1 Introduction to Riverbed Syed Shahab Ali Solutions Sales Engineer Pakistan

1

Introduction to Riverbed

Syed Shahab AliSolutions Sales EngineerPakistan .

2

© 2011 Riverbed Technology. All rights reserved. Riverbed Technology, Riverbed, Steelhead, RiOS, Interceptor, Think Fast, the Riverbed logo, Mazu, Profiler, and Cascade are trademarks or registered trademarks of Riverbed Technology. All other trademarks used or mentioned herein belong to their respective owners.

Who is Riverbed?

3


Who is Riverbed?

The unified performance platform company

A profitable public company (RVBD) • $726 million in revenue (Fiscal 2011)• Global sales and support operations

A trusted IT supplier to 16,000 customers • Tens of thousands of appliances installed and operating

around the world

The corporate sponsor of Wireshark®

• World’s leading network analyzer is downloaded nearly 500,000 times a month

• Rated #1 essential tool on Infoworld and SecTools.org (2011)

4


Riverbed – Best Positioned for Performance

SupportTechnology Stability

24/7 Global Support

18 Languages

4-Hour Parts

Award-winning service

5 Years – InfoWeek

Technology of the Year

5Years – Gartner

MQ Leader

1600+ Employees

Global

Profitable

Public (RVBD)

5 1700+ 24

5

Product Family Overview

6


The Riverbed Unified Performance Platform

7

• Map dependencies• Slash diagnosis time

WHITEWATERCloud Storage

Gateway

STEELHEAD WAN

Optimization

CASCADENetwork Performance

Management

STINGRAYApplication Delivery

Controller

GRANITEEdge Virtual Server

Infrastructure

“Think fast”

8


TechnologyBusiness

Stability• Publicly Traded• Profitable

Partnerships

Presence• > 16,000 Customers• Worldwide 24x7 Support• 4-hour parts replacement• Thousands of resellers

Speed• Most L-7 application intelligence• Integrated QoS, Visibility

Scalability• > 80% of Global 100 use Riverbed• Clustering, high-availability options

Simplicity• Most network integration options• Leverage existing IT

Riverbed Steelhead Introduction

9


Gartner “Magic Quadrant for WAN Optimization Controllers, 2010”

Andy Rolfe, Joe Skorupa, Severine Real

© 2010 Gartner, Inc. and/or its Affiliates. All Rights Reserved. Reproduction and distribution of this publication in any form without prior written permission is forbidden. The information contained herein has been obtained from sources believed to be reliable. Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartner's research may discuss legal issues related to the information technology business, Gartner does not provide legal advice or services and its research should not be construed or used as such. Gartner shall have no liability for errors, omissions or inadequacies in the information contained herein or for interpretations thereof. The opinions expressed hereinare subject to change without notice.

10



Source: Gartner (January 2012) – Joe Skorupa, Severine Real

This Magic Quadrant graphic was published by Gartner, Inc. as part of a larger research note and should be evaluated in the context of the entire report. The Gartner report is available upon request from Riverbed. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

11



http://www.gartner.com/technology/reprints.do?id=1-1FAO3G8&ct=130430&st=sb

StrengthsRiverbed offers the broadest set of capabilities in the industry, including features for large branch networks, data center replication and storage networking protocols, and single remote users, combined with unmatched ease of installation and management and best-in-class presales and post sales support.Riverbed offers among the broadest support for application-specific optimizations in the industry, including TCP, UDP, HTTP, VDI and dynamic browser-based applications such as SharePoint, as well as comprehensive support of business applications, such as CRM and ERP.Riverbed has a solid near-term road map, including a more fully featured offering for video and UDP optimizations, combined with a solid track record of high initial software quality.

http://www.gartner.com/technology/reprints.do?id=1-1FAO3G8&ct=130430&st=sb

12


Why Invest in Technology?

