AVX SERIES VIRTUALIZED APPLIANCES

Transcription

1 MULTI-TENANT EQUALS MULTI-BENEFIT. AVX DATASHEET AVX SERIES VIRTUALIZED APPLIANCES AVX Series multi-tenant virtualized appliances support multiple independent ADC or SSL VPN instances to deliver the performance of physical appliances with the agility of virtual appliances. Array s AVX Series virtualized appliances provide dedicated resources to support up to 32 fully independent application delivery controller (ADC) or secure remote and mobile access (SSL VPN) virtual appliances. Combining guaranteed performance with mix-and-match configurations and flexible pay-as-you-grow pricing, AVX virtualized appliances provide the ideal combination of performance and agility for modern enterprise and service provider environments. By allocating dedicated CPU, SSL, memory and I/O per instance, performance is assured for vapv and vxag virtual appliances running on AVX virtualized appliances.

2 Highlights & Benefits High-performance 65Gbps and 115Gbps virtualized appliances, supporting up to 16 or 32 instances respectively Supports Array vapv ADC and vxag SSL VPN virtual appliances Supports entry-level, small, medium and large virtual appliances, with the ability to mix-andmatch instances Supports pay-as-you-grow licensing in onequarter, half, three-quarters and full capacity increments Each instance can support its own version of the ArrayOS operating system, and has its own dedicated input/output, CPU, memory and SSL resources to provide guaranteed performance and throughput in multi-tenant environments Feature parity with Array APV and AG Series dedicated appliances High availability spanning AVX virtualized appliances and vapv and vxag virtual appliances Management and hypervisor overhead are segregated from processing resources for assured performance among instances ecloud API for integration with cloud management, orchestration and automation Provides the best price-performance for virtualized application delivery and secure access, and the lowest $/SSL transaction per second on the market Eliminates truck rolls for provisioning highperformance load balancing and access services Reduces space and power requirements by up to 16x versus dedicated ADC or SSL VPN appliances Proven 6-month average time period to achieve ROI for enterprises, service providers and other organizations vapv instances support integrated Layer-4 and Layer-7 server load balancing, link load balancing, global server load balancing, connection multiplexing, SSL acceleration, caching, compression, traffic shaping, IPv6 and Web application security vxag instances support secure remote and mobile access with SSL encryption; multiple access methods; advanced AAA; multi-factor authentication; end-point security; and mobile device/mobile application management

3 Dedicated Virtualized Resources The AVX Series features up to 16 or 32 fully independent vapv or vxag instances capable of supporting their own Array operating system and powered by dedicated physical resources such as I/O, CPU, memory and SSL. As a result, the AVX Series offers the equivalent of up to 16 or 32 separate 1RU ADC or SSL VPN units in just 2RU, where customers and workloads can be assured of guaranteed, measurable performance. Each instance is separately programmable and centrally manageable, allowing the utmost in flexibility and control. Through dedicated hardware and software resources, IaaS and SaaS operators, enterprises and other organizations gain a true multi-tenant ADC and/or SSL VPN appliance. Mix-and-Match and Pay-as-You-Grow Licensing Four different size options are supported for constituent vapv or vxag virtual appliances entry-level, small, medium and large to fit the performance needs of customers and applications. For example, on an AVX configured with eight medium-size vapv ADC instances, each instance supports 14 Gbps throughput and 8.7K 2048-bit SSL TPS. In addition, sizes can be mixed and matched within an AVX appliance i.e., a single AVX10650 could be configured to simultaneously support one large, two medium, four small and eight entry-level instances. The AVX Series also features pay-as-you-grow licensing, allowing purchase of one-quarter, half, threequarters or full capacity. If an AVX is purchased at less than full capacity, you can expand by adding licenses for the additional capacity at any time. Guaranteed Performance in Shared Environments In a virtual environment, resources are typically shared across multiple applications or processes, which can result in performance degradation. By contrast, the AVX Series features dedicated compute resources per instance including input/ output, CPU, memory and SSL resources to assure performance levels per instance. Management and hypervisor overhead are similarly assigned dedicated resources and segregated from other instances to further avoid performancedegrading resource conflicts. Through guaranteed resources, AVX Series appliances provide the best of both worlds, allowing cloud service providers to sell services with guaranteed SLAs. Similarly, for enterprises and other organizations that need to more efficiently support business-critical applications that are simultaneously more cost-effective and more flexible. High Availability The AVX Series also supports multi-level high availability, providing redundancy and failover capability across the virtualized appliances as well as constituent vapv and vxag instances. AVX Series virtualized appliances can be configured to failover to another AVX Series appliance. Similarly, constituent vapv and vxag instances can be configured to failover to other virtual appliances on the same appliance or on a redundant HA appliance. Economical to Deploy, Economical to Maintain By consolidating multiple instances and functions into a single, easy-to-manage virtualized appliance, the AVX Series reduces cost to deploy and reduces space and power requirements by up to 32x versus dedicated ADC or SSL VPN appliances. Expensive truck rolls

