520 likes | 917 Views
AppDirector 2.0 Solution Positioning & Technical Overview Shaked Vax, Product Manager Nir Ilani, Director, Product Marketing, Application Delivery APAC Partners Event – Technical Track October, 2008. Agenda. Part A: AppDirector 2.0 Solution Positioning and Offering
E N D
AppDirector 2.0Solution Positioning & Technical OverviewShaked Vax, Product ManagerNir Ilani, Director, Product Marketing, Application DeliveryAPAC Partners Event – Technical TrackOctober, 2008
Agenda • Part A: AppDirector 2.0 Solution Positioning and Offering • OnDemand Switch Business Benefits & Key Features • Introducing AppDirector 2.0 • Part B: AppDirector 2.0 Technical Training • New Features In-Depth Overview and Configuration • AppDirector 2.0 Internals
AppDirector 1.0 on OnDemand Switch 3 - Up to 16G Throughput & Scalability • AppDirector 2.0 • Running on OnDemand Switch 1,2 and 1,2 XL • Up to 4G Throughput & Scalability • Additional Services: • Server Offloading • Application Acceleration OnDemand Switch 1 ,2 AppDirector 1.0 on OnDemand Switch 1 & 2 - Up to 4G Throughput & Service Scalability OnDemand Switch 1 ,2 XL AppDirector on OnDemand Switch Product Releases 4Q2008 1Q2008 2Q2008 3Q2008
Analyst Opinion: On Demand Switch “New hardware platform, OnDemand Switch, provides significant flexibility in adapting to growing customer requirements for more performance and features” “F5 must deliver a competitive response to rivals that offer a ‘pay as you grow’ strategy for entry-level systems” Mark Fabbi, Joe Skorupa July 25, 2008 “With the introduction of the OnDemand Switch… large and mid-range datacenter customers stand to benefit from this alternative, cost-effective way of consuming and implementing capacity at a time when consolidation, virtualization, green IT, and Web 2.0 are driving their agendas” Cindy Borovick, Vice President, Datacenter Networks January 28, 2008
OnDemand Switch Business Benefits • Performance Leadership • Delivers the best 0-4G performance and QoE in the industry • Fastest transaction response time • On Demand Throughput Scalability • Pay-as-you-grow approach • Serves all your current and future application needs • On Demand Service Scalability • Add more application services with no compromise on performance • Full Investment Protection • No forklift upgrades • No upgrade projects costs • Better CAPEX and OPEX • Standardization & Operations Simplicity • Less spare parts, training and operational processes • Best Price/Performance Page 7
OnDemand Switch Key Messages What does our solution deliver for the customer? What differences do we make? Page 8
OnDemand Switch Key Messages Radware ADC solution provides an integrated approach to extract greater value from current investments in existing IT infrastructure and minimize initial investments to run more applications and serve more users OnDemand Switch’s “pay-as-you-grow” approach enables customers to pay for the exact capacity currently required while eliminating forklift upgrades and guaranteeing short-term and long-term savings on CAPEX and OPEX for full investment protection OnDemand Switch allows them to scale their throughput capacity and add advanced application-aware and acceleration services on demand to meet new or changing application and infrastructure needs -- without compromising on performance Do More With Less Reduce Costs Scale with no Performance Degradation Page 9
OnDemand Switch 1 • Ports • 4 Gigabit Ethernet (Copper/Fiber) for traffic • 2 Gigabit Ethernet for Management • Dual mode ports • Inserted GBIC select SFP port • Otherwise RJ45 copper port is active
OnDemand Switch 2 • Ports • 4 SFP for GBIC on switch • 12 Gigabit Ethernet Copper ports on switch • 2 separate Gigabit Ethernet for Management, bypassing switch • Switch • H/W trunks supported • STP supported • Bypass with zero power configurable settings • Bypass relays are optional – can be removed for AppDirector • For DefensePro zero power mode is configurable per pair
OnDemand Switch 3 Ports 4 10 Gigabit Fiber ports (XFP pluggable optics) ports 4 Gigabit Ethernet SFP ports (SFP-GBIC Mini) 8 Gigabit Ethernet Copper ports on switch Management Ports 2 out-of-band Gigabit Ethernet for Management, bypassing switch Switch H/W trunks supported STP supported Note: For information about SFP/XFP pluggable optics, see price quotes at the end of this presentation Slide 12
