View
4.395
Download
2
Category
Tags:
Preview:
DESCRIPTION
Citation preview
1
Market & Partner UpdateMarket & Partner Update
F5 – Beyond Load Balancer
Nutapone ApiluktoyanuntCountry ManagerCountry ManagerF5 Networks Inc.
2
AgendaAgenda
Intro to F5 ADN (Application Delivery Network)F5 Networks Solutions OverviewF5 – ADN Use CasesF5 – Applications IntegrationF5 – Professional ServicesF5 Web ResourcesQ&A
3
F5 Application Delivery Network (ADN)( )
4
IT Challengeg
Applications and networks behave independentlyMany network functions require high degrees of manual interventionDistributed architectures and web services increase complexityHi t i ll li ti d t l fHistorically, applications and protocols for communicating with network devices inflexible at best
5
Application Problems: Finger Pointing 101Slow responses Bloated
dataSecurity risks Many servers
Exchange, SharePoint
Application AttacksXML, SOAP, ActiveX, JS
*@#!? ?
Office workers telecommuters Network Administrator Application Developer
6
A Shift Toward InnovationA Shift Toward InnovationSecuring assets
Managing systems
Reducing costs
Developing new apps, services, SOADeveloping new apps, services, SOA
Virtualization
Enabling interop
Maintaining legacy apps
Ensuring compliance
Driving people productivityDriving people productivity
Enabling Mobility 80% 20%80% 20%MAINTENANCE NEW INNOVATION
7
Users Data CenterWhat is ADN?
Users
From What:PC
From Where:LAN
Private Users MicrosoftSAP
Application Application DeliveryDeliveryPC
LaptopHome PCPDAKioskMobile
LANHomeBranch / WANRoad / WAN
HTTP /HTML SIP
OracleIBMBEA
Delivery Delivery NetworkNetwork
Public UsersFrom What:PCLaptopHome PCPDA
From Who:CustomersPartnersSuppliers
HTTP /HTML, SIP, RTP, SRTP, RTCP, SMTP, FTP, SFTP, RTSP, SQL, CIFS, MAPI, IIOP, SOAP,
F5 ensures applications running over the network are always
PDAKioskMobile
SuppliersConsultants
, , ,XML etc…
secure, fast and available without Code Change
8
Why F5?Application Layers 4-7
Network Layers 1-3
Data Center Applications
Remote AccessyRate Shaping
DoS Protection
Content Acceleration
ROUTERSSSL Acceleration
Load Balancing
DoS Protection
SWITCHES Application Security
Traffic Compression
WAN Optimization
• iRules• iControl
FIREWALLS
Caching
Connection Optimization
• iControl
Intelligent Clients
9
Gartner: Application Delivery Networking
Magic Quadrant for Application Delivery Products, 2009 Crescendo
2 9%Radware
6.6%
Q109 ADC Market Share
Cisco26%
2.9%
Others16.5%
6.6%Citrix11.2%
F5 NETWORKS
36.8%
RadwareCisco4.2%
Crescendo4.2%
Q109 Advanced Platform ADC Market Share
Citrix15.9%
F5 NETWORKS52 2%
9.3%Others 14.3%
52.2%
10
ADN provides Application Acceleration p pp
BEA Weblogic
IBM Websphere
Plumtree
Outlook Web Access
2X to10X
SAP Portal
Ecommerce
IBM WebspherePerformance
Increase
SharePoint 2007 Portal
Siebel
PeopleSoft
0.00 5.00 10.00 15.00 20.00 25.00 30.00 35.00
Without Acceleration With Asymmetric Acceleration With Symmetric Acceleration
Seconds
Without Acceleration With Asymmetric Acceleration With Symmetric Acceleration
11
ADN provides L7 Web Application Securityp pp y
Intelligent Client Network Plumbing Application Infrastructure Application
Buffer OverflowCross-Site Scripting
SQL/OS Injection Error MessagesNon compliant ContentHTTP/S TrafficCookie Poisoning
