Implementing ITIL v3 Practices with A10 Networks Solutions “ Documented Common Sense” September 3rd, 2009 AX Series Advanced Traffic Manager Application Delivery Steve Sacchi, Sr. Systems Engineer A10 Networks [email_address] Chris Johnson, President Open Access Systems Corporation [email_address]

AX Series Performance Comparison Chart Models Application Throughput AX 1000 2.4 Gb AX 2000 4 Gb AX 2100 6 Gb AX 2200 7.4 Gb AX 3100 8 Gb AX 3200 8.7 Gb AX 5200 40 Gb

ITIL v3 map http://www.oasyscorp.com/itilv3map.html

The New Generation of Server Load Balancers (win) Service Strategy: Demand Management

A10 AX Architecture Overview (win) Service Strategy: Demand Management SSL Acceleration Module – SSL Processing Application Memory – Session Tables, Buffer Memory, Application Data L4-7 CPUs – L4-7 Processing, Security, NAT Control Kernel – CLI, GUI, Management Tasks and Health Checking Flexible Traffic ASIC (FTA) – Distributes Traffic Across L4-7 CPUs, Efficient Network I/O, DDoS Switching & Routing ASIC – L2 & L3 Processing and Security High Speed Switching Fabric Interconnect SR ASIC, FTA, L4-7 CPU

SSL Acceleration Module – SSL Processing

Application Memory – Session Tables, Buffer Memory, Application Data

L4-7 CPUs – L4-7 Processing, Security, NAT

Control Kernel – CLI, GUI, Management Tasks and Health Checking

Flexible Traffic ASIC (FTA) – Distributes Traffic Across L4-7 CPUs, Efficient Network I/O, DDoS

Switching & Routing ASIC – L2 & L3 Processing and Security

High Speed Switching Fabric

Interconnect SR ASIC, FTA, L4-7 CPU

AX’s True Parallel Processing ACOS Architecture designed for multiple CPUs Advanced Super Computing Technologies bring true parallel processing capability No interference among processors No data copy among processors Up to 7 Processors handle traffic simultaneously L4/7 Traffic L4/7 Traffic Processor 5 Processor 6 Processor 7 Processor 8 Processor 1 Processor 2 Processor 3 Processor 4 Control Protocol/ Management

ACOS Architecture designed for multiple CPUs

Advanced Super Computing Technologies bring true parallel processing capability

No interference among processors

No data copy among processors

Control Protocol/ Management

AX Series Performance Comparison Chart Models Application Throughput AX 1000 2.4 Gb AX 2000 4 Gb AX 2100 6 Gb AX 2200 7.4 Gb AX 3100 8 Gb AX 3200 8.7 Gb AX 5200 40 Gb

Scalability, High Availability, Optimization (WINs) Service Design: Service Level Management, IT Security Service Transition: Service & Eval Testing Application Load Balancing (SL& Avail) Round Robin Least Connections Fastest Response Weighted Priority Monitor Server Health (Ser & Eval) TCP Level Health Checks Application Layer Health Checks HTTP and HTTPS (IT Security) Scriptable Health Checks Session Persistence (SL) Source IP Cookie-based URL AX Redundancy (Avail) Active-Active Active-Standby Load Balanced Servers

Application Load Balancing (SL& Avail)

Round Robin

Least Connections

Fastest Response

Weighted

Priority

Monitor Server Health (Ser & Eval)

TCP Level Health Checks

Application Layer Health Checks

HTTP and HTTPS (IT Security)

Scriptable Health Checks

Session Persistence (SL)

Source IP

Cookie-based

URL

AX Redundancy (Avail)

Active-Active

Active-Standby

Scalability, High Availability, Optimization (WINs) Service Design: IT Security, Service Level Management, Capacity Management, Availability Management TCP (S L & Cap) Connection reuse Dynamic window sizing TCP multiplexing Compression (SL) HTTP hardware Caching (SL& Cap) Static HTTP RAM cache Dynamic HTTP RAM cache Future Disk Caching SSL (IT Security &Cap) Acceleration and Management Hardware based DDOS (IT Security & Avail) Load Balanced Servers Recover Server Cycles and Speeds up Servers Responses

TCP (S L & Cap)

Connection reuse

Dynamic window sizing

TCP multiplexing

Compression (SL)

HTTP hardware

Caching (SL& Cap)

Static HTTP RAM cache

Dynamic HTTP RAM cache

Future Disk Caching

SSL (IT Security &Cap)

Acceleration and Management

Hardware based DDOS (IT Security & Avail)

Connection limit = 150 Limit Period = 100ms } Connection Rate Limiting (Win) Service Design: IT Security, SLM, Capacity By adding Source-IP based connection rate limiting this protects the system from excessive connection requests from individual clients.

