460 likes | 868 Views
Array APV (FortiBalancer) - Overview. Array APV Value Proposition. Availability (Productivity). Performance (Usability). Security (Compliance). Cost (CapEx/OpEx). Enterprise Apps. Challenges.
E N D
Array APV Value Proposition Availability (Productivity) Performance (Usability) Security (Compliance) Cost (CapEx/OpEx) Enterprise Apps
Challenges Today, a multitude of devices are needed to provide basic load balancing, security, compression, caching, etc. CapEx & OpEx costs are high... Demand for increase application performance & availability Securing data with SSL Encryption slows down applications and hurting productivity
Array APV Overview • Advanced Application Delivery Controller • Scale up Application Performance/Capacity • Improve Application Availability and Security • Intelligent Accelerate Application Delivery (deployment/delivery) • All-in-one ‘Green’ platform for the Data Center • Consolidate Application Delivery Infrastructure, trim down CapEx $$$ • Maximize network resource, improve operation efficiency and reduce OpEx $$$
Performance/Acceleration SpeedStack/SpeedCore™ • Technology architecture enabling integrated functions with “best-of-breed” performance • TCP/IP management and HTTP parsing performed once, leveraged across all integrated functions • Allows maximum performance for integrated functions to be sustained concurrently
Performance/Acceleration Connection/TCP Multiplexing • APV in front of Server Farm terminates millions of client connections. APV reuses hundred of server TCP connections for client requests to reducing TCP connection management overhead and improved application performance & reliability • Improves end-user satisfaction through reduced application response time • Scales existing infrastructure • Reduces server connections by 20% to 90% • Increases server throughput by 20% to 100%
Performance/Acceleration • Connection/TCP Multiplexing • APV reuse server TCP connections for client requests to reducing TCP connection management completely and improved application performance & reliability • User Experience is transparently improved Customers Vendors Remote / Mobile Employees Branch Office Partner site
Performance/Acceleration SpeedCache™ • Improves application performance and end-user response times • Scales existing server infrastructure • User-defined and/or intelligent “plug-and-play” settings • Market-leading 2GB RAM, no hard drive, no moving parts
Intelligent Caching of Static / ‘Hot’ DataOff-loads serving of data from servers • APV stores static or ‘hot’ data in RAM cache; reducing Application I/O overhead and improving overall application performance; RAM Cache is 1000x faster than disk I/O • User experience improves as web pages build much faster Customers Vendors Remote / Mobile Employees Branch Office Partner site
Performance/Acceleration Compression • Fast download to improve user experience. • Minimizes ISP bandwidth costs • Offload compression from web server even with Dynamic Content • Speed up SSL delivery • Hardware-accelerated 1.5 Gbps to 5 Gbps throughput
Compression of Data for Faster Delivery to User Off-loaded from Servers; addressing varying network Bandwidth • APV accelerates application performance by compressing data; Application not affected • User Experience is improved regardless of the connection bandwidth APV Customers Vendors Remote / Mobile Employees Branch Office Partner site
Performance/Acceleration SSL Acceleration • Ensures fast & reliable connections for secure transactions/applications • Offloads CPU-intensive processing from servers • Array the market leader in SLB + SSL acceleration performance • Up to 22K transactions per second and over 500K concurrent transactions per unit.
Acceleration Results Application Response Times Server CPU & Memory Utilization Number of Required Servers 70% 75% 50% Decreased Average of 5 Organizations Deploying APV:
Acceleration Results Increased $ $ 99. 999 % User: 85% Server: 290% ROI & Productivity User & Server Capacity Average of 5 Organizations Deploying APV:
Availability/Security WebWall™ Security • High performance packet filter; unit can run without FW protection • Flexible ACL rules, apply to virtual interfaces , deny log, as well as dynamic ACL. • Supports over 1000 ACLs w/o performance penalty • Case study: 80K syn/sec blocked while serving content
Availability/Security Multi-Layer Security • Secure Hardened OS; stripped down OS prevents intruders from setting up shop • Purpose build network stack provides protection against L2-L4 attacks including: TCP Syn-flood, DDoS, flash event, etc. • Full proxy-based L7 application firewall with statefull packet inspection, L7 URL filtering and access control. • Ensures infrastructure is as secure as the applications it supports
L7 FirewallProtecting Applications from Attacks • WebWall™ + Multi-Layer Security • Protect Application/Server from internet illegal access and attack • Inspects encrypted data which bypasses traditional firewalls • Full proxy-based firewall with Stateful packet inspection Applications – Web Servers APV Application Firewall Customers Vendors Remote / Mobile Employees Branch Office Partner site
Availability/Security Integrated SSL • Provides information privacy and fast secure application access • Able to scan the secured information and apply access rule before send to server. • Enhanced Client Certificate validation ensures secured application access.
