Application Traffic Management

Transcription

1 A p p l i c a t i o n T r a f f i c M a n a g e m e n t Application Traffic Management BIG-IP Application Traffic Management software on a BIG-IP hardware platform provides the benefits of traffic management, traditionally reserved for Web-only applications, to all IP based applications and Web services. Through its powerful Universal Inspection Engine and irules, BIG-IP makes the creation and delivery of any IP-based application or Web service predictable, secure, and cost-effective regardless of network environment. Ensures high availability and uptime for all IP applications Creates a controllable enforcement point for proactively securing all traffic Allows servers and applications to respond in a timely and expected fashion Eliminates the need for additional hardware, software, or IT resources Easily adapts to changing business demands no matter what the future may bring Key Benefits Ensures business continuity, security and performance by intercepting, inspecting, transforming, and directing application and Web services requests based on values found in the header or payload The only solution that can switch and persist on any type of Web service, IP traffic, and their payloads Supports the cost-effective deployment of Enterprise, Mobile, and Web Services applications Market-leading Layer 4 through 7 performance Provides redundancy and reliability at every level, from the network to the application, to ensure high availability Predefined and customizable scripts allow for testing and verifying the health and availability of every component that comprises the application and network Open architecture for full integration with 3rd party applications and devices Enforces, fortifies, and accelerates the secure delivery of application and Web services; significantly reduces cost and complexity for securing applications via integrated SSL Optional support for OCSP enables real-time revocation of client certificates, protecting applications and services from unauthorized access Optional software modules provide additional functionality, free of additional hardware investment Eliminates the need to buy additional switches; supports fully meshed network deployments Scalability, Security, and Optimized Performance - Static and Dynamic Load Balancing Methods - Stateful sessions maintained between redundant systems - Supports both Direct and/or Network Failover Unique One Connect content switching reduces bandwidth costs and server overhead by up to 20% Dynamic Server Activation assigns priority levels to servers in a group, ensuring the right resources are always available to handle the load Real-time performance monitoring and statistics provide better management and planning for future application needs Available on a wide-range of hardware platforms designed to meet business and budgetary needs

2 New Intelligence For A New Era Reduces Costs, Improves Performance Intelligence For Web Services, Mobile and Enterprise Applications Previously, to increase network performance, businesses needed to add bigger and more robust hardware, or were forced to architect performance directly into their applications. BIG-IP removes this need, making it easier to manage servers, lowering or even eliminating special development costs, and reducing the level and quantity of hardware and applications required. Now best-practice architectures can be built quickly and inexpensively, without making massive changes, without buying expensive mid-range or high-end servers, and without purchasing and deploying multiple products to handle multiple application types. Other solutions can only provide availability to simple Web applications. BIG-IP, through its unique Universal Inspection Engine, can switch and persist on any type of Web service or IP traffic. It s the only product that can inspect IP traffic down to the packet payload level. Relevant information can then be extracted to make intelligent decisions for directing traffic according to each application, based on individualized business policies. Universal Inspection Engine Mobile Applications Application Content Persistence Health Checking Web QoS Load Balancing Prioritization Authentication Acceleration Intelligent Port Mirroring Certificate Management Web Services Security Open API & SDK Link Management SSL Application Filtering irules Application Servers Databases Web Servers Security Systems (IDS, Virus Scanning, Firewalls) Web Services Switches and Persists On Any Application irules For Customized Control Reduces Total Cost of Ownership Because BIG-IP has the unique ability to read all applications, it can switch and persist on information unique to specific vendor s application servers (BEA, Microsoft, Oracle, IBM, SUN, etc.); XML data for Web services applications; or custom values indicative to mobile/wireless applications. Complete packet inspection capability also allows BIG-IP to identify and filter application level cyber-attacks, virus attachments, and other security threats, therefore securing all business critical systems and applications. BIG-IP software includes irules, a powerful and simple tool for defining how you want to direct, persist on, and filter traffic based on any information in a header and/or the TCP payload. irules enhances the enterprise or service provider s ability to customize their application switching to suit exact business needs. The Universal Inspection Engine is the means irules are the tools used to apply intelligence and business decisions to Application Traffic Management. BIG-IP is the only Application Traffic Management solution with an architecture optimized for IP applications, thanks to its centralized processing and switch fabric design. BIG-IP is an "all-in-one" solution that eliminates the need to deploy multiple devices. Overloads are avoided, too applications are sent only to the most capable resource. Capacity is extended because traffic is transparently directed across devices.

