Add-On Modules Datasheet BIG-IP Add-On Modules Greater Server Capacity Improves server capacity by offloading repetitive content serving (dynamic caching). BIG-IP® Add-On Modules Lower Costs Reduces web application deployment and maintenance costs by utilizing validated web application acceleration policies. Because F5 application delivery products are modular, they’re extensible by design and can easily incorporate new functions and quickly adapt to changing application/business challenges. The following are available Product Modules and Feature Modules for BIG-IP application traffic management products. Validated Web Application Policies Includes validated web application acceleration policies from the most popular web application vendors. Feature Modules Feature Modules are individual feature packs that can be added to a BIG-IP traffic management platform. Intelligent Compression Module Available Modules Feature Modules • Intelligent Compression • L7 Rate Shaping Users today are continually impacted by poor web application performance caused by WAN latency and connection bottlenecks. By dramatically reducing the volume of traffic that is sent to the user, the Intelligent Compression Module allows you to receive a marked gain in application performance while greatly enhancing the end user experience. Faster Download Times Organizations can improve their page rendering speed by up to 5 times. • IPv6 Gateway • Advanced Client Authentication • SSL Acceleration • Advanced Routing • Fast Cache Product Modules • BIG-IP Application Security Lower Bandwidth Bills Efficiently compresses a broad variety of content types including HTTP, XML, Javascript, J2EE applications and many others. Organizations can reduce their bandwidth bills by up to 80%. Client Aware Compression (patent pending) Organizations can apply compression based on BIG-IP’s unique ability to measure client Round Trip Time and connection type such as dial-up -- conserving processing cycles while targeting compression to only those user groups who will benefit. Transparent To Users; Requires No End User Agent Reduces HTTP traffic using GZIP and Deflate compression algorithms which are supported in today’s Web browsers. Compression is completely transparent to the end user, requiring no downloads or agents. • BIG-IP Global Traffic Manager • BIG-IP Link Controller Adaptive Compression Allows organizations to control and scale back cycles devoted to compression based on system load, ensuring optimal performance across all functions. • BIG-IP Web Accelerator Module L7 Rate Shaping Module * Customers should contact F5 or their Partners to confirm which modules are supported by their particular F5 product. Contention for shared bandwidth often degrades application performance, and organizations have little control in guaranteeing that high priority traffic is passed ahead of non-priority traffic. BIG-IP L7 Rate Shaping Module adds fine-grained bandwidth control to better manage application bandwidth usage and traffic spikes. Ensures Application Performance and Availability Ensures that business critical applications are not impacted by non-priority traffic. Delivers optimal application performance by allocating bandwidth for higher priority applications. F5 Networks Asia-Pacific F5 Networks Ltd. Europe/Middle-East/Africa F5 Networks Japan K.K. 401 Elliott Avenue West Seattle, WA 98119 (206) 272-5555 Voice (888) 88BIGIP Toll-free (206) 272-5556 Fax www.f5.com [email protected] +65-6533-6103 Voice +65-6533-6106 Fax [email protected] +44 (0) 1932 582 000 Voice +44 (0) 1932 582 001 Fax [email protected] +81-3-5114-3200 Voice +81-3-5114-3201 Fax [email protected] Reduces Device Costs Eliminates special purpose Rate Shaping products for simplified, centralized traffic management capabilities. Part No. DS-MOD 0706 F5 Networks, Inc. Corporate Headquarters © 2006 F5 Networks, Inc. All rights reserved. F5, F5 Networks, the F5 logo, BIG-IP, FirePass, and iControl are trademarks or registered trademarks of F5 Networks, Inc. in the U.S. and in certain other countries. Sophisticated Bandwidth Control Provides flexible bandwidth limits, full support for bandwidth borrowing, and traffic queuing (stochastic fair queue, FIFO ToS priority queue). Granular Traffic Classification L2 through L7 Controls rate classes based on any traffic variable; allows application bandwidth to be shared across similar priority applications for better resource sharing. Rate Limiting A valuable security function which ensures that specific types of application traffic stay within authorized boundaries. 