F5 Beyond Load Balancer

Transcription

1 1 Market & Partner Update F5 Beyond Load Balancer Nutapone Apiluktoyanunt Country Manager F5 Networks Inc.

2 2 Agenda Intro to F5 ADN (Application Delivery Network) F5 Networks Solutions Overview F5 ADN Use Cases F5 Applications Integration F5 Professional Services F5 Web Resources Q&A

3 F5 Application Delivery Network (ADN) 3

4 4 IT Challenge Applications and networks behave independently Many network functions require high degrees of manual intervention Distributed architectures and web services increase complexity Hi t i ll li ti d t l f Historically, applications and protocols for communicating with network devices inflexible at best

5 5 Application Problems: Finger Pointing 101 Slow responses Bloated data Security risks Many servers Exchange, SharePoint Application Attacks XML, SOAP, ActiveX, JS Office workers telecommuters Network Administrator Application Developer

6 6 A Shift Toward Innovation Securing assets Managing systems Reducing costs Developing new apps, services, SOA Virtualization Enabling interop Maintaining legacy apps Ensuring compliance Driving people productivity Enabling Mobility 80% 20% 80% 20% MAINTENANCE NEW INNOVATION

7 Users What is ADN? Data Center 7 Private Users From Where: LAN Home Branch / WAN Road / WAN Public Users From Who: Customers Partners Suppliers Consultants From What: PC Laptop Home PC PDA Kiosk Mobile From What: PC Laptop Home PC PDA Kiosk Mobile Application Delivery Network Microsoft SAP Oracle IBM BEA HTTP /HTML, SIP, RTP, SRTP, RTCP, SMTP, FTP, SFTP, RTSP, SQL, CIFS, MAPI, IIOP, SOAP, XML etc F5 ensures applications running over the network are always secure, fast and available without Code Change

8 8 Why F5? Application Layers 4-7 Network Layers 1-3 Remote Access Rate Shaping Data Center Applications Content Acceleration ROUTERS DoS Protection SSL Acceleration Load Balancing WAN Optimization SWITCHES FIREWALLS Application Security irules icontrol Traffic Compression Caching Connection Optimization Intelligent Clients

9 Gartner: Application Delivery Networking 9 Magic Quadrant for Application Delivery Products, 2009 Q109 ADC Market Share Cisco 26% Citrix 11.2% Radware 6.6% Crescendo 29% 2.9% Others 16.5% F5 NETWORKS 36.8% Q109 Advanced Platform ADC Market Share Citrix 15.9% Crescendo 4.2% Radware 9.3% Cisco 4.2% Others 14.3% F5 NETWORKS 52.2% 2%

10 10 ADN provides Application Acceleration BEA Weblogic Outlook Web Access Plumtree IBM Websphere Ecommerce 2X to10x Performance Increase SAP Portal PeopleSoft Siebel SharePoint 2007 Portal Seconds Without Acceleration With Asymmetric Acceleration With Symmetric Acceleration

11 11 ADN provides L7 Web Application Security Intelligent Client Network Plumbing Application Infrastructure Application Buffer Overflow Cross-Site Scripting SQL/OS Injection Cookie Poisoning Hidden-Field Manipulation Application DoS Attacks HTTP/S Traffic Error Messages Non-compliant Content Credit Card / SSN data Server Fingerprints User Firewall IDS-IDP Anti-Virus IPS VPN App Firewall App

12 ADN Use Cases 12

13 13 BIG-IP WebAccelerator Primary Data Center Real-time Monitors sports.web.com BIG-IP LTM + WebAccelerator webpromo.com Web Servers Solution Simplified and streamlined Pre-defined Fix and accelerate web applications Reduce bandwidth utilization Offload Server processing Mitigate the effects of network latency Acceleration Policies

14 14 Improving User Experience Page Load Time Page Delivery Time App portal response time Page Delivery Time 75% Internet or WAN 70% 60% Client Browser Server Infrastructure Server Offload Compression Dynamic Caching Content Spooling OneConnect Rate Shaping Connection limit Load balancing

15 15 Improving User Experience Page Load Time Page Delivery Time App portal response time Page Delivery Time 60% Internet WAN 40% Client Browser Server Infrastructure Network Acceleration Compression Dynamic Caching TCP Express Server Offload Compression Dynamic Caching Content t Spooling OneConnect Rate Shaping Connection limit Load balancing

16 16 Improving User Experience Page Load Time Page Delivery Time App portal response time Page Delivery Time 35% Internet WAN 25% Client Browser Server Infrastructure Network Acceleration Compression Dynamic Caching TCP Express Differential Compression QoS Security/authentication Server Offload Compression Dynamic Caching Content Spooling OneConnect Rate Shaping Connection limit Load balancing

17 17 Improving User Experience Page Load Time Page Delivery Time App portal response time Page Delivery Time 10% Internet WAN 10% Client Browser Server Infrastructure Application Acceleration IBR (Dynamic Content Control) Multi-Connect Dynamic Linearization Dynamic Caching Dynamic Compression SSL Acceleration Network Acceleration Compression Dynamic Caching TCP Express Differential Compression QoS Security/authentication Server Offload Compression Dynamic Caching Content Spooling OneConnect Rate Shaping Connection limit Load balancing