3 High Performance Security The Enforcement Point For A Wide Variety of Security Threats Secure Delivery of Applications and Web Services SSL Acceleration Shields the Entire Network Protects Against Heavy Attack Volumes BIG-IP is the only secure solution that provides policy enforcement, prevents attacks and virus attachments, and is available with SSL acceleration for Web services and applications. BIG-IP ensures that the device itself is not a security concern. It provides additional layers of security protection against hackers, viruses and worms (e.g. Code Red) while still providing continuous service to legitimate traffic. BIG-IP features the Dynamic Security Control Architecture (DSCA) to enforce, fortify, and accelerate the secure delivery of applications and Web services. It s the first solution that can automatically respond to, act upon, and prevent changing security threats providing a coordinated and unified line of defense, while improving the performance of other security products in the network. As the adoption of Web services increases, enterprises will need to leverage SSL to provide a secure channel for delivering all types of applications. The BIG-IP system s built-in SSL acceleration increases business ROI by consolidating hardware, SSL processing, Private Key creation and secure storage, and SSL Certificate Management. Additional SSL capacity can be added via a software key, allowing customers to increase SSL capacity as they need it. BIG-IP's SYN Check TM feature offers a uniquely powerful approach for added and comprehensive SYN Flood protection of servers that sit behind the BIG-IP device. BIG-IP acts as a security proxy that is designed to effectively protect the entire network. Combined with the Dynamic Reaping feature, this unique approach provides the advantage of filtering out the heaviest of SYN Flood and ACK attacks at either Layer 4 or 7. The Dynamic Reaping feature tracks the high and low water marks to efficiently reap idle connections common in various network DoS attacks. This protects BIG-IP from being overwhelmed by traffic, regardless of the connection length. BIG-IP increases the rate of connection tear downs as the volume of an attack increases, providing an adaptive solution to protect against even the heaviest attacks. Maximum Reliability and Performance For Applications and The Infrastructure Layer 4 and 7 Performance Supports High Traffic Volumes Best Performance and Scale In Its Class Creating The Application Aware Network New intelligence requires more horsepower. BIG-IP has what it takes powerful offloading, inspection and processing of Layer 7 application-level transactions that s faster than any other product on the market. The result is optimized application performance, reduced application wait times, and accelerated site response for all traffic types. Application Traffic Management products must support large and ever increasing traffic volumes as enterprises do more with applications, from CRM to ERP systems. BIG-IP delivers. No other solution offers as much processing power to allow deep inspection of traffic. And unlike distributed architectures, BIG-IP can apply all of its processing power to any port at any time - where decisions need to be made. BIG-IP s specialized design applies up to 2.5 GHz of processing power to provide all the intelligent traffic handling required to effectively deliver applications and Web services. It deeply examines packets and intelligently directs existing and new types of traffic (like XML) to the correct destination. By applying intelligence and security to traffic where and when it's needed, BIG-IP ensures maximum reliability and performance for applications and the infrastructure. Web applications respond to requests differently at any given time. Traditionally, networking products have attempted to predict the ability of the server to handle the next user's request. With F5 s BIG-IP Application Traffic Management and the icontrol API and SDK, applications now have more input on how application traffic is managed. icontrol helps automate communications between 3rd party applications and BIG-IP, removing the need for manual intervention.

