presentation f5 – beyond load balancer

1

Market & Partner UpdateMarket & Partner Update

F5 – Beyond Load Balancer

Nutapone ApiluktoyanuntCountry ManagerCountry ManagerF5 Networks Inc.

2

AgendaAgenda

Intro to F5 ADN (Application Delivery Network)F5 Networks Solutions OverviewF5 – ADN Use CasesF5 – Applications IntegrationF5 – Professional ServicesF5 Web ResourcesQ&A

3

F5 Application Delivery Network (ADN)( )

4

IT Challengeg

Applications and networks behave independentlyMany network functions require high degrees of manual interventionDistributed architectures and web services increase complexityHi t i ll li ti d t l fHistorically, applications and protocols for communicating with network devices inflexible at best

5

Application Problems: Finger Pointing 101Slow responses Bloated

dataSecurity risks Many servers

Exchange, SharePoint

Application AttacksXML, SOAP, ActiveX, JS

*@#!? ?

Office workers telecommuters Network Administrator Application Developer

6

A Shift Toward InnovationA Shift Toward InnovationSecuring assets

Managing systems

Reducing costs

Developing new apps, services, SOADeveloping new apps, services, SOA

Virtualization

Enabling interop

Maintaining legacy apps

Ensuring compliance

Driving people productivityDriving people productivity

Enabling Mobility 80% 20%80% 20%MAINTENANCE NEW INNOVATION

7

Users Data CenterWhat is ADN?

Users

From What:PC

From Where:LAN

Private Users MicrosoftSAP

Application Application DeliveryDeliveryPC

LaptopHome PCPDAKioskMobile

LANHomeBranch / WANRoad / WAN

HTTP /HTML SIP

OracleIBMBEA

Delivery Delivery NetworkNetwork

Public UsersFrom What:PCLaptopHome PCPDA

From Who:CustomersPartnersSuppliers

HTTP /HTML, SIP, RTP, SRTP, RTCP, SMTP, FTP, SFTP, RTSP, SQL, CIFS, MAPI, IIOP, SOAP,

F5 ensures applications running over the network are always

PDAKioskMobile

SuppliersConsultants

, , ,XML etc…

secure, fast and available without Code Change

8

Why F5?Application Layers 4-7

Network Layers 1-3

Data Center Applications

Remote AccessyRate Shaping

DoS Protection

Content Acceleration

ROUTERSSSL Acceleration

Load Balancing

DoS Protection

SWITCHES Application Security

Traffic Compression

WAN Optimization

• iRules• iControl

FIREWALLS

Caching

Connection Optimization

• iControl

Intelligent Clients

9

Gartner: Application Delivery Networking

Magic Quadrant for Application Delivery Products, 2009 Crescendo

2 9%Radware

6.6%

Q109 ADC Market Share

Cisco26%

2.9%

Others16.5%

6.6%Citrix11.2%

F5 NETWORKS

36.8%

RadwareCisco4.2%

Crescendo4.2%

Q109 Advanced Platform ADC Market Share

Citrix15.9%

F5 NETWORKS52 2%

9.3%Others 14.3%

52.2%

10

ADN provides Application Acceleration p pp

BEA Weblogic

IBM Websphere

Plumtree

Outlook Web Access

2X to10X

SAP Portal

Ecommerce

IBM WebspherePerformance

Increase

SharePoint 2007 Portal

Siebel

PeopleSoft

0.00 5.00 10.00 15.00 20.00 25.00 30.00 35.00

Without Acceleration With Asymmetric Acceleration With Symmetric Acceleration

Seconds

Without Acceleration With Asymmetric Acceleration With Symmetric Acceleration

11

ADN provides L7 Web Application Securityp pp y

Intelligent Client Network Plumbing Application Infrastructure Application

Buffer OverflowCross-Site Scripting

SQL/OS Injection Error MessagesNon compliant ContentHTTP/S TrafficCookie Poisoning

