Cisco CSS Series Content Services Switch

Transcription

1 Data Sheet Cisco CSS Series Content Services Switch The Cisco CSS Series Content Services Switch is a compact platform, delivering the richest Layer 4 7 traffic management services for e-business applications. Pictured above, from top to bottom, the Cisco CSS 11501, the Cisco CSS 11503, and the Cisco CSS The Cisco CSS 11500, with the award-winning Cisco Web Network Services (WebNS), is specifically designed to provide robust transport and application (Layer 4 7) services for Internet and intranet data centers. The Cisco CSS builds on the success of the Cisco CSS Series in five key areas: Introduces an intelligent, distributed architecture to help organizations meet the real-world scaling requirements of today s e-business infrastructure Improves site availability and transaction integrity by introducing Adaptive Session Redundancy (ASR) a new industry standard in stateful failover Delivers the greatest flexibility of any content switch in its class for customizing combinations of ports, performance, and services Scales secured transaction performance through support of an integrated, high-capacity Secure Sockets Layer (SSL) module Protects investments by enabling upgrades of performance, ports, and services through modularity The Cisco CSS Series Content Services Switch enables businesses to simultaneously reduce costs by optimizing data center resources and boosting productivity, as well as offering a superior online experience for customers, business partners, and employees. Through content fast switching and forwarding, the Cisco CSS Series switches improve utilization, responsiveness, availability, scalability, and security of Web sites, server farms, cache clusters, and firewall systems. Premier Traffic Management for E-Business In addition to the Cisco CSS switches, Cisco delivers a complete product line, including the Cisco CSS 11050, CSS 11150, and Content Switching Module (CSM) an integrated services module for the Cisco Catalyst 6500 Series Switch and Cisco 7600 Internet Router. The Cisco CSM attains the highest performance and offers transport and application (Layer 4 7) features as rich as those in WebNS. Through full integration with Cisco IOS Software, the Cisco Catalyst 6500, and the Cisco 7600 Internet Router Cisco CSM also supports the highest port density and comprehensive internetworking features. The Cisco CSS and CSM together are, simply, the ideal choices for enterprises and service providers deploying content services. All contents are Copyright All rights reserved. Important Notices and Privacy Statement. Page 1 of 10

