AppDirector 2.0 Solution Positioning

1
AppDirector 2.0Solution Positioning Technical
OverviewShaked Vax, Product Manager Nir Ilani,
Director, Product Marketing, Application
DeliveryAPAC Partners Event Technical
TrackOctober, 2008
2
Agenda

• Part A AppDirector 2.0 Solution Positioning and
  Offering
• OnDemand Switch Business Benefits Key Features
• Introducing AppDirector 2.0
• Part B AppDirector 2.0 Technical Training
• New Features In-Depth Overview and Configuration
• AppDirector 2.0 Internals

3
OnDemand Switch Business Benefits Key Features
4
AppDirector on OnDemand Switch Product Releases
4Q2008
1Q2008
2Q2008
3Q2008
5
Analysts Recognition 20078 ADC Dynamics
Slide 5
6
Analyst Opinion On Demand Switch
7
OnDemand Switch Business Benefits

• Performance Leadership
• Delivers the best 0-4G performance and QoE in the
  industry
• Fastest transaction response time
• On Demand Throughput Scalability
• Pay-as-you-grow approach
• Serves all your current and future application
  needs
• On Demand Service Scalability
• Add more application services with no compromise
  on performance
• Full Investment Protection
• No forklift upgrades
• No upgrade projects costs
• Better CAPEX and OPEX
• Standardization Operations Simplicity
• Less spare parts, training and operational
  processes
• Best Price/Performance

Page 7
8
OnDemand Switch Key Messages
What does our solution deliver for the
customer? What differences do we make?
Page 8
9
OnDemand Switch Key Messages

1. Radware ADC solution provides an integrated
   approach to extract greater value from current
   investments in existing IT infrastructure and
   minimize initial investments to run more
   applications and serve more users
2. OnDemand Switchs pay-as-you-grow approach
   enables customers to pay for the exact capacity
   currently required while eliminating forklift
   upgrades and guaranteeing short-term and
   long-term savings on CAPEX and OPEX for full
   investment protection
3. OnDemand Switch allows them to scale their
   throughput capacity and add advanced
   application-aware and acceleration services on
   demand to meet new or changing application and
   infrastructure needs -- without compromising on
   performance

Page 9
10
OnDemand Switch 1

• Ports
• 4 Gigabit Ethernet (Copper/Fiber) for traffic
• 2 Gigabit Ethernet for Management
• Dual mode ports
• Inserted GBIC select SFP port
• Otherwise RJ45 copper port is active

11
OnDemand Switch 2

• Ports
• 4 SFP for GBIC on switch
• 12 Gigabit Ethernet Copper ports on switch
• 2 separate Gigabit Ethernet for Management,
  bypassing switch
• Switch
• H/W trunks supported
• STP supported
• Bypass with zero power configurable settings
• Bypass relays are optional can be removed for
  AppDirector
• For DefensePro zero power mode is configurable
  per pair

12
OnDemand Switch 3

• Ports
• 4 10 Gigabit Fiber ports (XFP pluggable optics)
  ports
• 4 Gigabit Ethernet SFP ports (SFP-GBIC Mini)
• 8 Gigabit Ethernet Copper ports on switch
• Management Ports
• 2 out-of-band Gigabit Ethernet for Management,
  bypassing switch
• Switch
• H/W trunks supported
• STP supported

Note For information about SFP/XFP pluggable
optics, see price quotes at the end of this
presentation
Slide 12
13
Key Features Dedicated Management Ports

• Dedicated management ports for out-of-band
  management
• Traffic segmentation between management and
  traffic ports for extra security
• Reliable even under high traffic load
• Two management port for Highly Available
  configurations
• A separate trunk can be built of 2 for extra
  reliability

14
Key Features Front Panel Input/Output

• Power and Reset button short and long press
• Power button press button, state remembered
• USB
• Serial console
• LEDs PWR, FAN, SYS OK
• LCD with navigation buttons