18 18 DC: Reduce App Cost with Application Delivery Controller Million 95% Fewer Connections 5 Million MSN reduced a tremendous Less Network Utilization amount of DC Cost621 33% Reduction in HW Servers SW Licenses Op Mgmt % Terabyte Gigabytes Reduction in Bandwidth 3 Seconds Faster End-to-End Page Load Time 1 Seconds 200% Faster

19 19 irule allows System Customization without any Application Code Change Challenge 1. Database replication 2. User experience Solution 1. Read from East Coast sent to local app/db 2. Write request sent to remote app/db 3. irule checks to see if data is replicated yet Benefits 1. Decrease latency 2. Provide fault tolerance

20 20 File Virtualization why is it matter? IT Budget Constraints Volume of Data Growing Total Enterprise Disk Storage Systems (Exabytes) Exabytes Shipped IDC: Worldwide Network Controller and Block-Level Storage Virtualization Forecast: A Key Component in Building the Virtual Datacenter, April 2008 IT is seeking cost and efficiency improvements

21 21 The Key to Managing Storage Growth BEFORE User / application access tightly coupled to physical file storage Inflexible: change is disruptive Complex: multiplemappingstomappings to heterogeneous storage devices Inefficient: low aggregate utilization

22 22 The Key to Managing Storage Growth BEFORE AFTER User / application access tightly coupled to physical file storage Inflexible: change is disruptive Complex: multiplemappingstomappings to heterogeneous storage devices Inefficient: low aggregate utilization File access decoupled from physical storage location Flexible: change is nondisruptive Simple: single mapping to unified storage pool Efficient: maximize utilization

23 Fixed Telecommunication network Provider List China Telecom 223M Subscribersbe s 300+ Big-ip, 3DNS, FP Mobile License in the Near Future Huge Number Forecast in FY2008 China Netcom M Subscribers 200+ Big-ip, FP Mobile License in the Near Future Huge Number Forecast in FY

24 Mobile Telecommunication network Provider List 24 China Mobile No.1 Carrier world wide 325M+ Subscribers F5 boxes TD-CDMA Start to Deploy China Unicom M Subscribers 100+ Big-ip Maybe Merged into CTC and CNC

25 25 Highly Available 24x7 Banking Infrastructure HSBC IT Vancouver, BC HSBC NYC & Chicago HSBC UK P2G DCs HSBC Paris, France SABB Riyadh HSBC HK P2G DC HSBC Mexico City Australia Sydney One of the World s Largest Bank by Market Capitalization Major Applications: 1. Internet Banking 2. Corporate IT 3. PeopleSoft HR Portal

26 DC: Consolidation by Virtualization 26 Cell PC - Home Remote - WAN PC - LAN Data Cent ter & Link Pool Virtua alization Web Server App. Server Web Server, Storage, Web Serve er Pool Vir rtualization Applicatio on Server Pool Virtua alization Network and DC App. Server Web Server Consolidation Web Server Web Server App. Server App. Server File Storag ge Pool Vir rtualization NetApp EMC Windows file storage Windows file storage WLAN GTM & LC LTM Web Server LTM ARX

27 F5 Network Solutions 27

28 F5 Networks: Integrated Application Delivery Networking Architecture 28 International D C ata enter Enterprise Manager / ControlPoint Users Edge Gateway (EGW) WAN Local Global l App Access BIG-IP Local Web BIG-IP Optimizat Traffic BIG-IP Traffic Link Security Policy Traffic Accelerati BIG-IP ion Manager Global Manager ARX Controller Manager Manager Manager on Application FirePass Manager File/Data (LTM) Traffic (GTM) (ASM) (APM) (WA) Security SSL VPN (WOM) Virtualization Manager BIG-IP Web Manager WANJet Accelerator ARX TMOS (irule and icontrol) pplications A & torage S BIG IP Hardware icontrol TMOS v10.x Business Goal: Achieve these objectives in the most operationally efficient manner

29 29 Platform Performance for LTM BIG-IP BIG-IP BIG-IP BIG-IP BIG-IP VIPRION With 4 blades Max. throughput 1 Gbps 2 Gbps 4 Gbps 6 Gbps 12 Gbps 40 Gbps Layer 4 Connections/sec Layer 7 Requests/sec (inf-inf) inf) 60, , , , ,000 1 Million 100, , , ,000 1,200,000 3,200,000 Max. conc. conn. 4 Million 4 Million 8 Million 8 Million 16 Million 32 Million Max. SSL TPS 5,000 10,000 15,000 25,000 58, ,000 Max. SSL Bulk 1 Gbps 1.5 Gbps 3.8 Gbps 4 Gbps 9.6 Gbps 36 Gbps Max. SSL conc. conn. 1 Million 1 Million 1 Million 2 Million 4 Million 8 Million Max. compression 1 Gbps 1 Gbps 3.8 Gbps 5 Gbps 8 Gbps 16 Gbps Switch backplane 14 Gbps 24 Gbps 34 Gbps 68 Gbps 112 Gbps 368 Gbps

