SANGFOR AD Product Series

Similar documents
SANGFOR AD Product Series

Load Balancing Technology White Paper

Application Delivery Product Technology White Paper 2015 V2. Venusense 2015 V2

What is New in Cisco ACE 4710 Application Control Engine Software Release 3.1

Cisco ACE30 Application Control Engine Module

Next-Generation Firewall Series Datasheet

WINNER 2007 WINNER 2008 WINNER 2009 WINNER 2010

Future-ready security for small and mid-size enterprises

Gigabit SSL VPN Security Router

Features. HDX WAN optimization. QoS

Q-Balancer Range FAQ The Q-Balance LB Series General Sales FAQ

Citrix NetScaler LLB Deployment Guide

Systrome Next Gen Firewalls

Corrigendum 3. Tender Number: 10/ dated

10-Port Managed GbE Switch with 8-port 802.3at PoE+ and 2-port SFP PS800GM/PS800GMA/PS800GME

Never Drop a Call With TecInfo SIP Proxy White Paper

Internet Load Balancing Guide. Peplink Balance Series. Peplink Balance. Internet Load Balancing Solution Guide

24-Port: 20 x (100/1000M) SFP + 4 x Combo (10/100/1000T or 100/1000M SFP)

Research and Implementation of Server Load Balancing Strategy in Service System

DPtech AP1000 Wireless Access Point Series

ISG-600 Cloud Gateway

KEMP 360 Vision. KEMP 360 Vision. Product Overview

HUAWEI USG6000 Series Next-Generation Firewall Technical White Paper VPN HUAWEI TECHNOLOGIES CO., LTD. Issue 1.1. Date

Barracuda Link Balancer

FGS-2616X L2+ Managed GbE Fiber Switches

TALK THUNDER SOFTWARE FOR BARE METAL HIGH-PERFORMANCE SOFTWARE FOR THE MODERN DATA CENTER WITH A10 DATASHEET YOUR CHOICE OF HARDWARE

jetnexus Load Balancer

jetnexus Virtual Load Balancer

GS-2610G L2+ Managed GbE Switch

McAfee Network Security Platform 9.1

Seven Criteria for a Sound Investment in WAN Optimization

Configuring Web Cache Services By Using WCCP

WHITE PAPER: BEST PRACTICES. Sizing and Scalability Recommendations for Symantec Endpoint Protection. Symantec Enterprise Security Solutions Group

Check Point DDoS Protector Introduction

KillTest ᦝ䬺 䬽䭶䭱䮱䮍䭪䎃䎃䎃ᦝ䬺 䬽䭼䯃䮚䮀 㗴 㓸 NZZV ]]] QORRZKYZ PV ٶ瀂䐘މ悹伥濴瀦濮瀃瀆ݕ 濴瀦

H3C S5130S-LI Gigabit Access & 10G Uplink Switch Series

Optimal Network Connectivity Reliable Network Access Flexible Network Management

Wireless 450N Dual-Band Gigabit Router 450 Mbps Wireless a/b/g/n, GHz, 3T3R MIMO, QoS, 4-Port Gigabit LAN Switch Part No.

jetnexus Virtual Load Balancer

PSGS-2610F L2+ Managed GbE PoE Switch

Gigabit Content Security Router CS-5800

*1. Firewall throughput measured with App-ID and User-ID features enabled utilizing 64KB HTTP transactions. 2.

*1. Firewall throughput measured with App-ID and User-ID features enabled utilizing 64KB HTTP transactions. 2.

McAfee Network Security Platform

Data Sheet. DPtech IPS2000 Series Intrusion Prevention System. Overview. Series IPS2000-MC-N. Features

Fregata. DDoS Mitigation Solution. Technical Specifications & Datasheet 1G-5G

Request for Proposal (RFP) for Supply and Implementation of Firewall for Internet Access (RFP Ref )

SteelGate Overview. Manage perimeter security and network traffic to ensure operational efficiency, and optimal Quality of Service (QoS)

How to Configure Route 53 for F-Series Firewalls in AWS

ApsaraDB for Redis. Product Introduction

Yealink VCS Network Deployment Solution

Lightning Fast Rock Solid

Cisco SCE 2020 Service Control Engine

Unified Services Routers

Network Capacity Expansion System

Scaling Internet TV Content Delivery ALEX GUTARIN DIRECTOR OF ENGINEERING, NETFLIX

Oracle E-Business Suite 11i with Cisco ACE Series Application Control Engine Deployment Guide, Version 1.0

*1. Firewall throughput measured with App-ID and User-ID features enabled utilizing 64KB HTTP transactions. 2.

