F5 Applikationsbereitstellung ohne Grenzen

Transcription

1 F5 Applikationsbereitstellung ohne Grenzen Profi AG Endkunden-Webcast, Dino Schmid Major Channel Account Manager

2 Worum geht es in der IT? F5 Networks, Inc 2

3 Das wichtigste in der Unternehmens-IT sind die Anwendungen 1000 Durchschnittliche Anzahl von Applikationen in einem Unternehmen F5 Networks, Inc 3

4 Advanced threats Software defined everything SDDC/Cloud Internet of Things Mobility HTTP is the new TCP F5 Networks, Inc 4

5 F5 MISSION Deliver the most secure, fast, and reliable applications to anyone anywhere at any time. F5 Networks, Inc 5

6 F5 - Marktführer - Application Delivery Networking Anwender Rechenzentrum, Cloud, SaaS Homeoffice Büro Unterwegs Application Delivery Network SAP Microsoft Oracle F5 macht Anwendungen schnell, hochverfügbar und sicher, und zwar überall, und zu jeder Zeit F5 Networks, Inc 6

7 The Evolution of F5 4 Software Defined Application Services 3 Cloud Ready 2 Broadened Application Services 1 Application Delivery Controller F5 Networks, Inc. 7

8 F5 stellt die benötigten Applikationsservices bereit F5 Networks, Inc 8

9 F5 High Performance Services Fabric Flexible Platform Deployment: BIG-IP Appliance available in a range of Sizes and Throughput VIPRION Scalable Chassis Solution BIG-IP Virtual Edition High Performance Fabric: Device Services Clusters ScaleN Flexible Licensing vcmp TMOS: Real time Micro-kernel based Operating System Developed in conjunction with our Hardware Provides unparalleled performance and functionality Consistency across all Platforms Full Proxy Architecture BIG-IP Virtual Edition TMOS BIG-IP Platform VIPRION Platform High Performance Fabric F5 Networks, Inc 9

10 F5 Module F5 Software Modules: Local Traffic Manager Global Traffic Manager Application Acceleration Manager Advance Firewall Manager Application Security Manager Access Policy Manager To Deliver required Application Services: Security Availability Mobility Performance Identity & Access FAST AVAILABLE SECURE AAM BIG-IP Virtual Edition LTM TMOS BIG-IP Platform GTM APM ASM AFM VIPRION Platform High Performance Fabric F5 Networks, Inc 10

11 DATA CENTER ARCHITECTURES Use case Before f5 Firewall Network DDoS Application DDoS Web Access Management Load Balancer Load Balancer & SSL DNS Security Web Application Firewall with f5 Consolidation of firewall, app security, traffic management Protection for data centers and application servers High scale for the most common inbound protocols F5 Networks, Inc 11

12 DATA CENTER CONSOLIDATION Use case Before f5 Firewall Network DDoS Application DDoS Web Access Management Load Balancer Load Balancer & SSL DNS Security Web Application Firewall with f5 Consolidation of firewall, app security, traffic management Protection for data centers and application servers High scale for the most common inbound protocols F5 Networks, Inc 12

13 Die Mehrwerte der F5 Lösung für die Kunden Hält die Verfügbarkeit Ihrer Applikationen aufrecht Optimiert Ihre Netzwerkinfrastruktur Beschützt die Reputation Ihrer Marke Die Mehrwerte für den Kunden Verteidigt Sie gegen geplante Angriffe (DDoS, Hacker) Hilft Ihnen, ein Schritt voraus zu sein (Bereitstellung neuer Applikationen & Sicherheit) Spart Geld für Ihr Unternehmen (Konsolidierung) F5 Networks, Inc 13

14 Cisco and F5 Partnership Cisco and F5 are partnering to Integrate F5 Synthesis into the Cisco Application Centric Infrastructure (ACI) Deliver automated L4-7 application service insertion, policy updates, and optimisation within the ACI-enabled fabric Cisco is leveraging F5 s Software Defined Application Services (SDAS) to Deliver application centric network and services orchestration Cisco and F5 look forward to working to integrate our platforms and deliver simple, secure, scalable, and agile infrastructure that responds to the dynamic needs of the business. Soni Jiandani, SVP, Marketing, Cisco F5 Networks, Inc 14

15 F5 and Cisco ACI Joint Solution Benefits F5 DEVICE PACKAGE FOR APIC Automated layer 4-7 application service insertion, policy updates, and optimization within the ACI-enabled fabric with BIG-IP Preserves richness of F5 Synthesis offering through policy abstraction offering investment protection ACI Fabric Programmability (irule / iapp / icontrol) Data Plane Control Plane Management Plane F5 Synthesis Fabric Virtual Edition Appliance Chassis Accelerated application deployments with reliability, security and consistent scalable network and L4-L7 services - Existing F5 Physical and Virtual appliances, topologies integrate seamlessly with Cisco ACI Application agility using policy driven application delivery approach to significantly reduce operating costs - provisioning workflows is efficient and faster while maintaining operational best practices across multiple IT teams F5 Networks, Inc 15

16 Warum ist das wichtig für den Kunden? Cisco ACE: Cisco ACE Systeme sind abgekündigt. Kunden, die diese Systeme noch im Einsatz haben benötige eine alternative Lösung Cisco ACI: Cisco #1 in DC infrastructure, F5 #1 in Application Delivery for L4-L7 established and trusted team Identical Vision - F5 and Cisco sharing the same vision for application delivery with complementary solutions. Open & future proof - Cisco s ACI is an innovative new approach to making the DC infrastructure dynamic and very open. F5 s programmability will enhance ACI capabilities to deliver even better SLAs. Consolidation of Services and hardware - smaller footprint F5 Networks, Inc 16