30 30 Avoid Growing Pains TMOS + Security + Accel + irules + icontrol VIPRION 3,200,000 Layer 7 Requests/Sec ACE 16G 76,000 L7 RPS =42Blades

31 31 Don t TakeOurWordforIt 3 rd party functionality report On The GUIs On the configurability of Rate Shaping On the Architecture and toolsets of irules and icontrol On the configurability of Connection Management

32 32 Real-World Testing Goal: Real world, open, honest, and repeatable testing Markets had too many engineered and isolated hero statistics Most extensive testing to date Europe s foremost independent d network testing facility 150 tests completed across all vendors Ixia and Spirent validated tests and detailed methodology documentation plus full configurations (126 pages) Results BIG-IP 6800 emerged comfortably ahead on all tests Demonstrated 2x 5x better performance across all major functions L4, L7, SSL, compression, DoS protection, and mixed traffic tests

33 F5 Applications Integration 33

34 34 Intergration With Major Applications AmberPoint Service Level Manager BEA Systems WebLogic Server BorderWare MXtreme Check Point Software Technologies VPN-1/FireWall Citrix Systems MetaFrame Coradiant TrueSight CoroSoft Director IBM Lotus Domino Web Access (inotes) IBM WebSphere Macromedia ColdFusion MX/JRun Mercury Topaz Microsoft Application Center Microsoft Exchange Server 2007 Microsoft Exchange Server 2003 Microsoft Internet Information Services (IIS) Microsoft Internet Security and Acceleration Server Microsoft Live Communications Server Microsoft Mobile Information Server Microsoft Office SharePoint 2007 Microsoft SharePoint Portal Server 2003 Microsoft Windows Terminal Services Netegrity SiteMinder Oracle 9iAS Oracle 10g Oracle E-Business Suite 11i Quest SharePlex RLX Technologies Control Tower RSA Security SecurID SAP Siebel Systems ebusiness Applications Symantec WholeSecurity Confidence Online Server Trend Micro InterScan webmethods Integration Platform

35 35 Organizations Worldwide Trust F5 to Keep Their Businesses Running Including 9 out of 10 of the world s top financial services firms and 60% of the Global 1000 Financial IT Telco/ISP Media Transport Other

36 F5 Professional Services 36

37 Professional Services 37 provides p maintenance support, consulting services and training on F5 technology ensuring technical problems are addressed effectively, implementations executed with ease and technical knowledge shared effectively cumulating in greater ROI for our partners and customers by making our services expertise, systems and infrastructure available to those who subscribe to our offerings

38 38 The Customer & Professional Services Onsite Consulting Services Services F5 P f Professional i l Services Training Maintenance Services Services

39 Maintenance Services 39 Maintenance Support Contracts Toll-Free Tl Telephone Numbers Supports Software and Hardware 7x24 Advisory Support, Hardware replacement and problem resolution Full management and Technical Escalation Product Development

40 Maintenance Support 40 Standard Premium Service 8x5 Monday to Friday Software Upgrades Major Minor HotFixes Access to AskF5 Access to WebSupport Access to Phone Support irules review Service 24x7 Software Upgrades Major Minor HotFixes Access to AskF5 Access to WebSupport Access to Phone Support irules Support

41 RAPID-RMA 41 Sparing RAPID-RMA RMA Local Warehousing Advance Replacement (included with all Maintenance) Service Not all models covered Often rely on F5 Sales to loan appliances Customer has two or more outages Service One Outage Identical swap 21 days to return broken appliance Next Business Day 4hour 24x7 Available Singapore Thailand Malaysia TBD Service One Outage Identical swap Appliance shipped from USA, expect 4-10 business days 21 days to return broken appliance Available All Countries Is included as part of F5 Maintenance

42 Training Services 42 Authorised Training Centres across Asia Pacific Onsite customer training i available Basic and Advanced F5 Portfolio Training i Training courses aligned to technical certification

43 Training Courses 43 Network Operations Technical Support Teams Application Development & Support Teams Offerings Operating BIG-IP Operating Viprion Essentials Troubleshooting GTM LTM Essentials Advanced Troubleshooting Other GTM ASM WebAccelerator Architecture Coming in 2010 Server Virtualisation with BIG-IP Offerings WebAccelerator for Application Teams Coming in 2010 ASM for Application Teams

44 Web Resource 44

45 45 Self-Serve Serve Resources General Information F5.com Solutions Self-Serve Solution Center / ti Deployment Guides Solution Guides White Papers Technical Self-Serve - Ask F5 com Documentation Solutions (FAQ) Knowledge Base Developer Community DevCentral SDK Forum/BLOGS Tips/Samples FAQ Downloads/Code Share Support Case Management WebSupport Portal Support case creation, management, view F5 Resources

46 Summary 46

47 47 F5 ADN Summary F5 is the market leader in Application Delivery Networking for the past 7 consecutive years. 9 out of 10 of the world s top Telco/Financial and Government firms trust F5 solutions F5 ADN architecture is focused on FAST, SECURE & AVAILABLE End-to-End support (product -> training/certification -> support )