MULTI-TENANT EQUALS MULTI-BENEFIT. AVX DATASHEET AVX SERIES VIRTUALIZED APPLIANCES AVX Series multi-tenant virtualized appliances support multiple independent ADC or SSL VPN instances to deliver the performance of physical appliances with the agility of virtual appliances. Array s AVX Series virtualized appliances provide dedicated resources to support up to 32 fully independent application delivery controller (ADC), secure remote and mobile access (SSL VPN) or Web application firewall (WAF) virtual appliances. Combining guaranteed performance with mix-and-match configurations and flexible payas-you-grow pricing, AVX virtualized appliances provide the ideal combination of performance and agility for modern enterprise and service provider environments. By allocating dedicated CPU, SSL, memory and I/O per instance, performance is assured for vapv, vxag and vawf virtual appliances running on AVX virtualized appliances.
Highlights & Benefits High-performance 65Gbps and 115Gbps virtualized appliances, supporting up to 16 or 32 instances respectively Supports Array vapv ADC, vxag SSL VPN and vawf Web application firewall virtual appliances Supports entry-level, small, medium and large virtual appliances, with the ability to mix-andmatch instances Supports pay-as-you-grow licensing in onequarter, half, three-quarters and full capacity increments Each instance can support its own version of the ArrayOS operating system, and has its own dedicated input/output, CPU, memory and SSL resources to provide guaranteed performance and throughput in multi-tenant environments Feature parity with Array APV, AG and AWF Series dedicated appliances High availability spanning AVX virtualized appliances and vapv, vxag and vawf virtual appliances Management and hypervisor overhead are segregated from processing resources for assured performance among instances ecloud API for integration with cloud management, orchestration and automation Provides the best price-performance for virtualized application delivery and secure access, and the lowest $/SSL transaction per second on the market Eliminates truck rolls for provisioning highperformance load balancing and access services Reduces space and power requirements by up to 16x versus dedicated ADC or SSL VPN appliances Proven 6-month average time period to achieve ROI for enterprises, service providers and other organizations vapv instances support integrated Layer-4 and Layer-7 server load balancing, link load balancing, global server load balancing, connection multiplexing, SSL acceleration, caching, compression, traffic shaping, IPv6 and Web application security vxag instances support secure remote and mobile access with SSL encryption; multiple access methods; advanced AAA; multi-factor authentication; end-point security; and mobile device/mobile application management vawf instances support Web application attack protection for business-critical Web applications. 2
Dedicated Virtualized Resources The AVX Series features up to 16 or 32 fully independent vapv, vxag or vawf instances capable of supporting their own Array operating system and powered by dedicated physical resources such as I/O, CPU, memory and SSL. As a result, the AVX Series offers the equivalent of up to 16 or 32 separate 1RU ADC, SSL VPN or WAF units in just 2RU, where customers and workloads can be assured of guaranteed, measurable performance. Each instance is separately programmable and centrally manageable, allowing the utmost in flexibility and control. Through dedicated hardware and software resources, IaaS and SaaS operators, enterprises and other organizations gain a true multi-tenant ADC, SSL VPN and/or WAF appliance. Mix-and-Match and Pay-as-You-Grow Licensing Four different size options are supported for constituent vapv, vxag or vawf virtual appliances entry-level, small, medium and large to fit the performance needs of customers and applications. For example, on an AVX configured with eight medium-size vapv ADC instances, each instance supports 14 Gbps throughput and 8.7K 2048-bit SSL TPS. In addition, sizes can be mixed and matched within an AVX appliance i.e., a single AVX10650 could be configured to simultaneously support one large, two medium, four small and eight entry-level instances. The AVX Series also features pay-as-you-grow licensing, allowing purchase of one-quarter, half, threequarters or full capacity. If an AVX is purchased at