SERVERIRON LINK BALANCER

Transcription

1 SERVERIRON LINK BALANCER Maximizing Enerprise Inerne Access Highlighs Efficien load balancing over muliple Inerne links o increase bandwidh uilizaion Reduce cos for Inerne service by increasing link uilizaion wih redundancy Eliminae he need for complex BGP rouing in Enerprise nework High-availabiliy link load balancing wih ransparen failover Saic and dynamic merics o inelligenly load balance for opimal link uilizaion Real-ime measuremen of in-band service response ime and available capaciy Increase Inerne access capaciy by aggregaing muliple low-cos links InelliNAT for securing Enerprise nework and delivering consisen applicaion performance Transparen Applicaion Suppor for any IP applicaion ServerIron Link Balancer o Opimize ISP Link Usage and Lower Cos Inerne access is a he hear of every Enerprise business operaion. Foundry Neworks ServerIron Link Balancer maximizes Inerne conneciviy and availabiliy while reducing he oal cos. The Link Balancer uses inelligen Layer 4-7 swiching o efficienly load balance Enerprise Inerne raffic beween all available ISP links wihou he complexiies and limiaions of he BGP rouing proocol. Addiionally, he Link Balancer opimizes uilizaion of ISP links by using merics like link healh, service response ime, proximiy, and cos of bandwidh ha are ied direcly o business produciviy and profiabiliy. Many Enerprises purchase redundan ISP links for Inerne conneciviy o suppor heir mission-criical business needs. Today, o simulaneously uilize all he links, Enerprises need o use complex BGP rouing proocol and hire resources o manage i. They are faced wih wo poor choices of keeping he bandwidh on redundan links idle, or invesing significanly in BGP experise and managemen. Wih he simple-o-use ServerIron Link Balancer, Enerprises can maximize heir reurn on Inerne access coss while significanly boosing he performance of heir applicaions.

2 Buil on Foundry s proven IronCore archiecure, ServerIron enables Inerne raffic swiching based on Layer 2 hrough Layer 7 definiions, and delivers indusry-leading performance for Inerne raffic managemen funcions. Link Balancer Applicaions ServerIron Link Balancer suppors he following key applicaions in he Enerprise nework: 1. Link Load Balancing Disribue IP-based services and ransparenly load balance raffic across muliple ISP links while coninuously monioring link healh, response ime and uilizaion in real ime. This applicaion enhances overall reliabiliy and availabiliy of Inerne access while opimizing uilizaion on all available links. Enerprise users will experience immediae improvemens in produciviy wih no added cos. 2. Link Aggregaion Ge increased bandwidh for Inerne access by aggregaing muliple low-cos links wih inelligen load balancing. Avoid paying seep prices for high-capaciy links and minimize he risk of downime. Increase service reliabiliy and reduce cos by purchasing and aggregaing bandwidh from muliple Inerne Service Providers (ISPs). 3. Enerprise Nework Securiy Wih he superior performance and advanced securiy feaures, he ServerIron, when deployed wih he Link Balancer, acs he firs line of defense o Firewalls and Enerprise applicaions agains DoS aacks. The ServerIron Link Balancer provides IronShield proecion o criical business applicaions from unauhorized and malicious users. Figure 1: ServerIron Link Balancer ROUTER #1 ISP1 ENTERPRISE NETWORK SERVERIRON ROUTER #2 ISP2 INTERNET ROUTER #3 ISP3