Hidden-Field ManipulationApplication DoS Attacks
Non-compliant ContentCredit Card / SSN dataServer Fingerprints
HTTP/S Traffic
IPSVPN AppApp
FirewallUserFirewallIDS-IDP
Anti-VirusAnti Virus
12
ADN – Use Cases
13
BIG-IP WebAcceleratorPrimary Data Center
www.web.com
sports.web.com
Real-timeMonitors
Web Servers
spo ts eb co
webpromo com
BIG-IP LTM + WebAccelerator
webpromo.com
Solution
Si lifi d d t li d Pre definedSimplified and streamlinedFix and accelerate web applicationsReduce bandwidth utilization
Pre-definedAcceleration
Policies
Offload Server processingMitigate the effects of network latency
14
Improving User ExperienceImproving User Experience
App portal response timePage Load
75%
response timegTime
Page Delivery Time Page Delivery Time
75%Internet or WAN
75%
60%
Client Browser ServerInfrastructure
70%
75%
Server Offload• Compression• Dynamic Caching• Content Spooling• Content Spooling• OneConnect• Rate Shaping• Connection limit• Load balancing
15
Improving User Experience
App portal response timePage Load
Improving User Experience
response timegTime
Page Delivery Time Page Delivery Time
60%Internet WAN
Client Browser ServerInfrastructure
40%
60%
Network Acceleration• Compression• Dynamic Caching
Server Offload• Compression• Dynamic Caching
C t t S li• TCP Express • Content Spooling• OneConnect• Rate Shaping• Connection limit• Load balancing
16
Improving User ExperienceImproving User Experience
App portal response timePage Load response timeg
Time
Internet WAN
Page Delivery Time
35%
Page Delivery Time
Client Browser ServerInfrastructure
35%
25%
Network Acceleration• Compression• Dynamic Caching
Server Offload• Compression• Dynamic Caching
C S li• TCP Express• Differential Compression• QoS• Security/authentication
• Content Spooling• OneConnect• Rate Shaping• Connection limit• Load balancing
17
Improving User ExperienceImproving User Experience
App portal response timePage Load response timeg
TimePage Delivery Time Page Delivery Time
Internet WAN10%
Client Browser
10%
10%
ServerInfrastructure
Application Acceleration• IBR (Dynamic Content Control)• Multi-Connect
Network Acceleration• Compression• Dynamic Caching
Server Offload• Compression• Dynamic Caching
Content Spooling• Dynamic Linearization• Dynamic Caching• Dynamic Compression• SSL Acceleration
• TCP Express• Differential Compression• QoS• Security/authentication
• Content Spooling• OneConnect• Rate Shaping• Connection limit• Load balancing
18
DC: Reduce App Cost with
95% FewerConnections
33%Reduction in
ppApplication Delivery Controller
114.8Million 5
Million
Connections•HW Servers•SW Licenses•Op Mgmt.
MSN reducedMSN reduced
1 87 66%Less NetworkUtilization
MSN reduceda tremendous amount of DC
MSN reduceda tremendous amount of DC 1.87
Terabyte 621Gigabytes
66% Reduction in Bandwidth
CostCost
200%Faster
Faster End-to-End Page Load Time
3 Seconds
1 Seconds
Faster
19
iRule allows System Customization without any Application Code Change
Challenge1. Database replication2. User experience
Solution1. Read from East Coast sent
to local app/DBpp2. Write request sent to
remote app/DB3. iRule checks to see if data
is replicated yetis replicated yet
Benefits1. Decrease latency2. Provide fault tolerance
20
File Virtualization – why is it matter?
Volume of Data Growing
File Virtualization why is it matter?