15
OnDemand Switch Tech Specs Summary
OnDemand Switch 1 OnDemand Switch 1 XL OnDemand Switch 2 OnDemand Switch 2 XL OnDemand Switch 3
Max Throughput 4 Gbps 4 Gbps 4 Gbps 4 Gbps 16 Gbps
CPU AMD Opteron dual-core 2.2 GHz 2 X AMD Opteron dual-core 2.2 GHz AMD Opteron dual-core 2.6 GHz 2 X AMD Opteron dual-core 2.6 GHz 2 X AMD Opteron dual-core 2.6 GHz CPUs (1 Master and 3 Accelerators)
Memory 2 GB Up to 12 GB Up to 4 GB Up to 12 GB 8GB Memory (4GB Master and 4GB Accelerators)
Hardware Acceleration - 1. SSL 2. Compression (optional) - 1. SSL 2. Compression (optional) -
Form factor 1U / 2U 1U / 2U 1U / 2U 1U / 2U 2U
Dual, redundant AC/DC power supply Yes (in 2U form factor) Yes (in 2U form factor) Yes (in 2U form factor) Yes (in 2U form factor) Yes
Slide 15
16
OnDemand Switch 1 versus 2

• OnDemand Switch 1, 2 provide the same throughput
  levels, but differ in
• Ports density
• Switching - ODS2 provides hardware switching
  capabilities
• Performance - ODS2 delivers a bit more
  performance over ODS1
• Memory - ODS1 ODS2 are shipped with sufficient
  memory to address most application requirements.
  
• ODS1 shipped with 2GB
• ODS2 shipped with 2GB, upgradeable to 4GB
• Full Technical Specifications are available on
  the Website

17
Ready to Move Ahead
Slide 17
18
Introducing AppDirector 2.0
19
Introducing AppDirector 2.0

• AppDirector 2.0 is a one-box ADC solution
  providing
• Savings on rack space, power cooling
• Simpler deployment
• Improved manageability
• Hence reducing OPEX

• AppDirector 2.0 AppDirector Application
  Acceleration
• Customers are seeking to reduce the amount of ADC
  units to reduce OPEX and achieve their Green IT
  objectives
• Reduce power and cooling expenditures
• Reduce space
• Simplify deployment
• Improve manageability

Slide 19
20
On Demand Service and Acceleration Scalability

• AppDirector 2.0 provides
• On demand, extended Service Scalability enhancing
  AppDirector with application acceleration
  functions
• Server Offloading services
• Content Delivery Acceleration services
• On Demand Acceleration Scalability
• Scale SSL TPS capacity up with no hardware
  replacements
• Scale HTTP Compression up with no hardware
  replacements
• No performance degradation thanks to dedicated
  hardware

21
Server Offloading Application Acceleration
Slide 21
22
OnDemand Switch 1,2 and OnDemand Switch 1,2 XL

• AppDirector 2.0 is offered on two ODS hardware
  platforms

AppDirector 2.0 Platform SSL Offloading HTTP Compression Caching TCP Optimization
OnDemand Switch 1, OnDemand Switch 2 500 SSL TPS scalable up to 10,000 SSL TPS 100 Mbps scalable up to 250 Mbps v v
OnDemand Switch 1 XL, OnDemand Switch 2 XL 5,000 SSL TPS scalable up to 30,000 SSL TPS 500 Mbps scalable up to 1 Gbps Optional hardware compression v v
Standard Acceleration
Enhanced Acceleration
Slide 22
23
Sales Tools

• The following Sales Tools are available on the
  Intranet on Radware ADC Sales Tools page
  (http//www.radware.com/content/products/appdirect
  or/salestools/competeinfo/default.asp )
• Radware ADC Master Sales Presentation
• AppDirector 2.0 Sales Presentation
• Radware ADC Brochure
• AppDirector 2.0 and OnDemand Switch XL FAQs
• RFI/RFP Tool
• and on OnDemand Switch Sales Tools page
  (http//www.radware.com/content/products/ondemand_
  switches/default.asp)
• OnDemand Switch 1, 2 3 Sales Presentation
• OnDemand Switch Data Sheet
• AppDirector on OnDemand Switch Selling Guide
• OnDemand Switch Business Benefits White Paper
• OnDemand Switch FAQs