2 Scalable Distributed Architecture for Today and Tomorrow In a typical deployment, the Cisco CSS intercepts a request from a client browser, characterizes the flow by reading Hypertext Transfer Protocol (HTTP) headers, selects a destination server based on resource availability, and forwards the flow. Because it quickly processes the entire HTTP header (full URL, cookie, and extensive resource verification information), the Cisco CSS identifies the user, what the user wants to do, and how best to service the user s request within a global Web infrastructure. The Cisco CSS provides a fully distributed architecture all modules in the system contribute to the overall processing and memory needs for policy-based flow setup and flow forwarding. In this way, performance scales linearly as modules are added, and heavy traffic that hits one module can be balanced to others within a single system. Therefore, the Cisco CSS balances traffic not only within a data center but also across its own internal modules. This innovative architecture addresses the primary limitations of PC-and application-specific integrated circuit (ASIC)-based solutions. Unlike PC-based systems, the network processors of the Cisco CSS provide ample packet processing power and bandwidth, avoiding the bottlenecks of the PC bus and a single central processor. And unlike ASIC-based platforms, the powerful, yet adaptable processors of the Cisco CSS enable easy integration of new software features. The Cisco CSS can apply all its processing power to any port at any time, and it can grow with changing feature and scalability requirements. The system is designed to readily adapt to changing e-business needs without complex and costly hardware upgrades. New Standard in High Availability The Cisco CSS delivers ASR the industry s first stateful Layer 5 session redundancy feature that enables failover of important flows while maximizing performance. Some flows such as a long-lived File Transfer Protocol (FTP) or a database session may be mission critical, but many flows are not. Most solutions on the market today require all traffic important or not to be backed up from one unit to another. If the majority of flows is not critical, most of system performance is wasted on unnecessary back ups. With ASR, the Cisco CSS may be configured so that critical flows are marked as replication worthy, whereas others need not be marked as such. ASR focuses traffic management resources precisely where needed. SSL Integration for Security and Performance Cisco offers the most scalable integrated SSL solutions of any Layer 4 7 switches. SSL, the industry standard for secure transport of traffic from client browsers to Web servers, presents two critical challenges for today s e-business infrastructure. First, because SSL encrypts data and headers, it obscures the request-specific information that Layer 4 7 switching decisions are made on. Second, SSL authentication places a high processing load for each SSL flow setup. The Cisco CSS with integrated SSL modules meets both of these challenges by combining leading SSL acceleration technology with the Cisco WebNS technology. In addition to superior price performance, the SSL module simplifies the management of digital certificates and offers new possibilities in optimizing the switch-to-server architecture for security and performance. And SSL transaction performance may be scaled by adding multiple SSL modules to a chassis. Modularity for Investment Protection Through its modular design, the Cisco CSS will meet your functional requirements today while providing for expansion for tomorrow s needs. The Cisco CSS Session Accelerator Module is a cost-effective way to add performance for flow setup and flow forwarding. A selection of input/output (I/O) modules not only offers the choice of port densities of Fast or Gigabit Ethernet, but also boosts flow performance. Optional memory upgrades increase the number of simultaneous flows supported. PCMCIA Flash memory and hard disks are supported. Local and Global Load Balancing By supporting the latest advances in local and global load balancing, the Cisco CSS Series Switch not only dramatically increases site availability greatly improving user response time and retention but also optimally utilizes site resources, thereby decreasing the cost to serve end users. The Cisco CSS learns where specific content resides, either locally or remotely, and dynamically selects the best Web server or cache for specific content requests. Local server selection is based on server load and application response time, as well as traditional least connection and round-robin algorithms. Any application that uses standard TCP or User Datagram Protocol (UDP) protocols can also be load balanced, including firewalls, mail, news, chat, and Lightweight Directory Access Protocol (LDAP). All contents are Copyright All rights reserved. Important Notices and Privacy Statement. Page 2 of 10