Key Features: Dedicated Management Ports • Dedicated management ports for out-of-band management • Traffic segmentation between management and traffic ports for extra security • Reliable even under high traffic load • Two management port for Highly Available configurations • A separate trunk can be built of 2 for extra reliability
Key Features: Front Panel Input/Output • Power and Reset button – short and long press • Power button – press button, state remembered • USB • Serial console • LEDs: PWR, FAN, SYS OK • LCD with navigation buttons
OnDemand Switch Tech Specs Summary Slide 15
OnDemand Switch 1 versus 2 • OnDemand Switch 1, 2 provide the same throughput levels, but differ in: • Ports density • Switching - ODS2 provides hardware switching capabilities • Performance - ODS2 delivers a bit more performance over ODS1 • Memory - ODS1 & ODS2 are shipped with sufficient memory to address most application requirements. • ODS1 – shipped with 2GB • ODS2 – shipped with 2GB, upgradeable to 4GB • Full Technical Specifications are available on the Website
Ready to Move Ahead Slide 17
Introducing AppDirector 2.0 • AppDirector 2.0 is a one-box ADC solution providing • Savings on rack space, power & cooling • Simpler deployment • Improved manageability • Hence reducing OPEX • AppDirector 2.0 = AppDirector + Application Acceleration • Customers are seeking to reduce the amount of ADC units to reduce OPEX and achieve their Green IT objectives • Reduce power and cooling expenditures • Reduce space • Simplify deployment • Improve manageability Slide 19
On Demand Service and Acceleration Scalability • AppDirector 2.0 provides: • On demand, extended Service Scalability enhancing AppDirector with application acceleration functions: • Server Offloading services: • Content Delivery Acceleration services: • On Demand Acceleration Scalability • Scale SSL TPS capacity up with no hardware replacements • Scale HTTP Compression up with no hardware replacements • No performance degradation thanks to dedicated hardware
OnDemand Switch 1,2 and OnDemand Switch 1,2 XL AppDirector 2.0 is offered on two ODS hardware platforms: Standard Acceleration Enhanced Acceleration Slide 22
Sales Tools • The following Sales Tools are available on the Intranet on Radware ADC Sales Tools page (http://www.radware.com/content/products/appdirector/salestools/competeinfo/default.asp ) • Radware ADC Master Sales Presentation • AppDirector 2.0 Sales Presentation • Radware ADC Brochure • AppDirector 2.0 and OnDemand Switch XL – FAQs • RFI/RFP Tool • and on OnDemand Switch Sales Tools page (http://www.radware.com/content/products/ondemand_switches/default.asp) • OnDemand Switch 1, 2 & 3 Sales Presentation • OnDemand Switch Data Sheet • AppDirector on OnDemand Switch Selling Guide • OnDemand Switch Business Benefits White Paper • OnDemand Switch FAQs
Agenda • Part A: AppDirector 2.0 Solution Positioning and Offering • OnDemand Switch Business Benefits & Key Features • Introducing AppDirector 2.0 • Part B: AppDirector 2.0 Technical Training • New Features In-Depth Overview and Configuration • AppDirector 2.0 Internals
Introducing AppDirector 2.0 • AppDirector 2.0 enhances AppDirector’s offering with Application Acceleration functions • Server offloading: • SSL acceleration • Client Authentication • Caching • Content Delivery Acceleration: • HTTP Compression • Caching • TCP optimization • Central Certificate repository • Improved ADC manageability Slide 26
Improved ADC Manageability • All new features are configured based on reusable policies concept • Allows configurations re-use • Minimizes re-type errors • Simplifies changes • Simplifies aligning with organization policies • Enhanced Web Based Management (WBM) usability • Direct links between tables and used objects • Redesign of several configuration screens • AppDirector 2.0 is fully manageable from Insite 2.73
SSL Acceleration: Functionality • Supports both Front-End and Back-End SSL • Select Server Certificate • Select predefined Cipher suite or user-defined list • Use intermediate CA to create Certificates chaining • Define back-end server listening port in case it is different from front-end • Define Back-End SSL with its own cipher suite • Supports HTTP headers redirect modification to HTTPS • HTTP response Hostname that appears in requests is always converted • Define which hosts to redirect using Regular-Expressions
