Please enable JavaScript.

Coggle requires JavaScript to display documents.

F5 (why?, customer challenges, Solutions and Technology, application…

- - - - target applications
      - target identity associated with the application
  - - - how many
      - which environments
      - performance issues
- - - - purpose
        
        to load balance applications in your environment by using advanced
        
        TCP connection management
        
        TCP optimization
        
        server offloading
        
        provides a high security solution
        
        LTMs iApps functionality is a powerful set of features that enable you to manage application services rather than individual devices and objects
        
        turns your network into an agile infrastructure for application delivery
      - benefits
        
        Accelerate your applications up to 3x
        
        reduces traffic volumes
        
        minimizes the effect of
        
        connection bottlenecks
        
        WAN,
        LAN, and Internet latency
        
        achieve additional performance increases with BIG-IP Application Acceleration Manager
        
        Take control over application delivery
        
        F5 TMOS platform gives you complete control of the connection, packets, and payload for applications
        
        F5’s event driven iRules you can customize how you intercept, inspect, transform, and direct inbound and outbound application traffic.
        
        F5 iControl API makes it easy to integrate with third-party management systems
        
        Device Service Clustering provides flexible high-availability scaling and configuration syncing of live application traffic among a cluster of active or standby BIG-IP devices
        
        Easily deploy applications and ensure availability
        
        F5 iApp enables you to easily deploy and manage applications
        
        application related statistics provide complete visibility into the health and performance of your apps for
        
        faster troubleshooting
        
        resolution of issues
        
        Reduce servers, bandwidth, and management costs
        
        helps you simplify system management by consolidating security, acceleration, and
        availability in one easy-to-manage platform
        
        By using fewer servers, less bandwidth, less power, and less cooling, while reducing the time spent managing your infrastructure, you can significantly reduce your operational costs
    - - benefits
        
        Deliver comprehensive security
        
        blocks web application attacks in minutes
        
        distributed denial-of-service (DDoS)
        
        SQL injection attacks
        
        secure interactive web applications that use the latest coding, such as AJAX widgets and JSON payloads.
        
        scan web applications
        
        patches vulnerabilities in minutes
        
        stops hackers and attacks from any location
        
        ensures that legitimate users can access applications
      - purpose
        
        to secure web applications (in traditional, virtual, and private cloud environments) using a certified web application firewall and offer threat assessment and visibility.
    - - purpose
        
        to create secure access to internal applications by using a single authentication and provide control using a single management interface
      - benefits
        
        Provide unified global access
        
        protects your public-facing applications by providing policy-based, context-aware access to users
        
        Consolidate and simplify
        
        providing centralized authentication, authorization, and accounting (AAA) control directly on the BIG-IP system.
        
        integrates with Oracle Access Manager
        
        simplifies virtual application deployment by supporting
        
        VMware View
        
        Microsoft Remote Desktop Protocol (RDP)
        
        Citrix XenApp and XenDesktop
        
        Java RDP
        
        Obtain flexibility, high performance, and scalability
        
        delivered in BIG-IP Edge Gateway
        
        accelerated remote access
        
        run on BIG-IP LTM Virtual Edition
        
        deliver flexible application access in virtualized environments
        
        add-on module for BIG-IP Local Traffic Manager
        (LTM)
        
        protecting Internet-facing applications
    - - purpose
        
        distributes DNS and user application requests based on business policies, data center and network conditions, user location, and application performance.
      - benefits
        
        Control and ensure app availability
        
        create a strong disaster recovery and business continuity plan by ensuring that users are always connected to a site where the application is available
        
        performing comprehensive health checking of the entire infrastructure
        
        minimizes downtime
        
        Improve application performance
        
        send users to a site that will give them the best application experience
        
        uses a range of different load balancing methods
    - - purpose
        
        overcome WAN latency
        
        maximizes server capacity
        
        speeds application response times
        
        help you meet application performance, data replication, and disaster recovery requirements presented by cloud, mobile applications, and video distribution
      - benefits
        
        decreases the need for additional bandwidth and hardware so users get fast access to applications,
        
        gain greater revenue and free up IT resources.
    - - purpose
        
        to combine the network firewall with
        
        traffic management
        
        application security
        
        anti-DDoS,
        
        user access management
        
        DNS security
      - benefits
        
        reduces management complexity and overhead
        
        ideal for protecting internet-facing data centers wherever they reside
  - - - is a script that you write if you want to make use of some of the extended capabilities of the BIG-IP that are unavailable via the CLI or GUI
    - - single point of management, your BIG-IP, as opposed to being distributed to every server hosting whichever application you’re trying to modify or affect
        
        save valuable management time
        
        large benefit in time to deployment
    - - when you’re looking to add some form of functionality to your application or app deployment, at the network layer, and that functionality is not already readily available via the built in configuration options in your BIG-IP
  - - - increase IT agility and efficiency by enabling organizations to manage the security, optimization, availability, health, and performance of not only the ADN devices in the network, but of the mission-critical applications running the business.
    - - user-customizable framework for deploying applications
        