High Availability – GSLB (DNS Intelligence) ( WIN) Service Design: IT Continuity, Service Level Management, Capacity Management, Availability Management DNS Proxy (IT Continuity) This method is the most commonly used global server load balancing as it does not disrupt customers’ existing name resolution Disaster recovery (Availability) Provide extra level of High availability to important applications RTT (SL) Send client connections to the fastest responding datacenter Geo-location (SL) Send client connection to the “closest” datacenter Session capacity (SL) Send client connection to the datacenter with the most available capacity Weighted values (SL) Send client connections to the datacenter with the highest combined score Most active servers (SL) Send client connections to the datacenter with the most available active servers Disaster Recovery Site1 Site2

DNS Proxy (IT Continuity)

This method is the most commonly used global server load balancing as it does not disrupt customers’ existing name resolution

Disaster recovery (Availability)

Provide extra level of High availability to important applications

RTT (SL)

Send client connections to the fastest responding datacenter

Geo-location (SL)

Send client connection to the “closest” datacenter

Session capacity (SL)

Send client connection to the datacenter with the most available capacity

Weighted values (SL)

Send client connections to the datacenter with the highest combined score

Most active servers (SL)

Send client connections to the datacenter with the most available active servers

aFleX - ADVANCED SCRIPTING Inspect all application traffic types beyond traditional Layer 4-7 Looks into application traffic flow to identify decision criteria Switch, drop, or redirect based on aFleX policies aFleX’s development environment simplifies policy creation and maintenance

Inspect all application traffic types beyond traditional Layer 4-7

Looks into application traffic flow to identify decision criteria

Switch, drop, or redirect based on aFleX policies

aFleX’s development environment simplifies policy creation and maintenance

aFleX : (Win) Service Design: SLM & Service Operation: Application Management Function Reallocate requests by content type to optimize data center resources: Transparent to the user, splits requests for static images (jpgs and gifs) to a separate caching server tier. when HTTP_REQUEST { if { [HTTP::uri] ends_with "jpg" } { pool cache } elseif { [HTTP::uri] ends_with "gif" } { pool cache } else { pool web } } .jpg .gif .js .cgi .html

aFleX : Auto Displays Made Easy Automatically displays a Web page based on the user’s language, using the language set in the user’s browser. when HTTP_REQUEST { if { [HTTP::header accept-language] contains “es” } { pool Spanish } elseif { [HTTP::header accept-language] contains “ja” } { pool Japanese } elseif { [HTTP::header accept-language] contains “zh” } { pool Chinese } else { pool English } } English Spanish Japanese Chinese

aFleX : Easy To Re-direct URLs Provides a simple way to provide redirect: In this example users are redirected from www.A10networks.com to www.A10networks/oss/signup.php when HTTP_REQUEST { if { [HTTP::uri] equals "/A10" } { HTTP::redirect http://[HTTP::host]/oss/signup.php } } //www.A10networks.com www.A10networks.com www.A10netwoks.com/oss/signuo.php //www.A10networks.com/oss/signup.php

www.A10networks.com

www.A10netwoks.com/oss/signuo.php

Ease of use & Ease of migration Industry standard CLI Graphical User Interface (GUI) aFleX - TCL-based scripting IP::client_addr, IP::protocol, TCP::server_port, TCP::payload, HTTP::uri, HTTP::header, HTTP::cookie, pool, drop, log

Industry standard CLI

Graphical User Interface (GUI)

aFleX - TCL-based scripting

IP::client_addr, IP::protocol, TCP::server_port, TCP::payload, HTTP::uri, HTTP::header, HTTP::cookie, pool, drop, log

