没有合适的资源?快使用搜索试试~ 我知道了~
首页F5 BIG IP PLatforms Datasheet
资源详情
资源评论
资源推荐

F5’s next-generation, cloud-ready Application Delivery Controller (ADC) platform provides
DevOps-like agility with the scale, security depth, and investment protection needed for
both established and emerging apps. The new F5
®
BIG-IP
®
iSeries appliances deliver
quick and easy programmability, ecosystem-friendly orchestration, and record breaking,
software-defined hardware performance. As a result, customers can accelerate private
clouds and secure critical data at scale while lowering TCO and future proofing their
application infrastructure.
Key benefits
Obtain the lowest TCO
Reduce TCO and the infrastructure footprint by
consolidating app and security services on to a
unified, high-performance platform.
Protect critical data
Deliver the SSL capacity required to protect
critical data—including offload of elliptical
curve cryptography (ECC) processing to
hardware—enabling forward secrecy scaling.
Simplify operations and improve customer
confidence with the fastest way to an SSL Labs
A+ rating.
Secure applications
Deliver the most effective protection with
integrated, one-pass, full stack (L3–L7 security,
including an ICSA Certified firewall, high-
capacity DDoS mitigation, contextual access
management, and more.
Ensure the easiest deployment
for cloud or container environments
Save time with the only simple, out-of-the-box
native integration with leading private cloud,
cloud interconnect colocation, and container
environments.
Maximize investment protection
The iSeries’ software-defined hardware includes
unique F5 TurboFlex
™
FPGA technology that
enables on-demand optimized performance
for specific use cases such as DDoS protection
or UDP traffic processing. Eliminate forklift
upgrades and extend the lifecycle of app
delivery hardware with software-upgradeable
performance.
Maximize uptime
Ensure your critical infrastructure is built
on reliable, carrier-grade hardware with
hot-swappable components, redundant power
supplies and fans, and always-on management
integrated with a full baseboard management
controller (BMC) with IPMI support.
Gain Agility with the
Most Programmable Cloud-Ready ADC
BIG-IP System
HARDWARE DATASHEET
What's Inside
2 Standardize Your App
Delivery Services
2 Intelligent Performance
Where It Matters
2 The Advantages of F5 BIG-IP
Hardware
4 Gain Agility and Control in
Private Clouds
7 The BIG-IP iSeries: F5’s Next-
Generation ADC Solution
24 Simplified Licensing
24 F5 Global Services
24 More Information

HARDWARE DATASHEET
BIG-IP System
2
Standardize Your App Delivery Services
BIG-IP ADC appliances can simplify your network and reduce total cost of ownership (TCO)
by offloading servers, providing a consistent set of comprehensive application services,
and consolidating devices, saving management, power, space, and cooling costs in
the data center.
The massive performance and scalability of the BIG-IP platform reduces the number of ADCs
needed to deliver even the most demanding applications. By offloading computationally
intense processes, you can significantly reduce the number of application servers needed.
Intelligent Performance Where It Maers
Traditional performance measurements in terms of throughput don’t accurately represent
the complex needs of delivering modern web applications. Connection capacity and L7
transactions per second are critical. For instance, ADCs must be able to process high levels
of layer 4 and layer 7 connections and make application-layer decisions such as removing
sensitive information or transforming application-specific payloads. BIG-IP appliances have
the intelligence and performance to handle application layer decisions while securing your
data and infrastructure.
The Advantages of F5 BIG-IP Hardware
The BIG-IP iSeries platform perfectly blends software and hardware innovations that balance
the need for performance, scalability, and agility. The F5 TMOS
®
operating system provides
total visibility, flexibility, and control across all application delivery services. With TMOS,
organizations can intelligently adapt to the diverse and evolving requirements of applications
and networks. Other unique or patented hardware and software innovations enable the
BIG-IP iSeries platform to offer unmatched capabilities:
•
F5 TurboFlex
™
optimization technology: Field-programmable gate arrays (FPGAs),
tightly integrated with CPUs, memory, TMOS, and software, provide specific packet-flow
optimizations, L4 offload, support for private cloud tunneling protocols, and denial-of-
service (DoS) protection. These hardware optimizations not only improve performance
but free CPU capacity for other app delivery and security tasks. Only BIG-IP iSeries
appliances feature TurboFlex performance profiles—user-selectable, pre-packaged
optimizations that provide different performance characteristics depending on
the business need:
·
L4 offload enables unsurpassed throughput and reduced loads on software.
·
Unique per-virtual-IP/application SYN flood protection ensures that if one application is
under attack, others are not affected. Only F5 ADCs implement hardware-based SYN
cookies in L4 and full proxy L7 mode.
·
More than 100 types of DoS attacks can be detected and mitigated in hardware,
hugely increasing the attack size that can be absorbed compared to
software-only implementations.
·
Network virtualization and overlay protocol processing (such as VXLAN and
NVGRE tunneling) increases traffic processing capacity.
·
UDP traffic processing increases throughput and reduces both latency and jitter,
improving VoIP or streaming media performance.

