SERVERIRON 450 AND 850 LAYER 4 7 SWITCHES SERVERIRON

Transcription

1 SERVERIRON 450 AND 850 LAYER 4 7 SWITCHES SERVERIRON Features t Intelligent load balancing,layer 7 content switching and security for mission-critical applications t High density Gigabit connectivity for highly scalable server farms t Integrated wire-speed Layer 2/3 switching and routing combined with high-performance Layer 4-7 switching t Support for up to 15,000,000 concurrent sessions,300,000+ Layer 4 connections per second and 56 Gbps of throughput t Wire-speed Denial of Service (DoS) attack protection on multiple Gigabit links of up to 5 million SYN/sec t High-availability server load balancing with stateful fail-over in many advanced modes t Most scalable and transparent Global Server Load Balancing (GSLB) for disaster recovery,datacenter redundancy and geographic scalability t Industry s most powerful content switching,including URL, Cookie,XML,HTTP Header,and SSL ID t Ease of use and manageability with IronView Network Manager (INM) and comprehensive CLI t Always-on network monitoring with standards-based hardware-assisted sflow t Superior support for all major streaming media protocols and transparent application support t 10 Gigabit Ethernet connectivity for maximizing application throughput and performance t Increased ROI on server farms and applications,and reduced Total Cost of Ownership (TCO) with simplified management 450 AND 850 LAYER 4 7 SWITCHES High Performance Application Switching Intelligence and Security ServerIron 450 and 850 High- Performance Layer 4-7 Switches for Availability, Scalability and Security of Mission-Critical IP and Web Applications Foundry Networks innovative ServerIron 450 and 850 switches provide high performance Layer 2 through 7 switching, enabling highly secure and always-on application infrastructure. Internet IronWare, Foundry s unique software suite of application traffic management capabilities, powers the ServerIron switches to efficiently distribute application client traffic to the best servers using real-time measurements of server utilization and end-user response time. The highly intelligent ServerIron Layer 4-7 switches use information that resides beyond the traditional Layer 2 and 3 packet headers,deep in the application messages, to direct client transactions to the appropriate servers. ServerIron 450 and 850 switches maximize application availability and provide robust security by defeating many forms of Denial of Service (DoS), Virus and Worm attacks.these switches act as a reliable last line of defense for mission-critical server farms and applications. Superior performance delivered by Foundry s innovative 3rd generation 1

2 network processor technology helps defeat attacks without sacrificing application performance. By providing maximum availability, security and scalability to the network and application infrastructure, the ServerIron switches increase the Return on Investment (ROI) on the servers and applications.the switches also simplify server farm management,which reduces operational costs and keeps the total cost of ownership (TCO) to a minimum. Built on Foundry s proven JetCore architecture,the ServerIron 450 and 850 switches support highest density gigabit density for massively scalable gigabit server farms and blade server farms. The JetCore ASIC technology supports hardware-assisted standards-based sflow network monitoring for all application traffic flows, which helps improve manageability and security of network and server resources.the ServerIron switches forward traffic based on Layer 2 through Layer 7 definitions and deliver industry-leading performance for application switching functions. ServerIron s superior content-switching capabilities include support for up to 256 rules based on URL, HTTP header, XML, cookie and SSL ID content. Furthermore, ServerIron 450 and 850 switches provide the foundation for high service availability, disaster recovery, and location and server transparency for consistent user experience. support for Simple Network Management Protocol (SNMP) allows device management using applications such as HP OpenView, available on major server platforms including Sun Solaris, HP-UX, and Windows NT. The IronView Network Manager (INM) can be used to monitor and chart traffic,and also to perform comprehensive configuration management for Foundry switches. To ease management of two ServerIron switches deployed in high availability modes, Foundry features support for advanced configuration synchronization to minimize configuration errors, and consequently network downtime. Using the command-by-command and block-by-block synchronization modes, administrators have the flexibility to replicate configuration on the peer ServerIron in high availability designs at the