IT Budget Constraints gTotal Enterprise Disk Storage Systems
Exabytes Shipped(Exabytes)
g
IDC: Worldwide Network Controller and Block-Level Storage Virtualization 2008–2012 Forecast: A Key Component in Building the Virtual Datacenter, April 2008p
IT is seeking cost and efficiency improvements
21
The Key to Managing Storage GrowthThe Key to Managing Storage GrowthBEFORE
User / application access tightlyUser / application access tightly coupled to physical file storage
– Inflexible: change is disruptive– Complex: multiple mappings toComplex: multiple mappings to
heterogeneous storage devices– Inefficient: low aggregate
utilization
22
The Key to Managing Storage GrowthThe Key to Managing Storage GrowthBEFORE AFTER
User / application access tightly File access decoupled fromUser / application access tightly coupled to physical file storage
– Inflexible: change is disruptive– Complex: multiple mappings to
File access decoupled from physical storage location
– Flexible: change is non-disruptiveComplex: multiple mappings to
heterogeneous storage devices– Inefficient: low aggregate
utilization
– Simple: single mapping to unified storage pool
– Efficient: maximize utilization
23
Fixed Telecommunication network P id Li tProvider List
China Telecom– 223M Subscribers3 Subsc be s– 300+ Big-ip, 3DNS, FP– Mobile License in the Near
Future– Huge Number Forecast in
FY2008 China Netcom– 114.93M Subscribers– 200+ Big-ip , FP– Mobile License in the Near
Future– Huge Number Forecast in
FY2008
24
Mobile Telecommunication network P id Li tProvider List
China Mobile– No.1 Carrier world wide– 325M+ Subscribers325M Subscribers– 2000+ F5 boxes– TD-CDMA Start to Deploy
China Unicom– 142.36M Subscribers– 100+ Big-ip– Maybe Merged into CTC and CNC
25
Highly Available 24x7 Banking Infrastructure
HSBC
HSBC Paris, France
HSBC UKP2G DCs
HSBC ITVancouver, BC
Highly Available 24x7 Banking Infrastructure
HSBC HKP2G DC
SABBRiyadh
HSBC NYC & Chicago
HSBC Mexico City
AustraliaSydney
One of the World’s Largest Bank by Market CapitalizationMajor Applications:1. Internet Banking2. Corporate IT3. PeopleSoft HR Portal
26
DC: Consolidation by Virtualization
Web ServerC ll
App. Server
Web Server
NetApp
naliz
atio
n
naliz
atio
n
Server, Storage, PC - Home
Cell
EMCApp. ServerWeb Server
rtua
lizat
ion
Pool
Virt
ua
rtua
lizat
ion
Pool
Virt
ua
, g ,Network and DC Consolidation
App. ServerWeb Server
Windows file storage
ge P
ool V
ir
on S
erve
r P
er P
ool V
ir
ter &
Lin
k P
Remote - WAN
App. Server
Web ServerWindows file storage
File
Sto
rag
App
licat
io
Web
Ser
ve
Dat
a C
ent
PC - LAN
Web Server
ARXLTMLTMGTM& LC
WLAN
27
F5 Network Solutions
28
F5 Networks: Integrated Application Delivery Networking Architecture
nternationalI
ata enterD C
Application Delivery Networking Architecture
Enterprise Manager /
pplications & torageA S
sersU
Enterprise Manager /ControlPoint
W bAGl b l AWAN
L l
Edge Gateway (EGW)
BIG-IP Global Traffic
Manager WANJet
FirePassSSL VPN
BIG-IP LocalTraffic
ManagerBIG-IP
ApplicationSecurityManagerBIG-IP Web
Accelerator
BIG-IP Link
Controller ARXFile/Data
Virtualization
Web Accelerati
on (WA)
App Security Manager(ASM)
Global Traffic
Manager (GTM)
Access Policy
Manager (APM)
Optimization
Manager (WOM)
Local Traffic
Manager (LTM)
ARX
TMOS v10 x
iControl
AcceleratorTMOS (iRule and iControl)
BIG‐IP HardwareTMOS v10.x
Business Goal: Achieve these objectives in the most operationally efficient manner
29
Platform Performance for LTMPlatform Performance for LTM
G G G G GBIG-IP 1600