Caching: Functionality • Caching takes place in device memory for fast reponse • Caching is done based on HTTP headers defining cache-ability and caching max-time • Objects are purged when upon expiration according to • Their HTTP headers, or • AppDirector configured max-time • User can purge cached objects by selecting • All objects • Specific L4 policy
Web Compression: Functionality • Compression is done using GZIP or Deflate algorithm • Compression is done by AppDirector CPU or dedicated Hardware • Optional on OnDemand Switch XL only • User can define the default compression method to use in case it is not defined in HTTP headers using the “Algorithm” field
TCP Optimization:Functionality & configuration • Nothing to configure! • AppDirector Acceleration Engine performs TCP optimization whenever any Acceleration feature is enabled, i.e. whenever traffic is routed via the Acceleration Engine
Central Certificate Repository: Functionality • AppDirector allows creating Keys, Self-signed Certificates, and Certificate Signing Requests (CSR) • AppDirector allows importing Intermediate CA Certificate to use for Certificate’s chaining • AppDirector allows importing Client CA certificate to be used in Clients’ Certificates Authentication Policy • AppDirector allows export of Certificate and Keys • Backup • Moving to secondary machine • AppDirector allows adding keys to configuration export files (encrypted)
Client Authentication: Functionality • Configure AppDirector to Authenticate users based on Client Certificates • The CA that generated the clients’ certificate must be know and trusted by AppDirector • Define trusted “Client CA” by importing its certificate and attaching it to Clients Authentication policy • Certificates can be validated based on OCSP • Use OCSP URL in certificate or user defined OCSP URL
AppDirector 2.0 Internals Page 43
Internal Architecture AppDirector Core1: AppDirector Core2: Acceleration Engine 1 Core3: Acceleration Engine 2 Core4: Acceleration Engine 3 Internal Network (DHCP + DXP*) • Combines AppDirector and separate, independent Acceleration Engine (AE) Module • Multi-core ensures no performance degradation • Dedicated CPU for traffic redirection (AppDirector) and AE • Core1 runs VxWorks. Single Linux OS runs on Cores 2-4* (*) On OnDemand Switch 1,2 XL; on OnDemand Switch 1,2 only 1 AE exists Slide 44
Internal architecture – Cont. • Can be installed on any ODS1 or ODS2 – v2 • v2 - includes a Hard-Disk & 2GB RAM • Upgrade from ODS v1 to v2 is available • ODS v2 can be identified according to • A sticker located at the rear panel of the device • Device information (via CLI or WBM) showing a hard-disk is installed • Entire Configuration is stored in AppDirector module (Flash disk), and transferred dynamically to AE during initialization over an internal network using an internal protocol (DXP) • Hard-Disk is used by AE only for logging and future use • AE can be directly accessed for debugging purposes via SSH console Slide 45
Memory Allocation Memory is pre-allocated between modules to optimize connection capacity and performance Note: memory figures are in MB
Software & Hardware Versions Matrix * Version numbers according to 1.x and 2.x Shipping GA on October 2008 Note: Base Acceleration Pack should be explicitly ordered when OnDemand Switch 1 or 2 are purchased – to get 2.0 instead of 1.06
Documentation • AppDirector Insite User Guide http://www.radware.com/content/document.asp?_v=about&document=8521 • AppDirector WBM User Guide http://www.radware.com/content/document.asp?_v=about&document=8522 • Radware Installation Guide http://www.radware.com/content/document.asp?_v=about&document=8025 • Performance report: http://www.radware.com/content/document.asp?_v=about&document=8517 • Tuning Guide: http://www.radware.com/content/document.asp?_v=about&document=8518 • Release Notes: http://www.radware.com/content/document.asp?_v=about&document=8526
Q&A Questions???? NirI@radware.com ShakedV@radware.com
Summary • AppDirector 2.0 is a one-box ADC solution providing • Savings on rack space, power & cooling • Simpler deployment • Improved manageability • Hence reducing OPEX • AppDirector 2.0 = AppDirector + Application Acceleration • AppDirector 2.0 provides extended Service Scalability enhancing AppDirector with application acceleration functions: • Server Offloading services: SSL Offloading, Client Authentication, Caching • Content Delivery Acceleration services: HTTP Compression, Caching, TCP Optimization