IncreaseProductivity

ReduceCosts

ProtectData

13


Riverbed – Critical to Enterprise Success


ReduceCosts

ProtectData

Disaster Recovery

ApplicationAcceleration

BandwidthOptimization

Consolidation&

Virtualization

14



ReduceCosts

ProtectData

Disaster Recovery

ApplicationAcceleration

BandwidthOptimization

Consolidation&

Virtualization


ABC

D

15


Bandwidth Optimization

• Optimize your WAN• Do more with less• Reduce WAN traffic by 60-95%

Consolidation & Virtualization

• Consolidate servers from branch to datacenter• Consolidate servers at branch• LAN-like performance access

Disaster Recovery• Backup (and recover) in less time• Little impact to WAN • Achieve RTO and RPO objectives

Application Acceleration

• Dramatically faster response times• Improved user productivity• Hundreds of apps from Citrix to SharePoint


ABCD

16


VIRTUALLY ELIMINATE APPLICATION LATENCY

Technology Advantage: Application Streamlining

USERS DATA CENTERNETWORK

• Steelheads intercept and complete transactions locally

• Net result – 65-98% reduction in WAN round trips

Application Streamlining

• No other vendor has as many application optimizations (16 and growing)

• Member of Microsoft’s Protocol Optimization Licensing Program (POLP)

Riverbed Strengths

• Virtual Desktops (VDI) – Eliminate key stroke jitter, improve end user response times 30-50%

• 44X SharePoint performance improvement

Examples

17


Application Streamlining Overcomes Application Protocol Limitations

Request

WAN

DATA CENTER BRANCH OFFICE

Optimized WAN Transfer

The net effect is 65-98% reduction in WAN round trips

Steelhead completes transaction locally

Steelhead completes transaction locally

18


Technology Advantage: Data Streamlining

DE-DUPLICATE DATA


Data

• Byte level data deduplication is bi-directional

• Works across protocols and apps

• Packet mode optimization for UDP and TCP IPv6

Data Streamlining

• Single instance Data Store scales linearly, providing industry leading scalability

• Appliances auto-discover one another on the network

Riverbed Strengths

• Cut Video on Demand bandwidth by 95%

• Virtual Desktops (VDI) – Deploy twice and many desktops without adding bandwidth

• 60-99% reduction in WAN bandwidth needs

Examples

19


Technology Advantage: Transport Streamlining

OPTIMIZE TCP


• Optimizes TCP Payload

• Repacks TCP packets into optimal payload sizes

Transport Streamlining

• TCP capabilities like HS-TCP and MX-TCP provide additional capabilities to significantly increase native throughput for all TCP applications

Riverbed Strengths

• Virtual Desktops (VDI) – Maximize performance across small or congested links

• 20% faster cold file transfers e.g. 100MB media files

Examples

20


WAN

Transport Streamlining Overcomes TCP Limitations

Make TCP payload bigger

16KB to 100KB+

The net effect is a 60-98% reduction in TCP round trips


Repack payload with references

From 100KB+ to Virtual 1MB+

References

New dataData

21


Data

WAN

Bandwidth Optimization

ReconstructedFiles & Data

RequestFiles & Data

Steelhead auto-intercepts response, and segments data “De-dupes” data so only new bytes compressed & sent over the WAN

Requests go directly from the client to the server


16-Byte references represent megabytes of warm data Remote Steelhead reconstructs data and delivers it to the client Works bi-directionally, cross-protocol and across applications

22


Jack the IT Guy

23


Optimize Bandwidth with Enhanced Control: QoS

UDP

Port 80

Port 80Port 2598

WANWAN

Low visibility leads to bottlenecks AppFlow Engine identifies applications QoS can makes room for apps, video

Port 135

Port 80

UDP

Video

Business Web

iTunes

Citrix

Voice

P2P

Email

Voice

Video

Business Web

iTunes

CitrixP2P

Email

Voice

Achieve Maximum Control

24


Consolidate Servers to the Data Center

Branch Office Consolidation• Most branches still have many local servers • Steelhead products enable consolidation of many of

these servers to the data centers / private cloud• Enables customers to cut IT costs and save money