Hidden-Field ManipulationApplication DoS Attacks

Non-compliant ContentCredit Card / SSN dataServer Fingerprints

HTTP/S Traffic

IPSVPN AppApp

FirewallUserFirewallIDS-IDP

Anti-VirusAnti Virus

12

ADN – Use Cases

13

BIG-IP WebAcceleratorPrimary Data Center

www.web.com

sports.web.com

Real-timeMonitors

Web Servers

spo ts eb co

webpromo com

BIG-IP LTM + WebAccelerator

webpromo.com

Solution

Si lifi d d t li d Pre definedSimplified and streamlinedFix and accelerate web applicationsReduce bandwidth utilization

Pre-definedAcceleration

Policies

Offload Server processingMitigate the effects of network latency

14

Improving User ExperienceImproving User Experience

App portal response timePage Load

75%

response timegTime

Page Delivery Time Page Delivery Time

75%Internet or WAN

75%

60%

Client Browser ServerInfrastructure

70%

75%

Server Offload• Compression• Dynamic Caching• Content Spooling• Content Spooling• OneConnect• Rate Shaping• Connection limit• Load balancing

15

Improving User Experience

App portal response timePage Load

Improving User Experience

response timegTime

Page Delivery Time Page Delivery Time

60%Internet WAN

Client Browser ServerInfrastructure

40%

60%

Network Acceleration• Compression• Dynamic Caching

Server Offload• Compression• Dynamic Caching

C t t S li• TCP Express • Content Spooling• OneConnect• Rate Shaping• Connection limit• Load balancing

16

Improving User ExperienceImproving User Experience

App portal response timePage Load response timeg

Time

Internet WAN

Page Delivery Time

35%

Page Delivery Time

Client Browser ServerInfrastructure

35%

25%

Network Acceleration• Compression• Dynamic Caching

Server Offload• Compression• Dynamic Caching

C S li• TCP Express• Differential Compression• QoS• Security/authentication

• Content Spooling• OneConnect• Rate Shaping• Connection limit• Load balancing

17

Improving User ExperienceImproving User Experience

App portal response timePage Load response timeg

TimePage Delivery Time Page Delivery Time

Internet WAN10%

Client Browser

10%

10%

ServerInfrastructure

Application Acceleration• IBR (Dynamic Content Control)• Multi-Connect

Network Acceleration• Compression• Dynamic Caching

Server Offload• Compression• Dynamic Caching

Content Spooling• Dynamic Linearization• Dynamic Caching• Dynamic Compression• SSL Acceleration

• TCP Express• Differential Compression• QoS• Security/authentication

• Content Spooling• OneConnect• Rate Shaping• Connection limit• Load balancing

18

DC: Reduce App Cost with

95% FewerConnections

33%Reduction in

ppApplication Delivery Controller

114.8Million 5

Million

Connections•HW Servers•SW Licenses•Op Mgmt.

MSN reducedMSN reduced

1 87 66%Less NetworkUtilization

MSN reduceda tremendous amount of DC

MSN reduceda tremendous amount of DC 1.87

Terabyte 621Gigabytes

66% Reduction in Bandwidth

CostCost

200%Faster

Faster End-to-End Page Load Time

3 Seconds

1 Seconds

Faster

19

iRule allows System Customization without any Application Code Change

Challenge1. Database replication2. User experience

Solution1. Read from East Coast sent

to local app/DBpp2. Write request sent to

remote app/DB3. iRule checks to see if data

is replicated yetis replicated yet

Benefits1. Decrease latency2. Provide fault tolerance

20

File Virtualization – why is it matter?

Volume of Data Growing

File Virtualization why is it matter?