AC750GW 750Mbps. Dual band Gigabit Wireless Router. Overview DATA SHEET. Highlights

Cisco Virtual Networking Solution for OpenStack

Network Security Platform 8.1

FUJITSU Software Interstage Information Integrator V11

Appliance Comparison Chart

XS26DS. L2/L3 10 G Optic Fiber Aggregation Switches. Features. Overview. XS26DS L3 10 G Optic Fiber Aggregation Switches

HP Load Balancing Module

Gigabit Managed Ethernet Switch

*1. Firewall throughput measured with App-ID and User-ID features enabled utilizing 64KB HTTP transactions. 2.

F5 Networks F5LTM12: F5 Networks Configuring BIG-IP LTM: Local Traffic Manager. Upcoming Dates. Course Description. Course Outline

General Firewall Configuration

Appliance Comparison Chart

McAfee Network Security Platform 9.1

Cisco RV180 VPN Router

DPX19000 Next Generation Cloud-Ready Service Core Platform

Product features. Applications

*1. Firewall throughput measured with App-ID and User-ID features enabled utilizing 64KB HTTP transactions. 2.

The Basis for Selecting the Web Application Firewall: SSL

Anti-DDoS. FAQs. Issue 11 Date HUAWEI TECHNOLOGIES CO., LTD.

Brocade Virtual Traffic Manager and Parallels Remote Application Server

McAfee Network Security Platform 9.2

*1. Firewall throughput measured with App-ID and User-ID features enabled utilizing 64KB HTTP transactions. 2.

Anti-DDoS. User Guide (Paris) Issue 01 Date HUAWEI TECHNOLOGIES CO., LTD.

Data collected by Trend Micro is subject to the conditions stated in the Trend Micro Privacy Policy:

Managed 24-port Gigabit PoE + 2-port 100/1000 SFP Combo Ethernet Switch

Equalizer DATASHEET AND PRODUCT GUIDE FEATURES

NetAlly. Application Advisor. Distributed Sites and Applications. Monitor and troubleshoot end user application experience.

*1. Firewall throughput measured with App-ID and User-ID features enabled utilizing 64KB HTTP transactions. 2.

*1. Firewall throughput measured with App-ID and User-ID features enabled utilizing 64KB HTTP transactions. 2.

McAfee Network Security Platform 8.3

ZTE ZXR Series Switch Data Sheet

CCNA Course Access Control Lists

Truffle Broadband Bonding Network Appliance

DATASHEET. Advanced 6-Port Gigabit VPN Network Router. Model: ER-6. Sophisticated Routing Features. Advanced Security, Monitoring, and Management

Device Protocol Ports Source or Destination Required / Optional. Inbound TCP 1935, (see Purpose)

F5 comprehensive protection against application attacks. Jakub Sumpich Territory Manager Eastern Europe

Deploying the BIG-IP System v10 with Oracle s BEA WebLogic

HP S1500 SSL Appliance. Product overview. Key features. Data sheet

Data Center Virtualization Q&A

Next-Generation Firewall Series Datasheet

H3C S5120V2-LI Gigabit Access Switch Series

DrayTek Vigor Technical Specifications. PPPoE, PPTP, DHCP client, static IP, L2TP*, Ipv6. Redundancy. By WAN interfaces traffic volume

Transcription:

SANGFOR Application Delivery (AD) Product Series provides customers with the global server load balance(gslb), inbound/outbound load balance, server load balance, SSL off-load and anti-ddos solutions for application delivery. They will improve service availability, performance, security, improve the access experience of users and reduce the IT investments of organizations. SANGFOR AD Product Series