17 Reference Architecture Intelligent DNS Scale Solving Customer Issues

18 DNS lost without it! DNS IS OUR DIRECTORY FOR LIFE IN THE INTERNET Totally lost without it F5 Networks, Inc 18

19 Internet foundation? DNS DNS DEMANDS DOMAIN NAME SYSTEM (DNS) Translates a domain name More people Mobile devices/apps Complex sites Increased latency into an IP address: (IPv4) = 2001:19b8:101:2::f5f5:1d (IPv6) Cloud implementations IPv6 added to IPv4 DDoS attacks WHEN DNS BREAKS, EVERYTHING BREAKS F5 Networks, Inc 19

20 DNS demand Available and protected AVERAGE DAILY LOAD FOR DNS (TLD) QUERIES IN BILLIONS TYPICAL FOR A SINGLE WEB PAGE TO CONSUME 100+ DNS QUERIES FROM ACTIVE CONTENT, ADVERTISING, AND ANALYTICS GLOBAL MOBILE DATA (4G/LTE) IS DRIVING THE NEED FOR FAST, AVAILABLE DNS 18X Growth G LTE Non-4G LTE 2.4GB /mo 86MB /mo DNSSEC DEPLOYMENT EXPANDING ATTACKS ON DNS BECOMING MORE COMMON; DNS SERVICES MUST BE ROBUST DISTRIBUTED, AVAILABLE, HIGH- PERFORMANCE GSLB FOR MULTIPLE DATA CENTERS Reflection/amplification DDoS Total service availability Cache poisoning attacks Geographically dispersed DCs Drive for DNSSEC adoption DNS capacity close to subscribers F5 Networks, Inc 20

21 Critical: DNS 5 SECONDS 74% are willing to wait 5 seconds or less for a single web page to load before leaving the site 2007 DNS has grown over 100% in the last 5 years Every 100ms delay costs Amazon.com 1% in sales % As of October 2012, there were over 188 million active websites, a growth of 180% over the last 5 years F5 Networks, Inc 21

22 Traditional DNS LOAD BALANCED DNS Scale DNS by adding more servers Individual servers are not high performance, so scale with load balancing Place firewall in front of DNS infrastructure ISSUES WITH THIS DEPLOYMENT? BIND DNS servers are patched frequently Patches are mostly for vulnerabilities Under load, firewalls become bottlenecks Legitimate Clients Load Balanced DNS Servers Access Network Malicious Actors Traditional DNS Firewall Local Load Balancing F5 Networks, Inc 22

23 Number of updates issued True DNS costs BIND HISTORY HIGHER OPEX DUE TO MAINTENANCE BIND by the numbers 340 updates since issued patches for vulnerabilities and bugs 9 patches a year for DNS BIND Version COMPANIES DEPLOY FIREWALLS TO PROTECT DNS But traditional firewalls don t process DNS, so a vulnerability can still be exploited on the DNS server F5 DNS Authoritative Model Traditional DNS Authoritative Topology Critical patches for vulnerabilities Total updates, including beta, release candidates Total in year 1: $301,280 Total in year 2 onward: $1,280 Total in year 1: $373,688 Total in year 2 onward: $298,688 F5 Networks, Inc 23

24 DNS deployments Internet Conventional DNS Thinking External Firewall DNS Load Balancing Array of DNS Servers Internal Firewall Hidden Master DNS Performance = Add DNS boxes Weak DoS/DDoS protection Firewall is THE bottleneck DMZ Datacenter F5 PARADIGM SHIFT Internet F5 DNS Delivery Reimagined BIG-IP Global Traffic Manager Master DNS Infrastructure DNS Firewall DNS DDoS Protection Protocol Validation Authoritative DNS Caching Resolver Transparent Caching High Performance DNSSEC DNSSEC Validation Intelligent GSLB Massive performance over 10M RPS! Best DoS/DDoS protection Lower CapEx and OpEx F5 Networks, Inc 24

25 Benefits of BIG-IP integration Simply and efficiently manage complex networks using one ADC solution Route users to available apps and data centers based on business logic Constantly monitor health between devices with iquery Use the same geolocation data to reference for all BIG-IP devices Tier 1: DMZ Tier 2: Application Delivery Legitimate Visitors Authoritative DNS + DNS Security GGTM T M Primary DNS Server + Application Availability and Health LTM Malicious Attackers Context based on geographical location LDNS Internet BIG-IP Platform Absorb and mitigate DNS attacks BIG-IP Platform Intelligent delivery based on business logic BIG-IP Global Traffic Manager BIG-IP Local Traffic Manager Simplified Business Models GOOD BETTER BEST Same purpose-built hardware and software designed for performance Same icontrol for extending management control Same centralized management solution F5 Networks, Inc 25

26 Efficient DNS DNS Express Delivers high-speed response and DDoS protection with in-memory DNS Provides authoritative DNS serving out of RAM Supports configuration size for tens of millions of records Scale and consolidate DNS servers DNS Server Clients DNS Express in BIG-IP GTM Answer DNS Query Manage DNS Records Answer DNS Query Answer DNS Query OS Admin Auth Roles Internet Answer DNS Query Answer DNS Query NIC Dynamic DNS DHCP F5 Networks, Inc 26

27 Powerful DNS Your revenue and your brand are protected Use the same IP address for multiple devices Geographically separate the DNS request load for all requests Scale DNS infrastructure up and out per number of BIG-IP devices F5 Networks, Inc 27

28 The DNS value Scalable up to 20x Denial-of-service mitigation Complete DNS control 6 3 Max DNS Access Denied: 0 Low Query Query Growth Query Spike Query Decline F5 Networks, Inc 28

29 The DNS value Support client requests and consolidate IT Route based on geolocation Secure DNS query responses IPv6 to IPv4 F5 Networks, Inc 29

30 F5 Networks, Inc 30