Securing Application DataOff-loading of SSL Encryption & Acceleration • APV provides high speed SSL HW accelerator to accelerate secure application delivery, reduce server CPU and memory usage. • Integrated with L7 URL filtering/ACL, SLB, Caching, Compression, etc. • Consolidate Certificate Management, advanced Client Certificate Authentication. Applications – Web Servers APV Customers Vendors Remote / Mobile Employees Branch Office Partner site
Server Load Balancing • L2-L7 Server Load Balancing, FWLB, IDS/IPS LB to scale up applications without modifying existing network, application deployment. • Intelligent L7 Content Routing to distributes requests across servers, to appropriate resources, and maintains connection persistence to maximize resource utilization and optimize the delivery. • Active Application Health Check and error handling support to bridge internal issue without affecting end user.
Availability/Security ERP IMAP POPS FTP DNS Link Load Balancing • APV provides WAN (Wide Area Network) link redundancy/load sharing and auto failover for internet access redundancy; application Multi-homing support. • Automatic fail-over ensures application availability unaffected by link failure • Active link health check reduce failover time • Policy/Intelligent WAN/ISP routing to reduce WAN cost, improve user access speed, optimize WAN usage. E-mail e-Comm Database APV • Customers • Vendors • Remote/Mobile • Employees • Branch Office • Partner site
Availability/Security Global Load Balancing • Load balances across geographically dispersed data centers to provide disaster recovery protection • Directs traffic along optimal paths to streamline application delivery • Over 60K DNS requests per second provides protection against DNS DoS attacks • 128 domain names; 64 VIPs per domain name; 64 members per SmartDNS group • Customers • Vendors • Remote/Mobile • Employees • Branch Office • Partner site
Availability/Security Applications – Web Servers N+1 Clustering • Availability and scalability for business critical applications • Automatic fail-over ensures applications remain online; scalability to 32 clustered APV appliances redefines “future-proofing” • Cluster manageable as single solution Node 2 Node 3 Node 1 APV Customers Vendors Remote Employees Branch Office Partner site
Availability/Security • Intelligent L7 Content Routing • L2-L7 Server Load Balancing • Advanced Application Health Check • Surge Protection for Server APV • Web/Network Infrastructure • WEB (HTTP/HTTPS) • DNS • Radius • FTP(S) • IMAP(S) • POP(S) • SMTP • Squid Cache • SIP (UDP/TCP) • RTSP • Firewall/IDS/IPS • Any TCP/UDP based applications Branch Office Partner site • Corporate Applications • MS SharePoint, IIS, OCS, WTS, Exchange • BEA WebLogic, • IBM WebSphere, • SAP NetWeaver • Citrix Presentation Server • VMWare, etc.. Remote / Mobile Employees Customers Vendors
Least Connections Shortest Response Time Round Robin, Weighted Round Robin Priority Based Client Network Persistence (Hash IP) Persistent/Constant Hash IP QoS URL,Cookie,Hostname,Network, Network + Port Range, Client Port Insert Cookie Rewrite Cookie Persistent Cookie Persistent URL Persistent Hostname Hash Cookie SNMP CPU/Mem/Custom Hash Header SSL Session ID Arbitrary Header Content Routing SOAP Header Content Routing Combined With sr/lc/rr Load Balancing Methods Configurable First Choice for Persistent Methods Arbitrary TCP, SSL, and UDP Port Load Balancing FTP Server Load Balancing DNS Server Load Balancing L4-L7 SLB Features 20 + Algorithms