24
New Features In-Depth Overview and Configuration
25
Agenda

• Part A AppDirector 2.0 Solution Positioning and
  Offering
• OnDemand Switch Business Benefits Key Features
• Introducing AppDirector 2.0
• Part B AppDirector 2.0 Technical Training
• New Features In-Depth Overview and Configuration
• AppDirector 2.0 Internals

26
Introducing AppDirector 2.0

• AppDirector 2.0 enhances AppDirectors offering
  with Application Acceleration functions
• Server offloading
• SSL acceleration
• Client Authentication
• Caching
• Content Delivery Acceleration
• HTTP Compression
• Caching
• TCP optimization
• Central Certificate repository
• Improved ADC manageability

Slide 26
27
Improved ADC Manageability

• All new features are configured based on reusable
  policies concept
• Allows configurations re-use
• Minimizes re-type errors
• Simplifies changes
• Simplifies aligning with organization policies
• Enhanced Web Based Management (WBM) usability
• Direct links between tables and used objects
• Redesign of several configuration screens
• AppDirector 2.0 is fully manageable from Insite
  2.73

28
Web-based Management New Look
29
L4 Traffic Redirection Enhancements
30
L4 Policy Table
31
SSL Acceleration Functionality

• Supports both Front-End and Back-End SSL
• Select Server Certificate
• Select predefined Cipher suite or user-defined
  list
• Use intermediate CA to create Certificates
  chaining
• Define back-end server listening port in case it
  is different from front-end
• Define Back-End SSL with its own cipher suite
• Supports HTTP headers redirect modification to
  HTTPS
• HTTP response Hostname that appears in requests
  is always converted
• Define which hosts to redirect using
  Regular-Expressions

32
SSL Acceleration SSL Policy Configuration
33
Caching Functionality

• Caching takes place in device memory for fast
  reponse
• Caching is done based on HTTP headers defining
  cache-ability and caching max-time
• Objects are purged when upon expiration according
  to
• Their HTTP headers, or
• AppDirector configured max-time
• User can purge cached objects by selecting
• All objects
• Specific L4 policy

34
Caching Policy Configuration
35
Web Compression Functionality

• Compression is done using GZIP or Deflate
  algorithm
• Compression is done by AppDirector CPU or
  dedicated Hardware
• Optional on OnDemand Switch XL only
• User can define the default compression method to
  use in case it is not defined in HTTP headers
  using the Algorithm field

36
Compression Policy Configuration
37
TCP OptimizationFunctionality configuration

• Nothing to configure!
• AppDirector Acceleration Engine performs TCP
  optimization whenever any Acceleration feature is
  enabled, i.e. whenever traffic is routed via the
  Acceleration Engine

38
Central Certificate Repository Functionality

• AppDirector allows creating Keys, Self-signed
  Certificates, and Certificate Signing Requests
  (CSR)
• AppDirector allows importing Intermediate CA
  Certificate to use for Certificates chaining
• AppDirector allows importing Client CA
  certificate to be used in Clients Certificates
  Authentication Policy
• AppDirector allows export of Certificate and Keys
• Backup
• Moving to secondary machine
• AppDirector allows adding keys to configuration
  export files (encrypted)

39
Central Certificates Management Configuration
40
Central Certificates Management Configuration
41
Client Authentication Functionality

• Configure AppDirector to Authenticate users based
  on Client Certificates
• The CA that generated the clients certificate
  must be know and trusted by AppDirector
• Define trusted Client CA by importing its
  certificate and attaching it to Clients
  Authentication policy
• Certificates can be validated based on OCSP
• Use OCSP URL in certificate or user defined OCSP
  URL

42
Client Authentication Policy Configuration
43
AppDirector 2.0 Internals
Page 43
44
Internal Architecture

• Combines AppDirector and separate, independent
  Acceleration Engine (AE) Module
• Multi-core ensures no performance degradation
• Dedicated CPU for traffic redirection
  (AppDirector) and AE
• Core1 runs VxWorks. Single Linux OS runs on Cores
  2-4

() On OnDemand Switch 1,2 XL on OnDemand Switch
1,2 only 1 AE exists
Slide 44
45
Internal architecture Cont.