WAN

File Servers

Mail ServersWeb Servers

Storage

DATA CENTER

File Servers Mail

Servers Filers

TapeBackup

FilersTapeBackup

MOBILE WORKERS

BRANCH OFFICE

25


Consolidate Servers within the Branch Office:Riverbed Services Platform

The Riverbed Services Platform provides the ability to run up to 5 virtualized servers on the Steelhead Appliance

Virtualize branch offices Reduce infrastructure sprawl Lower IT support costs

Riverbed Packages

PRINTAD, DC,

PRINT SERVER FIREWALL CUSTOMRICH

MEDIA

http://www.websense.com/content/Home.aspx

http://images.google.com/imgres?imgurl=http://www.qumu.com/assets/img/layout/qumu-logo-smaller.gif&imgrefurl=http://www.qumu.com/newsroom/events/events.htm&h=46&w=148&sz=1&hl=en&start=2&tbnid=PB2m8ZnimX6bcM:&tbnh=30&tbnw=95&prev=/images?q=Qumu+logo&gbv=2&hl=en&safe=off

26


WAN

DATA CENTER

Local backup in branch offices

Unprotected desktops & laptops

DISASTER RECOVERY SITE

Disaster Recovery without WAN Optimization

Expensive Unreliable Limited coverage Heavy administration

Limited replication to recovery datacenter

27


Protect branch offices across the WAN or consolidate IT to the datacenter

Backup desktops & laptops across the WAN Steelhead

Appliance

Replicate all data to recovery data center

Steelhead Mobile

Steelhead Appliance

Steelhead Appliance

Disaster Recovery with WAN Optimization

DATA CENTER

DISASTER RECOVERY SITE

WAN

Hardware & bandwidth savings Reliable & Resilient Comprehensive Automated

28


A Steelhead for Every Need

Wherever your business leads, and wherever your data goes, Riverbed has a Steelhead solution to accelerate your business

• Steelhead Appliances• 1 Mb/s–12 Gb/s• 30–1 Million TCP conn.• Host up to 5 VMs

• Virtual Steelhead• ESX/ESXi Based• VMware management tools

• Cloud Steelhead• Subscription Model• Pay as you grow scaling

• Steelhead Mobile• Per Connection Licensing• Branch Site DR

Steelhead Platforms

BRANCH OFFICE

SECONDARY DATA CENTER

MOBILE WORKERS

WAN DATA CENTER

PUBLIC CLOUD

Interceptor

Mobile

CMC

Controller

29


Cloud Steelhead

Riverbed Cloud Portal Licensing & Billing Discovery Deployment Upgrades Configuration Contract Management Extend acceleration to Public cloud

Subscription/up-front Pricing Models Tight integration into Cloud systems Quick customer spin-up times Simplified ongoing management

Customer A Public cloud provider

Customer B

Customer B

30


Virtual Steelhead

No hardware virtual appliance Built on RiOS, virtualized on VMware ESX/ESXi Identical features for WAN optimization as Steelhead

appliances• Requires WCCP / PBR for traffic redirection

Retains all current technology advantages over the competition

Appliances Software Virtual

31


Steelhead Mobile – Complete Mobile Solution

Mobile Workers

• Enterprise grade acceleration for SMB or smaller strategic mobile deployments

Virtual package deployed in the Riverbed Services Platform on Steelhead Appliance

Supports up to 100 concurrent active Mobile clients

SMC – Virtual Edition

• Designed for large deployments and rapidly growing organizations

Standalone appliance deployed in the data center.

Supports up to 4,000 concurrent active Mobile clients

Clusters for scale

SMC – Appliance

32


Stingray Traffic Manager

33


What is Stingray Traffic Manager

What is it?

• A software Application Delivery Controller• Operates at layer 7, puts lightweight

demands on kernel

Available as:

• Software for Linux and Solaris environments

• Virtual Appliance for VMware / XenServer / OracleVM

• Through many third-party cloud providers

Physical Virtual Cloud

34


Where is the industry headed?