        Templates
        
        where the application is described and the objects (required and optional) are defined through presentation and implementation language
        
        Application Services
        
        he deployment process of an iApp Template which bundles the entire configuration options for a particular application together
        
        Analytics.
        
        include performance metrics on a per-application and location basis
    - - Configuration encapsulation
      - Cradle-to-grave configuration management
      - Reentrancy
      - Strictness protects against accidental changes to the configuration
      - Easy editing of configurations and cleanup
      - Copy/Import/Export capability
      - User-customizable
      - Community support for DevCentral hosted templates
- - - - Quickly and easily spin up, spin down, or migrate application delivery services in and across the data center and public cloud
      - run in proprietary computing environments
        
        Azure
        
        GCP
        
        AWS
      - can be deployed on all leading hypervisors and cloud platforms running on commodity servers
    - - Throughput speeds and volumetric processing of SSL transactions per second does not compare
        with anything above a 4000 series in hardware
  - - - offers a single-vendor solution
        
        If a customer is running an F5 Virtual Edition on an HP server and an issue arises, troubleshooting between vendors is more difficult
      - can run all BIG-IP modules and perform hardware SSL offload and compression
      - provides customers with all other features that may be important to their deployment, such as always-on management, certifications, special-purpose FPGAs, and improved security
      - purposefully built to provide high performance for application delivery
    - - simplify your network
        
        offloading servers
        
        consolidating devices
        
        saving
        
        management costs
        
        power
        
        space
        
        cooling in the data center
      - reduce the number of Application Delivery Controllers you need to deliver even the most demanding applications
      - reduce the number of application servers needed
    - - SSL hardware acceleration
        
        Offload costly SSL processing and accelerate key exchange and bulk encryption with best-in-market SSL performance
      - Hardware compression
        
        Cost-effectively offload traffic compression processing from your servers to improve page load times and reduce bandwidth utilization.
      - OneConnect connection pooling
        
        Aggregate millions of TCP requests into hundreds of server-side connections
        
        Increase server capacity
        
        ensure requests are handled efficiently
      - Embedded Packet Velocity Acceleration (ePVA)*
        
        application delivery optimizations
        
        support for low latency and tunneling protocols
        
        denial-of-service (DoS) protection
    - - take longer to acquire
        
        add to time lines in projects
        
        some public cloud environments do not let you run your own hardware since it is a strictly virtualized environment
- - - - L6: Presentation Layer
        
        it represents the preparation or translation of application format to network format, or from network formatting to application format
        
        the layer “presents” data for the application or the network
      - L5: Session Layer
        
        responsible for establishing, maintaining,
        and eventually terminating the session with the remote host
      - L7: Application layer
        
        Applications that work at Layer 7 are the ones that users interact with directly
        
        it provides the framework that the actual applications run on top of
        
        e.g. web browser (Google Chrome, Firefox, Safari, etc.) or other app - Skype, Outlook, Office
    - - L4: Transport Layer
        
        responsible for
        
        coordination of the data transfer between end systems and hosts
        
        providing error checking and performing data recovery when necessary
        
        in essence: ensuring that all of the data makes it from the sending host to the receiving host.
        
        e.g.
        
        User Datagram Protocol (UDP)
        
        Transmission Control Protocol (TCP)
      - L3: Network Layer
        
        responsible for
        
        determining how the data will reach the recipient.
        
        example: You might know that your Boston computer wants to connect to a server in California, but there are millions of different paths to take. Routers at this layer help do this efficiently.
        
        its own error handling
        
        packet
        sequencing
        
        data is fragmented into
        multiple packets
        
        congestion control
        
        In its most basic sense, this layer is responsible for packet forwarding, including routing through different routers
        
        physical device
        
        Routers
      - L2: Data Link Layer
        
        physical device
        
        switches
        
        sublayers
        
        Logical Link Control (LLC)
        
        controls frame synchronization and provides a degree of error checking
        
        Media Access Control (MAC)
        
        establishes the computer’s identity on the network, via its MAC address
        
        A MAC address is the address that is assigned to a network adapter at the hardware level
      - L1: Physical Layer
        
        represents the electrical and physical representation of the system