4 Security, Performance Optimization and High Availability For: Ordering Information Applications Allaire/Macromedia Cold Fusion BEA WebLogic Servers Checkpoint VPN/Firewall 1 Citrix Terminal Server IBM Websphere Lotus/Domino Notes servers.net Enterprise Servers -Microsoft Application Center Microsoft Commerce Server -Microsoft Exchange -Microsoft Windows Terminal Server Oracle 9i Application Servers DynamicSoft Route Engine Servers RealNetworks RealSystem Servers Sun iplanet Servers and others Infrastructure Internet servers Application servers Database servers Intrusion Detection Systems (IDS) Intrusion Prevention Systems (IPS) VPN Load Balancing SSL Acceleration & Management Federal Information Processing System SSL Acceleration (FIPS) Firewalls Routers Wide Area (Global) Load Balancing SOAP/XML (Web Services) Support WAP (Wireless Application Protocol) SIP (Session Initiation Protocol) VoIP gateways LDAP (Lightweight Directory Access Protocol) OSPF (Open Shortest Path First) Multiple ISP Connectivity Cache servers Proxy servers Multimedia servers imode and other wireless devices..and others i BIG-IP Application Traffic Management software is currently available for upgrade on F5 Networks BIG-IP IP Application Switches and BIG-IP IP Appliances, and is also available on three new platforms: BIG-IP 5000 Series The ultimate Layer 7 switch, the BIG-IP 5000 series optimizes the delivery of applications and Web services through its powerful processing of application level transactions (L7). Features two 1.26 GHz Pentium processors, 1 GB of memory, 24 10/100 and 4 GB ports, and integrated SSL at no additional cost. BIG-IP 2000 Series The ultimate L4 switch in the industry today, BIG-IP incorporates F5 s new Packet Velocity ASIC, accelerating site response with up to 250,000 Layer 4 (IP address and port) requests per second. Includes a single 1.26 GHz Pentium processor, 512 MB memory, 16 10/100 and 2 GB ports, and integrated SSL at no additional cost. BIG-IP 1000 Series The ultimate price/performance switch, delivering all the capabilities of BIG-IP Application Traffic Management software. The BIG-IP 1000 provides the power of a 1 (Gb) X 8 (10/100) switch, with a platform that features fewer ports, with integrated SSL that is available for purchase. CONTROL YOUR WORLD F5 Networks, Inc. Corporate Headquarters 401 Elliott Avenue West Seattle, WA (206) Voice (888) 88BIGIP Toll-free (206) Fax info@f5.com F5 Networks Ltd Europe/Middle-East/Africa +44 (0) Voice +44 (0) Fax emeainfo@f5.com 2003 F5 Networks, Inc. All rights reserved. F5, F5 Networks, the F5 logo, BIG-IP, 3-DNS, icontrol are trademarks or registered trademarks of F5 Networks, Inc. in the U.S. and certain other countries. F5 Networks Asia-Pacific Voice Fax info.asia@f5.com F5 Networks Japan K.K Voice Fax info@f5networks.co.jp Part No. SS-BIG-IPv

5 P r o d u c t S p e c i f i c a t i o n s IP Application Switch BIG-IP 5100, 5110, 2400, 1000 BIG-IP software on powerful hardware platforms provide high availability, security and scalability to enterprise applications, mobile computing, and Web services. BIG-IP 5100 (D51f) (2) 1.26 GHz PIII 24x10/100 Mbps /100 Mbps 4-fiber GB 1 GB (expandable to 2 GB) BIG-IP 5110 (D51c) (2) 1.26 GHz PIII 24x10/100 Mbps /100 Mbps 4-copper GB 1 GB (expandable to 2 GB) BIG-IP 2400 (D44) (1) 1.26 GHz PIII Packet Velocity ASIC 16x10/100 Mbps /100 Mbps 2-GB fiber 512 MB (expandable to 2 GB) BIG-IP 1000 (D39) (1) 1GHz PIII 8x10/100 Mbps /100 Mbps 1-GB fiber 512 MB (expandable to 2 GB) Common To All IP Application Switch Platforms: Dimensions: 17"(w/o mounting ears - 19" w/) x 21.7" x 3.44" Weight: 26 lbs (per unit, not including shipping) Operating Temperature: 23 to 122 F (-5 to 50 C) per Telcordia GR-63 CORE and Relative Humidity: 10 to 40º C, per Telcordia GR-63-CORE and Power Supply: 350W 110/220 VAC AUTO Switching Options: Single 48V DC (D45 and D50 IP Application Switch platforms) Redundant 48V DC (D51c, D51f, D44) Redundant AC Power Supply (D51c, D51f, D44) Safety Agency Approval: UL (UL1950-3) CSA-C22.2 No (Bi-national standard with UL 60950) CB TEST CERTIFICATION TO IEC 950 EN Electromagnetic Emissions Certifications: EN Class A EN Class A FCC Part 15B Class A SPECIFICATIONS SUBJECT TO CHANGE WITHOUT NOTIFICATION CONTROL YOUR WORLD F5 Networks, Inc. 401 Elliott Avenue West Seattle, WA (206) Voice (888) 88BIGIP Toll-free (206) Fax info@f5.com 2003 F5 Networks, Inc. All rights reserved. F5, F5 Networks, the F5 logo, BIG-IP, 3-DNS, icontrol are trademarks or registered trademarks of F5 Networks, Inc. in the U.S. and certain other countries. Part No. SSHW-BIGIP-v