BIG-IP 3600
BIG-IP 3900
BIG-IP 6900
BIG-IP 8900
VIPRIONWith 4 blades
Max. throughput 1 Gbps 2 Gbps 4 Gbps 6 Gbps 12 Gbps 40 Gbps
Layer 4 Connections/sec
60,000 115,000 175,000 220,000 400,000 1 Million
Layer 7 Requests/sec (inf-inf)
100,000 135,000 400,000 600,000 1,200,000 3,200,000Requests/sec (inf inf)
Max. conc. conn. 4 Million 4 Million 8 Million 8 Million 16 Million 32 Million
Max. SSL TPS 5,000 10,000 15,000 25,000 58,000 200,000
Max. SSL Bulk 1 Gbps 1.5 Gbps 3.8 Gbps 4 Gbps 9.6 Gbps 36 Gbps
Max. SSL conc. conn. 1 Million 1 Million 1 Million 2 Million 4 Million 8 Million
Max. compression 1 Gbps 1 Gbps 3.8 Gbps 5 Gbps 8 Gbps 16 Gbps
Switch backplane 14 Gbps 24 Gbps 34 Gbps 68 Gbps 112 Gbps 368 Gbps
30
Avoid Growing Pains
TMOS+ Security
Avoid Growing Pains
+ Security+ Accel+ iRules+ iControl+ iControl
3,200,000 Layer 7 Requests/SecVIPRION ACE 16G
76,000 L7 RPS= 42 Blades= 42 Blades
31
Don’t Take Our Word for ItDon t Take Our Word for It3rd party functionality report
O th fi bilit
On The GUIs…
On the configurability
of Rate Shaping…
On the Architecture and
toolsets of iRules and iControl…
On the configurability
of Connection Management…
32
Real-World Testing
Real World TestingGoal: Real world, open, honest, and repeatable testing
– Markets had too many engineered and isolated “hero statistics”
Most extensive testing to dateE ’ f t i d d t– Europe’s foremost independent network testing facility
– 150 tests completed across all vendors– Ixia and Spirent validated tests and p
detailed methodology documentation plus full configurations (126 pages)
Results“BIG-IP 6800 emerged comfortably ahead on all tests”
Demonstrated 2x–5x better performance across all major functions p j– L4, L7, SSL, compression, DoS protection, and mixed traffic tests
33
F5 – Applications Integration
34
Intergration With Major ApplicationsIntergration With Major Applications•AmberPoint Service Level Manager •BEA Systems WebLogic Server •BorderWare MXtreme
•Microsoft Live Communications Server •Microsoft Mobile Information Server •Microsoft Office SharePoint 2007
•Check Point Software Technologies VPN-1/FireWall •Citrix Systems MetaFrame •Coradiant TrueSight •CoroSoft Director •IBM Lotus Domino Web Access (iNotes)
•Microsoft SharePoint Portal Server 2003 •Microsoft Windows Terminal Services •Netegrity SiteMinder •Oracle 9iAS •Oracle 10gIBM Lotus Domino Web Access (iNotes)
•IBM WebSphere •Macromedia ColdFusion MX/JRun •Mercury Topaz •Microsoft Application Center Mi ft E h S 2007
•Oracle 10g •Oracle E-Business Suite 11i •Quest SharePlex •RLX Technologies Control Tower •RSA Security SecurID
•Microsoft Exchange Server 2007 •Microsoft Exchange Server 2003 •Microsoft Internet Information Services (IIS) •Microsoft Internet Security and Acceleration Server
•SAP •Siebel Systems eBusiness Applications •Symantec WholeSecurity Confidence Online Server •Trend Micro InterScan •webMethods Integration PlatformwebMethods Integration Platform
35
Organizations Worldwide Trust F5 to Keep Their Businesses Running
Financial Media OtherIT TransportTelco/ISP
Including 9 out of 10 of the world’s top financial services firms and 60% of the Global 1000
36
F5 – Professional Services
37
Professional Services
…provides maintenance support, p pp ,consulting services and training on F5 technology ensuring technical problems are addressed effectively, implementations executed y pwith ease and technical knowledge shared effectively cumulating in greater ROI for our partners and customers by making our services expertise, systems and infrastructure available to those who subscribe to our offerings