3 Key Benef is Always-On Inerne Conneciviy ServerIron Link Balancer ensures uninerruped Inerne conneciviy by providing inelligen load balancing wih coninuous link healh monioring. In he even of a link ouage or degradaion, he Link Balancer provides deecion and rapid fail-over for raffic o he oher available ISP links. The Link Balancer deecs failures and performance degradaions on ISP links before he Enerprise hoss, and akes correcive acion by swiching over o links bes able o serve he raffic. Two ServerIrons deployed in high-availabiliy configuraion provide 24x7 Inerne conneciviy o Enerprise cliens even during caasrophic failures. In he even ha one device fails,he sandby device ransparenly akes over wihou disruping raffic flows. The ServerIron s exensive link healh check capabiliy moniors end-o-end Layer 2, Layer 3, Layer 4, and Layer 7 conneciviy, and deermines he links abiliy o quickly respond o clien requess. Healh checks also ensure fas deecion of link problems and eliminae lenghy manual roubleshooing during ouages. Maximum Scalabiliy The Link Balancer combines he feaure rich link load balancing wih he high-performance ServerIron archiecure o mee he Inerne conneciviy needs of mos Enerprise cusomers. I can suppor line-rae link balancing for up o six T3 or wo OC3 links. Easy o Se Up and Manage ServerIron Link Balancer is simple o configure and manage using he Command Line Inerface (CLI) or he buil-in Web inerface. The CLI uses well-known Cisco-like commands allowing nework adminisraion saff o easily configure all Foundry producs. In addiion, ServerIron s suppor for Simple Nework Managemen Proocol (SNMP) allows device managemen using applicaions such as HP OpenView, available on major server plaforms including Sun Solaris, HP-UX,and Windows NT. Key Feaures Ou-Bound Link Balancing ServerIron provides ou-bound load balancing for any ype of IP applicaion raffic, and handles link balancing on up o six T3 or wo OC3 links.traffic belonging o a connecion is roued o he same link based on session informaion o achieve reliable and persisen service. InelliNAT (Inelligen Nework Address Translaion) is used o secure inernal nework while ensuring he reurn packes are roued back hrough he same ISP link for consisen connecion performance. In-Bound Link Balancing Incoming raffic ino an Enerprise nework is load balanced o muliple ISP links. Using passive DNS inercep in combinaion wih inelligen load balancing algorihms,he ServerIron re-direcs in-coming raffic over all available links o achieve opimal uilizaion. Link Balancing Mehods To mee he diverse demands of Foundry s Enerprise cusomers,he ServerIron Link Balancer suppors a comprehensive se of user-configurable saic and dynamic link merics for inelligen load balancing.by fineuning he merics,nework adminisraors can opimize performance and cos of Inerne service o mee he needs of specific deploymen. Pro-Acive Measuremen of Link Performance The ServerIron Link Balancer uses a pro-acive approach o measuring link performance for effecive load balancing of raffic.in-band measuremen of end-o-end service response ime during connecion seup is combined wih pro-acive ouof- band measures o pick he links ha deliver he bes overall performance. High Availabiliy Foundry s ServerIron devices are designed o suppor mission-criical business applicaions. To provide a high-level of redundancy and faul olerance o he Link Balancer,wo ServerIron devices can be deployed in high-availabiliy configuraion wih session synchronizaion and ransparen failover for oal Inerne access reliabiliy. Real-Time Synchronizaion Session informaion and link performance measures are synchronized in real-ime beween he wo ServerIron devices configured for high availabiliy o mainain consisenly high load balancing performance in he even of failover o he sandby device.saeful connecion failover and insananeous availabiliy of link performance informaion allows Enerprise users o be fully ransparen o nework failures.

