Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Nutapone Apiluktoyanunt
Country Manager
F5 Networks Inc.
2
Agenda
F5 Application Delivery
Network (ADN)
( )
4
IT Challenge
g
Application Attacks
XML, SOAP, ActiveX, JS
? ?
*@#!
Office workers
Network Administrator Application Developer
telecommuters
6
Managing systems
Reducing costs
Virtualization
Enabling interop
Ensuring compliance
Enabling Mobility
80% 20%
MAINTENANCE NEW INNOVATION
7
What is ADN?
Data Center
Users
Why F5?
Data Center
Application Layers 4-7 Applications
Remote Access
Network Layers
y 1-3
Rate Shaping
Content Acceleration
DoS Protection
ROUTERS
SSL Acceleration
Load Balancing
WAN Optimization
Intelligent Clients
9
F5
NETWORKS
36.8%
F5 NETWORKS
52 2%
52.2%
10
ADN provides
p Application
pp Acceleration
BEA Weblogic
Plumtree
PeopleSoft
Siebel
Seconds
ADN p
provides L7 Web Application
pp Security
y
Buffer Overflow
Cross-Site Scripting
SQL/OS Injection Error Messages
Cookie Poisoning HTTP/S Traffic Non compliant Content
Non-compliant
Hidden-Field Manipulation Credit Card / SSN data
Application DoS Attacks Server Fingerprints
IPS App
User Firewall
App
VPN
Firewall
IDS-IDP
Anti Virus
Anti-Virus
12
BIG-IP WebAccelerator
Primary Data Center
www.web.com
Real-time
Monitors
sports.web.com
spo ts eb co
BIG-IP LTM
+ WebAccelerator
webpromo
webpromo.com
com Web Servers
Solution
Simplified
Si lifi d and
d streamlined
t li d Pre-defined
Pre defined
Acceleration
Fix and accelerate web applications Policies
Internet or WAN
75%
75%
70%
60%
Server Offload
Compression
Dynamic Caching
Content Spooling
OneConnect
Rate Shaping
Connection limit
Load balancing
15
Internet WAN
60%
40%
Internet WAN
35%
25%
Internet WAN
10%
10%
1 87
1.87
amount of DC
Utilization
66%
Terabyte Cost 621 Reduction in
Gigabytes
Bandwidth
Faster End-to-End
Page Load Time
200%
Faster
3 1
Seconds Seconds
19
Solution
1. Read from East Coast sent
to local app/DB
pp
2. Write request sent to
remote app/DB
3. iRule checks to see if data
is replicated yet
Benefits
1. Decrease latency
2. Provide fault tolerance
20
IT Budget
g Constraints Volume of Data Growing
g
Total Enterprise Disk Storage Systems
(Exabytes) Exabytes Shipped
China Mobile
No.1 Carrier world wide
325M+ Subscribers
325M
2000+ F5 boxes
TD-CDMA Start to Deploy
China Unicom
142.36M Subscribers
100+ Big-ip
Maybe Merged into CTC and CNC
25
HSBC
Mexico City
Australia
Sydney
Web Server
C ll
Cell
NetApp
alization
alization
App. Server
PC - Home
Server,, Storage,
g , Web Server
ge Pool Virrtualization
n
Pool Virtua
er Pool Virrtualization
n
Pool Virtua
Network and DC Web Server
App. Server
EMC
Consolidation
Data Centter & Link P
on Server P
Windows file
Remote - WAN Web Server storage
App. Server
File Storag
Web Serve
Web Server
WLAN
GTM
LTM LTM ARX
& LC
27
F5 Network Solutions
28
F5 Networks: Integrated
Application Delivery Networking Architecture
International
Data Center
Enterprise Manager /
ControlPoint
EdgeGateway(EGW)
Applications & torage
S
sers
U WAN
LLocall Gl b lBIG-IP App
Global A A BIG-IP Local
Access W b
Web
Optimizat
TrafficBIG-IP Traffic Link Security PolicyTraffic
Accelerati BIG-IP
ion ARX
Manager GlobalManager Manager
Controller Manager
Manager on Application
FirePass ManagerFile/Data
(LTM)Traffic (GTM) (ASM) (APM) (WA) Security
SSL VPN (WOM)Virtualization
Manager BIG-IP Web Manager
WANJet ARX
Accelerator
TMOS(iRule andiControl)
iControl
BIGIPHardware
TMOS v10.x
v10 x
BIG-IP
G BIG-IP
G BIG-IP
G BIG-IP
G BIG-IP
G VIPRION
1600 3600 3900 6900 8900 With 4 blades