38
The Customer & Professional Services
OnsiteServices
Consulting Services
F5 P f i lProfessional
Services
Training Services
MaintenanceServices
39
Maintenance Services
Maintenance S t
Toll-Free T l h
Supports S ft dSupport
ContractsTelephone Numbers
Software and Hardware
7x24 Advisory Support,
H d Full management P d tHardware replacement and
problem resolution
gand Technical
Escalation
Product Development
40
Maintenance Support
Standard Premium
Service• 8x5 Monday to Friday • Software Upgrades
• Major
Service• 24x7• Software Upgrades
• Major• Major• Minor• HotFixes
• Access to AskF5• Access to WebSupport• Access to Phone
• Major• Minor• HotFixes
• Access to AskF5• Access to WebSupport• Access to Phone
Support• iRules review
Support• iRules Support
41
RAPID-RMA
AdvanceRAPID RMASparing Replacement
(included with all Maintenance)
RAPID-RMA Local
Warehousing
Service• Not all models covered• Often rely on F5 Sales
to loan appliances
Service• One Outage• Identical swap• Appliance shipped from
all Maintenance)Service• One Outage• Identical swap• 21 days to returnto loan appliances
• Customer has two or more outages
• Appliance shipped from USA, expect 4-10 business days
• 21 days to return ‘broken appliance’
• 21 days to return ‘broken appliance’
• Next Business Day• 4hour 24x7
Available• All Countries• Is included as part of
F5 Maintenance
Available• Singapore• Thailand• Malaysia TBD
42
Training Services
Authorised Training Centres Onsite customer
t i i il blTraining Centres across Asia Pacific training available
Basic and Advanced F5 P tf li T i i
Training courses aligned to technical Portfolio Training certification
43
Training Courses
ApplicationNetwork Operations
ApplicationDevelopment &Support Teams
Technical Support Teams
Offerings• Operating BIG-IP• Operating Viprion
Offerings• WebAccelerator for
Application Teams
LTM• Essentials• Advanced• Troubleshooting
• Essentials• Troubleshooting• GTM
Coming in 2010• ASM for Application
Teams
• Troubleshooting
Other• GTM• ASM• WebAccelerator• Architecture
Coming in 2010• Server Virtualisation
with BIG-IP
44
Web Resource
45
Self-Serve ResourcesSelf Serve ResourcesGeneral Information – F5.com
http://www f5 comDeveloper Community –D C t l–http://www.f5.com
Solutions Self-Serve – Solution Center
htt // f5 / l ti
DevCentral– http://devcentral.f5.com– SDK
–http://www.f5.com/solutions–Deployment Guides–Solution Guides
– Forum/BLOGS– Tips/Samples
FAQ–White Papers
Technical Self-Serve - Ask F5http://tech f5 com
– FAQ– Downloads/Code Share
Support Case Management ––http://tech.f5.com–Documentation–Solutions (FAQ)
WebSupport Portal– http://websupport.f5.com– Support case creation,
–Knowledge Basepp ,
management, view
F5 ResourcesF5 Resources
46
Summary
47
F5 ADN SummaryF5 ADN Summary
F5 is the market leader in Application DeliveryF5 is the market leader in Application DeliveryNetworking for the past 7 consecutive years. Networking for the past 7 consecutive years.
9 out of 10 of the world’s top Telco/Financial and 9 out of 10 of the world’s top Telco/Financial and Government firms trust F5 solutionsGovernment firms trust F5 solutions
F5 ADN architecture is focused on FAST, SECURE & F5 ADN architecture is focused on FAST, SECURE & AVAILABLEAVAILABLE
EndEnd--toto--End support (product End support (product --> training/certification > training/certification --> > support )support )
Recommended