Ease of use & Ease of migration (WIN) Service Design, Transition & Op Industry standard CLI Graphical User Interface (GUI) aFleX - TCL-based scripting IP::client_addr, IP::protocol, TCP::server_port, TCP::payload, HTTP::uri, HTTP::header, HTTP::cookie, pool, drop, log

Industry standard CLI

Graphical User Interface (GUI)

aFleX - TCL-based scripting

IP::client_addr, IP::protocol, TCP::server_port, TCP::payload, HTTP::uri, HTTP::header, HTTP::cookie, pool, drop, log

GUI Interface-go live

Management Virtualization (Role Based Administration) (Win) Service Design: Capacity Management Enables VA configuration create/modify/delete Dedicated CPU, memory, disk to each VA Virtualized hardware acceleration (SSL) RBA allows administrators to configure and view SLB statistics

Enables VA configuration create/modify/delete

Dedicated CPU, memory, disk to each VA

Virtualized hardware acceleration (SSL)

RBA allows administrators to configure and view SLB statistics

Twice the Performance, Half the Price Performance & Scalability: Multi-core CPU platform Greater connections & transactions per second at Layer 4, Layer 7 & SSL Higher throughput Faster content delivery Flexible and customizable traffic management High Availability and Security Answers Cost and Environmental Concerns Hardware Power Cooling Space Solution

Performance & Scalability: Multi-core CPU platform

Greater connections & transactions per second at Layer 4, Layer 7 & SSL

Higher throughput

Faster content delivery

Flexible and customizable traffic management

High Availability and Security

Answers Cost and Environmental Concerns

Hardware

Power

Cooling

Space

10 Quick ITIL Wins using A10 Networks 1.) Service Strategy: Demand Management- Purpose Built Energy Efficient Multi-core Processor; 2x Performance For Half The Investment 2.) Service Design: IT Security-DDOS Protection, SSL Built In; Source-IP Based Connection Rate Limiting; Role Based Administration For Virtual Services 3.) Service Design: IT Continuity Management - CLI; GUI; Dash Board for KPI; LOG with full API 4.) Service Design: Service Level Management-aFleX Scripting Cut Development & Re-development; Establishes & maintains thresholds 5.) Service Design: Capacity Management -Add & Manage Virtual Services & Real Services easily without network or customer disruptions; SSL, caching, Global Geo LB to maximize under utilized servers, 6.) Service Design: Availability Management - HA Global Geo-LB; DNS; Health Check interdependent applications and services; Seamless Failover DR 7.) Service Transition: Service & Evaluation Testing -VS for new applications for “what if” scenarios 8.) Service Operations: Event Management -Detailed Logs of KPI reporting system-ie. HP OpenView or by API; metrics dash board 9.) Service Operations: Application Management Function -Easy Re-development Via aFleX Scripting; less SSL certificates to manage 10.) Continual Service Improvement through baseline and measurement of performance reporting, eliminating under utilized assets.

1.) Service Strategy: Demand Management- Purpose Built Energy Efficient Multi-core Processor; 2x Performance For Half The Investment

2.) Service Design: IT Security-DDOS Protection, SSL Built In; Source-IP Based Connection Rate Limiting; Role Based Administration For Virtual Services

3.) Service Design: IT Continuity Management - CLI; GUI; Dash Board for KPI; LOG with full API

4.) Service Design: Service Level Management-aFleX Scripting Cut Development & Re-development; Establishes & maintains thresholds

5.) Service Design: Capacity Management -Add & Manage Virtual Services & Real Services easily without network or customer disruptions; SSL, caching, Global Geo LB to maximize under utilized servers,

6.) Service Design: Availability Management - HA Global Geo-LB; DNS; Health Check interdependent applications and services; Seamless Failover DR

7.) Service Transition: Service & Evaluation Testing -VS for new applications for “what if” scenarios

8.) Service Operations: Event Management -Detailed Logs of KPI reporting system-ie. HP OpenView or by API; metrics dash board

9.) Service Operations: Application Management Function -Easy Re-development Via aFleX Scripting; less SSL certificates to manage

10.) Continual Service Improvement through baseline and measurement of performance reporting, eliminating under utilized assets.