Sizing Guide for ProxySG Deployments

SGOS Version 5.2

February 6, 2008

Deployment Mode Licensing Hardware Spec

Model Forward Proxy Reverse Proxy WAN Optimization Concurrent Licensed Client IPs Storage CPU Cores Memory Preinstalled Option Cards Onboard NICS Power Supply
Recommended Max Recommended Max Suggested Max Client Transactions / Max WAN Recommended Max Without ADN With ADN Enabled Drives Total Storage
Internet Bandwidth Active Desktops ProxyAV Bandwidth Second Bandwidth Active Desktops Enabled (GB)
210-5 2Mbps 30 1x510-A 512K 10 30 10 1 80 1 512MB None 2 port 100BT Passthru Single
210-10 6Mbps 150 1x510-A 2Mbps 50 150 50 1 137 1 1GB SSL 2 port 100BT Passthru Single
210-25 6Mbps 200* 1x510-A 6Mbps 200 2Mbps 50* No licensed user limit 1 137 1 1GB SSL 2 port 100BT Passthru Single
510-5 12Mbps 200 1x510-A 2Mbps 50 200 50 2 160 1 2GB None 2x1000BT Single
510-10 25Mbps 500 1x510-A 12Mbps 125 500 125 2 700 1 2GB 2 port 1000BT Passthru, SSL 2x1000BT Single
510-20 25Mbps 1200 1x810-A 12Mbps 300 1200 300 2 700 1 2GB 2 port 1000BT Passthru, SSL 2x1000BT Single
510-25 25Mbps 1500* 1x810-A 34Mbps 400 12Mbps 300* No licensed user limit 2 700 1 2GB 2 port 1000BT Passthru, SSL 2x1000BT Single
810-5 45Mbps 2500 1x810-A 12Mbps 500 2500 500 2 144 1 2GB None 2x1000BT Single
810-10 45Mbps 3500 1x810-B 30Mbps 700 3500 700 2 600 2 4GB 2 port 1000BT Passthru, SSL 2x1000BT Single
810-20 90Mbps 5000 1x810-B 45Mbps 1000 5000 1000 4 1200 2 6GB 2 port 1000BT Passthru, SSL 2x1000BT Single
810-25 90Mbps 5500* 1x810-B 100Mbps 1000 45Mbps 1000* No licensed user limit 4 1200 2 6GB 2 port 1000BT Passthru, SSL 2x1000BT Single
8100-5 90Mbps 5000* 1x810-B 100Mbps 1000 30Mbps 1000* No licensed user limit 2 600 2 4GB 2 port 1000BT NIC 2x1000BT Redundant
8100-10 155Mbps 7500* 2x810-B 155Mbps 1500 52Mbps 1500* No licensed user limit 4 1200 2 6GB 4 port 1000BT Passthru, SSL 2x1000BT Redundant
8100-20 155Mbps 10000* 3x810-B 250Mbps 2300 100Mbps 2300* No licensed user limit 8 2400 4 8GB 4 port 1000BT Passthru, SSL 2x1000BT Redundant

Notes
Forward Proxy WAN Optimization
Assumes 70% peak CPU load with complex policies, 15% SSL, ICAP and limited streaming content. Always use SGOS Proxy Edition for forward Assumes up to 20% SSL traffic, with ADN (WAN) encryption on those connections only. Use either SGOS MACH5 Edition, or SGOS Proxy Edition for WAN optimization deployments. Use
proxy deployments. this section when a ProxySG is being used for WAN Optimization, or both WAN Optimization and other functionality like Forward Proxy.
Recommended Max Internet Bandwidth Max WAN Bandwidth
Maximum client side throughput for ProxySG. If you do not have a proxy deployed, use your available internet connectivity as a guide. If a proxy is in Maximum WAN link speed appropriate for this model. Using a ProxySG on a WAN link that exceeds its maximum WAN link speed will result in suboptimal performance.
place, this number represents the client (internal) bandwidth number. Server (Internet) utilization will typically be lower due to proxy caching.
Max Active Desktops
The number of active branch users. Typically, this is equal to the branch user population. Values with asterisks are recommended for sizing, but are not licensed limits.

Recommended Max Active Desktops Clustering

This is the total number of desktops using the proxy for Internet connectivity. The number is based on the common assumption that 100% of desktops Clusters of up to 20 ProxySGs can be created to handle up to 2Gbps of traffic and 40000 concurrent users.
have open web connections at any moment, though up to 80% are used for background tasks. If per user Internet use is known to be lighter, adjust
this number accordingly. The number of active clients should never exceed the "without ADN" licensed concurrent user limit. Values with asterisks are
recommended for sizing, but are not licensed limits.

Reverse Proxy Licensing

Assumes 70% peak CPU load with 12k HTTP objects and limited SSL. Because it is usually impossible to control the number of clients connecting in
a reverse proxy deployment, only models without user limits should be used. Always use SGOS Proxy Edition for reverse proxy deployments.
Max Client Bandwidth
Maximum client side bandwidth. Server side bandwidth is typically much lower due to proxy caching.
ProxySGs are licensed based on concurrent client IP addresses only. Other parameters, such as Max Bandwidth and Transactions / Second are suggested values based on the physical
capacity of the system.
Concurrent Licensed Client IP
Licensed users is measured as the number of unique client IP addresses with open inbound TCP connections to the ProxySG. The measurement is instantaneous and concurrent. It is not
based on the average over any time interval. The administrator can configure the ProxySG to either bypass connections from new users, to delay them until another client drops all of its
connections, or to attempt to accept them. The default is to accept.

Transactions per Second With/Without ADN Enabled

This is the number of http requests per a second that can be sustained by the ProxySG. The number of allowed concurrent users is affected by whether ADN (byte caching) is enabled or not. When using WAN optimization, use the lower, "with ADN" number. When using the
ProxySG for other purposes, use the higher "without ADN" number.

Hardware Spec Not Limited

SSL accelerator cards are included where listed. However, a separate license is required to activate SSL termination. 8100 series models and those models labeled "-25" have no license limit on the number of concurrent users. In terms of hardware configuration, the "-25" models are identical to the high end
"-20" model for each platform. The licensed user limit for the "-20" models are near the hardware's capacity if most features are enabled. Use "-25" models if the number of users is not
2x1000BT and 4x1000BT passthru cards can be programmed to act as independent NICs, so a 2x1000BT passthru card can also be used as known, or if your use of the ProxySG will allow a platform to handle more users than the license limit allows for.
2x1000BT NIC.

Copyright 2007 Blue Coat Systems, Inc. All rights reserved worldwide. No part of this document may be reproduced by any means nor translated to any electronic medium without the written consent of Blue Coat Systems, Inc.
Specifications are subject to change without notice. Information contained in this document is believed to be accurate and reliable, however, Blue Coat Systems, Inc. assumes no responsibility for its use, Blue Coat is a registered trademark of
Blue Coat Systems, Inc. in the U.S. and worldwide. All other trademarks mentioned in this document are the property of their respective owners.