less than full capacity, you can expand by adding licenses for the additional capacity at any time. Guaranteed Performance in Shared Environments In a virtual environment, resources are typically shared across multiple applications or processes, which can result in performance degradation. By contrast, the AVX Series features dedicated compute resources per instance including input/ output, CPU, memory and SSL resources to assure performance levels per instance. Management and hypervisor overhead are similarly assigned dedicated resources and segregated from other instances to further avoid performancedegrading resource conflicts. Through guaranteed resources, AVX Series appliances provide the best of both worlds, allowing cloud service providers to sell services with guaranteed SLAs. Similarly, for enterprises and other organizations that need to more efficiently support business-critical applications that are simultaneously more cost-effective and more flexible. High Availability The AVX Series also supports multi-level high availability, providing redundancy and failover capability across the virtualized appliances as well as constituent vapv, vxag and vawf instances. AVX Series virtualized appliances can be configured to failover to another AVX Series appliance. Similarly, constituent vapv, vxag and vawf instances can be configured to failover to other virtual appliances on the same appliance or on a redundant HA appliance. Economical to Deploy, Economical to Maintain By consolidating multiple instances and functions into a single, easy-to-manage virtualized appliance, the AVX Series reduces cost to deploy and reduces space and power requirements by up to 32x versus dedicated ADC, SSL VPN or WAF appliances. 3
Expensive truck rolls for provisioning highperformance load balancing and access services can be eliminated as well. Time to ROI is typically just 6 months for enterprises, service providers and other organizations. ecloud API & OpenStack Integration To meet the deployment and management requirements of application delivery in the cloud, Array s ecloud SOAP API provides a script-level interface for cloud management, orchestration and automation systems to manage and monitor AVX Appliances. ecloud also assists in interactions between cloud operating systems and virtualized AVX Series appliances running vapv instances. For cloud providers and enterprises leveraging the OpenStack architecture for cloud management and automation, Array s integration with OpenStack load balancing-as-a-service (LBaaS) creates a standardized means to rapidly integrate with and control Array technology. IPv6 Support For organizations needing an IPv6 Web presence, vapv s server load balancing protocol translation (SLB-PT) transforms existing IPv4 Web sites into IPv6 compatible sites and greatly reduces the need for duplicate equipment, content and management. Where there is a need to make the most of depleted IPv4 resources, NAT and dual NAT (dual-stack IPv6) allow multiple clients to utilize a single IPv4 address. In migration environments, Array IPv6 solutions support both NAT64 and DNS64 to enable IPv6 clients to connect with IPv4 servers and content. To ensure a consistent application experience across IPv4 and IPv6 clients and networks and to enable fully-capable, next-generation solutions IPv6 feature parity is supported for all Array AVX Series virtualized appliances and their constituent vapv, vxag and vawf virtual appliances for ADC, SSL VPN and WAF, respectively. Management & Integration AVX Series virtualized appliances and constituent vapv, vxag and vawf virtual appliances are simple to install and offer intuitive configuration and management via a WebUI and a familiar command line interface. Using the administration tool kit, network managers can view the status for a wide range of system parameters, enable services on the fly and automate configuration using XML- RPC. Leveraging extensible APIs, application and network intelligence can be integrated with third-party monitoring and management or exported for optimizing complementary data center systems. In addition, AVX Series appliances support VMware vrealize Orchestrator, Microsoft System Center and OpenStack LBaaS integration for intelligent command and control of virtualized application infrastructure. Feature Parity with Dedicated Appliances All features included in Array s physical APV Series application delivery controllers, AG Series secure access gateways and AWF Series Web application firewalls are available on AVX Series virtualized appliances. In addition, many features that require additional licenses such as GSLB on the APV Series and MotionPro on the AG Series are included at no additional charge in the AVX Series. vapv Instances AVX Series vapv instances utilize advanced server load balancing to ensure 99.999% availability for cloud services and enterprise applications. The vapv instances also support link load balancing and GSLB to ensure 99.999% availability for WAN connections and geographically dispersed sites. 4