granularity they desire without manual repetition. Servers ServerIron 450 Switches ServerIron s extensive service health check capability monitors Layer 2, Layer 3, Layer 4, and Layer 7 connectivity and services, and determines the servers ability to respond to user requests and deliver peak performance.the health checks ensure detection of service problems in real time and eliminate service outage when server and application resources are downed. Client requests are automatically and rapidly re-distributed to other available servers equipped to provide the best application performance. To provide maximum application availability, ServerIron switches support many advanced modes of high availability options with real-time session synchronization between the devices to protect against session loss during switch failures.in the event that one device fails, the other one takes over client traffic without losing existing sessions or connectivity. ServerIron 450 and 850 switches are simple to configure and manage using the Foundry Command Line Interface (CLI) or built-in web-browser based interface.the CLI uses well-known Cisco-like commands allowing network administrative staff to easily configure all Foundry products. In addition, ServerIron s Router WAN t Figure 1: ServerIron 450 and 850 Switches for Highly Available and Scalable Applications and Server Farms 2

3 ServerIron 450 and 850 Switches Support the Following Key Internet Traffic Management Applications 1. Efficient Server Load Balancing (SLB) Distribute IPbased services and transparently balance traffic among multiple servers while continuously monitoring server, application and content health. This enhances overall reliability and availability of the services while simultaneously ensuring server farm accessibility. 2. Intelligent Application Content Inspection and Switching Avoid replicating application content and functions on all servers. Scale and optimize performance for targeted application needs, and increase ROI of the servers and applications. Defeat application level attacks by using deep content inspection and filtering of application messages containing malicious content. Support highly flexible clustering and client connection persistence solutions using advanced cookie and content switching. 3. Robust Application Security Shield server farms and applications from wire-speed multi-gigabit rate DoS, DDoS, virus and worm attacks while serving legitimate application traffic. Improve security using IronShield security suite with support for features like advanced ACLs and sflow network monitoring. 4. Disaster Recovery and Global Server Load Balancing (GSLB) Distribute services transparently across multiple sites and server farm locations and balance the traffic across those sites/servers on a global basis while monitoring site/server and application health. By directing the client to the best site for the fastest content delivery, ServerIron enhances overall application availability and reduces bandwidth costs. Site level redundancy and rapid transparent failover are supported for disaster recovery. 5. Transparent Cache Switching (TCS) Eliminate the need to configure each client browser, improve Internet response time,decrease WAN access costs,and increase overall web caching solution resiliency by balancing web traffic across multiple caches. ServerIron improves service availability by implementing cache health checking and redirects client requests to the next available cache server or directly to the origin server in the event of a cache or server farm failure. Key Benefits Maximizing Performance, Availability, Security, Scalability and ROI of Application Infrastructure Improved Application Performance ServerIron Layer 4-7 switches,with their intelligent applicationaware load balancing and content switching, significantly improve application performance by optimally utilizing all available server resources. Foundry load balancing switches perform highly flexible real-time health checks to the servers and use the information obtained during the health checks to distribute load efficiently among the servers. Intelligent content switching capabilities maximize utilization and performance by eliminating the need to replicate content and application functions on all the servers. Maximum Application Availability High-performance ServerIron switches provide maximum availability to applications by intelligently distributing traffic among all available servers, and dynamically monitoring the ability of servers and applications running on the servers to deliver optimal performance. Using customizable health checks at various levels of granularity like host, port, application and transaction levels, load balancers transparently react in real time to increases and