100% SSL Organizations can now migrate 100% of their communications to SSL; the SSL Acceleration Module removes all the bottlenecks for secure, wire speed processing (concurrent users, bulk throughput, and new transactions per second). Product Modules Consolidation Consolidates SSL certificates directly onto BIG-IP – saving hundreds of dollars per certificate. BIG-IP Application Security Module (ASM) IPv6 Gateway Module With demand for IPv6 increasing, many sites are facing new requirements to handle IPv6 traffic. Organizations need a clear and seamless strategy for staging network migration as IPv6 traffic grows. The IPv6 Gateway Module allows organizations to handle their IPv6 requirements without wholesale network and application upgrades. Lower Cost Provides complete IP transformation and load balancing capabilities between v4 and v6 networks; directs traffic across mixed IPv6 and IPv4 resources. Insulates organizations from costly application changes to support IPv6. IPv6 Support Module supports object definition; object probing, AAAA, A6 and DNAME; SNMP support; F5 iControl API support, and statistics. Allows BIG-IP to support IPv4 and IPv6 addresses (self-ips, virtual servers, proxies, nodes and snats). IPv6/IPv4 Translation Specific applications and geographies will require IPv6, but a mass migration will not occur rapidly. With this module, organizations can translate traffic for consumption by either IPv4 or IPv6 end points, allowing them to stage their migration gradually as demand for IPv6 increases. Advanced Client Authentication Module Managing authentication individually across applications is costly. Top level authentication enforcement consumes server cycles that could be used elsewhere. The Advanced Client Authentication Module provides top level client authentication of HTTP and other traffic types to LDAP, Radius and TACAS directories. Centralizes Application Authentication Reduces management costs and decreases server and application load. Advanced Authorization and Authentication for SSL Checks user certificates using the Online Certificate Status Protocol (OCSP) before granting network access. Insulates Applications From Attacks Stops unwanted traffic before it reaches your servers and applications. Customizable Authentication Framework Supports the Pluggable Access Module (PAM) for passing client information to external devices for authentication; allows organizations to integrate BIG-IP into any type of authentication device that will accept PAM services. SSL Acceleration Module The SSL Acceleration Module offloads CPU-intensive processing from servers and migrates SSL decryption onto a high performance device designed to efficiently handle SSL transactions. * Different BIG-IP hardware platforms offer and are capable of supporting varying degrees of SSL TPS. All platforms include 100 TPS of SSL processing standard. Centralizes Management Centralizes certificate management to a single source, greatly simplifying administrative duties. Reduces Cost Eliminates the need to buy and install SSL-capable server software on every server within the network. Selective Content Encryption & Encrypted Cookies Provides the industry’s most granular control to holistically, partially, or conditionally encrypt data without coding changes into applications. Advanced Routing Modules BGP, RIP, and OSPF Modules enable BIG-IP to share routing information with other devices for better interoperability within the corporate network. Border Gateway Protocol (BGP) Makes it possible for ISPs to connect to each other and for end-users to connect to more than one ISP, improving availability. Routing Information Protocol (RIPv1 & RIPv2) Allows network routers to adapt dynamically to changing network connections, improving performance. Open Shortest Path First (OSPF) Distributes routing information between routers and chooses the leastcost path as the best path, saving money and improving performance. Fast Cache Module BIG-IP’s Fast Cache Module improves application and server performance by offloading repetitive requests for content from the backend infrastructure – while intelligently targeting its performance on a per-application basis. The Fast Cache Module provides superior flexibility and control to ensure that organizations achieve greater offload and faster service to their customer base. Reduces Server Utilization Organizations can reduce server load by up to 50%, reduce server costs and speed end user performance to frequently visited pages. Multi-Store Caching Creates dedicated cache repositories to target caching on a per application basis, delivering maximum service and speed to where its needed most. Pre-Compressed Content The Fast Cache Module can store and serve compressed content, eliminating wasteful re-compression of content and associated performance hits. Static and Dynamic Content Caching Allows organizations to specify content that is dynamically built (i.e. dynamic HTML) for caching. Conditionally flushes cache repositories to maintain content freshness. Product modules are F5’s software versions of our appliance products designed to run on an existing BIG-IP. These products are also available as stand-alone appliances. Better Performance Improves performance and client experience by directing users to the best performing site on a global basis. Improved Control Increases flexibility by delivering global traffic control that can direct users according to any business policy. The BIG-IP Application Security Module runs on the BIG-IP application traffic management platform, providing robust application security with BIG-IP traffic management capabilities in a single system – without the need to buy or install more