Choice of the Post Load Balancing Era Compared with traditional load balancing devices, SANGFOR AD Product Series are added with intelligent and optimization functions based on high stability to help users cope with challenges led by service deployment and delivery in a complex application environment. By appropriately deploying the AD device, users can further improve the performance and security of its service applications, increase the efficiency of DC infrastructure, and even catch up with the trend of deploying virtualized DC in the future. Multi-core and parallel processing architecture Unilateral Intelligent Intelligent acceleration business optimization function analysis technology Performance optimization technology Load balancing schedule SANGFOR application delivery High-performance hardware platform All-in-1 Load Balancing Comprehensive Functions: SANGFOR AD solution integrates global load balancing, multi-link load balancing, and server load balancing, as well as supports deployment on IPv4 and IPv6 networks. It helps users thoroughly improve the utilization rate of IT computing resources. Cost Effective: SANGFOR AD product series shatter the monopoly of suppliers. Without the need to purchase any extra license, one device is equipped with 3 load balancing functions, together with many optimization functions (such as SSL acceleration, cache, and compression) that can be directly enabled. Therefore, this device offers a higher ROI compared with other similar products in the industry. Fast and Intelligent Unilateral Acceleration: With the unique unilateral acceleration function, users can increase access speed without having to install any plug-in or software on the client. Thus, a stable and smart service release platform can be established, allowing users to access released content in a faster and more stable manner. Commercial Intelligent Analysis: On the precondition that stability of data exchange is ensured, SANGFOR AD Product Series help users learn the running status of organization s network, servers, and DC; enabling the organization to analyze the running status of its own service system, thus providing a reference for decision making in regard to the high-level network optimization and service optimization. Intelligent Optimization Technology: The transparent DNS proxy, peak-hour service regulation, and intelligent alarm technologies further improve utilization rates of various resources, and enhance the access experience of users.

SANGFOR AD device Server load balancing Performance optimization SSL acceleration Unilateral acceleration Global load balance Multi-link load balance Server load balancing Performance optimization Unilateral acceleration Server Global load balance Multi-link load balance Shanghai data center Firewall SANGFOR AD device Application server Web server Database server Beijing data center Cooperation partners Family users Mobile users Handheld terminals Application Delivery Network Load Balancing of Outbound Traffic Support transparent DNS proxy function and fully utilize bandwidth resource. Support intelligent routing, and customization of the load balancing policy. If multiple ISP links are available, support dynamic detection of network proximity and judgment of the static proximity based on the address segment, based on which the optimum ISP link is selected. Load Balancing of Inbound Traffic Support intelligent DNS parsing function. Support DNS intranet recording. The DNS policy supports the A, MX, NS, CNAME, and TXT recording types. Supports domain name-based load balancing policy, and mapping of many domain names to one public network IP address to save the public network IP addresses. Server Load Balancing Support load balancing of applications that comply with the TCP, UDP, HTTP, RADIUS, and DNS protocols. Support multi-level health check mechanism, such as application type-based proactive detection, observation type-based passive sensing, and customized mechanism. Support session keeping technologies that are Global Load Balancing Support intelligent DNS and IP-Anycast mode. Support global load balancing of 16 sites by default. Support global or local static proximity. Support the preferred policy, backup policy, and backup IP address. Embedded with the global ISP address library

