Application Traffic Management Making the Network Intelligent Rainer Singer Field Systems Engineer F5 Networks Central Europe

Agenda Company Snapshot Load balancing Overview BIG-IP v9 Products & Packaging

Leading Application Traffic Management Products Local, Global & Link Traffic Management BIG-IP Traffic Management FirePass SSL VPN Remote Access Secure Application Access TrafficShield Application Security Gateway Application Firewall iControl Software Development Kit Standards Based Interface (SOAP/XML) iControl Services Manager Centralised Management for F5 Devices

Wide Area Traffic Management Internet Wide Area Traffic Management Connectivity Traffic Management Router Router Local Area Traffic Management That opportunity is manifested in how broad and deep we go into the enterprise infrastructure. Working out from core to edge you can see that F5 plays a critical role at every tier providing security, performance optimization, scalability, and high availability for the applications, servers, and services running within the environment. In this type of architecture enabled by F5, there is no single point of failure.

Feature Overview/BIG-IP Availability Checking Check any back-end process using EAV Will work for any IP based application Stateful failover between devices Security Firewall-like device to resist most attacks All administration is encrypted Integrated SSL/FIPS and secure NAT

Feature Overview/BIG-IP SSL and E-Commerce Only product with integrated SSL Single certificate simplifies administration Lowers certificate costs Client certificate checking (Authentication) Layer 7 Functionality Can utilize all HTTP header/content or TCP content in traffic decisions Can persist on anything HTTP 1.1 keep-alives dramatically improve performance

Feature Overview/BIG-IP Easy to Implement and Support Can be deployed as either Layer 2 or 3 device Simple and complete Graphical User Interface Installation services by F5 and/or partner Flexibility BIG-IP works with any server or IP based service iControl enables integration with internal and/or 3rd party applications

Announcing BIG-IP v9: A Revolutionary Approach in Application Traffic Management New Software Architecture New Value-Added Functions New User Interface New Hardware Architecture

What was Introduced in BIG-IP v9 Accelerates web applications up to 3x Compression + Caching Reduces infrastructure cost by up to 33% TCP Optimisation + OneConnect™ Ensures priority application performance Rate Shaping Cost-effective, intelligent application security SSL, TM/OS + iRules Ensures a higher level of availability TM/OS + iRules Delivers simplified management New GUI Superior integration and extensibility iRules, Advanced Client Authentication Superior hardware manageability and performance

Groundbreaking New Architecture Users Unified Network/Application Infrastructure Services Applications Users CRM Database Siebel BEA Legacy .NET SAP PeopleSoft IBM ERP SFA Custom Mobile Phone Deliver PDA Optimise Secure Traffic Management Operating System (TM/OS) Laptop Desktop Co-location

A New Level of Intelligence Legacy Approach Packet Based React to a Single Communication, One Direction React to a Real Time, Two-Way Conversation Translate Between Parties Flow Based TM/OS

The Most Intelligent and Adaptable Solution iRules Programmable Network Language Programmable Application Network GUI-Based Application Profiles Repeatable Policies Unified Application Infrastructure Services Security Optimisation Delivery New Service Targeted and Adaptable Functions Complete Visibility and Control of Application Flows Universal Inspection Engine (UIE) TM/OS Fast Application Proxy Client Side Compression TCP Offloading Load Balancing Server Side News Website

Market Leading Functionality Today Comprehensive Load Balancing Advanced Application Switching Customised Health Monitoring Intelligent Network Address Translation Advanced Routing Intelligent Port Mirroring Deliver DoS and SYN Flood Protection Network Address/Port Translation Application Attack Filtering Certificate Management SSL Acceleration Quality of Service Optimise Secure An adaptive Architecture delivering centralised Application Services to improve delivery It’s not just the functions and core architecture, it’s also a sophisticated UI that lowers the cost of management…next slide

First Unified Application Infrastructure Services IPv6 Gateway Universal Persistence Response Error Handling Session / Flow Switching New Deliver New New Resource Cloaking Advanced Client Authentication Firewall - Packet Filtering Selective Content Encryption Cookie Encryption Content Protection Protocol Sanitisation TM/OS Connection Pooling Intelligent Compression L7 Rate Shaping Content Spooling/ Buffering TCP Optimisation Content Transformation Caching TCP Express Optimise Secure An adaptive Architecture delivering centralised Application Services to improve delivery It’s not just the functions and core architecture, it’s also a sophisticated UI that lowers the cost of management…next slide

Putting the Functionality to the Test Independent validation of v9 features and functionality All are based around real-world scenarios, real applications and real data Feature comparison with Cisco, NetScaler, Nortel, Radware, Redline

Hardware & Packaging

Hardware Performance Independent Secure Management Access Throughput Packet Velocity ASIC (PVA2) SSL Transactions per Second (TPS) SSL Bulk Encryption FIPS Support HTTP Compression Independent Secure Management Access SCCP Microcomputer - Switch Card Control Processor Dual Media CF + HDD

Hardware cont.  More Integrated Solution Tri-Speed Ethernet (10/100/1000) + Mini GBICs LCD Display USB Port Hot Swappable Fan Trays  More Integrated Solution

Superior Hardware Manageability and Performance Next Generation IP Application Switches Simplified Management: Lights Out Management Multi-Boot Support LCD for Simplified Management Hot-Swappable Parts Redundant Power / Fans Port Flexibility PCI Slots Independent Secure Management Access Powerful: Packet Velocity ASIC 2 High Performance SSL & Compression High Performance Switching Fabric Dual Processor 6800 6400 3400 We’re rolling out a series of next switch which dramatically improve both the manageability and performance of our offering. Point out: Lights Out Management Multi-Boot Support Simplified Installation - USB CD Installs and upgrades CF and Hard drive - improved logging Hot-swappable Hardware Fan Trays, HD Disk (6400) Superior Management LCD Displays basic setup, stats and system state Dramatic Performance Improvements (platform specific) Latest Intel Architecture, New PVA2, New SSL Encryption/Bulk Port Flexibility See individual platforms for details Tri Speed Copper and fiber options 1500 *All Models Include 100 TPS SSL Acceleration

Updated Platform Sizing Guide BIG-IP 1500 BIG-IP 3400 BIG-IP 6400 BIG-IP 6800 Layer 4 Requests/sec 30,000 110,000 220,000 Layer 7 Requests/sec 22,000 50,000 75,000 Max. throughput 500 Mbps 1 Gbps 2 Gbps 4 Gbps Max. conc. conn. 4 Million 8 Million Max. SSL TPS 2,000 8,000 15,000 20,000 Max. SSL Bulk Max. SSL conc. conn. 100,000 200,000 500,000 Max. compression 100 Mbps Switch backplane 14 Gbps 22 Gbps 44 Gbps