hardware. Better Management and Efficiencies Fully leverages secondary data centers by providing a holistic view into application and data center health from a single locale. This reduces management overhead while increasing the efficiency, scalability, and ROI of the global network. The ASM provides application layer protection from both targeted and generalized application attacks. BIG-IP ensures that those applications are always available and performing optimally. BIG-IP Link Controller Module Together, you get a complete, robust solution that reduces box clutter, lowers maintenance and management costs, and provides proactive application protection while ensuring exceptional application performance. Protection of Brand Equity The ASM significantly reduces the risk of loss or damage to data, intellectual property and web applications – protecting an organization’s brand equity and reputation. Proactive Protection Against Identity Theft Provides the industry’s most comprehensive protection of identity information (credit card numbers, bank accounts, etc.) by controlling access as well as updates to identity information as part of every HTTP request/response. Regulatory Compliant New regulations such as the Basel Accords, HIPPA and CA SB 1386 are making the security of personal customer data a key imperative. The ASM ensures compliance with these emerging regulations, making it an absolute necessity for any company handling sensitive information. Reduces Remediation Costs In addition to the costs of attacks themselves companies have extensive costs associated with responding to the attack and repairing the damage. This response is not limited to the IT department – it can also involve public relations, brand image, litigation, and even regulatory costs. The Application Security Module stops attacks before they can do any type of harm. Plug and Protect Appliance Once installed, the module’s proprietary, automated learning mechanism quickly and accurately builds security policies tailored to the unique requirements of the applications it protects – dramatically reducing policy management and manual configuration duties. BIG-IP Global Traffic Manager Module Site outages, attacks and application/infrastructure failure are a major cause for end-user dissatisfaction that can lead to a loss of revenue and clientele. The BIG-IP Global Traffic Manager (GTM) Module provides high availability, maximum performance and global management for applications running across multiple and globally dispersed data centers. High Availability Distributes end user requests according to business policies, data center and network conditions; enables transparent delivery of applications and web services across multiple sites; and ensures global business continuity and application availability. As organizations increase their use of the Internet to deliver their applications, maintaining only one link to the public network represents a single point of failure and serious network vulnerability. The BIG-IP Link Controller Module seamlessly monitors availability and performance of multiple WAN connections to intelligently manage bi-directional traffic flows to a site – providing fault tolerant, optimized Internet access. High Availability Detects errors across an entire link to provide end-to-end, reliable WAN connectivity. It monitors the health and availability of each connection, detecting outages to a link or ISP. In the event of a failure, traffic is transparently and dynamically directed across other available links so users and external customers always stay connected. Comprehensive Link Monitoring Provides a comprehensive view into the health and throughput of links through the gateway router, ensuring availability and providing insight into the bandwidth and capacity of any given link. It also detects failures caused by ISP mis-configuration or other manual errors that might otherwise be missed. Composite Monitors Combines multiple monitors to quickly and accurately determine the health and availability of a link. If a problem is detected, it can route traffic to other available links – reducing downtime costs while improving the client experience. Maximum ROI and Quality of Service Ensures traffic is directed over the best possible link and ISP, maintaining the highest quality of service and speed for users; maximizes ROI for connectivity by allowing organizations to aggregate inexpensive links. BIG-IP WebAccelerator Module When combined with selected BIG-IP Local Traffic Manager platforms, the BIG-IP WebAccelerator module provides additional acceleration technologies such as Intelligent Browser Referencing and Dynamic Data Offload to provide an extended level of web application acceleration as an integrated solution. The BIG-IP WebAccelerator module is specially suited for web applications such as Portal, CRM, ERP, Collaboration, and many others. 