A10 Networks IPv6 Overview. November 2011

Transcription

1 A10 Networks IPv6 Overview November

2 A10 Networks Company Overview Mission: The Technology Leader in Application Networking Flagship Product AX Series Application Networking Platform Lee Chen Founder/CEO. Co-founder of Foundry Networks, co-founder of Centillion Headquarters in San Jose, California; offices worldwide 325 employees worldwide Profitable throughout 2010 and 18 consecutive quarters revenue growth 2 th fastest growing private company in Silicon Valley & #1 fastest growing private Computer Hardware company in North America 2

3 Sample AX Series Customers Florence County 3

4 A10 Markets and Competitors Competitors: ADC Vendors Competitors: Networking Vendors Competitors: ADC Vendors Advanced Application Delivery Controller (ADC) New Generation Server Load Balancer Dual-Stack Encapsulation Translation Virtual Appliance Multi-tenancy Virtual Chassis 4

5 Application Delivery and Load Balancing Overview Site Always Available Faster Response High Volume Traffic & Unpredictable Spikes Disparate Devices & Protocols Application Delivery Controller Efficient Distribution Reduced Connections Normalized Traffic CPU & Network Off-load Easier Management Connection Efficiency Users External Network ADC Internal Network Servers Primary Datacenter Backup Datacenter Automatic Failover Datacenter Redundancy & Disaster Recovery 5

6 IPv6 Migration Market Competitors (Networking)*: Networking Vendors Competitors (ADCs): ADC Vendors * Not ADCs Service Provider Solutions Enterprise Solutions Large Scale NAT/CGN/NAT444 Dual-Stack Lite 6rd SLB-PT /SLB64 (IPv6 to IPv4 Servers) IPv6 to IPv6 Load Balancing NAT64 and DNS64 6

7 A10 AX Architecture Overview SSL Acceleration Module SSL Processing Application Memory Session Tables, Buffer Memory, Application Data L4-7 CPUs L4-7 Processing, Security Control Kernel CLI, GUI, Management Tasks and Health Checking Flexible Traffic ASIC (FTA) Distributes Traffic Across L4-7 CPUs, Efficient Network I/O, DDoS Switching & Routing ASIC L2 & L3 Processing and Security 2009 A10 Networks CONFIDENTIAL 7 7

8 Advanced Core OS (ACOS) Development started in June 2005 Multi-core CPU, shared memory architecture 64-bit Efficient design Power, memory, space & resource consumption Scalable Symmetrical Multiprocessing (SSMP) Flexible design 8

9 AX Series Models AX K L4 CPS 4 Gbps 155W Max AX K L4 CPS 7.5 Gbps 155W Max AX K L4 CPS 11 Gbps 250W Max AX K L4 CPS 19 Gbps 291W Max AX K L4 CPS 27 Gbps 188W Max 2 x 10 Gb AX K L4 CPS 30 Gbps 315W Max 4 x 10 Gb AX M L4 CPS 40 Gbps 610W Max 8 x 10 Gb AX M L4 CPS 40 Gbps 660W Max 16 x 10 Gb Large Enterprise or Service Provider 9

10 AX Series Key Features (No extra licenses for performance OR features) Layer 4 and Layer 7 Application Acceleration SSL ASIC RAM caching static or dynamic HTTP compression aflex L7 TCL scripting for deep packet inspection GSLB Global Server Load Balancing Advanced NAT options DNS Application Layer Firewall axapi REST based XML API for custom management Virtualized management Role-Based and Partition-Based Management Seamless Management for Multiple Devices IPv4 and IPv6 load balancing and management Full web interface or industry standard command line interface Operates in Layer 2/Layer 3 simultaneously 10

11 Industry-leading Implementations Working closely with large ISPs worldwide Initial deployments now live Solution evaluated and tested in ISP labs Proven interoperability with DS-Lite client implementations Nokia testing in 2009 Award winning implementation LSN deployed in Tokyo Interop 2009 &

12 What are the benefits of IPv6? IP address abundance More people & devices connected requiring an IP address AT&T added 1.6M nonphone wireless device connections in Q1 2011, passes 12M devices.but IPv6 also brings Efficiency - optimized for routers & other devices to process IPv6 Simplicity with address auto-configuration Cellphone IPv4/8 Blocks Available TV Surveillance Camera Game Console Source: ARIN ebook Addresses: IPv4 = 4x10^9 versus IPv6 = 3x10^38 Heart Rate Monitor Digital Weight Scale Digital DVDRecorde r Car 12

13 IPv6 has become a "hotter" topic Service Providers impacted first (Carriers, ISPs, MNOs) Most have been looking at transition solutions in the last months Enterprises/Content Providers External: Early deployments are happening, accelerating due to IPv4 depletion Jan 2011 only 0.15% of top 1 million web sites are available via IPv6 Sept % of top 1 million web sites are available via IPv6 However some external websites are being enabled now World IPv6 Day, June 8, 2011, is an example of increased attention End-devices/Clients IPv6 transition has been in the works for some time E.g. Dual-Stack on Windows Vista & Windows 7, MacOS 10.x, iphone, Android Many devices with no, or limited, IPv6 support (earlier Windows versions, some game consoles, etc). Co-existence is required! 13

