F5 BigIP v9.ppt
- 1. 1 Application Traffic Management Making the Network Intelligent Rainer Singer Field Systems Engineer F5 Networks Central Europe
- 2. 2 Agenda • Company Snapshot • Load balancing Overview • BIG-IP v9 • Products & Packaging
- 3. 4 Leading Application Traffic Management Products iControl Software Development Kit Standards Based Interface (SOAP/XML) iControl Services Manager Centralised Management for F5 Devices FirePass SSL VPN Remote Access Secure Application Access TrafficShield Application Security Gateway Application Firewall Local, Global & Link Traffic Management BIG-IP Traffic Management
- 4. 5 Connectivity Traffic Management Internet Local Area Traffic Management Router Router Wide Area Traffic Management
- 5. 6 Availability Checking • Check any back-end process using EAV • Will work for any IP based application • Stateful failover between devices Security • Firewall-like device to resist most attacks • All administration is encrypted • Integrated SSL/FIPS and secure NAT Feature Overview/BIG-IP
- 6. 7 SSL and E-Commerce • Only product with integrated SSL • Single certificate simplifies administration • Lowers certificate costs • Client certificate checking (Authentication) Layer 7 Functionality • Can utilize all HTTP header/content or TCP content in traffic decisions • Can persist on anything • HTTP 1.1 keep-alives dramatically improve performance Feature Overview/BIG-IP
- 7. 8 Easy to Implement and Support • Can be deployed as either Layer 2 or 3 device • Simple and complete Graphical User Interface • Installation services by F5 and/or partner Flexibility • BIG-IP works with any server or IP based service • iControl enables integration with internal and/or 3rd party applications Feature Overview/BIG-IP
- 8. 9
- 9. 10 Announcing BIG-IP v9: A Revolutionary Approach in Application Traffic Management New Software Architecture New Hardware Architecture New Value-Added Functions New User Interface
- 10. 11 What was Introduced in BIG-IP v9 1. Accelerates web applications up to 3x Compression + Caching 2. Reduces infrastructure cost by up to 33% TCP Optimisation + OneConnect™ 3. Ensures priority application performance Rate Shaping 4. Cost-effective, intelligent application security SSL, TM/OS + iRules 5. Ensures a higher level of availability TM/OS + iRules 6. Delivers simplified management New GUI 7. Superior integration and extensibility iRules, Advanced Client Authentication 8. Superior hardware manageability and performance
- 11. 12 Groundbreaking New Architecture Users Mobile Phone PDA Laptop Desktop Co-location Deliver Optimise Secure CRM Database Siebel BEA Legacy .NET SAP PeopleSoft IBM ERP SFA Custom Unified Network/Application Infrastructure Services Applications Users Traffic Management Operating System (TM/OS)
- 12. 13 TM/OS A New Level of Intelligence React to a Single Communication, One Direction Packet Based React to a Real Time, Two-Way Conversation Translate Between Parties Flow Based Legacy Approach
- 13. 14 iRules Programmable Network Language GUI-Based Application Profiles Repeatable Policies The Most Intelligent and Adaptable Solution TM/OS Fast Application Proxy Programmable Application Network Complete Visibility and Control of Application Flows Security Optimisation Delivery New Service Universal Inspection Engine (UIE) Client Side Server Side Targeted and Adaptable Functions Unified Application Infrastructure Services Compression TCP Offloading Load Balancing News Website
- 14. 16 Optimise Market Leading Functionality Today Deliver Secure • Comprehensive Load Balancing • Advanced Application Switching • Customised Health Monitoring • DoS and SYN Flood Protection • Network Address/Port Translation • Application Attack Filtering • Certificate Management • SSL Acceleration • Quality of Service • Intelligent Network Address Translation • Advanced Routing • Intelligent Port Mirroring
- 15. 17 Optimise First Unified Application Infrastructure Services Deliver Secure • IPv6 Gateway • Universal Persistence • Response Error Handling • Session / Flow Switching • Resource Cloaking • Advanced Client Authentication • Firewall - Packet Filtering • Selective Content Encryption • Cookie Encryption • Content Protection • Protocol Sanitisation • Connection Pooling • Intelligent Compression • L7 Rate Shaping • Content Spooling/ Buffering • TCP Optimisation • Content Transformation • Caching • TCP Express New New New TM/OS
- 16. 18 Putting the Functionality to the Test • Independent validation of v9 features and functionality • All are based around real- world scenarios, real applications and real data • Feature comparison with – Cisco, NetScaler, Nortel, Radware, Redline
- 18. 21 Hardware • Performance – Throughput – Packet Velocity ASIC (PVA2) – SSL Transactions per Second (TPS) – SSL Bulk Encryption – FIPS Support – HTTP Compression • Independent Secure Management Access • SCCP Microcomputer - Switch Card Control Processor • Dual Media CF + HDD
- 19. 22 Hardware cont. • Tri-Speed Ethernet (10/100/1000) + Mini GBICs • LCD Display • USB Port • Hot Swappable Fan Trays • More Integrated Solution
- 20. 23 Superior Hardware Manageability and Performance Next Generation IP Application Switches 6800 6400 3400 1500 Simplified Management: • Lights Out Management • Multi-Boot Support • LCD for Simplified Management • Hot-Swappable Parts • Redundant Power / Fans • Port Flexibility • PCI Slots • Independent Secure Management Access Powerful: • Packet Velocity ASIC 2 • High Performance SSL & Compression • High Performance Switching Fabric • Dual Processor *All Models Include 100 TPS SSL Acceleration
- 21. 24 Updated Platform Sizing Guide BIG-IP 1500 BIG-IP 3400 BIG-IP 6400 BIG-IP 6800 Layer 4 Requests/sec 30,000 110,000 220,000 220,000 Layer 7 Requests/sec 22,000 50,000 75,000 110,000 Max. throughput 500 Mbps 1 Gbps 2 Gbps 4 Gbps Max. conc. conn. 4 Million 4 Million 8 Million 8 Million Max. SSL TPS 2,000 8,000 15,000 20,000 Max. SSL Bulk 500 Mbps 1 Gbps 2 Gbps 2 Gbps Max. SSL conc. conn. 100,000 200,000 500,000 500,000 Max. compression 100 Mbps 500 Mbps 2 Gbps 2 Gbps Switch backplane 14 Gbps 22 Gbps 44 Gbps 44 Gbps