300% Acceleration Accelerates web applications for remote and mobile users up to 300%. Cuts Bandwidth Usage Significantly reduces bandwidth usage by reducing the amount of data sent (IBR and data compression). Granular Traffic Classification L2 through L7 Controls rate classes based on any traffic variable; allows application bandwidth to be shared across similar priority applications for better resource sharing. Rate Limiting A valuable security function which ensures that specific types of application traffic stay within authorized boundaries. 100% SSL Organizations can now migrate 100% of their communications to SSL; the SSL Acceleration Module removes all the bottlenecks for secure, wire speed processing (concurrent users, bulk throughput, and new transactions per second). Product Modules Consolidation Consolidates SSL certificates directly onto BIG-IP – saving hundreds of dollars per certificate. BIG-IP Application Security Module (ASM) IPv6 Gateway Module With demand for IPv6 increasing, many sites are facing new requirements to handle IPv6 traffic. Organizations need a clear and seamless strategy for staging network migration as IPv6 traffic grows. The IPv6 Gateway Module allows organizations to handle their IPv6 requirements without wholesale network and application upgrades. Lower Cost Provides complete IP transformation and load balancing capabilities between v4 and v6 networks; directs traffic across mixed IPv6 and IPv4 resources. Insulates organizations from costly application changes to support IPv6. IPv6 Support Module supports object definition; object probing, AAAA, A6 and DNAME; SNMP support; F5 iControl API support, and statistics. Allows BIG-IP to support IPv4 and IPv6 addresses (self-ips, virtual servers, proxies, nodes and snats). IPv6/IPv4 Translation Specific applications and geographies will require IPv6, but a mass migration will not occur rapidly. With this module, organizations can translate traffic for consumption by either IPv4 or IPv6 end points, allowing them to stage their migration gradually as demand for IPv6 increases. Advanced Client Authentication Module Managing authentication individually across applications is costly. Top level authentication enforcement consumes server cycles that could be used elsewhere. The Advanced Client Authentication Module provides top level client authentication of HTTP and other traffic types to LDAP, Radius and TACAS directories. Centralizes Application Authentication Reduces management costs and decreases server and application load. Advanced Authorization and Authentication for SSL Checks user certificates using the Online Certificate Status Protocol (OCSP) before granting network access. Insulates Applications From Attacks Stops unwanted traffic before it reaches your servers and applications. Customizable Authentication Framework Supports the Pluggable Access Module (PAM) for passing client information to external devices for authentication; allows organizations to integrate BIG-IP into any type of authentication device that will accept PAM services. SSL Acceleration Module The SSL Acceleration Module offloads CPU-intensive processing from servers and migrates SSL decryption onto a high performance device designed to efficiently handle SSL transactions. * Different BIG-IP hardware platforms offer and are capable of supporting varying degrees of SSL TPS. All platforms include 100 TPS of SSL processing standard. Centralizes Management Centralizes certificate management to a single source, greatly simplifying administrative duties. Reduces Cost Eliminates the need to buy and install SSL-capable server software on every server within the network. Selective Content Encryption & Encrypted Cookies Provides the industry’s most granular control to holistically, partially, or conditionally encrypt data without coding changes into applications. Advanced Routing Modules BGP, RIP, and OSPF Modules enable BIG-IP to share routing information with other devices for better interoperability within the corporate network. Border Gateway Protocol (BGP) Makes it possible for ISPs to connect to each other and for end-users to connect to more than one ISP, improving availability. Routing Information Protocol (RIPv1 & RIPv2) Allows network routers to adapt dynamically to changing network connections, improving performance. Open Shortest Path First (OSPF) Distributes routing information between routers and chooses the leastcost path as the best path, saving money and improving performance. Fast Cache Module BIG-IP’s Fast Cache Module improves application and server performance by offloading repetitive requests for content from the backend infrastructure – while intelligently targeting its performance on a per-application basis. The Fast Cache Module provides superior flexibility and control to ensure that organizations achieve greater offload and faster service to their customer base. Reduces Server Utilization Organizations can reduce server load by up to 50%, reduce server costs and speed end user performance to frequently visited pages. Multi-Store Caching Creates dedicated cache repositories to target caching on a per application basis, delivering maximum service and speed to where its needed most. Pre-Compressed Content The Fast Cache Module can store and serve compressed content, eliminating wasteful re-compression of content and associated performance hits. Static