14 What are the methods used for IPv6 migration? Dual-Stack Encapsulation Translation 14

15 IPv6 No standard compatibility Different requirements Home Enterprise Service Provider IPv4 Legacy Networks IPv6 Migration Gateway 15

16 The secret to seamless IPv6 transition? There isn t one no panacea no one solution fits all Each solution has its own pros & cons 16

17 Large Scale NAT (LSN, aka CGN/NAT444) Main SP interest: ISPs Usage: Goal: Looked into/tested by many ISPs Resolve IPv4 exhaustion quickly with minimal changes Note: LSN is also called Carrier Grade NAT (CGN) or NAT

18 DS-Lite (Dual-Stack Lite) + NAT with LSN Main SP interest: ISPs Usage: Goal: Currently being evaluated by some ISPs Provide IPv4 service access to IPv4 clients and IPv6 service to IPv6 clients without having a dual-stack SP network Note: Some ISPs look at combining DS-Lite with DNS64/NAT64 18

19 NAT64/DNS64 Main SP interest: Usage: Goal: Mobile Service Operators Some ISPs and Enterprises Looked into by many operators and enterprises, expected to be deployed in production soon Provide IPv4 content access to IPv6-only clients 19

20 6rd (IPv6 Rapid Deployment) Main SP interest: ISPs Usage: Goal: Looked into/tested by some ISPs and deployed by a few Provide IPv6 service access before Core Network IPv6 upgrade Note: Some ISPs look at combining 6rd with NAT444 + DNS64/NAT64 20

21 Server Load Balancing Protocol Translation (SLB-PT aka SLB-64) Main interest: Usage: Goal: Enterprise Content Providers Looked into by many Enterprises / Content Providers and already deployed today at some accounts Offer IPv6 services quickly with minimal changes 21

22 World IPv6 Day 2011 Observations - Customers Customer feedback A10 customers who used the AX to front end IPv6 services represented a broad cross section of the Internet community, for example: A large US web portal A major US news organization A number of Web 2.0 and Cloud companies DNS providers Other content and business web sites 22

23 World IPv6 Day 2011 Observations - Customers Customer Observations A10 customers utilized a variety of pure IPv6 load balancing and SLB-PT (Server Load Balancing with Protocol Translation). In other words both IPv6 > IPv6 and IPv6 > IPv4 One large customer, exclusively using A10 ADCs reported well over a million unique IPv6 addresses hitting its infrastructure s front-end A10 IPv6 VIP, with AX units in multiple data centers and extensive testing prior; no infrastructure major issues were encountered The above mentioned customer still reported the IPv6 traffic was a small fraction of its overall traffic (far less than 1%), but was higher than expected No customer support calls were generated to the A10 support line on World IPv6 Day related to the AX and IPv6 load balancing 23

24 World IPv6 Day 2011 Observations A10 The content provider perspective (operating our own web site) One of 54 sites monitored by RIPE for World IPv6 Day from the 400+ participants AAAA record turned on to a few days before, no issues in testing 10x volume on World IPv6 Day, however the numbers were still in the hundreds of connections, not a surprise for a niche site No issues reported with A10 site access from users AAAA record now left on, one of the ~20%! is A or AAAA record enabled. ipv6.a10networks.com is still an AAAA record only site A minor observation A IPv6 widget showing both IPv4 and IPv6 addresses used to access the A10 web site was not responsive for a portion of the Day (this called back to an external site). Presumably due to the IPv6 traffic volume 24

25 World IPv6 Day 2011 Observations A10 The vendor perspective A lot of preparation in the weeks and months before by customers meant issues had been addressed prior; World IPv6 Day itself was uneventful Unique test bed one issue found and resolved before World IPv6 Day Community provided absolute and detailed description of the issue Multiple confirmations in < 24 hours that the patch was successful Millions of connections stress testing the AX IPv6 configurations without issue; proving the solutions are production ready Provided a large real world test bed versus lab Native IPv6 SLB and SLB-PT used, initial expectation was a SLB-PT focus, but both were used extensively 25

26 IPv6 Landscape Maturity and Regulations Worldwide interest Sample government mandates and backing UK government endorsement (6UK) Singapore and Philippine government mandates IPv6 certifications High adoption rates and interest Requirement in RFPs 26

27 27 2 A10 IPv4-to-IPv6 Migration Advantages Industry-leading and mature implementation Interop shownet, evaluations, lab and field trials Multiple live production deployments Significant wins with marquee customers High performance Very high session establishment rate Large number of concurrent sessions Very high NAT Processing PPS & Throughput Ideal green form factor (1U/2U with least power consumption) Price/performance advantage Proven interoperability

28 IPv6 and IPv4 Advanced Traffic Management ACOS platform Application Delivery (ADC) and Server load balancing IPv6 migration and IPv4 preservation Widest choice of virtualization solutions Flexible deployment All-inclusive appliances 28

29 Thank You 29