3 The Cisco CSS also provides a complete solution for building and provisioning Internet-scale global content distribution and delivery. Whereas local load-balancing features determine the best device within a data center, global load-balancing functions choose the best data center in the Internet to service requests. The Cisco CSS performs comprehensive resource verification before routing user requests, ensuring that they are directed to the location that has the best response time and the least load for the requested content. Cisco supports global load balancing through redirection based on both Domain Name System (DNS) and HTTP. The DNS mechanism is fast and scalable; the HTTP method provides the highest degree of control. Site and System Security The Cisco CSS with Cisco WebNS Software ensures high levels of security without compromising site performance. The Cisco CSS provides stateful, content-based access control, and supports security policies based on any combination of source address, destination address, protocol, TCP port, or URL. Wire-speed Network Address Translation (NAT) protects real server IP addresses. For additional security, the Cisco CSS intelligently directs traffic across multiple firewalls. By load balancing firewalls, the Cisco CSS eliminates performance bottlenecks and single points of failure that result in system downtime, a situation that can close off the connection to the network and disrupt e-commerce purchases or other mission-critical transactions. Manage Through Simple GUIs or Sophisticated Tools Effective management tools reduce the ongoing cost of operating a business-critical Web site. The Cisco CSS with WebNS supports a wide range of management tools that offer simplicity, security, and flexibility. For configuration, administrators have a choice of a Cisco IOS Software-like command-line interface (CLI) or an intuitive, embedded graphical user interface (GUI). For large networks, the Cisco CSS may be managed through enterprise management systems such as CiscoWorks CiscoView and tiered-access tools such as the Cisco Hosting Solutions Engine. For integration with customized management systems or even user applications requiring network interaction, the Cisco CSS offers an Extensible Markup Language (XML)-based, programmatic management application programming interface (API), Simple Network Management Protocol (SNMP), Remote Monitoring (RMON), and log files. Effective management tools reduce the ongoing cost of operating a business-critical Web site. Cisco CSS Series Content Services Switch: Chassis and Modules The Cisco CSS Series Content Services Switch includes four models: A one-rack unit, fixed-configuration Cisco CSS (6-Gbps aggregate throughput) A one-rack unit, fixed-configuration Cisco CSS with SSL termination (6-Gbps aggregate throughput) A two-rack unit, three-slot Cisco CSS (20-Gbps aggregate throughput) A five-rack unit, six-slot Cisco CSS (40-Gbps aggregate throughput) The Cisco CSS and the Cisco CSS with SSL termination supports eight 10/100 Ethernet ports and one Gigabit Ethernet port though an optional small-form factor, pluggable gigabit interface converter (SFP GBIC). Both Cisco CSS models feature a console port, an Ethernet port for management and two PCMCIA slots that hold up to two 256-MB Flash memory disks, up to two 512-MB hard disks, or one of each. The Cisco CSS with SSL termination delivers 1,000 SSL transactions per second and 250 Mbps of bulk encryption (ARC4) by exploiting an internal card with state-of-the-art cryptology chips. The Cisco CSS and Cisco CSS are both modular platforms with interchangeable modules. The Cisco CSS and Cisco CSS may also share memory, disks and GBICs. The Cisco CSS has fixed memory and does support the same disks and SFP GBICs as the other two models. The Cisco CSS requires at least one switch control module (SCM) and may be configured with a second in standby mode. With the required SCM in one slot, the Cisco CSS has five additional slots supporting any combination of I/O, SSL, or session accelerator modules. The Cisco CSS requires a SCM and accommodates any two of the other optional modules. The Cisco CSS supports not only redundancy in switch control modules but also redundant power supplies and redundant switch modules (20 Gbps each). All SCMs support redundant disk drives. All modules participate in flow setup, but they differ primarily in control functions, performance, SSL capabilities, and I/O. Each Cisco CSS Module consists of one high-speed MIPS RISC processor for flow setup, one network processor for flow forwarding, one classification engine for accelerated lookups in bridge/access control list (ACL) tables, and up to 288 MB of RDRAM. All contents are Copyright All rights reserved. Important Notices and Privacy Statement. Page 3 of 10

4 Switch Control Module for the Cisco CSS Content Services Switch The Cisco CSS Switch Control Module not only governs the entire system, it also contributes to I/O density and flow performance. The SCM comes standard with 2-Gigabit Ethernet ports supporting small-form factor, pluggable gigabit interface converters (SFP GBICs) and has a console port and Ethernet port for management. The SCM also features two PCMCIA slots that hold up to two 256-MB Flash memory disks, up to two 512-MB hard disks, or one of each. SSL Module for the Cisco CSS Content Services Switch The Cisco CSS SSL Module is the ideal solution for handling high volumes of SSL transactions that occupy today s e-business data centers. The module integrates state-of-the-art SSL processors into the leading content switching technology of Cisco WebNS. In addition to superior price performance, the SSL module simplifies the management of digital certificates and offers new possibilities in optimizing the switch-to-server architecture for security and performance. The SSL module delivers 1,000 SSL transactions per second and 250 Mbps of bulk encryption (ARC4). I/O Modules for the Cisco CSS Content Services Switch The Cisco CSS I/O modules deliver port density and flow performance. The product line supports three types of I/O modules: Two-port Gigabit Ethernet Sixteen-port Fast Ethernet Eight-port Fast Ethernet The Fast Ethernet ports are 10/100BASE-TX with standard RJ-45 connectors, whereas the Gigabit Ethernet ports require small-form factor GBICs (1000BASE-SX or 1000BASE-LX). All contents are Copyright All rights reserved. Important Notices and Privacy Statement. Page 4 of 10