4 for provisioning high-performance load balancing and access services can be eliminated as well. Time to ROI is typically just 6 months for enterprises, service providers and other organizations. ecloud API & OpenStack Integration To meet the deployment and management requirements of application delivery in the cloud, Array s ecloud SOAP API provides a script-level interface for cloud management, orchestration and automation systems to manage and monitor AVX Appliances. ecloud also assists in interactions between cloud operating systems and virtualized AVX Series appliances running vapv instances. For cloud providers and enterprises leveraging the OpenStack architecture for cloud management and automation, Array s integration with OpenStack load balancing-as-a-service (LBaaS) creates a standardized means to rapidly integrate with and control Array technology. IPv6 Support For organizations needing an IPv6 Web presence, vapv s server load balancing protocol translation (SLB-PT) transforms existing IPv4 Web sites into IPv6 compatible sites and greatly reduces the need for duplicate equipment, content and management. Where there is a need to make the most of depleted IPv4 resources, NAT and dual NAT (dual-stack IPv6) allow multiple clients to utilize a single IPv4 address. In migration environments, Array IPv6 solutions support both NAT64 and DNS64 to enable IPv6 clients to connect with IPv4 servers and content. To ensure a consistent application experience across IPv4 and IPv6 clients and networks and to enable fully-capable, next-generation solutions IPv6 feature parity is supported for all Array AVX Series virtualized appliances and constituent vapv and vxag virtual appliances. Management & Integration AVX Series virtualized appliances and constituent vapv and vxag virtual appliances are simple to install and offer intuitive configuration and management via a WebUI and a familiar command line interface. Using the administration tool kit, network managers can view the status for a wide range of system parameters, enable services on the fly and automate configuration using XML-RPC. Leveraging extensible APIs, application and network intelligence can be integrated with third-party monitoring and management or exported for optimizing complementary data center systems. In addition, AVX Series appliances support VMware vrealize Orchestrator, Microsoft System Center and OpenStack LBaaS integration for intelligent command and control of virtualized application infrastructure. Feature Parity with Dedicated Appliances All features included in Array s physical APV Series application delivery controllers and AG Series secure access gateways are available on AVX Series virtualized appliances. In addition, many features that require additional licenses such as GSLB on the APV Series and MotionPro on the AG Series are included at no additional charge in the AVX Series. vapv Instances AVX Series vapv instances utilize advanced server load balancing to ensure % availability for cloud services and enterprise applications. The vapv instances also support link load balancing and GSLB to ensure % availability for WAN connections and geographically dispersed sites. In addition, compute-intensive SSL functions can be offloaded from servers to vapv instances on the AVX Series. Server efficiency and application performance are greatly improved through hardware