4 Robus Securiy Wih Enerprise nework and applicaion infrasrucure a he core of he business,he loss of produciviy and profis from exernal Denial of Service (DoS) aacks is devasaing.the ServerIron Link Balancer provides indusry s bes defense agains DoS aacks.using InelliNAT on ougoing raffic,he ServerIron provides an addiional layer of proecion by keeping inernal IP addresses privae and inaccessible o exernal hoss. Backup Links The ServerIron Link Balancer suppors backup links ha are used for load balancing raffic only when all oher ISP links fail.transiion o he backup links is auomaic,insananeous and fully ransparen o nework hoss.this feaure allows he use of highly reliable low-capaciy links for uninerruped conneciviy during caasrophic failures. Link Healh Checks Link Conneciviy The Link Balancer coninuously moniors conneciviy o he rouers,isp nodes and nodes in he Inerne o deermine he availabiliy of links in real-ime.loss of conneciviy is deeced insananeously,and all he sessions are ransparenly swiched o oher available links.by monioring link conneciviy beyond he nex hop,he Link Balancer ensures ha mission-criical raffic is reliably serviced end-o-end. Link Uilizaion When uilizaion on links reaches a specific hreshold,he Link Balancer re-direcs new raffic flows o oher less uilized links.the hreshold for marking he links as fully uilized and removing hem from he available pool is user-configurable.link uilizaion is coninuously moniored o add he links back o he available pool once uilizaion drops below he hreshold. Proximiy and Link Response Time Using sophisicaed monioring of in-band raffic flows,and ou-of-band hop coun and response ime,he Link Balancer has an accurae view of end-o-end service response ime on all he ISP links.these measures are used o avoid uilizing links ha are likely o adversely impac applicaion performance. Load Balancing Mehods Round Robin Assigns raffic flows sequenially among he muliple available ISP links.round robin reas all links as equal regardless of he capaciy,cos and preferences.this mehod is suiable for neworks wih muliple ISP links wih equal capaciy and similar raffic flows. Weighed Round Robin Assigns raffic flows sequenially o he ISP links based on link weigh.links wih greaer weigh are assigned proporionaely more connecions.this mehod is appropriae for Enerprises purchasing access o ISP links wih dissimilar capaciy and performance capabiliies.i ensures adequae disribuion on muliple links and avoids link overload. Link Cos Allows managers o assign cos of bandwidh ($ per kilobi/sec) o each link.the Link Balancer uses weighed cos o load balance raffic and ensures ha he cheaper links are preferred.using his mehod,he Enerprises can minimize he cos of heir Inerne access wihou compromising applicaion performance.various link cos models are suppored including pre-paid,variable,and iered. Service Response Time The Link Balancer is designed o mee he needs of diverse users and applicaions in an Enerprise.Using response ime and hop coun measures,he Link Balancer direcs raffic over links ha provide bes performance for specific applicaions and users.pro-acive ouof-band service response ime measures are used on unuilized or under-uilized links o mainain real-ime nework performance informaion. Link Usage Limis In his mehod,he Link Balancer limis link uilizaion o user-defined logical limis ha may differ from physical capaciy.when link uilizaion reaches he logical limi,raffic is direced o oher under-uilized links. This mehod helps lower ISP cos for Enerprises using variable or iered pricing for ISP access wih higher marginal cos for exceeding pre-se bandwidh limis. Proximiy The Link Balancer uses ou-of-band messages o measure round rip ime,hop coun,and compleion rae o deermine proximiy of hoss in he Inerne serving specific Enerprise applicaions and users.these measures are hen used o efficienly load balance raffic beween links able o provide bes performance. IronShield Securiy InelliNAT ServerIron s InelliNAT feaure allows Enerprise cusomers o use non-rouable privae addresses on inernal hoss o enhance securiy and conserve address space. The Link Balancer performs InelliNAT on ougoing raffic and shields he Enerprise nework and applicaions from exernal aacks.incoming packes wihou maching reverse raffic flow informaion are disallowed from reaching inside he Enerprise nework.inellinat also ensures ha reurn raffic is roued over he same ISP link as he original raffic,herefore mainaining applicaion ransacion persisence and delivering consisenly superior performance.