based on the source IP, Cookie (insert, passive, and rewrite), HTTP-Header, and RADIUS. and support automatic update. Support configuration synchronization of all or some AD devices. Load Balance Scheduling Support multiple scheduling algorithms, such as polling, weighted polling, weighted minimum connection, weighted minimum flow, bandwidth proportion, Hash, active/standby, first available, static proximity, dynamic proximity, dynamic feedback, fastest response time, priority, and UDP forced load. Support advanced scheduling policies, such as HTTP header rewrite, HTTP protocol content matching, page jump, and discard. Device Management Support HA-mode deployment and dual-host session synchronization. Support full-chinese management interface HTTPS user login, user role management, multi-level authorized management, and centralized device management. Support viewing of the system status, link status, and server status. Support port mapping, switching network port, port aggregation, redundancy dual network adapters, Flood protection, ARP protection, and ACL. Server Performance Optimization Support TCP connection reusing to reduce server performance pressure. Support SSL acceleration to save hardware investment. Support memory cache function to improve system processing capability. Support HTTP real-time compression to improve user access speed. Support triangle transmission to improve throughput of the service system. Unilateral Acceleration Health Assurance Mechanism Support customized health check modes that are based on SNMP, ICMP, UDP, TCP, DNS, RADIUS, and HTTP. Support passive health based on the TCP and HTTP content. Limit the maximum number of server connection and the maximum number of concurrent connections to prevent overload. Support warm online and smooth exit of servers to facilitate maintenance management. Poor network in a remote area Non-ideal network in a remote area Poor network in a remote area Non-ideal network in a remote area 0 100 200 300 400 500 Speed after acceleration (KB/s) 0 20 40 60 80 100 120 140 Normal speed (KB/s) Time consumption after acceleration (s)2 Normal time consumption (s) Transparent for Users: Only SANGFOR AD device needs to be deployed on the release end of the application system. No plug-in or software needs to be installed on the client. Improving Service Competitiveness: Reduce response time of application programs to enhance the access experience of users without bandwidth upgrade.

Improving TCP Transmission Efficiency: Detect delay, packet loss, and retransmission on network paths in an automatic, real-time, consistent, and dynamic manner to change the outbound mechanism; improving transmission congestion mechanism, avoiding excessive retransmission of data packets, thus shortening application response time. Applications Acceleration Scenarios: Optimize all TCP data streams. All applications running over TCP can be accelerated by using the unilateral acceleration technology. In complex network environments, such as stock investment on mobile phones, carriers' 3G network access, and users' cross-country access, the unilateral acceleration technology can greatly increase the access speed of users. Intelligent Business Analysis Detailed Link Report: Provide detailed reports for a single link or multiple links, including the uplink/downlink traffic report, session connection & link distribution report, link IP access report, and link quality report. Rich Service Reports: Include server response time statistical report, IP/user access statistics report of a single link or multiple links, server traffic & connection statistics report, and server health report. Reportsfor BusinessDecisionMaking:Include time segment-based service access report, area-based service access report, and service source-based (such as URL) access analysis report. These reports help enterprises collect various types of business information, learn the time distribution features of services, and familiarize enterprises with the access time preference and usage preference of final users. Such information can be used as the data source for business decision making. Intelligent Optimization Technology Transparent DNS Proxy Support forwarding of network access DNS request of intranet users to implement scheduling based on user names and domain names. Utilize multiple links in a rational manner to prevent wasting the bandwidth resource. Intelligent Routing Provide guidance for load configuration based on the user requirements. Support user access control based on the customized time segment. Support selection of an outgoing link based on the name of the destination domain to be accessed.

Peak-Hour Service Regulation Support link usage oriented overload protection mechanism to select the access paths for users based on the bandwidth load of each link. Support server healthiness oriented elastic load mechanism to sense the healthiness and dynamically adjust the server load based on the passive observation. Intelligent Alarm Send alarms in real time through emails to notify related management personnel for maintenance Support alarms triggered by links, servers, virtual service, dual-host failover, and network attack. Sangfor AD Data Sheet Model A800 B600 AD- 1000- C620 AD- 1000- D620 E640 F680 Profile 1U 1U 1U 2U 2U 2U 2U G642 CPU 4C 2.3GHz 2C 2.5GHz 2C 2.7GHz 2C 2.7GHz 2C 2.7GHz 4C 3.1GHz 4C 3.2GHz RAM 4GB 4GB 4GB 4GB 4GB 8GB 8GB Hard Disk Port as default Dual Power Supplies Power [Watt] (Typical) System Weight 128G BASE-T 128G BASE-T 128G BASE-T + 2*1GbE 240G BASE-T + 2*1GbE 240G 240G 240G +2*1 0GbE N/A N/A N/A Support Support Support Support 22w 180w 180w 180w 212w 176w 176w 3.85kg 6kg 6kg 12.5kg 12.5kg 12.5kg 12.5kg System Dimensions 300mm(L) *430mm( W)*44.5m m(h) 390mm(L )*430mm( W)*44.5m m(h) 390mm(L )*430mm (W)*44.5 mm(h) 500mm( L)*440m m(w)*89 mm(h) 500mm(L) *440mm( W)*89mm (H) 500mm(L) *440mm( W)*89mm (H) 500mm(L )*440mm( W)*89mm (H)