In addition, compute-intensive SSL functions can be offloaded from servers to vapv instances on the AVX Series. Server efficiency and application performance are greatly improved through hardware SSL processing, and Array s purpose-built SSL stack is immune to vulnerabilities that affect open source implementations such as OpenSSL. Additional features and functionality include connection multiplexing, compression, caching, traffic shaping, Web application firewall, DDoS protection, header manipulation, HTTP content rewrite and support for IPv6 migration. vxag Instances AVX Series vxag secure access gateway instances provide anytime, anywhere secure remote and mobile access to networks, applications, Web sites and desktops for multiple communities of interest. vxag instances provide security for data in motion and at rest, and enforce application-level policies on a per-user basis. Features and functionality includes 2048-bit SSL encryption; multiple access methods including network-level and application-level connectivity; advanced AAA; multi-factor authentication; host checking; cache cleaning, integrated Web firewall; and support for mobile device and application management. Product Editions AVX Series features two models: the AVX10650 and the AVX7600. The AVX10650 can support four large, eight medium, 16 small or 32 entry-level vapv, vxag or vawf instances, and instances can be mixed and matched among vapv, vxag, vawf and sizes. For example, a full-capacity AVX10650 can support one large vapv instance, two medium vapv instances, four small vapv instances, two entry-level vxag instances and six entry-level vapv instances all in a single appliance. The AVX10650 supports 115Gbps L4 throughput per system. The AVX7600 can support two large, four medium, eight small or 16 entry-level vapv, vxag or vawf instances, and, like the AVX10650, instances can be mixed and matched among vapv, vxag, vawf and sizes. For instance, a full-capacity AVX7600 can support two medium vapv instances, two entry-level vxag instances and six entry-level vapv instances. The AVX7600 supports 65Gbps L4 throughput per system. Both AVX Series virtualized appliances can be purchased at one-quarter, half, three-quarters or full capacity. 5
Array Virtualized ADC Architecture Customer A, B, C... - or - Application A, B, C... Storage v APV v APV v APV v APV v APV v APV v APV v APV System & Instance High Availability v APV v APV v APV v APV v APV v APV v APV v APV Web Servers App Servers Enterprise Data Center / IaaS Provider Cloud Internal Users Switch Firewall Router External Users Internet 6
Feature Specifications = STANDARD O = OPTIONAL vapv vxag vawf L2, L4 & L7 SLB 2048-bit SSL Encryption Continuous Threat Scanning LLB Virtual Portals* O Active Incident Response GSLB Layer-3 VPN Client Post-Incident Diagnosis and Analysis L7 Policy Engine L3 Mobile VPN Sophisticated Rules Library ecloud API & LBaaS Integration L4 SDK Tunneling Comprehensive Server Protection epolicy Scripting L4 Thin Client Web Page Tamper-Proofing eroute Routing Web Applications Server Load Balancing Transparent Proxy Host Checking & Cache Cleaning SSL Offloading & Acceleration SSL (HW) Client, App & Device Security Guided Configuration Compression (SW) Secure Browser Visualized Management RAM Caching Array Registration Technology Role-Based Authentication Traffic Shaping Wake-on-LAN Logging & Log Analysis Web Application Security (Including WAF) Enterprise App Store Bypass Pair IPv6 Support Clustering Optional 1GbE Interfaces O Multi-language WebUI WebUI Optional 10GbE Interfaces O Single System Image Additional Virtual Portals O Fast Failover Clustering *vxag requires a separate pool license for total concurrent users and virtual portals. 7