5 DoS Proecion ServerIron Link Balancer proecs Enerprise nework and applicaions agains muliple forms of Denial of Service (DoS) aacks,such as TCP SYN aacks,by monioring and racking session flows.only valid connecion requess are allowed ino he inernal nework.this capabiliy combined wih he ServerIronXL s abiliy o suppor over 1 million concurren connecions proecs agains he hijacking of inernal nework resources by unauhorized and malicious users,and ensures high-performance conneciviy for genuine raffic. High Performance Access Conrol Liss (ACLs) and Exended ACLs By using ACLs,nework adminisraors can resric access o specific applicaions from a given address or subne.filers can be easily se o deny access o servers by any paricular por or VIP address.for example,a nework adminisraor can deny FTP raffic o a paricular address. Conversely,filers can be se o allow access by a subse of users or subnes. Cisco-synax ACLs ServerIron suppors Cisco-synax ACLs,which nework adminisraors can easily cu/copy/ pase from heir exising Cisco producs o drop hem righ ino he ServerIron configuraion for he ulimae in porabiliy and securiy. High Availabiliy Services Backup Links The ServerIron Link Balancer allows reserving links for backup.these links are brough ino he pool of available links for load balancing only if all he original links fail.these backup links may be highly reliable bu low-capaciy links ha may be used for uninerruped conneciviy during caasrophic failures. Acive/Sandby To provide an added layer of faul olerance and reliabiliy,wo ServerIron swiches may be deployed in Acive-Sandby high-availabiliy mode.when deployed in his mode,a failure of he Acive device or is physical links will resul in a quick and ransparen failover of raffic flows o he Sandby device.configuraion common o he wo ServerIrons is synchronized o avoid manual replicaion and poenial human errors.addiionally,he acive ServerIron synchronizes real-ime link performance and proximiy measures o allow failover wihou he added measuremen delay. Qualiy of Service Nework adminisraors can prioriize raffic based on pors,mac,vlan,and 802.1p aribues,as well as by service por and applicaion ype;for example, ServerIron can gran prioriy o HTTP raffic over FTP. Redundan Power Supplies ServerIronXL suppors an opional buil-in redundan power supply o provide high level of proecion agains power failures. Easy Link Managemen Mix and Mach Links ServerIron increases Inerne access flexibiliy and invesmen proecion for exising ISP links by allowing uninerruped raffic disribuion o differen links based on user-defined performance merics wih dynamic measures. SNMP Reporing ServerIron repors SNMP raps and evens o he specified rap receiver and can send hose managemen messages o up o six differen Syslog servers.

6 Technical and Physical Specif icaions Load Balancing Mehods - Round Robin -Weighed Round Robin - Link Cos - Link Bandwidh - Bandwidh Usage Limis - Service Response Time - Hos Proximiy Layer 2 Swiching Capabiliies - 32,000 MAC addresses d Spanning Tree Proocol p prioriizaion -Policy-based VLANs -Por-based VLANs -Layer 3 proocol VLANs -Layer 3 proocol and subne VLANs q VLAN agging Proocol Suppor - TCP - UDP - SSL - FTP -Telne - SMTP - HTTP -SOAP - IMAP4 -LDAP - NNTP - POP3 - DNS - BooP - TFTP - SNMP - IPSec - RADIUS -VoIP Sandards Compliance ,10BaseT u 100BaseTX,100BaseFX z 1000BaseSX z 1000BaseLX x Flow Conrol q VLAN Tagging d Bridging Eherne Like MIB - Repeaer MIB - Eherne Inerface MIB - SNMP V1 - SNMP MIB II Nework Managemen - Inegraed Command Line Inerface - SSH - Web-based GUI - Telne - SNMP - RMON - IronView Nework Manager (INM) - HP OpenView Warrany -1 year hardware - 90 days sofware - Upgrades o higher levels available Mouning Opions - 19" Universal EIA (elco) Rack - Tableop Plaform ServerIronXL Concurren sessions 1,000,000 Swiching capaciy 4.4 Gbps Number of Virual IP addresses Unlimied Number of ISP links Up o six T3 links or wo OC3 links Number of 10/100 pors 16 or 24 Number of Gigabi pors Up o 2 Toal number of pors 26 maximum Layer 3 swiching capabiliies Suppors links on differen subnes Physical dimensions 2.75" h x 17.5" w x 16.75" d (6.7 cm x 44.5 cm x 42.2 cm) Weigh lbs (8 10 kg) Power requiremens Dual 110v/220v auo-sensing