and Dynamic Content Caching Allows organizations to specify content that is dynamically built (i.e. dynamic HTML) for caching. Conditionally flushes cache repositories to maintain content freshness. Product modules are F5’s software versions of our appliance products designed to run on an existing BIG-IP. These products are also available as stand-alone appliances. Better Performance Improves performance and client experience by directing users to the best performing site on a global basis. Improved Control Increases flexibility by delivering global traffic control that can direct users according to any business policy. The BIG-IP Application Security Module runs on the BIG-IP application traffic management platform, providing robust application security with BIG-IP traffic management capabilities in a single system – without the need to buy or install more hardware. Better Management and Efficiencies Fully leverages secondary data centers by providing a holistic view into application and data center health from a single locale. This reduces management overhead while increasing the efficiency, scalability, and ROI of the global network. The ASM provides application layer protection from both targeted and generalized application attacks. BIG-IP ensures that those applications are always available and performing optimally. BIG-IP Link Controller Module Together, you get a complete, robust solution that reduces box clutter, lowers maintenance and management costs, and provides proactive application protection while ensuring exceptional application performance. Protection of Brand Equity The ASM significantly reduces the risk of loss or damage to data, intellectual property and web applications – protecting an organization’s brand equity and reputation. Proactive Protection Against Identity Theft Provides the industry’s most comprehensive protection of identity information (credit card numbers, bank accounts, etc.) by controlling access as well as updates to identity information as part of every HTTP request/response. Regulatory Compliant New regulations such as the Basel Accords, HIPPA and CA SB 1386 are making the security of personal customer data a key imperative. The ASM ensures compliance with these emerging regulations, making it an absolute necessity for any company handling sensitive information. Reduces Remediation Costs In addition to the costs of attacks themselves companies have extensive costs associated with responding to the attack and repairing the damage. This response is not limited to the IT department – it can also involve public relations, brand image, litigation, and even regulatory costs. The Application Security Module stops attacks before they can do any type of harm. Plug and Protect Appliance Once installed, the module’s proprietary, automated learning mechanism quickly and accurately builds security policies tailored to the unique requirements of the applications it protects – dramatically reducing policy management and manual configuration duties. BIG-IP Global Traffic Manager Module Site outages, attacks and application/infrastructure failure are a major cause for end-user dissatisfaction that can lead to a loss of revenue and clientele. The BIG-IP Global Traffic Manager (GTM) Module provides high availability, maximum performance and global management for applications running across multiple and globally dispersed data centers. High Availability Distributes end user requests according to business policies, data center and network conditions; enables transparent delivery of applications and web services across multiple sites; and ensures global business continuity and application availability. As organizations increase their use of the Internet to deliver their applications, maintaining only one link to the public network represents a single point of failure and serious network vulnerability. The BIG-IP Link Controller Module seamlessly monitors availability and performance of multiple WAN connections to intelligently manage bi-directional traffic flows to a site – providing fault tolerant, optimized Internet access. High Availability Detects errors across an entire link to provide end-to-end, reliable WAN connectivity. It monitors the health and availability of each connection, detecting outages to a link or ISP. In the event of a failure, traffic is transparently and dynamically directed across other available links so users and external customers always stay connected. Comprehensive Link Monitoring Provides a comprehensive view into the health and throughput of links through the gateway router, ensuring availability and providing insight into the bandwidth and capacity of any given link. It also detects failures caused by ISP mis-configuration or other manual errors that might otherwise be missed. Composite Monitors Combines multiple monitors to quickly and accurately determine the health and availability of a link. If a problem is detected, it can route traffic to other available links – reducing downtime costs while improving the client experience. Maximum ROI and Quality of Service Ensures traffic is directed over the best possible link and ISP, maintaining the highest quality of service and speed for users; maximizes ROI for connectivity by allowing organizations to aggregate inexpensive links. BIG-IP WebAccelerator Module When combined with selected BIG-IP Local Traffic Manager platforms, the BIG-IP WebAccelerator module provides additional acceleration technologies such as Intelligent Browser Referencing and Dynamic Data Offload to provide an extended level of web application acceleration as an integrated solution. The BIG-IP WebAccelerator module is specially suited for web applications such as Portal, CRM, ERP, Collaboration, and many others. 