Product Specifications AVX7600 AVX10650 vapv Instances 2, 4, 8 or 16 4, 8, 16 or 32 Max. L4 Throughput 65 Gbps per system 115 Gbps per system Max. L7 RPS 5M 7M Max. L7 Throughput 35 Gbps per system 60 Gbps per system Max. SSL TPS (2048) 35K per system 70K per system Max. SSL Throughput 20 Gbps 40 Gbps 1 GbE (copper) Management Port 1 1 10 GbE Fiber (SFP+) 8 16 Power Supply Dual Power: 90-264VAC, 10-5A, 47-63Hz Dual Power: 90-264VAC, 10-5A, 47-63Hz Dimensions Dual Power: 2U 17 W x 22.5 D x 3.5 H Dual Power: 2U 17 W x 22.5 D x 3.5 H Weight Dual Power: 28 lbs. Dual Power: 28 lbs. Environmental Operating Temperature: 0º to 45º C, Humidity: 0% to 90%, Non-condensing Operating Temperature: 0º to 45º C, Humidity: 0% to 90%, Non-condensing Regulatory Compliance ICES-003, EN 55024, CISPR 22, AS/NZS 3548, FCC, 47FR part 15 Class A, VCCI-A ICES-003, EN 55024, CISPR 22, AS/NZS 3548, FCC, 47FR part 15 Class A, VCCI-A Safety CSA, C/US, CE, IEC 60950-1, CSA 60950-1, EN 60950-1 CSA, C/US, CE, IEC 60950-1, CSA 60950-1, EN 60950-1 Support Gold, Silver and Bronze Level Support Plans Gold, Silver and Bronze Level Support Plans Warranty 1 Year Hardware, 90 Days Software 1 Year Hardware, 90 Days Software 8
Ordering Information Ordering No. Description AVX7600 Multi-tenant Virtualized Hardware Appliance AW977998 AVX7600 Hardware, Dual Power Supplies, 2U, 64GB, 8x10GbE SFP+ ports (Multi-tenant virtualized appliance. Maximum capacity of 2 large tenants, or 4 medium tenants, or 8 small tenants, or 16 entry tenants, and 35,000 SSL TPS 2K Keys. Must select one Capacity License Pack) AW928770 AVX7600 Capacity License Pack-1 (Enable 1 medium tenant, or 2 small tenants, or 4 entry tenants, and 8,750 SSL TPS 2K Keys) AW928771 AVX7600 Capacity License Pack-2 (Enable 1 large tenant, or 2 medium tenants, or 4 small tenants, or 8 entry tenants, and 17,500 SSL TPS 2K Keys) AW928772 AVX7600 Capacity License Pack-3 (Enable 1 large tenant, or 3 medium tenants, or 6 small tenants, or 12 entry tenants, and 26,250 SSL TPS 2K Keys) AW928773 AVX7600 Capacity License Pack-4 (Enable 2 large tenants, or 4 medium tenants, or 8 small tenants, or 16 entry tenants, and 35,000 SSL TPS 2K Keys) AVX10650 Multi-tenant Virtualized Hardware Appliance AW960070 AVX10650 Hardware, Dual Power Supplies, 2U, 128GB, 16x10GbE SFP+ ports (Multi-tenant virtualized appliance. Maximum capacity of 4 large tenants, or 8 medium tenants, or 16 small tenants, or 32 entry tenants, and 70,000 SSL TPS 2K Keys. Must select one Capacity License Pack) AW928765 AVX10650 Capacity License Pack-1 (Enable 1 large tenant, or 2 medium tenants, or 4 small tenants, or 8 entry tenants, and 17,500 SSL TPS 2K Keys) AW928766 AVX10650 Capacity License Pack-2 (Enable 2 large tenants, or 4 medium tenants, or 8 small tenants, or 16 entry tenants, and 35,000 SSL TPS 2K Keys) AW928767 AVX10650 Capacity License Pack-3 (Enable 3 large tenants, or 6 medium tenants, or 12 small tenants, or 24 entry tenants, and 52,500 SSL TPS 2K Keys) AW928768 AVX10650 Capacity License Pack-4 (Enable 4 large tenants, or 8 medium tenants, or 16 small tenants, or 32 entry tenants, and 70,000 SSL TPS 2K Keys) vxag Virtual Portals AU920138 1 Virtual Portal (incl. URL aliasing) AU920139 Add 5 Virtual Portals (incl. URL aliasing) AU920140 Add 10 Virtual Portals (incl. URL aliasing) vxag VPN Concurrent Users AW920103 Add 10 Concurrent Users (up to max conc. user limits) AW920105 Add 25 Concurrent Users (up to max conc. user limits) AW920110 Add 50 Concurrent Users (up to max conc. user limits) AW920120 Add 100 Concurrent Users (up to max conc. user limits) AW920121 Add 250 Concurrent Users (up to max conc. user limits) AW920122 Add 500 Concurrent Users (up to max conc. user limits) Ordering No. AW920123 AW920127 AW920130 AW920133 Description Add 1,000 Concurrent Users (up to max conc. user limits) Add 2,500 Concurrent Users (up to max conc. user limits) Add 5,000 Concurrent Users (up to max conc. user limits) Add 10,000 Concurrent Users (up to max conc. user limits) 9
1371 McCarthy Blvd. Milpitas, CA 95035 Phone: (408) 240-8700 Toll Free: 1-866-MY-ARRAY www.arraynetworks.com VERSION: OCT-2015-REV-A 2015 Array Networks, Inc. All rights reserved. Array Networks, the Array Networks logo and ecloud are all trademarks of Array Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Array Networks assumes no responsibility for any inaccuracies in this document. Array Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.