5 Session Accelerator Module for the Cisco CSS Content Services Switch The session accelerator module is a cost-effective way to add flow performance when additional connectivity is not required. Using the same flow setup and forwarding processors as the I/O modules, it provides the flexibility to optimize the system for port density and performance. Table 1 gives the features of the Cisco CSS models. Table 1 Cisco CSS Models: Quick Look Cisco CSS11501 Cisco CSS11503 Cisco CSS11506 Module Slots 0 (Fixed Configuration) 3 6 Included in Base Configuration Switch Control with 8 10/100 Ethernet and 1 Gigabit Ethernet (GBIC) Port Switch Control Module with 2 Gigabit Ethernet (GBIC) Ports Switch Control Module with 2 Gigabit Ethernet (GBIC) Ports Maximum Gigabit Ethernet Ports Maximum 10/100 Ethernet Ports SSL Termination No Yes Yes 2-port Gigabit Ethernet I/O Module Maximum of 2 Maximum of 5 16-port 10/100 Ethernet I/O Maximum of 2 Maximum of 5 8-port 10/100 Ethernet I/O Maximum of 2 Maximum of 5 SSL Modules Maximum of 2 Maximum of 4 Session Accelerator Modules Maximum of 2 Maximum of 5 Redundancy Features Active-active Layer 5 Adaptive Session Redundancy VIP 1 redundancy Active-active Layer 5 Adaptive Session Redundancy VIP redundancy Active-active Layer 5 Adaptive Session Redundancy VIP redundancy Active-standby SCM Redundant switch fabric module Redundant power supplies Height 1.75 in. (1 rack unit) 3.5 in. (2 rack units) 8.75 in. (5 rack units) Bandwidth Aggregate 6 Gbps 20 Gbps 40 Gbps Storage Options 512-MB hard disk or 256-MB Flash memory disk 512-MB hard disk or 256-MB Flash memory disk 512-MB hard disk or 256-MB Flash memory disk Power Integrated AC Integrated AC or DC Up to 3 AC or 3 DC 1. Virtual Internet Protocol (Address) All contents are Copyright All rights reserved. Important Notices and Privacy Statement. Page 5 of 10

6 Ordering Information Table 2 lists the product numbers and their descriptions for the Cisco CSS Series. Table 2 Cisco CSS Series Product Numbers Product Number CSS AC CSS DC CSS11503-AC CSS11503-DC CSS11501 Description Cisco Content Services Switch including SCM with 2 Gigabit Ethernet ports, hard disk, 2 switch modules, 2 AC power supplies, and a fan (requires SFP GBICs) Cisco Content Services Switch including SCM with 2 Gigabit Ethernet ports, hard disk, 2 switch modules, 2 DC power supplies, and a fan (requires SFP GBICs) Cisco Content Services Switch including SCM with 2 Gigabit Ethernet ports, hard disk, and integrated AC power supply, integrated fan, and integrated switch module (requires SFP GBICs) Cisco Content Services Switch including SCM with 2 Gigabit Ethernet ports, hard disk, and integrated DC power supply, integrated fan, and integrated switch module (requires SFP GBICs) Cisco Content Services Switch including 8 10/100 Ethernet and 1 Gigabit Ethernet port, hard disk, and integrated AC power supply and integrated fan (optional SFP GBIC) CSS 11501S-K9 Cisco Content Services Switch with SSL termination including 8 10/100 Ethernet and 1 Gigabit Ethernet port, hard disk, and integrated AC power supply and integrated fan (optional SFP GBIC) CSS5-SCM-2GE CSS5-IOM-8FE CSS5-IOM-16FE CSS5-IOM-2GE CSS5-SAM CSS5-SSL Cisco CSS System Control Module with 2 Gigabit Ethernet ports and hard disk (requires SFP GBICs) Cisco CSS Fast Ethernet I/O Module: 8-port TX Cisco CSS Fast Ethernet I/O Module: 16-port TX Cisco CSS Gigabit Ethernet I/O Module: 2-port (requires SFP GBICs) Cisco CSS Session Accelerator Module Cisco CSS SSL Module All contents are Copyright All rights reserved. Important Notices and Privacy Statement. Page 6 of 10