decreases in available server capacity by redistributing client traffic. ServerIron switches can be deployed in multiple high-availability modes with stateful session synchronization and failover to preserve client connections during failures of a ServerIron switch. Robust Application and Server Farm Security With the application and content intelligence built in, ServerIron switches detect and discard viruses and worms that spread through application level messages. Legitimate application traffic is load balanced at high performance while preventing and defeating attacks.with many intelligent features and superior performance, industry leading ServerIron switches reliably protect against many forms of Denial of Service (DoS) and Distributed DoS (DDoS) attacks.the ServerIron switches feature the most advanced intelligence and high performance to defeat wire-speed Gigabit rate DoS attacks up to 5 million attack packets a second. 3

4 Massive Application and Server Farm Scalability Scaling applications and server farms is a fundamental requirement for continued business growth, and is costeffectively and transparently met by the ServerIron Layer 4-7 switches.these switches provide massive scalability to IP-based applications by allowing the use of multiple servers with load balancing and failover.as demand grows, simply add new server resources and configure the ServerIron switch to use the new resources. There is no need for forklift upgrades to the server farms and disruption to applications. High Return on Investment (ROI) ServerIron load balancers provide quick ROI, and also improve the ROI of application and server infrastructure.they support significantly higher application traffic and users on existing infrastructure by maximizing the utilization of installed server resources.with support for Server Connection Offload feature, the ServerIron solution reduces connection management overhead on the servers and dedicate the server resources to application processing,which improves overall performance and capacity of the server farms. On-demand and massive server farm scalability eliminates the need for forklift upgrades, and dramatically improves the ROI on the server infrastructure. Key Features Exceptional Performance, Intelligence, Security and Capacity t Industry s highest density gigabit (fiber and copper) connectivity to enable highly scalable server farms for high throughput applications t Highest connection processing and application transaction capacity up to 300,000+ Layer 4 connections per second including application data transfer.the switches can process over 500,000 application requests per second,delivering unprecedented performance for Web applications. t Extensive choice of load balancing methods like round robin, response time,least connections,weighted percentage,combined least connections and response time,and bandwidth load balancing for customizing application performance and end user response time t Rich set of content switching features for application scalability and user session persistence based on URL,cookies,HTTP headers,xml tags,ssl session IDs,request type,and others. High performance switching and stateful failover of user sessions when enabled for Layer 7 switching.support for comprehensive cookie insertion and deletion,and HTTP header insertion features to maintain application transparency. t Industry leader in concurrent user session capacity at 15,000,000,which meets growing demands and also helps maintain user uptime during attacks Remove for maintenance Wire-speed Gigabit DoS Protection INTRANET/ EXTRANET Transparently Remove Servers from Available Pool ServerIron 450 Switch Add New Server to Available Pool Clients t Figure 2: Virtual Server Farm with Easy Management and Automatic Failover 4

5 t Enterprise Application Support ServerIron can be deployed in many Enterprise environments where IP-based applications are used,including the popular applications like Oracle, BEA WebLogic,IBM WebSphere,PeopleSoft and Siebel. ServerIron supports custom features for load balancing and persistence for many such applications t Server Connection Offload The ServerIron increases server performance,availability,response time and security by offloading connection management from the servers.using persistent HTTP 1.0 and 1.1 connections to the server,the ServerIron multiplexes large number of client-side connections to a few server-side connections.connection offload allows the servers to focus on mission-critical high-performance application service delivery. t Comprehensive health checks to servers and applications to detect downed resources in real time and redirect users.highly flexible and customizable health checks using layer 2,3,4 and 7,and boolean and scripted health checks.layer 7 health checks