• Can be installed on any ODS1 or ODS2 v2
• v2 - includes a Hard-Disk 2GB RAM
• Upgrade from ODS v1 to v2 is available
• ODS v2 can be identified according to
• A sticker located at the rear panel of the device
• Device information (via CLI or WBM) showing a
  hard-disk is installed
• Entire Configuration is stored in AppDirector
  module (Flash disk), and transferred dynamically
  to AE during initialization over an internal
  network using an internal protocol (DXP)
• Hard-Disk is used by AE only for logging and
  future use
• AE can be directly accessed for debugging
  purposes via SSH console

Slide 45
46
Memory Allocation

• Memory is pre-allocated between modules to
  optimize connection capacity and performance

Platform ODS Memory size AD Total Memory AE Total Memory AD Client Table Memory AE CEC Memory
ODS1 2,000 582 1,418 512 1,088
ODS2 2,000 582 1,418 512 1,088
ODS2 4,000 1,070 2,930 1,000 2,600
ODS-1 XL 6,000 2,070 3,930 2,000 3,600
ODS-1 XL 12,000 4,070 7,830 4,000 7,500
ODS-2 XL 6,000 2,070 3,930 2,000 3,600
ODS-2 XL 12,000 4,070 7,830 4,000 7,500
AD Client Table size AE max CEC
1,714,000 43,000
1,714,000 43,000
3,753,000 92,000
8,000,000 120,000
8,000,000 290,000
8,000,000 120,000
8,000,000 290,000
Note memory figures are in MB
47
Software Hardware Versions Matrix
Platform Shipped with default version When ordered with Base Acceleration Pack shipped with version
OnDemand Switch 1 1.06.09 2.0
OnDemand Switch 2 1.06.09 2.0
OnDemand Switch 1 XL 2.0 2.0
OnDemand Switch 2 XL 2.0 2.0
OnDemand Switch 3 1.07.10 N/A
Version numbers according to 1.x and 2.x
Shipping GA on October 2008
Note Base Acceleration Pack should be explicitly
ordered when OnDemand Switch 1 or 2 are purchased
to get 2.0 instead of 1.06
48
Documentation

• AppDirector Insite User Guide
• http//www.radware.com/content/document.asp?_vabo
  utdocument8521
• AppDirector WBM User Guide
• http//www.radware.com/content/document.asp?_vabo
  utdocument8522
• Radware Installation Guide
• http//www.radware.com/content/document.asp?_vabo
  utdocument8025
• Performance report
• http//www.radware.com/content/document.asp?_vabo
  utdocument8517
• Tuning Guide
• http//www.radware.com/content/document.asp?_vabo
  utdocument8518
• Release Notes
• http//www.radware.com/content/document.asp?_vabo
  utdocument8526

49
QA
Questions????
NirI_at_radware.com ShakedV_at_radware.com
50
Summary

• AppDirector 2.0 is a one-box ADC solution
  providing
• Savings on rack space, power cooling
• Simpler deployment
• Improved manageability
• Hence reducing OPEX
• AppDirector 2.0 AppDirector Application
  Acceleration
• AppDirector 2.0 provides extended Service
  Scalability enhancing AppDirector with
  application acceleration functions
• Server Offloading services SSL Offloading,
  Client Authentication, Caching
• Content Delivery Acceleration services HTTP
  Compression, Caching, TCP Optimization

51
(No Transcript)