300% Acceleration Accelerates web applications for remote and mobile users up to 300%. Cuts Bandwidth Usage Significantly reduces bandwidth usage by reducing the amount of data sent (IBR and data compression). Add-On Modules Datasheet BIG-IP Add-On Modules Greater Server Capacity Improves server capacity by offloading repetitive content serving (dynamic caching). BIG-IP® Add-On Modules Lower Costs Reduces web application deployment and maintenance costs by utilizing validated web application acceleration policies. Because F5 application delivery products are modular, they’re extensible by design and can easily incorporate new functions and quickly adapt to changing application/business challenges. The following are available Product Modules and Feature Modules for BIG-IP application traffic management products. Validated Web Application Policies Includes validated web application acceleration policies from the most popular web application vendors. Feature Modules Feature Modules are individual feature packs that can be added to a BIG-IP traffic management platform. Intelligent Compression Module Available Modules Feature Modules • Intelligent Compression • L7 Rate Shaping Users today are continually impacted by poor web application performance caused by WAN latency and connection bottlenecks. By dramatically reducing the volume of traffic that is sent to the user, the Intelligent Compression Module allows you to receive a marked gain in application performance while greatly enhancing the end user experience. Faster Download Times Organizations can improve their page rendering speed by up to 5 times. • IPv6 Gateway • Advanced Client Authentication • SSL Acceleration • Advanced Routing • Fast Cache Product Modules • BIG-IP Application Security Lower Bandwidth Bills Efficiently compresses a broad variety of content types including HTTP, XML, Javascript, J2EE applications and many others. Organizations can reduce their bandwidth bills by up to 80%. Client Aware Compression (patent pending) Organizations can apply compression based on BIG-IP’s unique ability to measure client Round Trip Time and connection type such as dial-up -- conserving processing cycles while targeting compression to only those user groups who will benefit. Transparent To Users; Requires No End User Agent Reduces HTTP traffic using GZIP and Deflate compression algorithms which are supported in today’s Web browsers. Compression is completely transparent to the end user, requiring no downloads or agents. • BIG-IP Global Traffic Manager • BIG-IP Link Controller Adaptive Compression Allows organizations to control and scale back cycles devoted to compression based on system load, ensuring optimal performance across all functions. • BIG-IP Web Accelerator Module L7 Rate Shaping Module * Customers should contact F5 or their Partners to confirm which modules are supported by their particular F5 product. Contention for shared bandwidth often degrades application performance, and organizations have little control in guaranteeing that high priority traffic is passed ahead of non-priority traffic. BIG-IP L7 Rate Shaping Module adds fine-grained bandwidth control to better manage application bandwidth usage and traffic spikes. Ensures Application Performance and Availability Ensures that business critical applications are not impacted by non-priority traffic. Delivers optimal application performance by allocating bandwidth for higher priority applications. F5 Networks Asia-Pacific F5 Networks Ltd. Europe/Middle-East/Africa F5 Networks Japan K.K. 401 Elliott Avenue West Seattle, WA 98119 (206) 272-5555 Voice (888) 88BIGIP Toll-free (206) 272-5556 Fax www.f5.com [email protected] +65-6533-6103 Voice +65-6533-6106 Fax [email protected] +44 (0) 1932 582 000 Voice +44 (0) 1932 582 001 Fax [email protected] +81-3-5114-3200 Voice +81-3-5114-3201 Fax [email protected] Reduces Device Costs Eliminates special purpose Rate Shaping products for simplified, centralized traffic management capabilities. Part No. DS-MOD 0706 F5 Networks, Inc. Corporate Headquarters © 2006 F5 Networks, Inc. All rights reserved. F5, F5 Networks, the F5 logo, BIG-IP, FirePass, and iControl are trademarks or registered trademarks of F5 Networks, Inc. in the U.S. and in certain other countries. Sophisticated Bandwidth Control Provides flexible bandwidth limits, full support for bandwidth borrowing, and traffic queuing (stochastic fair queue, FIFO ToS priority queue).
* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project
advertisement