7 Cisco CSS Specifications Table 3 lists the specifications for the Cisco CSS Series. Table 3 Cisco CSS Specification Cisco CSS Specifications Key System Parameters* (*For WebNS Version 7.20) Maximum supported keepalives: 2048 Maximum concurrent connections per I/O module: 200,000 with 256-MB RDRAM Cisco CSS Cisco CSS Cisco CSS Requires WebNS 5.10 or later versions One slot for SCM Rack Units: 5 Five slots for additional modules Two slots for switch modules Aggregate switch throughput: 40 Gbps Dimensions (Height x Width x Depth): 8.75 x 17.0 x 12.5 in. (22.2 x 43.2 x 31.8 cm) Requires WebNS 5.10 or later versions One SCM slot Rack Units: 2 Two slots for additional modules Integrated switch fabric module Aggregate switch throughput: 20 Gbps Dimensions (Height x Width x Depth): 3.5 x 17.0 x 12.5 in. (8.9 x 43.2 x 31.8 cm) Requires WebNS 7.10 or later versions for CSS11501 Requires WebNS 7.20 or later versions for CSS11501S-K9 Fixed configuration with 8 10/100 Ethernet and 1 Gigabit Ethernet (GBIC) Port Rack Units: 1 Aggregate switch throughput: 6 Gbps Dimensions (Height x Width x Depth): 1.72 x 17.3 x 18.1 in. (4.4 x 43.9 x 46.0 cm) Key Cisco WebNS Features The Cisco CSS supports all WebNS 7.20 features, including: Full URL parsing HTTP (1.0, 1.1) Sticky cookie insertion All TCP services, UDP, and SSL Content policy ACLs on all HTTP headers VLAN 802.1Q Management: Secure Shell Protocol (SSH), SNMP, SSL browser-based interface, embedded GUI Integrated global load balancing with HTTP and DNS-based redirection Routing Information Protocol (RIP) versions 1 and 2, Open Shortest Path First (OSPF) Server/node operating system compatibility: Any TCP/IP OS, including Windows XP, Windows 2000, Windows NT, Windows 98, Windows 95, all UNIX platforms, LINUX, and Mac OS Dynamic content support: Active Server Pages (ASP), Visual Basic Script, ActiveX, Java, Virtual Reality Markup Language (VRML), Common Gateway Interface (CGI), CoolTalk, NetMeeting, RealAudio, RealVideo, NetShow, QuickTime, PointCast, Any HTTP Encapsulated Data All contents are Copyright All rights reserved. Important Notices and Privacy Statement. Page 7 of 10

8 Table 3 Cisco CSS Specification (Continued) Cisco CSS Specifications SSL* (*For Cisco WebNS Version 7.20) Environmental Full and transparent proxy modes SSL session reuse Back-end SSL URL Rewrite Number of digital certificates: 256 per module Clock with battery backup (on Switch Control Module) Key sizes 512, 768, 1024, and 2048 Security protocols SSL 3.0 and Transport Layer Security (TLS) 1.0 Importing certificates: Apache, Microsoft IIS, Netscape PCKS no. 12: Personal information exchange syntax standard Security algorithms Rivest, Shamir, Adelman (RSA), Digital Encryption Standard (DES), Triple DES (3DES), and RC4 Encryption (3DES) of certificates and keys in configuration file Temperature Humidity Operating: 32 to 104 F (0 to 40 C) Nonoperating: 4 to 149 F ( 20 to 65 C) Operating: 10 to 90% noncondensing Nonoperating: up to 95% noncondensing Altitude Operating: 0 to 10,000 ft (0 to 3000 m) Nonoperating: 0 to 15,000 ft (0 to 4570 m) Electrical Heat Dissipation Acoustic Noise AC VAC input, Hz Cisco CSS current rating: 9A Cisco CSS current rating: 5A Cisco CSS current rating: 1.6A Cisco CSS maximum AC: 860VA@2936 Btu/hr DC: 860VA@2936 Btu/hr Cisco CSS maximum AC: 430VA@1468 Btu/hr DC: 430VA@1468 Btu/hr Cisco CSS maximum AC: 150VA@512 Btu/hr 70 db maximum DC 46 to 60 VDC input Cisco CSS current rating: 9A Cisco CSS current rating: 5A Shock Vibration Operating (half sine): 21 in./sec (0.53 m/sec) Nonoperating (trapezoidal pulse): 20G 1, 52 in./sec (1.32 m/sec) 1G is a value of acceleration, where G equals ft/sec** (9.81 m/sec**) Operating: 0.35 Grms from 3 to 500 Hz (Grms is the root mean square value of acceleration) Nonoperating: 1.0 Grms from 3 to 500 Hz All contents are Copyright All rights reserved. Important Notices and Privacy Statement. Page 8 of 10

