Application delivery controllers provide load balancing, acceleration, traffic shaping and other services that improve the performance, availability and security of web applications. But with more and more web application developers hosting their applications in the cloud, using application delivery hardware is often a non-starter. This presentation discusses the architecture of a new type of service called the Application Delivery Cloud. This new cloud service not only offers critical performance, availability and security capabilities to web application vendors, it goes beyond its hardware analog to deliver new capabilities that today’s applications require, including regional content policies and up-to-the-minute security intelligence.

1. November 2014
Dvir Shapira
Product Manager
Incapsula
Is the Cloud Going to Kill Traditional
Application Delivery?

2. Application Delivery – What’s in Scope?
“In the beginning of 2013, ADCs often offer such features as
compression, cache, connection multiplexing, traffic shaping,
application layer security, SSL offload and content switching
combined with basic server load balancing. Some also offered
features such as content manipulation, DDoS protection,
advanced routing strategies and server health monitoring.”
Security Performance Availability
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.

3. Traditional Application Delivery
PATCH
COPPER
FIBER
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.

4. Your Apps Are Migrating to the Cloud
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.

5. Option #1 – Virtually Rebuild Your Rack in the Cloud
PATCH
COPPER
FIBER
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.

6. Option #2 – A Cloud Application Delivery Service
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.

7. Incapsula - What Do We Do?
Solving Top Operational Problems
Delivered from the Cloud
Security Performance Availability
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.

8. Incapsula’s Application Delivery Cloud

9. The Incapsula Cloud Security Advantage
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.9
Crowdsourcing Synergy Availability
50,000 Sites
TBs of traffic (Big Data)
Clear visibility into
attack landscape
Most updated reputation lists
Most updated signatures
Attacks are stopped
at the front door
~30 POPs
Multiple ISPs
Anycast
Full redundancy

10. DDoS Attacks – What Should I Be Prepared For?
• Network/Volumetric (Layer 3&4)
> As big as 400Gbps
> Saturates network bandwidth
> Requires: a huge network
• Application (Layer 7)
> Impersonates human behavior
> Brings application servers down
> Requires: advanced classification
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.

11. The Incapsula Cloud DDoS Advantage
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.
Upstream mitigation
Huge network (700+Gbps)
Rapid reaction
Proprietary technology (HW, SW, algorithms)
Security experts at the wheel
24x7 SOC

12. Bringing Websites Closer to Their Visitors
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.
With Incapsula, cached content is served to website visitors locally
Incapsula’s unique solution serves all cached resources
directly from physical memory making it lightning fast

13. The Challenge – Dynamic Content Caching
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.
HTML files have a significant impact on
• Page load time
• Server load HTML file received after 5 sec (!)
Also heavy impact on server load

14. The Challenge – Dynamic Content Caching
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.
Most HTML files are actually static
Incapsula developed algorithms that
• Detect and cache static HTML files
• Never cache dynamic HTML files
With Incapsula’s algorithms

15. Downtime Costs Money
Source: Ponemon Institute 2013 - Cost of Data Center Outages; Aberdeen Group – DR-as-a-Service, It Delivers
On average, the cost of an unplanned
outage per minute is likely to reach
almost $8,000 per incident
Total cost per minute of an unplanned outage
Businesses with in-house
Disaster Recovery (DR) solutions
recover from
outages 3 times slower
than those with DR services
Time spent recovering from a disaster

16. Incapsula Load Balancing and Failover
Bringing cloud versatility to application load balancing
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.
Intra-Datacenter
Load Balancing
Datacenter Failover
(DR Scenarios)
Global Server
Load Balancing

17. The Incapsula Advantage
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.
Layer 7 load balancing
Real time and accurate
The only Layer 7 DC Failover
and GSLB solution
Immediate failover
Not TTL dependent
State-of-the-art health
monitoring
Sensitivity tuning
Real time notifications
Automatic server and data
center failover
Load Balancing-as-a-Service
No HW/SW required
Any setup - physical, cloud (Amazon
AWS/Azure/etc.) or hybrid

18. Cloud
• Economical (shared infrastructure)
• Flexible (any setup)
• Crowdsourcing
• Unlimited capacity
• Geographically distributed
On premises
• Fine tuning
• Privacy
• Full control
Application Delivery - Comparison Table
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.

19. Bottom Line
In the short term, probably not.
But in the long term (5 years nowadays…),
most definitely yes
Incapsula, Inc. / Proprietary and Confidential. All Rights Reserved.
So, is the cloud going to kill
traditional application delivery?

20. Thank you!