= Point products no longer necessary with Array APV Green Platform Delivers ROIConsolidating Network & Application Infrastructure • 40% reduction in server infrastructure • 30% less bandwidth • 60% less power consumption/cooling costs than competition X X X X X X X X
SummaryArray APV Delivers • Application Fluency & Availability • Advanced Layer 2 – 7 Load Balancing • Intelligent caching of static / dynamic content • Data compression • Strong Security for Applications • SSL Off-load & Acceleration for critical data • Application Firewall • Accelerated Application Performance • QOS/Traffic Shaping • TCP Connection Multiplexing • Caching of dynamic / static content • Compression of files • Dynamic Outbound Link Selection • Green Platform Delivers ROI • 40% reduction in server infrastructure • 30% less bandwidth • 60% less power consumption/cooling costs ERP IMAP POPS FTP DNS E-mail e-Comm Database APV • Customers • Vendors • Remote/Mobile • Employees • Branch Office • Partner site
APV 900 - Entry New entry level ADC product from Array Networks 1U appliance – LEDs, Console 512MB Memory 2 x 10/100/1000 copper ports Supported Hardware Acceleration Cards HW-SSL acceleration Single Power Supply
Array APV 1200 1U appliance – LEDs, Console and Failover ports 1GB Memory 4 Fixed 10/100/1000 copper NIC One option slot HW-SSL acceleration
Array APV 2200 1U appliance – LEDs, Console and Failover ports 2GB Memory 4 Fixed 10/100/1000 copper NIC Two option slot 2 1000-SX fiber NIC HW-SSL acceleration HW-Compression
Array APV 3200 1U appliance – LEDs, Console and Failover ports 4GB Memory 4 Fixed 10/100/1000 copper NIC Two option slot 4 10/100/1000 copper NIC 2 1000-SX fiber NIC HW-SSL acceleration HW-Compression
Array APV 5200 2U appliance – LEDs, Console and Failover ports 4GB Memory Support High Speed Network Connection 10Gb interface Multi-Gb interface, copper and fiber NIC Support Hardware Acceleration Card HW-SSL acceleration HW-Compression Dual Power Supply
APV 6200 2U appliance – LEDs, Console and Failover ports 8GB Memory, Dual Quad Core CPU Support High Speed Network Connection Base: 4 x 1 Gig copper Optional: 4 x 1 GigE ports; 4 x 1 Gig Fiber ports; 2 x 10G Fiber Supported Hardware Acceleration Cards HW-SSL acceleration HW-Compression Dual Power Supply
SpeedCore – 8.1 L4 CPS: 240K L7 RPS:230k System Throughput: 11Gbps APV 6200 L4 CPS: 210K L7 RPS: 130K System Throughput: 8Gbps APV 5200B L4 CPS: 120K L7 RPS: 130K System Throughput: 4Gbps APV 3520 Array APV Product Positioning SpeedStack – 6.5 High L4 CPS: 55K L7 RPS: 100K System Throughput: 4Gbps APV 5200 L4 CPS: 37K L7 RPS: 50K System Throughput: 2.0 Gbps Middle Price APV 3200 L4 CPS: 37K L7 RPS: 20K System Throughput: 1.5Gbps APV 2200 L4 CPS: 11K L7 RPS: 15K System Throughput: 1Gbps Low APV 1200 L4 CPS: 11K L7 RPS: 15K System Throughput: 750 Mbps APV 900 Performance
About Array Networks • Founded: 2000 in Silicon Valley • Employees: 270+ • Products: Application Delivery Controllers SSL VPN Remote Desktop Access • Markets: Enterprise, SME, SMB Service Providers Verticals (Healthcare, Finance, Gov’t) • Customers: 5000+ Worldwide • Resellers: 100+ Worldwide • Performance: Profitable, Public Listed Company
WW Presence & Partners Norway Beijing, China UK Milpitas, CA Belgium Germany R&D Center France R&D Center Spain Chicago New York China Japan Northern & Southern California Korea Strategic Expansion! Australia
Global 2000 Relies on Array • 5 of the World’s Top 10 Banks • 6 of the World’s Top 10 Service Providers • Hundreds of Terrabitsof GlobalSecure Traffic per Day • Millions of Authenticated SecureTransactions per Day