Deliver More Applications for More UsersF5® BIG-IP® Application Delivery Controller (ADC) platforms can manage even the heaviest traffic loads at both layer 4 and layer 7. By merging high-performance switching fabric, specialized hardware, and advanced software, F5 provides the flexibility to make in-depth application decisions without introducing bottlenecks.With the high performance you get from BIG-IP platforms, you can consolidate devices—saving management costs, electricity, space, and cooling—and still have room to grow.Key benefitsConsolidate your infrastructure with purpose-built hardware BIG-IP hardware platforms are designed specifically for application delivery performance and scalability. One device can be configured for server load balancing, global data center load balancing, DNS services, web application firewall, access management, web performance optimization, and WAN optimization.Offload application serversBIG-IP platforms feature high-performance SSL and compression hardware, as well as advanced connection management, so that you can remove processing-intensive tasks from application servers, consolidate devices, and use these resources more efficiently.Secure your networkInstantly add layer 3–7 protection with ICSA Certified BIG-IP platforms that provide default deny security, a full packet filter engine that limits access in a granular way, and an industryleading web application firewall.Reduce your operating costsSpend less time on configuration, upgrades, and maintenance with the simple-to-manage BIG-IP hardware, featuring out-of-band management, front-panel management, warm upgrades, remote boot, and USB support.Lower power and cooling costs in your data center with 80 Plus Gold and Platinum certified high-efficiency power supplies.Maximize uptimeEnsure your critical infrastructure is built on reliable hardware with hot-swappablecomponents, redundant power supplies, redundant fans, compact flash, multi-bootsupport, and always-on management.Appliances can be deployed in traditional active/standby configuration or horizontalclusters (active/active) to achieve high availability and application-level failoverIntelligent Performance Where It MattersPerformance traditionally has been measured in terms of throughput, but this doesn't accurately represent the complex needs of application delivery. Connection capacity and L7 transactions per second are critical for an ADC to support the increasing needs of modern web applications and infrastructure. For instance, an ADC needs to be able to process high levels of layer 4 and layer 7 connections and make more decisions at the application layer, such as inspecting and removing sensitive information or transforming application-specific payloads. BIG-IP appliances have the intelligence and performance to deliver the maximum amount of application layer decisions while securing your data and infrastructure.Simplify Your NetworkBIG-IP ADC appliances can help you simplify your network by offloading servers and consolidating devices, saving management costs as well as power, space, and cooling in the data center.With the massive performance and scalability of the BIG-IP platform, you can reduce the number of Application Delivery Controllers you need to deliver even the most demanding applications. By offloading computationally intense processes, you can significantly reduce the number of application servers needed.BIG-IP hardware includes:• SSL hardware acceleration—Offload costly SSL processing and accelerate key exchange and bulk encryption with best-in-market SSL performance.• Hardware compression*—Cost-effectively offload traffic compression processing from your servers to improve page load times and reduce bandwidth utilization.• OneConnect™ connection pooling—Aggregate millions of TCP requests into hundreds of server-side connections. Increase server capacity and ensure requests are handled efficiently.• Embedded Packet Velocity Acceleration (ePVA)*—Provide specific application delivery optimizations, support for low latency and tunneling protocols, and denial-of-service (DoS) protection. ePVA uses field-programmable gate array (FPGA) technology tightly integrated with TMOS and software to deliver:• High performance interconnect between Ethernet ports and processors.• L4 offload, enabling leading throughput and reduced load on software.• Hardware-accelerated SYN flood protection.• More than 65 types of DoS attacks detected and mitigated in hardware.• Native network overlay (VXLAN/NVGRE) support.The Advantages of F5 BIG-IP TechnologyUnique architecture and patented hardware and software innovations from F5 offer unmatched capabilities, including:F5 ScaleN architectureScaleN™ enables you to scale performance on demand, virtualize, or horizontally cluster multiple BIG-IP devices, creating an elastic Application Delivery Networking infrastructure that can efficiently adapt as your business needs change.• On-demand scaling—Increase capacity and performance with on-demand scaling, where you can simply add more power to your existing infrastructure instead of adding more devices. The latest BIG-IP appliance models can be upgraded to the higher performance model within each series through on-demand software licensing. Ondemand licensing enables organizations to right-size application delivery services and support growth without requiring new hardware.• Operational scaling—F5 can virtualize ADC services with a multi-tenant architecture that supports a variety of BIG-IP versions and product modules on a single device. Multitenant device virtualization is provided by F5's unique Virtual Clustered Multiprocessing (vCMP) technology, which enables select hardware platforms to run multiple BIG-IP guest instances. Each BIG-IP guest instance looks and acts like a physical BIG-IP device, with a dedicated allocation of CPU, memory, and other resources. vCMP offers per-guest rate limiting for bandwidth and SSL, enabling customers to achieve different performance levels for each guest.You can further divide each vCMP guest using multi-tenant features such as partitions and route domains, which can isolate configuration and networks on a per-virtual-domain basis. Within each virtual domain, you can further isolate and secure configuration and policies by using a role-based access system for greater administrative control. When combining both route domains/partitions with vCMP guests, F5 provides the highest density multi-tenant virtualization solution that can scale to thousands of virtual ADC (vADC) instances.This ability to virtualize BIG-IP ADC services means service providers and enterprise users can isolate based on BIG-IP version, enabling departmental or project-based tenancy as well as performance guarantees, while benefiting from managing a single, consolidated application delivery platform and increased utilization.