can include the following:http,dns,smtp,pop3,ldap, NNTP,IMAP4,FTP,Telnet,RADIUS,and others. t Fully integrated and complete Layer 2/3 switching and routing in a Layer 4-7 switch for wire-speed performance,including support for always-on sflow network monitoring t Simplified server farm management with automatic detection of downed resources and redirecting users,support for graceful shutdown of servers for maintenance,and slow start to bring new servers up to full capacity IronShield Security t SYN-Guard ServerIron protects server farms against multiple forms of Denial of Service (DoS) attacks,such as TCP SYN and ACK attacks,by monitoring and tracking session flows.only valid connection requests are sent to the server. ServerIron 450 and 850 switches are capable of defeating DoS attacks at the industry s highest rate of up to 5 million SYN/sec to meet growing security threats. t Intelligent TCP and UDP Connection Rate Limiting ServerIron further protects server farms,firewalls and cache servers by controlling the rate of TCP and UDP connections on an application port basis.controlling the rate of new connections that each device receives ensures availability despite increased levels of activity due to DDoS attacks or surges in user access. t Transaction Rate Limiting ServerIron protects real servers against malicious attacks from high-bandwidth users by allowing administrators to configure a threshold for the rate of incoming packets for applications t High Performance Access Control Lists (ACLs) and Extended ACLs By using ACLs,network administrators can restrict access to specific applications from a given address or subnet. Filters can be easily set to deny access to servers by any particular port or VIP address.for example,a network administrator can deny FTP traffic to a particular address.conversely,filters can be set to allow access by a subset of users or subnets DoS Attacks TCP SYN TCP SYN ACK TCP SYN TCP SYN ACK Filtered and Blocked Application Messages INTRANET/ EXTRANET DoS Attack Defeated Legitimate Connections ServerIron 450 Switch Application Servers Clients Application Message with Virus and Worm Content t Figure 3: Securing the Server Farms and Applications from High-Speed Malicious Attacks 5

6 High Availability Services t Remote Backup Servers If no local servers or applications are available,serveriron sends client requests to remote servers.the remote server can be another server farm managed by ServerIron switches or just another group of real servers.by defining multiple remote servers,serveriron will load balance the traffic among them using the selected load balancing method. t HTTP Redirect ServerIron can also use HTTP redirect to send traffic to remote servers if the requested application is not available on the local server farm t Active/Standby When deployed in active-standby mode, the standby ServerIron will assume control and preserve the state of existing sessions in the event the primary load-balancing device fails.configuration common to the two ServerIron switches can be automatically synchronized to avoid manual replication. t Active/Active When deployed in active-active mode,both ServerIron switches work simultaneously and provide a backup for each other while supporting stateful fail-over.configuration common to the two ServerIron switches can be automatically synchronized to avoid manual replication. t Redundant Power Supplies ServerIron 850 supports multiple (up to three additional) hot-swappable power supply options,and the ServerIron 450 supports dual hot-swappable power supplies Disaster Recovery and Global Server Load Balancing ServerIron redirects client traffic globally by site availability, site load, and site response time. ServerIron also measures client/server proximity as defined by round trip delay and geographic location. All these features can work in conjunction with the network s existing DNS servers and results in minimizing network disruption when implementing GSLB. ServerIron continually monitors the sites to detect any changes in servers or services due to varying health and traffic conditions. Configurable site load thresholds enable network administrators to fine tune the health checking parameters to best suit the site s server and service capabilities. FlashBack,a unique Foundry Internet traffic management feature,measures response time between the authoritative DNS site and each data center.serveriron actually computes proximity based on the round trip time between the different global sites and uses these measurements as a benchmark to determine site responsiveness and the site s range to the client. In addition,serveriron uses geographic site selection to keep the requests within continental domains. ServerIron constantly monitors application traffic to