“Specialized software will replace specialized hardware throughout the datacenter.

“What server virtualization via hypervisors did for computing, new methods of virtualization and Software defined networks are doing at every other layer of IT stack. Software-defined data centers are coming, and they’ll redefine infrastructure for the next generation of applications.”

Steve Herrod, Chief Technology Officer, VMwareInterop May 2012

35


Why is Stingray different?

It’s all software – Flexible, agile and cost effective TrafficScript – Allows the ADC to truly become application fluent Service level monitoring* – Real-time datacenter transaction visibility Auto-scaling* – Provision what you need, scale up/down on demand Cloud balancing* – GSLB with a business focus Activity monitoring – Full ADC visibility Automation – How to externally manage the ADC Stingray Application Firewall – Add application level security Stingray Aptimizer – Optimize web page content (WCO)

* = Advanced feature set

36


Can Stingray do this?Feature Available

Server load balancing Yes

Session persistence Yes

SSL offload Yes

Content-based routing Yes

Connection draining Yes

Health monitoring, incl. script based Yes

Redundancy and scaling Yes

IPv6 support Yes

HTTP multiplexing Yes

Content caching Yes

Content compression Yes

Service protection and rate limiting* Yes

Bandwidth management* Yes

Global server load balancing* Yes

Basic SLB features

Basic ADC features

* = Advanced feature set

37


Our customers use Stingray for…

Our customers use Stingray for:• High availability, scalability and traffic flood protection• Application acceleration• Application and user experience control

They select Stingray because:• Software scales more easily and cost-effectively than hardware and does not limit

their future deployment options• They care about their applications, not just reliable packet delivery• They can do things with TrafficScript that they cannot do with anything else• We enable them to bring new applications and services to market more quickly

38


Top 10 reasons to consider Stingray Traffic Manager

1. Virtual / Software ADC is in our blood2. Simplification3. Performance4. Product packaging vs. Price/performance5. Real L7 Application Firewall throughput6. Agile application development/Dev-Ops7. L7 Acceleration8. Commercial model9. Scalability10. Automation

For more information read this blog post: Top Ten List

http://blog.riverbed.com/2012/02/top-ten-reasons-why-stingray-is-better-for-your-environment-than-a-legacy-hardware-adc.html

39


Stingray ADC benefits…

MORE RELIABLE:• Load balancing• Fault tolerance• Monitoring• Bandwidth and rate

shaping• Concurrency control

FASTER:• SSL and XML offload• Content Compression• HTTP Caching• HTTP Multiplexing • TCP Offload

MORE SECURE:• Server Isolation• Traffic Filtering and

Scrubbing• Access Control Lists• DoS protection

EASIER TO MANAGE:• TrafficScript logic• Service Level

Monitoring• Centralized

Diagnostics• Reporting and

alerting• Control and Event

API

Stingray ADC

• Web SitesE-commerce, corporate sites

• Enterprise AppsIntranets, Document Mgmt,

ERP, CRM

• EmailSMTP, IMAP. POP

• Web ServicesDatabases, XML, SOAP

• Rich MediaVideo, Audio, SIP, RTSP

• Web Content Optimization

• Application Firewall

40


Server load balancing

Why?• Local redundancy• Scale the service

Basics• L4-7 proxy SLB• Virtual Server = Service for “users”• Server Pool = Server resources for service

Load balancing algorithms• Round robin/Weighted RR• Least connections/Weighted LC• Fastest response time• Perspective

Server Pool

Virtual Server

GET

GETGET

GET

41


Content compression

Why?• Speed content delivery• Better user experience• Compression on application level means

fewer round trips to get content = Application Acceleration

Basics• Standard Gzip web browser compression

»No additional client/agent needed

• No concept of cold vs. warm compression• Typically used for text based content

» html, css, xml, etc.