Layer 7
100,000 135,000 400,000 600,000 1,200,000 3,200,000
Requests/sec (inf-inf)
(inf inf)
On The GUIs
O the
On th configurability
fi bilit
of Rate Shaping
On the configurability
of Connection Management
32
Real-World
Real World Testing
Goal: Real world, open, honest, and
repeatable testing
Markets had too many engineered and
isolated hero statistics
Most extensive testing to date
E
Europes fforemostt independent
i d d t
network testing facility
150 tests completed across all vendors
Ixia and Spirent
p validated tests and
detailed methodology documentation
plus full configurations (126 pages)
Results
BIG-IP 6800 emerged comfortably ahead on all tests
Demonstrated 2x5x better p
performance across all major
j functions
L4, L7, SSL, compression, DoS protection, and mixed traffic tests
33
F5 Applications Integration
34
F5 Professional Services
37
Professional Services
provides
p maintenancesupport,
pp ,
consulting services and training on F5
technology ensuring technical problems are
y implementations
addressed effectively, p executed
with ease and technical knowledge shared
effectively cumulating in greater ROI for our
partners and customers by making our services
expertise, systems and infrastructure available to
those who subscribe to our offerings
38
Onsite Consulting
Services Services
F5
P f
Professional
i l
Services
Training Maintenance
Services Services
39
Maintenance Services
7x24 Advisory
Support,
g
Full management
Hardware
H d Product
P d t
and Technical
replacement and Development
Escalation
problem
resolution
40
Maintenance Support
Standard Premium
Service Service
8x5 Monday to Friday 24x7
Software Upgrades Software Upgrades
Major Major
Minor Minor
HotFixes HotFixes
Access to AskF5 Access to AskF5
Access to WebSupport Access to WebSupport
Access to Phone Access to Phone
Support Support
iRules review iRules Support
41
RAPID-RMA
Advance
RAPID-RMA
RAPID RMA
Replacement
Sparing Local
(included with
Warehousing all Maintenance)
Service Service Service
Not all models covered One Outage One Outage
Often rely on F5 Sales Identical swap Identical swap
to loan appliances 21 days to return Appliance shipped from
Customer has two or broken appliance USA, expect 4-10
more outages business days
Next Business Day 21 days to return
4hour 24x7 broken appliance
Available Available
Singapore All Countries
Thailand Is included as part of
Malaysia TBD F5 Maintenance
42
Training Services
Authorised
Onsite customer
Training Centres
t i i
training available
il bl
across Asia Pacific
Training courses
Basic and
aligned to
Advanced F5
technical
P tf li T
Portfolio Training
i i
certification
43
Training Courses
Application
Network Technical
Development &
Operations Support Teams
Support Teams
Coming in 2010
Server Virtualisation
with BIG-IP
44
Web Resource
45
Self-Serve
Self Serve Resources
General Information F5.com
Developer Community
http://www.f5.com
http://www f5 com D C t l
DevCentral
Solutions Self-Serve Solution http://devcentral.f5.com
Center
SDK
http://www.f5.com/solutions
htt // f5 / l ti
Forum/BLOGS
Deployment Guides
Tips/Samples
Solution Guides
FAQ
White Papers
Downloads/Code Share
Technical Self-Serve - Ask F5
Support Case Management
http://tech.f5.com
http://tech f5 com WebSupport Portal
Documentation http://websupport.f5.com
Solutions (FAQ) Support
pp case creation,,
Knowledge Base management, view
F5 Resources
46
Summary
47
F5 ADN Summary
End-to-
End- to-End support (product -> training/certification ->
support )