7 Ordering Informaion Par Number Descripion ServerIronXL Base Plaform FCSLB16 FCSLB24 FCSLB16-I FCSLB24-I FCSLB16DC FCSLB24AC 16-por 10/100Base-TX (RJ45) ServerIron XL wih one expansion slo 24-por 10/100Base-TX (RJ45) ServerIron XL wih one expansion slo (Inernaional Orders Only) 16-por 10/100Base-TX (RJ45) ServerIron XL wih one expansion slo (Inernaional Orders Only) 24-por 10/100Base-TX (RJ45) ServerIron XL wih one expansion slo 16-por 10/100Base-TX (RJ45) ServerIron XL wih one expansion slo and 48VDC power supply 24-por 10/100Base-TX (RJ45) ServerIron XL wih one expansion slo and 48VDC power supply ServerIronXL Sysem Opions U1GC U2GC RPS RPS-I RPSDC-FC F2100F F1GE F2GE FLX1GE FLX2GE FLXSXGE FLHA1G FLHA2G FLHB1G FLHB2G LHA LHB 1-por 1000Base-T (RJ45) copper Gigabi uplink 2-por 1000Base-T (RJ45) copper Gigabi uplink Redundan auo-swiching v AC power supply for ServerIron XL 16/24 por only (Inernaional Orders Only) Redundan auo-swiching v AC power supply for ServerIron XL 16/24 por only -48VDC power supply for ServerIron XL 16/24 only and is a facory configuraion only 2-por 100Base-FX MMF (SC) uplink 1-por 1000Base-SX (SC) Gigabi uplink for 50 or 62.5 um MMF 2-por 1000Base-SX (SC) Gigabi uplink for 50 or 62.5 um MMF 1-por 1000Base-LX (SC) Gigabi uplink for 9 or 10 um SMF 2-por 1000Base-LX (SC) Gigabi uplink for 9 or 10 um SMF 2-por Gigabi uplink wih 1-por 1000Base-SX (SC) and 1-por 1000Base-LX (SC) for 50 or 62.5 um MMF and 9 or 10 um SMF 1-por 1000Base-LogHaul (SC) series A Gigabi uplink for 70 km maximum reach wih 9 or 10 um SMF and minimum 10 db aenuaion 2-por 1000Base-LogHaul (SC) series A Gigabi uplink for 70 km maximum reach wih 9 or 10 um SMF and minimum 10dB aenuaion 1-por 1000Base-LongHaul (SC) series B Gigabi uplink for 150 km maximum reach wih 9 or 10 um SMF and minimum 10dB aenuaion 2-por 1000Base-LongHaul (SC) series B Gigabi uplink for 150 km maximum reach wih 9 or 10 um SMF and minimum 10 db aenuaion ServerIronXL GBIC Opions 1-por 1000Base-LongHaul (SC) series A Gigabi uplink for 70 km maximum reach wih 9 or 10 um SMF and minimum 10dB aenuaion specify SX or LHx upgrade quaniies 1-por 1000Base-LongHaul (SC) series B Gigabi uplink for 150 km maximum reach wih 9 or 10 um SMF and minimum 10dB aenuaion specify SX or LHx upgrade quaniies Specificaions subjec o change wihou noice.

8 Foundry Neworks,Inc. Corporae Headquarers 2100 Gold Sree P.O. Box San Jose,CA U.S.and Canada Toll-free: (888) TURBOLAN ( ) Direc:(408) Fax:(408) hp:// Alhough Foundry has aemped o provide accurae informaion in hese maerials, Foundry assumes no legal responsibiliy for he accuracy or compleeness of he informaion. Please noe ha Foundry s produc informaion does no consiue or conain any guaranee, warrany or legally binding represenaion,unless expressly idenified as such in a duly signed wriing Foundry Neworks,BigIron,NeIron,FasIron,ServerIron,IronWare,Jescope,IronView and he Iron marks or rademarks are regisered rademarks of Foundry Neworks,Inc.in he Unied Saes of America and oher counries DS-017/Rev.1/10-03