Server Pool

Virtual Server

GET /style.cs

s

GET /style.cs

s

style.cssstyle.css

42


Service protection and rate limiting

Why?• Protect the service from basic

misuse/attacks Basics

• Protection class applied to virtual server

»Connection limitation per IP address or top 10 IP addresses

» IP based access list»HTTP integrity checking»Custom Rule using TrafficScript»Test mode available

• Rate limiting class used by TrafficScript

»Per second and/or minute rules

Server Pool

Virtual Server

GET /

43


Health monitoring

Why?• Make sure server is working

Basics• Passive health monitors (default)

» Monitors the real request• Active health monitors

» Periodic checks» Basic – Ping or Connect (TCP)» Protocol specific – DNS, FTP, POP,

SMTP, HTTP, HTTPS, RTSP and SIP» Advanced – Client First, Server First,

Full HTTP, Full HTTPS and External Program (example Perl script)

» Per-node or pool-wide

Server Pool

PING

GET /index.html

GET /health.jsp

44


SIL

VE

R

GO

LD

Bandwidth management

Why?• Service differentiation

»Gold, Silver, Bronze • Better user experience• Service bandwidth limitation• Server bandwidth protection

Bandwidth management class• Max bandwidth• Bandwidth sharing within class

»No sharing»Per Traffic Manager»Across all Traffic Managers

sharingservice

Limits outbound traffic to users or servers

Server Pool

Virtual Server

GET

GET

45


Session Persistence – Sticky Connections

Why?• Provides state to connection• Typical use case is e-commerce shopping

carts Persistence type

• Source IP• Transparent cookie insert• Monitor application cookie• Monitor J2EE session id• Monitor ASP/ASP.NET session id• SSL session id

Server Pool

Virtual Server

GET

GET

46


SSL Offload

Why?• Free CPU cycles on servers• Allows for content based routing and/or

cookie persistence for encrypted sessions• Mutual authentication

Basics• SSL handshake using PKI

»SSL h/w accelerator support• SSL bulk encryption using symmetric key

encryption• Always server authentication

»Based on trusted CA’s• Optional client authentication

»Support for CRL and OCSP

Server Pool

Virtual Server

GET

GET

47


Content-based Routing – L7/URL Load Balancing

Why?• Web site consists of several applications• Use optimal server for specific content• Virtual hosting

Basics• Use file extensions

» .html, .css, .asp, .jsp, etc. • Use path information

» /images, /app1, /app2, etc.• Use host information

»www.site1.com, www.site2.com, etc.

Server Pool

Virtual Server

GET /index.html

GET /index.html

GET /service.asp

GET /service.asp

GET /servlet.jsp

GET /servlet.jsp

48


Connection draining

Why?• Non disruptive server maintenance

Basics• Allows for persistence sessions to keep

working until “disabled”

Server Pool

49


Redundancy and scaling

Why?• ADC redundancy and scaling = Service

redundancy and scaling Basics

• Beyond single ADC = Always cluster

»Active/Passive, Active/Active and n+1

• Active/Passive

»Single Traffic IP per service• Active/Active and n+1

»Single-hosted Traffic IP»Multi-hosted Traffic IP

Server Pool

Cluster

50


IPv6 support

Why?• ISP’s are starting to provide IPv6 based

Internet services• Enterprises are starting to use IPv6 on

parts of their internal network Basics

• Virtual servers listen on IPv4 or IPv6• Server pool can be a mixture of IPv4 and

IPv6

»Native IPv4 or IPv6»NAT 46 or NAT 64

Server Pool

IPv6 Virtual Server

IPv6 Internet

IPv4 IPv

4 IPv6

51


HTTP multiplexing

Why?• Offload TCP processing from server

Basics• Utilize the difference between LAN vs.