create a knowledge base that enables a more intelligent GSLB methodology, powering smarter site selection criteria. ServerIron handles server farm outages or overloads even after the DNS lookup by automatically triggering HTTP redirection or implementing remote server load balancing.serveriron GSLB provides the following: t Acts as a DNS proxy to transparently intercept and modify the DNS responses,thereby directing customers to the best site t Handles server farm outage or overload after the DNS lookup by HTTP redirect or remote server load balancing t Leverages the existing DNS server and minimizes disruption to the existing DNS environment t Provides continuous site monitoring to detect changes in site health conditions t Allows the network administrator to tune individual site load thresholds through configurable settings t Monitors and selects sites based on FlashBack speed,which measures performance using site,server and application responsiveness t Adds an evolutionary knowledge based in the global server load balancer that enables smarter site selection as more clients access the site t Grants the network administrator the ability to tune ServerIron settings and ensure that minimal differences in various site metrics do not affect site selection Foundry offers another unique Internet application management feature called Global IP. Powered by unique VIP health checking algorithms, Global IP injects routes to client application services based on regional data center server-farm health and provides GSLB capability without relying on the DNS protocol.this enables ISPs and enterprises to instantaneously build networking infrastructures on a global basis and offer ready-to-go differentiated services to customers for multi-site deployments. Transparent Cache Switching ServerIron switches improve Internet response time and decrease WAN access costs by redirecting web traffic destined for remote Internet hosts to local cache servers. Foundry s Transparent Cache Switching (TCS) can be used with any cache server that supports transparent redirection, including those from leading vendors such as CacheFlow, Cobalt, Compaq, Dell, Inktomi (a Yahoo company), Network Appliance,and Novell. Foundry s TCS offers network managers a resilient web caching solution that significantly simplifies administration. Unlike proxy server solutions that require manual 6

7 configuration of each client s browser, ServerIron transparently intercepts and switches HTTP client requests to an available cache server without reconfiguring the client s browser. Network administrators can configure the device to switch traffic based on source and destination IP address. ServerIron switches provide the industry s most powerful content-aware cache switching features to build intelligent content networks that route traffic based on content rather than just IP addresses. The ServerIron TCS application includes the following content-switching features: t Intelligent load balancing of caches to eliminate content duplication,increase cache-hit ratio,and improve the Internet response time t Accelerate delivery of dynamic content and optimize the cache utilization by bypassing the caches automatically for dynamic content t Specify content-based rules to determine what content should be cached t Organize caches into logical groups that serve different content to provide differentiated service offerings to content providers Technical and Physical Specifications Load Balancing Methods - Least connections - Response time - Response time + least connections - Round robin - Weighted distribution - Bandwidth and Weighted Bandwidth - Host Proximity Layer 2 Switching Capabilities - 32,000 MAC addresses d Spanning Tree Protocol p prioritization - Policy-based VLANs - Port-based VLANs - Layer 3 protocol VLANs - Layer 3 protocol and subnet VLANs q VLAN tagging Protocol Support - TCP - POP3 - UDP - DNS - SSL - BootP - FTP - TFTP - Telnet - SNMP - SMTP - VRRP/VRRPe - HTTP - IPSec - IMAP4 - RADIUS - LDAP - VoIP - NNTP Standards Compliance , 10BaseT u 100BaseTX, 100BaseFX z 1000BaseSX z 1000BaseLX x Flow Control q VLAN Tagging d Bridging w RSTP ad Link Aggregation Ethernet Like MIB - Repeater MIB - Ethernet Interface MIB - SNMP V1 - SNMP MIB II Network Management - Integrated Command Line Interface - SSH - Web-based GUI - Telnet - SNMP - RMON - IronView Network Manager (INM) - HP OpenView Warranty - 1 year hardware - 90 days software - Upgrades to higher levels available Mounting Options - 19" Universal EIA (telco) Rack - Tabletop Platform ServerIron 450 ServerIron 850 Concurrent sessions 15,000,000 15,000,000 Throughput 56 Gbps 56 Gbps Switching capacity 128 Gbps 256 Gbps Packet forwarding rate 48,000,000 pps 84,000,000 pps Number of 10/100 ports Number of Gigabit ports Total number