• Application scaling—Increase capacity by adding BIG-IP resources through an all-active approach. With application scaling, you can scale beyond the traditional device pair to eliminate the need for idle and costly standby resources. Application scaling achieves this through two forms of horizontal scale: Application Service Clustering, which focuses on application scalability and high availability, and Device Service Clustering, designed to efficiently and seamlessly scale BIG-IP application delivery services.Application Service Clustering delivers sub-second failover and comprehensive connection mirroring for a highly available cluster of up to eight devices at the application layer, providing highly available multi-tenant deployments. Workloads can be moved across a cluster of devices or virtual instances without interrupting other services and can be scaled to meet the business demand.Device Service Clustering can synchronize full device configurations in an all-active deployment model, enabling consistent policy deployment and enforcement across devices—up to 32 active nodes. This ensures a consistent device configuration that simplifies operations.F5 TMOS platformAt the heart of BIG-IP appliances is TMOS®, the F5 operating system that provides a unified system for optimal application delivery, giving you total visibility, flexibility, and control crossall services. With TMOS, you can intelligently adapt to the diverse and evolving requirements of applications and networks.F5 SYN CheckF5 uses a collaborative software SYN cache and hardware SYN cookie approach to protect against large scale SYN flood DDoS attacks. SYN flood mitigation is available on all TMOS platforms in software. Select hardware platforms (5000, 7000, 10000, and 12000 series appliances and VIPRION blades) utilize the embedded Packet Velocity Acceleration (ePVA) field-programmable gate array (FPGA) to provide significantly improved performance (up to 80 million SYN cookies per second on the BIG-IP 10200v appliance). When a SYN flood is detected, the ePVA turns on the SYN Check™ feature to prevent invalid sessions from getting to the servers or exhausting the BIG-IP device resources. SYN Check is unique in that it can be applied on a per-virtual-IP/application basis, meaning if one application is under attack, the others are not affected. F5 is the only ADC that implements hardware-based SYN cookies in L4 and full proxy L7 mode.FIPS compliance at scaleThe Federal Information Processing Standards (FIPS) are security standards that specify requirements for cryptographic modules. FIPS compliance is required by many non-military government agencies worldwide, in addition to other industries, such as financial services and healthcare, which demand the highest standards in information, application, and data security.The FIPS 140-2 Level 2/3 compliant BIG-IP 10350v-F utilizes a tamper-evident hardware security module (HSM). Through its FIPS-compliant Level 3 HSM, BIG-IP 10350v-F delivers secure scale beyond what's attainable with software-only solutions. Its Level 3 HSM protects key storage via physical security and tamper-evident methods that are able to detect attempted access, use, or modification to the module. In addition to delivering tamperresistant security at great scale, F5's BIG-IP 10350v-F simplifies certificate management and reduces compliance costs.Next-Generation ADC AppliancesWith the introduction of the new BIG-IP 2000, 4000, 5000, 7000, 10000, and 12000 series appliances, F5 continues to invest and innovate in hardware development to ensure that even the most demanding web applications are available, secure, and fast. The new BIG-IP hardware offers industry-leading performance in application decisions per second, SSL processing, and hardware compression for each class of ADC. Enterprises and service providers can deploy multiple application delivery services, offload SSL processing, and efficiently consolidate on a single, unified platform. In addition, with the capability to upgrade from a base appliance to a higher capacity model in that series through a software license, F5 provides on-demand flexibility to match changing business needs. *Maximum throughput.**Please refer to the Platform Guide: 12000 Series for the latest power ratings for your specific configurations (SSL, highline input voltage, DC, etc.)Note: Performance-related numbers are based on local traffic management services only.*Maximum throughput.**Please refer to the Platform Guide: 10000 Series for the latest power ratings for your specific configurations (SSL, SSD, highline input voltage, DC, etc.)Note: Performance-related numbers are based on local traffic management services only.*Maximum throughput.**Please refer to the Platform Guide: 10000 Series for the latest power ratings for your specific configurations (SSL, SSD, highline input voltage, DC, etc.)*** vCMP guest access to FIPS resources not supported.Note: Performance-related numbers are based on local traffic management services only.*Maximum throughput.**Please refer to the Platform Guide: 7000 Series for the latest power ratings for your specific configurations (SSL, SSD, highline input voltage, DC, etc.).*** vCMP guest access to FIPS resources not supported.Note: Performance-related numbers are based on local traffic management services only *Maximum throughput.**Please refer to the Platform Guide: 5000 Series for the latest power ratings for your specific configurations (dual power supplies, SSD, highline input voltage, DC, etc.).*** vCMP guest access to FIPS resources not supported.Note: Performance-related numbers are based on local traffic management services only*Maximum throughput.**Please refer to the Platform Guide: 4000 Series for the latest power ratings for your specific configurations (dual power supplies, highline input voltage, DC, etc.).Note: Performance-related numbers are based on local traffic management services only. *Maximum throughput.**Please refer to the Platform Guide: 2000 Series for the latest power ratings for your specific configurations (dual power supplies, highline input voltage, DC, etc.)Note: Performance-related numbers are based on local traffic management services only.Simplified LicensingMeeting your applications' needs in a dynamic environment has never been easier.F5's Good, Better, Best provides you with the flexibility to provision advanced moduleson-demand, at the best value.• Discover the right F5 solutions for your application environment.• Provision the modules needed to run your applications with F5's Good, Better, Best offerings.• Implement complete application flexibility with the ability to deploy your modules on a virtual or physical platform.F5 Global ServicesF5 Global Services offers world-class support, training, and consulting to help you get the most from your F5 investment. Whether it's providing fast answers to questions, training internal teams, or handling entire implementations from design to deployment, F5 Global Services can help ensure your applications are always secure, fast, and reliable. For more information about F5 Global Services, contact [email protected] or visit f5.com/support.