IT Budget Constraints gTotal Enterprise Disk Storage Systems

Exabytes Shipped(Exabytes)

g

IDC: Worldwide Network Controller and Block-Level Storage Virtualization 2008–2012 Forecast: A Key Component in Building the Virtual Datacenter, April 2008p

IT is seeking cost and efficiency improvements

21

The Key to Managing Storage GrowthThe Key to Managing Storage GrowthBEFORE

User / application access tightlyUser / application access tightly coupled to physical file storage

– Inflexible: change is disruptive– Complex: multiple mappings toComplex: multiple mappings to

heterogeneous storage devices– Inefficient: low aggregate

utilization

22

The Key to Managing Storage GrowthThe Key to Managing Storage GrowthBEFORE AFTER

User / application access tightly File access decoupled fromUser / application access tightly coupled to physical file storage

– Inflexible: change is disruptive– Complex: multiple mappings to

File access decoupled from physical storage location

– Flexible: change is non-disruptiveComplex: multiple mappings to

heterogeneous storage devices– Inefficient: low aggregate

utilization

– Simple: single mapping to unified storage pool

– Efficient: maximize utilization

23

Fixed Telecommunication network P id Li tProvider List

China Telecom– 223M Subscribers3 Subsc be s– 300+ Big-ip, 3DNS, FP– Mobile License in the Near

Future– Huge Number Forecast in

FY2008 China Netcom– 114.93M Subscribers– 200+ Big-ip , FP– Mobile License in the Near

Future– Huge Number Forecast in

FY2008

24

Mobile Telecommunication network P id Li tProvider List

China Mobile– No.1 Carrier world wide– 325M+ Subscribers325M Subscribers– 2000+ F5 boxes– TD-CDMA Start to Deploy

China Unicom– 142.36M Subscribers– 100+ Big-ip– Maybe Merged into CTC and CNC

25

Highly Available 24x7 Banking Infrastructure

HSBC

HSBC Paris, France

HSBC UKP2G DCs

HSBC ITVancouver, BC

Highly Available 24x7 Banking Infrastructure

HSBC HKP2G DC

SABBRiyadh

HSBC NYC & Chicago

HSBC Mexico City

AustraliaSydney

One of the World’s Largest Bank by Market CapitalizationMajor Applications:1. Internet Banking2. Corporate IT3. PeopleSoft HR Portal

26

DC: Consolidation by Virtualization

Web ServerC ll

App. Server

Web Server

NetApp

naliz

atio

n

naliz

atio

n

Server, Storage, PC - Home

Cell

EMCApp. ServerWeb Server

rtua

lizat

ion

Pool

Virt

ua

rtua

lizat

ion

Pool

Virt

ua

, g ,Network and DC Consolidation

App. ServerWeb Server

Windows file storage

ge P

ool V

ir

on S

erve

r P

er P

ool V

ir

ter &

Lin

k P

Remote - WAN

App. Server

Web ServerWindows file storage

File

Sto

rag

App

licat

io

Web

Ser

ve

Dat

a C

ent

PC - LAN

Web Server

ARXLTMLTMGTM& LC

WLAN

27

F5 Network Solutions

28

F5 Networks: Integrated Application Delivery Networking Architecture

nternationalI

ata enterD C

Application Delivery Networking Architecture

Enterprise Manager /

pplications & torageA S

sersU

Enterprise Manager /ControlPoint

W bAGl b l AWAN 

L l

Edge Gateway (EGW)

BIG-IP Global Traffic

Manager WANJet

FirePassSSL VPN

BIG-IP LocalTraffic

ManagerBIG-IP

ApplicationSecurityManagerBIG-IP Web

Accelerator

BIG-IP Link

Controller ARXFile/Data

Virtualization

Web Accelerati

on (WA)

App Security Manager(ASM)

Global Traffic 

Manager (GTM)

Access Policy 

Manager (APM)

Optimization 

Manager (WOM)

Local Traffic 

Manager (LTM)

ARX

TMOS v10 x

iControl

AcceleratorTMOS (iRule and iControl)

BIG‐IP HardwareTMOS v10.x

Business Goal: Achieve these objectives in the most operationally efficient manner

