffic management axapi scripting: Customizable management options for integration agalaxy: Centralized and automated operations for lower TCO 3rd party integrations: SDN and Cloud orchestration integration Other management options: Application delivery partitions and layer 3 virtualization (ADP/L3V) Virtual chassis system (avcs) 29

30 GUI and CLI: Ease of Use and Management GUI (Graphical User Interface) Fewer screens and steps for tasks Intuitive and easy to use CLI (Command Line Interface) Industry standard CLI, familiar interface Easy to use, comprehensive help 30

31 aflex: Comprehensive DPI and Traffic Management Deep packet inspection and scripting technology Benefits Adjust traffic and L7 data as needed Fix or optimize applications Complete traffic control Example: Automatically displays a Web page based on the user s language, using the language set in the user s browser. English Chinese Japanese Spanish 31

32 axapi: Customizable Management Options for Integration Integrate into 3rd-Party Applications Reporting Centralized configuration management Provisioning Custom Management Solutions Integrated into homegrown apps versus using the A10 CLI or GUI Interactive Infrastructure Applications can issue triggers to change traffic management behavior based on external events Third-party Application Authentication request, containing Thunder admin username and password. Configuration or monitoring request, containing the session ID Next configuration or monitoring request, containing the session ID Third-party application sends session close request or allows session to time out. axapi If authentication is successful, Thunder replies with a session ID and status ok If session ID is Valid, and session has not timed out or been closed, Thunder performs the requested action and replies with status OK Thunder performs requested action, if session ID is valid and session has not timed out or been closed 32

33 agalaxy: Centralized/Automated Operations for Lower TCO A central network management system for all A10 devices Benefits: Automate repetitive tasks and eliminate human error Centralized control of events and configuration Faster operation for reduced OPEX 33

34 3rd-Party Integrations: SDN/Cloud Orchestration Integration Achieve automation, operational agility, and reduced TCO SDN integration Overlay & fabric integration VXLAN and NVGRE IBM SDN-VE, Cisco APIC, VMware NSX Cloud orchestration integration Policy integration with Cloud orchestration platforms agalaxy, Microsoft SCVMM, VMware vcloud Director, OpenStack 34

35 Other Management Options: ADP/L3V and avcs ADP and L3V Multi-tenancy Multi-tenancy for consolidation Separate admin look and feel, overlapping IP addresses Up to 128 partitions L3V partitions avcs clustering Single point of management Scale up to 8 units in a cluster Scale to 1.2 Tbps in a cluster 35

36 Product Portfolio, ACOS and ADC Form Factors

37 Thunder ADC Rich features Server load balancing and application delivery Acceleration Security (WAF, SI, DAF, DDoS, more ) Flexible deployment Broad array of form factors Virtual Physical Hybrid For on premise or cloud deployments Smart design Designed for optimal performance Delivering maximum uptime Green, data center friendly design Enabling Highly Available, Accelerated and Secure Applications 37

38 ACOS: Best-in-Class Performance Scalability Efficient & Accurate Memory Architecture Shared Memory Architecture 64-Bit Multi-Core Optimized CPU 1 CPU 2 CPU 3 CPU N 1 2 N Compression Optimized Flow Distribution Flexible Traffic Accelerator SSL Switching and Routing 38

39 Thunder ADC Hardware Appliances Price 5 Gbps (L4&L7) 200k L4 CPS 1 M RPS (HTTP) 10 Gbps (L4&L7) 450k L4 CPS 2M RPS (HTTP) SSL Processor Thunder 1030S ADC 30 Gbps (L4&L7) 750k L4 CPS 3M RPS (HTTP) SSL Processor Thunder 3030S ADC 38 Gbps (L4&L7) 2.7M L4 CPS 11M RPS (HTTP) Thunder 4430(S) ADC 79/78 Gbps (L4/L7) 3.7M L4 CPS 20M RPS (HTTP) SSL Processor Hardware FTA Thunder 5430(S)-11 ADC 77/75 Gbps (L4/L7) 2.8M L4 CPS 17M RPS (HTTP) SSL Processor Hardware FTA Thunder 5430S ADC 79/78 Gbps (L4/L7) 6M L4 CPS 32.5M RPS (HTTP) SSL Processor Hardware FTA Thunder 5630 ADC 150/145 Gbps (L4/L7) 5.3M L4 CPS 31M RPS (HTTP) SSL Processor Hardware FTA Thunder 6430(S) ADC 150/145 Gbps (L4/L7) 7.1M L4 CPS 38M RPS (HTTP) SSL Processor Hardware FTA Thunder 6630 ADC Thunder 930 ADC Performance 39

40 vthunder Software Appliances vthunder (Perpetual Licensing) 200 Mbps to 8 Gbps VMware, KVM, Hyper-V & Xen hypervisors Dynamic provisioning, faster roll out Scale up or down on-demand High-performance 8 Gbps Price Entry Level/Lab 1 Gbps High-performance 4 Gbps Entry Level/Lab 200 Mbps Lab Edition Performance 40

41 Other vthunder Appliances and Flexible Billing Options Rent (RBM) Utility (UBM) License per Month License per Byte vthunder for AWS 10 Mbps to 1 Gbps licensing 1 click provisioning of 64-bit Amazon Machine Image (AMI) EC2 or VPC environments No feature limitations; licensed by bandwidth BYOL perpetual license or hourly based license vthunder Pay-as-You-Go Licensing Elastic & adaptive Pay-as-you-Go metering Automated licensing For IaaS providers only 41

42 Thunder Hybrid Virtual Appliance (HVA) Why HVA? Hardware acceleration Deploy instances on demand Consolidation Strong hypervisor-based isolation Advantage: Hardware performance, virtual flexibility OpenStack management SR-IOV support for network and SSL acceleration No performance or feature licenses Price Thunder 3030S HVA 8 instances, 35 Gbps Performance Thunder 3530S HVA 40 instances, 100 Gbps 42

43 Summary

44 Thunder Buzz Provides substantial value very high performance platforms, but only 1RU in size Mark Fabbi, Gartner Source: NetworkWorld provide value and efficient networking to our customers. Jeff Doyle, Vice President of Engineering, TorreyPoint simplify our IT environment to meet and exceed service level agreements for all of our users. George Hamin, Director ebusiness & Information Systems for Subaru Canada, Inc. 44

45 Summary Thunder ADCs for Today s Application Concerns Provides a better application experience, while optimizing your environment Provides essential application delivery features Availability Acceleration Security Broad array of high performance Thunder form factors Physical, hybrid, virtual and cloud 45

46 vthunder Free Trial Try Today Visit 30 days, 5 Mbps limit Full features For VMware, Hyper-V, KVM and Xen 46

47 THANK YOU