of ports Layer 3 switching capabilities OSPF,RIPv2, VRRP, VRRP-E, OSPF,RIPv2, VRRP, VRRP-E Supports servers on different subnets Supports servers on different subnets from that of Virtual IP address from that of Virtual IP address Physical dimensions 8.75" h x 17.5" w x 15" d 20.75" h x 17.5" w x 15.25" d (22.2 cm x 44.5 cm x 38.1 cm) (52.7 cm x 44.5 cm x 38.7 cm) Weight 60 lbs fully loaded (29.9 kg) 117 lbs fully loaded (43.7 kg) Power requirements 4-slot Chassis with Single (1) Power Supply: 8-slot Chassis with Single (1) Power Supply:Input Input Voltage and Current Power Supply Voltage and Current Power Supply Rating -70 to Rating -70 to -40 VDC:17A 100 to 120 VAC -40 VDC:17A 100 to 120 VAC (auto-ranging): (auto-ranging):8a 200 to 240 VAC (auto- 8A 200 to 240 VAC (auto-ranging):4a AC line ranging):4a AC line frequency:47 63 Hz frequency:47 63 Hz 7

8 Ordering Information Part Number SI450 SI450-DC SI850 SI850-DC S450 S450-DC S450-S S850 S850-DC S850-S J-B2Gx J-B4Gx J-B24FX B10Gx1 B10Gx2 J-B48E J-BxG J-B16GC J-B16Gx Description ServerIron 450 and 850 Base Platforms 4-slot chassis equipped with WSM6 (Web Switching Management Module) that automatically aligns itself with up to three additional JetCore based line modules installed in the chassis for highperformance Layer 4-7 switching applications 4-slot 48V DC chassis equipped with WSM6 (Web Switching Management Module) that automatically aligns itself with up to three additional JetCore based line interface modules installed in the chassis for high-performance Layer 4-7 switching applications 8-slot chassis equipped with WSM6 (Web Switching Management Module) that automatically aligns itself with up to seven additional JetCore based line modules installed in the chassis for highperformance Layer 4-7 switching applications 8-slot 48V DC chassis equipped with WSM6 (Web Switching Management Module) that automatically aligns itself with up to seven additional JetCore based line modules installed in the chassis for high-performance Layer 4-7 switching applications 4-slot ServerIron 450 chassis with single AC power supply 4-slot ServerIron 450 chassis with single 48V DC power supply 4-slot ServerIron 450 SPARE chassis, NO Power supply 8-slot ServerIron 850 chassis with single AC power supply 8-slot ServerIron 850 chassis with single 48V DC power supply 8-slot ServerIron 850 SPARE chassis, NO Power supply ServerIron 450 and 850 Module Options 2-port 1000Base-X (mini-gbic) JetCore line Module 4-port 1000Base-X (mini-gbic) JetCore line Module 24-port 100Base-FX JetCore line Module 1-port 10 Gigabit Ethernet Base Module (optics required) 2-port 10 Gigabit Ethernet Base Module (optics required) 48-port 10/100Base-TX (RJ45) double-wide JetCore line 8-port 1000Base-X (mini-gbic) JetCore line Module 16-port 100/1000Base-T (RJ45) JetCore line Module 16-port 1000Base-X (mini-gbic) JetCore line Module ServerIron 450 and 850 System Options WSM6 Web Switch Management Module (WSMM) II.Use this to order replacement or for inventory of a backup WSMM. ServerIron 450 and 850 Gigabit Optic Upgrades LHA 1-port 1000Base-LongHaul (SC) series A Gigabit uplink for 70km maximum reach with 9 or 10µm SMF and minimum 10dB attenuation specify SX to LHx upgrade quantities LHB 1-port 1000Base-LongHaul (SC) series B Gigabit uplink for 150km maximum reach with 9 or 10µm SMF and minimum 10dB attenuation specify SX to LHx upgrade quantities. E1MG-SX E1MTG-SX E1MG-LX E1MG-LHA E1MG-LHB E1MG-TX ServerIron 450 and 850 Mini GBIC Options 1000Base-SX mini-gbic optic, MMF, LC connector 1000Base-SX mini-gbic optic, MMF, MTRJ connector 1000Base-LX mini-gbic optic, SMF, LC connector 1000Base-LHA mini-gbic optic, SMF, LC connector 1000Base-LHB mini-gbic optic, SMF, LC connector, 150km Maximum reach 1000BASE-TX Mini-GBIC Copper, RJ-45 Connector Foundry Networks, Inc. Corporate Headquarters 2100 Gold Street P.O. Box San Jose, CA U.S. and Canada Toll-free: TURBOLAN ( ) Tel: Fax: info@foundrynet.com Although Foundry has attempted to provide accurate information in these materials, Foundry assumes no legal responsibility for the accuracy or completeness of the information.more specific information is available on request from Foundry.Please note that Foundry s product information does not constitute or contain any guarantee,warranty or legal binding representation,unless expressly identified as such in duly signed writing Foundry Networks,Inc.All Rights Reserved.Foundry Networks,BigIron,FastIron,NetIron,ServerIron,IronPoint, Terathon,JetCore,EdgeIron,IronView,JetScope,IronShield,MetroLink,IronWare,TrafficWorks,Power of Performance and the Iron family of marks are trademarks or registered trademarks of Foundry Networks,Inc.in the United States and other countries.all others are trademarks of their respective owners. DS-024/Rev2/