5 SSL processing, and Array s purpose-built SSL stack is immune to vulnerabilities that affect open source implementations such as OpenSSL. Additional features and functionality include connection multiplexing, compression, caching, traffic shaping, Web application firewall, DDoS protection, header manipulation, HTTP content rewrite and support for IPv6 migration. vxag Instances AVX Series vxag secure access gateway instances provide anytime, anywhere secure remote and mobile access to networks, applications, Web sites and desktops for multiple communities of interest. vxag instances provide security for data in motion and at rest, and enforce application-level policies on a per-user basis. Features and functionality includes 2048-bit SSL encryption; multiple access methods including network-level and application-level connectivity; advanced AAA; multi-factor authentication; host checking; cache cleaning, integrated Web firewall; and support for mobile device and application management. Product Editions AVX Series features two models: the AVX10650 and the AVX7600. The AVX10650 can support four large, eight medium, 16 small or 32 entry-level vapv or vxag instances, and instances can be mixed and matched among vapv, vxag, and sizes. For example, a full-capacity AVX10650 can support one large vapv instance, two medium vapv instances, four small vapv instances, two entry-level vxag instances and six entry-level vapv instances all in a single appliance. The AVX10650 supports 115Gbps L4 throughput per system. The AVX7600 can support two large, four medium, eight small or 16 entry-level vapv or vxag instances, and, like the AVX10650, instances can be mixed and matched among vapv, vxag, and sizes. For instance, a full-capacity AVX7600 can support two medium vapv instances, two entry-level vxag instances and six entry-level vapv instances. The AVX7600 supports 65Gbps L4 throughput per system. Both AVX Series virtualized appliances can be purchased at one-quarter, half, three-quarters or full capacity.

6 Array Virtualized ADC Architecture Customer A, B, C... - or - Application A, B, C... Storage v APV v APV v APV v APV v APV v APV v APV v APV System & Instance High Availability v APV v APV v APV v APV v APV v APV v APV v APV Web Servers App Servers Enterprise Data Center / IaaS Provider Cloud Internal Users Switch Firewall Router External Users Internet

7 Feature Specifications = STANDARD O = OPTIONAL vapv vxag L2, L4 & L7 SLB 2048-bit SSL Encryption LLB Virtual Portals* O GSLB Layer-3 VPN Client L7 Policy Engine L3 Mobile VPN ecloud API & LBaaS Integration L4 SDK Tunneling epolicy Scripting L4 Thin Client eroute Routing Web Applications Transparent Proxy Host Checking & Cache Cleaning SSL (HW) Client, App & Device Security Compression (SW) Secure Browser Compression (HW) Array Registration Technology RAM Caching Wake-on-LAN Traffic Shaping Enterprise App Store Web Application Security (Including WAF) Clustering IPv6 Support WebUI Multi-language WebUI Additional Virtual Portals O Single System Image Fast Failover Clustering *vxag requires a separate pool license for total concurrent users and virtual portals.

8 Product Specifications AVX7600 AVX10650 vapv Instances 2, 4, 8 or 16 4, 8, 16 or 32 Max. L4 Throughput 65 Gbps per system 115 Gbps per system Max. SSL TPS (2048) 35K per system 70K per system 1 GbE (copper) Management Port GbE Fiber (SFP+) 8 16 Power Supply Dual Power: VAC, 10-5A, 47-63Hz Dual Power: VAC, 10-5A, 47-63Hz Dimensions Dual Power: 2U 17 W x 22.5 D x 3.5 H Dual Power: 2U 17 W x 22.5 D x 3.5 H Weight Dual Power: 28 lbs. Dual Power: 28 lbs. Environmental Operating Temperature: 0º to 45º C, Humidity: 0% to 90%, Non-condensing Operating Temperature: 0º to 45º C, Humidity: 0% to 90%, Non-condensing Regulatory Compliance ICES-003, EN 55024, CISPR 22, AS/NZS 3548, FCC, 47FR part 15 Class A, VCCI-A ICES-003, EN 55024, CISPR 22, AS/NZS 3548, FCC, 47FR part 15 Class A, VCCI-A Safety CSA, C/US, CE, IEC , CSA , EN CSA, C/US, CE, IEC , CSA , EN Support Gold, Silver and Bronze Level Support Plans Gold, Silver and Bronze Level Support Plans Warranty 1 Year Hardware, 90 Days Software 1 Year Hardware, 90 Days Software

9 1371 McCarthy Blvd. Milpitas, CA Phone: (408) Toll Free: MY-ARRAY VERSION: APR-2015-REV-A 2015 Array Networks, Inc. All rights reserved. Array Networks, the Array Networks logo and ecloud are all trademarks of Array Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Array Networks assumes no responsibility for any inaccuracies in this document. Array Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.