29

Platform Performance for LTMPlatform Performance for LTM

G G G G GBIG-IP 1600

BIG-IP 3600

BIG-IP 3900

BIG-IP 6900

BIG-IP 8900

VIPRIONWith 4 blades

Max. throughput 1 Gbps 2 Gbps 4 Gbps 6 Gbps 12 Gbps 40 Gbps

Layer 4 Connections/sec

60,000 115,000 175,000 220,000 400,000 1 Million

Layer 7 Requests/sec (inf-inf)

100,000 135,000 400,000 600,000 1,200,000 3,200,000Requests/sec (inf inf)

Max. conc. conn. 4 Million 4 Million 8 Million 8 Million 16 Million 32 Million

Max. SSL TPS 5,000 10,000 15,000 25,000 58,000 200,000

Max. SSL Bulk 1 Gbps 1.5 Gbps 3.8 Gbps 4 Gbps 9.6 Gbps 36 Gbps

Max. SSL conc. conn. 1 Million 1 Million 1 Million 2 Million 4 Million 8 Million

Max. compression 1 Gbps 1 Gbps 3.8 Gbps 5 Gbps 8 Gbps 16 Gbps

Switch backplane 14 Gbps 24 Gbps 34 Gbps 68 Gbps 112 Gbps 368 Gbps

30

Avoid Growing Pains

TMOS+ Security

Avoid Growing Pains

+ Security+ Accel+ iRules+ iControl+ iControl

3,200,000 Layer 7 Requests/SecVIPRION ACE 16G

76,000 L7 RPS= 42 Blades= 42 Blades

31

Don’t Take Our Word for ItDon t Take Our Word for It3rd party functionality report

O th fi bilit

On The GUIs…

On the configurability

of Rate Shaping…

On the Architecture and

toolsets of iRules and iControl…

On the configurability

of Connection Management…

32

Real-World Testing

Real World TestingGoal: Real world, open, honest, and repeatable testing

– Markets had too many engineered and isolated “hero statistics”

Most extensive testing to dateE ’ f t i d d t– Europe’s foremost independent network testing facility

– 150 tests completed across all vendors– Ixia and Spirent validated tests and p

detailed methodology documentation plus full configurations (126 pages)

Results“BIG-IP 6800 emerged comfortably ahead on all tests”

Demonstrated 2x–5x better performance across all major functions p j– L4, L7, SSL, compression, DoS protection, and mixed traffic tests

33

F5 – Applications Integration

34

Intergration With Major ApplicationsIntergration With Major Applications•AmberPoint Service Level Manager •BEA Systems WebLogic Server •BorderWare MXtreme

•Microsoft Live Communications Server •Microsoft Mobile Information Server •Microsoft Office SharePoint 2007

•Check Point Software Technologies VPN-1/FireWall •Citrix Systems MetaFrame •Coradiant TrueSight •CoroSoft Director •IBM Lotus Domino Web Access (iNotes)

•Microsoft SharePoint Portal Server 2003 •Microsoft Windows Terminal Services •Netegrity SiteMinder •Oracle 9iAS •Oracle 10gIBM Lotus Domino Web Access (iNotes)

•IBM WebSphere •Macromedia ColdFusion MX/JRun •Mercury Topaz •Microsoft Application Center Mi ft E h S 2007

•Oracle 10g •Oracle E-Business Suite 11i •Quest SharePlex •RLX Technologies Control Tower •RSA Security SecurID

•Microsoft Exchange Server 2007 •Microsoft Exchange Server 2003 •Microsoft Internet Information Services (IIS) •Microsoft Internet Security and Acceleration Server

•SAP •Siebel Systems eBusiness Applications •Symantec WholeSecurity Confidence Online Server •Trend Micro InterScan •webMethods Integration PlatformwebMethods Integration Platform

35

Organizations Worldwide Trust F5 to Keep Their Businesses Running

Financial Media OtherIT TransportTelco/ISP

Including 9 out of 10 of the world’s top financial services firms and 60% of the Global 1000