WAN latency• Multiplex ratios 1000:1 not uncommon

Server Pool

Virtual Server

GET

GET

TC

PGET

52


Content caching

Why?• Offload content delivery from server• Typically common static objects

Basics• Uses memory for object store

»Optional SSD for large volumes• Honors caching settings from server by

default

»TrafficScript used to override caching headers from server

Server Pool

Virtual Server

GET /image.gi

f

image.gif

53


Global Server Load Balancing

Why?• Data center redundancy• Users routed to closest data center

Basics• DNS based• GLB algorithms (site selection)

» Location load»Geographic (MaxMind GeoIP)»Adaptive (default)»Round robin»Weighted random»Active/Passive

• Recommended DNS TTL 30-60 sec• DNSSEC supported

Internet

Dallas – Data Center

London – Data Center

DNS DNS

DNSDNS

HTTP VS = 10.10.10.20HTTP VS = 20.20.20.20

DNS VS = 10.10.10.20DNS VS = 20.20.20.20

www.demo.local10.10.10.2020.20.20.20

www.demo.local10.10.10.2020.20.20.20

NS .demo.local10.10.10.2020.20.20.20

NS .demo.local10.10.10.2020.20.20.20

User is Brazil User is Germany

10.10.10.20

DNS

GET20.20.20.20

20.20.20.20

DNSGET

10.10.10.20

54


Riverbed solutions to application performance

NETWORK

Network LatencyNetwork Bandwidth

Protocol Inefficiencies

APPLICATION

Server performanceTraffic floods

Application Inefficiencies

CLIENT

Content ComplexityBandwidth requirementsRendering Inefficiencies

StingrayAptimizer

StingrayTraffic

Manager

SteelheadWOC

55


Two different types of load balancer / ADC

Layer 4 Load Balancers

L4 Strengths: Load-balancing transparent devices e.g.

firewalls, proxy servers Simple, high-volume media serving

Layer 7 App. Delivery Controllers

L7 Strengths: Load-balancing server applications Application Acceleration Complex services

Customer requirements: Needs are dominated by layer-2/4

requirements Replacement programs driven by ‘we

want a faster box’ Cannot answer

“Where is your application?”

Customer requirements: Virtualization or Cloud transitions Replacement programs driven by

‘we need something smarter’ Integration of complex applications

e.g. acquisition Augment existing layer 4 devices

56


The Steelhead AdvantageRiverbed continues to support the widest range of application protocols, network architectures, security features, services enhancements, and management options

• CIFS / Signed CIFS*• MAPI (2003-2010*)• Encrypted MAPI (2003-2010)*• NFS• HTTP• HTTPS• Oracle Forms• Lotus Notes • Citrix / Encrypted Citrix• MAC CIFS*• Enhanced HTTP Support• SharePoint*• MS Online Offerings (BPOS)*• EMC SRDF/A*• FCIP*• SMBv2• Outlook Anywhere*• ICA over SSL• Encrypted Lotus Notes

ApplicationProtocols

• Asymmetric routing support• InPath fail to wire, PBR, WCCP,

Interceptor, and Server Side Out Of Path • Correct Addressing, Port and Full

Transparency options*• Netflow 5• Passthru Traffic Visibility• Full Transparency w/ Reset*• Per Rule Optimization Tuning SDR,

Adaptive SDR-A, Memory only SDR-M*• 10Gb Interceptor* / 7050*• Multi Interface WCCP• Netflow 9, Cascade Flow• QoS• UDP packet mode optimization• TCP IPv6 packet mode optimization• DSCP Marking for QoS

NetworkArchitecture

• Encrypted Protocol Support (HTTPS, MAPI)

• Encrypted Data Store(128, 192, 256 bit AES)

• Secure Vault (AES 256) for Cert storage• CMC secure vault access automation*• RSP – run up to 5 VM Server Virtual

Machines per Steelhead• RSP Inline traffic interaction• SSL Peering for secured communications

and authenticated optimization• RSP HA Options• Client-side certificate support for SSL• Satellite optimizations• HTTP stream splitting• Skipware integration*• On-demand packet capture/analysis*• SRDF per group reporting*• Kerberos support for Microsoft apps*

Security, Management& Services

* Only offered by Riverbed RiOS 5.5, RiOS 6, RiOS 6.1, RiOS 6.5, RiOS 7.0

57

Thank You

Documents

1 Introduction to Riverbed Syed Shahab Ali Solutions Sales Engineer Pakistan