HARDWARE DATASHEET
BIG-IP System
3
•
Best-in-market SSL performance accelerates SSL/TLS adoption by offloading costly
SSL processing and speed key exchange and bulk encryption. BIG-IP iSeries solutions
include hardware acceleration of ECC ciphers, enabling forward secrecy. In addition,
the ability to achieve an SSL Labs A+ rating with a few simple steps reduces SSL
configuration complexity and errors.
•
BIG-IP platforms offer maximum hardware compression, enabling cost-effective
offloading of traffic compression processing to improve page load times and
reduce bandwidth utilization.
•
Enterprise class SSD (solid state drive) technology on select BIG-IP platforms improves
performance and reliability, saves power, and reduces heat generation and noise.
•
Efficiency features include 80 Plus Platinum certified power supplies as well as front-panel
touchscreen LCD management, remote boot and multi-boot support, and USB support.
F5 ScaleN
F5 ScaleN
®
technology enables organizations to scale performance, virtualize, or horizontally
cluster multiple BIG-IP devices, creating an elastic Application Delivery Networking
infrastructure that can efficiently adapt as needs change.
•
On-demand scaling—Increase capacity and performance with on-demand scaling,
simply adding more power to your existing infrastructure instead of adding devices.
Some BIG-IP appliance models can be upgraded to the higher performance model
within each series through on-demand software licensing, which enables organizations
to support growth without new hardware.
•
Operational scaling—Virtualize ADC services with a multi-tenant architecture that
supports a variety of BIG-IP versions and product modules on a single device. F5 Virtual
Clustered Multiprocessing
™
(vCMP) technology enables select hardware platforms to run
multiple BIG-IP guest instances. Each guest instance acts like a physical BIG-IP device,
with a dedicated allocation of CPU, memory, and other resources. vCMP offers per-guest
rate limiting for bandwidth, enabling different performance levels for each guest.
Further divide each vCMP guest using multi-tenant features such as partitions and route
domains, which can isolate configuration and networks on a per-virtual-domain basis.
Within each virtual domain, you can further isolate and secure configuration and policies,
with a role-based access system for administrative control. When route domains/partitions
are combined with vCMP guests, F5 provides the highest density multi-tenant
virtualization solution, which can scale to thousands of virtual ADC (vADC) instances.
This ability to virtualize BIG-IP ADC services means service providers and enterprise users
can isolate based on BIG-IP version, enabling departmental or project-based tenancy as
well as performance guarantees, consolidated application delivery platform management,
and increased utilization.
•
Application scaling—Increase capacity by adding BIG-IP resources through an
all-active approach, and scale beyond the traditional device pair to eliminate idle and
costly standby resources. Application scaling achieves this through two forms of
horizontal scale. One is Application Service Clustering, which focuses on application
scalability and high availability. The other is Device Service Clustering, designed to efficiently
and seamlessly scale BIG-IP application delivery services and sync application policies.