Working Temperature Relative Humidity L7 SSL Off Load Concurrent L7 Requests SSL TPS 1K Single/Bidire ctional Keys 0 ~40 0 ~40 0 ~40 0 ~40 0 ~40 0 ~40 0 ~40 600Mbps 700Mbps 1.5Gbps 2Gbps 3Gbps 6Gbps 8Gbps 600Mbps 700Mbps 1.5Gbps 2Gbps 3Gbps 6Gbps 8Gbps 600Mbps 700Mbps 1Gbps 1Gbps 1Gbps 3.4Gbps 3.5Gbps 1,000,000 1,000,000 1,000,00 0 1,000,00 0 1,000,000 1,800,000 2,000,000 50k 60k 80k 100k 120k 200k 240k 30k 30k 40k 50k 60k 130k 150k 2200TPS/ 1800TPS 2500TPS/ 2100TPS 3000TPS /3000TP S 3500TP S/3500T PS 4200TPS/ 4200TPS 12000TP S/7400TP S 12000TP S/7400TP S Model H642 I482 J442 K482 82 M482 Profile 2U 2U 2U 2U 2U 2U CPU 4C 3.4GHz 4C 3.4GHz 4C 3.4GHz 2*6C 2.2GHz 2*6C 2.3GHz 2*10C 2.5GHz RAM 16GB 16GB 32GB 32GB 48GB 48GB Hard Disk 240G 480G 480G 480G 480G 480G Port as default Dual Power Supplies Power [Watt] (Typical) System Weight System Dimensions Working Temperature Relative Humidity +2*10 GbE +2*10 GbE +2*10 GbE +2*10 GbE +2*10G be +2*10Gb E Support Support Support Support Support Support 180w 212w 212w 332w 332w 332w 12.5kg 20kg 15.3kg 20kg 20kg 20kg 600mm(L)* 440mm(W) *89mm(H) 600mm(L)* 440mm(W) *90mm(H) 600mm(L)* 440mm(W) *89mm(H) 600mm(L)* 440mm(W) *90mm(H) 600mm(L)*4 40mm(W)*9 0mm(H) 600mm(L)*44 0mm(W)*90m m(h) 0 ~40 0 ~40 0 ~40 0 ~40 0 ~40 0 ~40 10Gbps 15Gbps 20Gbps 30Gbps 40Gbps 60Gbps

L7 SSL Off Load Concurrent L7 Requests SSL TPS 1K Single/Bidirec tional Keys 10Gbps 10Gbps 15Gbps 15Gbps 20Gbps 30Gbps 4Gbps 4.3Gbps 4.9Gbps 5.6Gbps 8.6Gbps 9.6Gbps 3,500,000 3,500,000 9,000,000 9,000,000 15,000,000 15,000,000 300k 300k 420k 500k 600k 800k 200k 200k 220k 250k 300k 400k 12000TPS/ 7400TPS 14500TPS/ 6700TPS 15400TPS/ 15400TPS 20000TPS/ 20000TPS 36000TPS/ 23000TPS 44000TPS/29 000TPS Sangfor vad Data Sheet Model vad-100 vad-200 vad-400 vad-800 CPU 2C 2.5GHz 2C 2.5GHz 4C 2.5GHz 8C 2.5GHz RAM 4GB 4GB 8GB 16GB Hard Disk 128G 128G 128G 128G /L7 Concurrent L7 Requests SSL CPS/TPS SSL Concurrent SSL Off Load 500Mbps 1Gbps 3Gbps 5Gbps 1,000,000 1,000,000 2,000,000 3,000,000 100k 100k 120k 150k 30k 30k 35k 50k 800 800 1600 2180 100,000 100,000 192,000 405,000 500Mbps 580Mbps 1.3Gbps 1.6Gbps