36

F5 – Professional Services

37

Professional Services

…provides maintenance support, p pp ,consulting services and training on F5 technology ensuring technical problems are addressed effectively, implementations executed y pwith ease and technical knowledge shared effectively cumulating in greater ROI for our partners and customers by making our services expertise, systems and infrastructure available to those who subscribe to our offerings

38

The Customer & Professional Services

OnsiteServices

Consulting Services

F5 P f i lProfessional

Services

Training Services

MaintenanceServices

39

Maintenance Services

Maintenance S t

Toll-Free T l h

Supports S ft dSupport

ContractsTelephone Numbers

Software and Hardware

7x24 Advisory Support,

H d Full management P d tHardware replacement and

problem resolution

gand Technical

Escalation

Product Development

40

Maintenance Support

Standard Premium

Service• 8x5 Monday to Friday • Software Upgrades

• Major

Service• 24x7• Software Upgrades

• Major• Major• Minor• HotFixes

• Access to AskF5• Access to WebSupport• Access to Phone

• Major• Minor• HotFixes

• Access to AskF5• Access to WebSupport• Access to Phone

Support• iRules review

Support• iRules Support

41

RAPID-RMA

AdvanceRAPID RMASparing Replacement

(included with all Maintenance)

RAPID-RMA Local

Warehousing

Service• Not all models covered• Often rely on F5 Sales

to loan appliances

Service• One Outage• Identical swap• Appliance shipped from

all Maintenance)Service• One Outage• Identical swap• 21 days to returnto loan appliances

• Customer has two or more outages

• Appliance shipped from USA, expect 4-10 business days

• 21 days to return ‘broken appliance’

• 21 days to return ‘broken appliance’

• Next Business Day• 4hour 24x7

Available• All Countries• Is included as part of

F5 Maintenance

Available• Singapore• Thailand• Malaysia TBD

42

Training Services

Authorised Training Centres Onsite customer

t i i il blTraining Centres across Asia Pacific training available

Basic and Advanced F5 P tf li T i i

Training courses aligned to technical Portfolio Training certification

43

Training Courses

ApplicationNetwork Operations

ApplicationDevelopment &Support Teams

Technical Support Teams

Offerings• Operating BIG-IP• Operating Viprion

Offerings• WebAccelerator for

Application Teams

LTM• Essentials• Advanced• Troubleshooting

• Essentials• Troubleshooting• GTM

Coming in 2010• ASM for Application

Teams

• Troubleshooting

Other• GTM• ASM• WebAccelerator• Architecture

Coming in 2010• Server Virtualisation

with BIG-IP

44

Web Resource

45

Self-Serve ResourcesSelf Serve ResourcesGeneral Information – F5.com

http://www f5 comDeveloper Community –D C t l–http://www.f5.com

Solutions Self-Serve – Solution Center

htt // f5 / l ti

DevCentral– http://devcentral.f5.com– SDK

–http://www.f5.com/solutions–Deployment Guides–Solution Guides

– Forum/BLOGS– Tips/Samples

FAQ–White Papers

Technical Self-Serve - Ask F5http://tech f5 com

– FAQ– Downloads/Code Share

Support Case Management ––http://tech.f5.com–Documentation–Solutions (FAQ)

WebSupport Portal– http://websupport.f5.com– Support case creation,

–Knowledge Basepp ,

management, view

F5 ResourcesF5 Resources

46

Summary

47

F5 ADN SummaryF5 ADN Summary

F5 is the market leader in Application DeliveryF5 is the market leader in Application DeliveryNetworking for the past 7 consecutive years. Networking for the past 7 consecutive years.

9 out of 10 of the world’s top Telco/Financial and 9 out of 10 of the world’s top Telco/Financial and Government firms trust F5 solutionsGovernment firms trust F5 solutions

F5 ADN architecture is focused on FAST, SECURE & F5 ADN architecture is focused on FAST, SECURE & AVAILABLEAVAILABLE

EndEnd--toto--End support (product End support (product --> training/certification > training/certification --> > support )support )