HARDWARE DATASHEET
BIG-IP System
4
Application Service Clustering delivers sub-second failover and comprehensive
connection mirroring for a highly available cluster of up to eight devices at the
application layer, providing highly available multi-tenant deployments. Workloads can
be moved across a cluster of devices or virtual instances without interrupting other
services and can be scaled to meet business demand.
Device Service Clustering can synchronize full device configurations in an all-active
deployment model, enabling consistent policy deployment and enforcement across
devices—up to 32 active nodes. This ensures a consistent device configuration,
with syncing of hardened firewall and access policies to simplify operations and
reduce attack surfaces.
Gain Agility and Control in Private Clouds
Enterprises are migrating to private clouds to achieve agility and speed time to market for
applications while maintaining control. Regardless of the chosen cloud stack, typically only
basic networking and app services like load balancing are provided. Advanced application
delivery and security services are required to optimize and protect applications.
Highly scalable BIG-IP platforms, with programmatic interfaces and service delivery
templates, enable integration and automation with orchestration systems and deliver
right-sized services aligned to specific app needs.
F5 solutions integrate with the leading private cloud technology stacks, including OpenStack,
VMware, and Microsoft. For OpenStack, F5 provides native orchestration with Heat
templates to automate the end-to-end deployment of advanced app and security services,
reducing deployment times from days to minutes. Integration with VMware vRealize
Orchestrator through the Blue Medora vRO plug-in reduces configuration time, enables
self-service of F5 application services by app owners, and automates complex, multi-step
workflows. F5 iWorkflow
™
enables integration of F5 devices with software-defined networking
(SDN) orchestration systems providing a single point of contact between the orchestrator
and F5 devices.
Two-tier architecture
For enterprises deploying a private cloud, a two-tier architecture provides an optimized
design that takes best advantage of both hardware and software app delivery services.
The first tier provides services such as L4 traffic management, distributed denial-of-service
(DDoS) firewall, or SSL offloading, which are centralized and shared for all north-south
traffic entering the network, enforcing consistent app policies. These services, which deal
with high-volume traffic and incur heavy CPU loads, require high performance, scalability,
and guaranteed service-level agreements (SLAs). Dedicated, purpose-built hardware such
as BIG-IP iSeries appliances meet those requirements and, depending on the environment
and app requirements, can be more cost efficient than commodity servers.
Tier 2—the tenant or app tier—includes emerging, cloud-native applications that can be
hosted in containers or disaggregated into microservices. The apps require specific services
addressing intra-app traffic (east-west traffic). Those services, which can include basic
load balancing to web app firewall or web performance optimizations, can be delivered on
a per-application basis through highly scalable, flexible software such as virtual editions of
BIG-IP products. This two-tier architecture model, standardized on F5 application services,
offers flexibility, a strategic point of control where proven app policies can be enforced,
and complete visibility of all traffic, taking advantage of hardware where it’s needed and
software agility near the app.

HARDWARE DATASHEET
BIG-IP System
5
Figure 1: Orchestrated and automated deployment of app services in a two-tier private cloud
architecture.
Programmability
Enabling automation and orchestration is key to achieving the benefits of cloud and
software-defined architectures and to scaling application services on demand.
F5 platforms offers many ways to program the application services fabric and network,
enabling organizations to automate deployment, react in real time to events, and easily
integrate into orchestration systems. F5 iRules
®
scripting has long provided granular
traffic control and visibility, enabling customization, rapid response to code errors and
security vulnerabilities, and support for new protocols. New F5 iRules LX
™
lowers costs and
speeds deployments by extending iRules to JavaScript developers and providing access
to, and easier integration with, over 250,000 community Node.js packages. In addition,
with F5 iApps
®
templates, organizations can automate deployment and configuration of
application services in minutes. F5 iControl
®
REST APIs and SDKs provide integration with
leading open source and commercial orchestration systems, VMware, OpenStack clouds,
and configuration management systems such as Puppet, Chef, and Ansible.
BIG-IQ Centralized Management
F5 BIG-IQ
®
Centralized Management is F5’s management and orchestration platform.
It provides a central point of control for F5 physical and virtual devices and the app delivery
and security services that run on them. BIG-IQ Centralized Management is available both
as a virtual edition and an F5 appliance. It simplifies management, helps ensure compliance,
and gives you the visibility and reporting you need to troubleshoot and respond to issues and
security attacks.
Tier 2
NetOps/DevOps
Orchestration and Management
Self Service Catalog
Template Template
Dashboard
Orchestrator
Tenant 1
Tier 1
BIG-IP iSeries
iApps
App 1 App 2
App 3
App 1 App 2
App 3
Tenant n
剩余23页未读,继续阅读

















安全验证
文档复制为VIP权益,开通VIP直接复制

评论0