9 Table 3 Cisco CSS Specification (Continued) Cisco CSS Specifications Weight Cisco CSS Shipping: lb Standalone: 57.7 lb Cisco CSS Shipping: lb Standalone: 33.3 lb Cisco CSS Shipping: 21.5 lb Standalone: 18.0 lb Cisco CSS with SSL Termination Shipping: 24.5 lb Standalone: 21.0 lb Safety Certification Immunity CSA-22.2 No. 950-UL1950 ACA TS001 EN60950/IEC60950 AS/NZS 3260 EN60825/IEC60825 CSA-22.2 No. 950-UL1950 Electromagnetic compliance (emissions) FCC CFR 47 Part 15 Class A FCC CFR 47 Part Class B ICES-003 Class A CISPR 22 EN55022 Class B (to 1 GHz) CISPR 22 EN55022 Class A EN /IEC (power line harmonics) EN /IEC (power line harmonics) Electromagnetic compliance (emissions) VCCI V-3/01.4 Class B (to 1GHz) VCCI Class A ICES-003 Class B AS/NZS 3548 Class A AS/NZS3548 Class B EN (EMC for network equipment) EN /IEC (Power frequency magnetic field immunity) EN /IEC (electrostatic discharge [ESD]) EN /IEC (voltage dips and sags) EN /IEC (radiated immunity) ETS EN /IEC (EFT) FCC Class A Compliance Notice (United States) EN /IEC (surge) ICES-003 Class A Compliance Notice (Canada) EN /IEC (low-frequency conducted immunity) VCCI Class A Compliance Notice (Japan) 1. Nonoperating (trapezoidal pulse): 20G 1, 52 in./sec (1.32 m/sec) 1 G is a value of acceleration, where G equals ft/sec** (9.81 m/sec**) All contents are Copyright All rights reserved. Important Notices and Privacy Statement. Page 9 of 10

10 Corporate Headquarters 170 West Tasman Drive San Jose, CA USA Tel: NETS (6387) Fax: European Headquarters Cisco Systems Europe 11 Rue Camille Desmoulins Issy-les-Moulineaux Cedex 9 France www-europe.cisco.com Tel: Fax: Americas Headquarters 170 West Tasman Drive San Jose, CA USA Tel: Fax: Asia Pacific Headquarters Capital Tower 168 Robinson Road #22-01 to #29-01 Singapore Tel: Fax: Cisco Systems has more than 200 offices in the following countries and regions. Addresses, phone numbers, and fax numbers are listed on the Cisco Web site at Argentina Australia Austria Belgium Brazil Bulgaria Canada Chile China PRC Colombia Costa Rica Croatia Czech Republic Denmark Dubai, UAE Finland France Germany Greece Hong Kong SAR Hungary India Indonesia Ireland Israel Italy Japan Korea Luxembourg Malaysia Mexico The Netherlands New Zealand Norway Peru Philippines Poland Portugal Puerto Rico Romania Russia Saudi Arabia Scotland Singapore Slovakia Slovenia South Africa Spain Sweden Switzerland Taiwan Thailand Turkey Ukraine United Kingdom United States Venezuela Vietnam Zimbabwe Copyright 2002, All rights reserved. Cisco, Cisco Systems, Cisco IOS, and the Cisco Systems logo are registered trademarks or trademarks of and/or its affiliates in the U.S. and certain other countries. All other trademarks mentioned in this document or Web site are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0208R)