Transcription
DATA SHEETTHUNDER ADCAPPLICATION DELIVERY CONTROLLER & LOAD BALANCERPLATFORMSOffering a complete application optimization solution,A10 Thunder ADC (Application Delivery Controller) processesa complex set of functions simultaneously via the industry’shighest-performing appliances. It integrates advanced L4-7techniques to ensure server availability, protect vulnerableTHUNDER ADCPhysical & SPE AppliancesVvTHUNDER ADCVirtual Applianceapplications and accelerate content delivery.THUNDER ADCBare MetalAGILE APPLICATIONDELIVERY &SECURITYThunder ADC delivers the capacity,From SMBs and large enterprises to serviceachieve a substantial reduction in TCO.scalability, multi-tenancy andprogrammability to adjust to an everchanging environment. Consolidate pointproducts, reduce network complexity andFLEXPOOLCapacity PoolingLicenseMANAGEMENTproviders and cloud operators, organizationsare hosting a large and rapidly growing set ofThunder ADC delivers L4-7 load balancingmission-critical applications.and multiple layers of security via weband DNS app firewalls, single sign-onA purpose-built solution, A10 Thunder(SSO) authentication and in-depth supportADC ensures these applications are highlyfor advanced encryption, includingavailable, accelerated and secure. It helpshigh-performance PFS/ECC. Built uponreduce downtime, ensure business continuityA10’s Advanced Core Operating Systemand builds highly available applications and(ACOS ) platform, Thunder ADC deliversenvironments.application performance and security forany environment.HARMONY CONTROLLERCentralized Analytics andManagementTALKWITH A10WEBa10networks.com/adc1
BENEFITSAPPENHANCESECUREOrganizations must guarantee theirInternet sessions are rapidly adoptingapplications are constantly accessible.encryption to secure online dataThunder ADC utilizes multiple load-transport. Clients and servers, meanwhile,balancing techniques to efficientlynegotiate the most secure and complexdistribute workloads across all serversmethods mutually supported. Thunderwhile constantly evaluating applicationADC front-ends servers and offloadshealth. Client requests are forwarded tocumbersome, processing-intensive tasksservers that host the proper content andassociated with the latest cryptographiccan best respond to ensure applicationstandards. This maximizes contentand content delivery.protection, speeds delivery and lowersAPPLICATION AVAILABILITYCOMMUNICATIONSinfrastructure expenses.ENSUREPROTECTBUSINESS CONTINUITYVULNERABLE APPLICATIONSWith data centers proliferatingSoftware development and testing canworldwide, administrators mustmaintain around-the-clock globaloperational integrity. To guaranteecohesion and optimize app deliveryamong diverse sites, Thunder ADCprovides advanced global server loadbalancing (GSLB) between locations.GSLB provides optimal site selectionand status to ensure disaster recovery.catch most, but typically not all, codingflaws. The resulting applications aresusceptible to attacks that cannot beblocked by intrusion prevention systems(IPS), next-generation firewalls orsandboxing. Businesses lose revenue,suffer damaged brand reputation andconfidential information is stolen.Thunder ADC provides protectionagainst ‘zero day’ and other emergingapplication layer threats with DNS andweb application firewalls.ACCELERATECONTENT DELIVERYApplications must be responsive — no matter the location — to ensure a superior end-user experience,enhanced remote employee productivity and SLA mandates are exceeded. Thunder ADC overcomes theinherent WAN latencies, inefficient software programs and chatty protocols to provide fast and responsiveservice. Clients obtain a fast experience while organizations gain a competitive advantage.2
OPTIMIZECONSOLIDATEAPPLICATIONS VIA MULTI-TENANCYACCESS CONTROLTo optimize the delivery and security forOrganizations must allow externalpotentially hundreds of apps in a givenclients access to web portals, internaldata center, IT administrators need aresources and mobile/BYOD apps. At themulti-tenant methodology.same time, security must be maintainedwith authentication and be transparentThunder ADC provides the ability toto the user.granularly program more than 1,000individual partitions on a single applianceThunder ADC centrally manages multiplefor tailor-made policies by application,facets of authentication, authorizationservice or user, as well as achieveand accounting (AAA) with a system-appliance consolidation.wide perspective, while eliminatingseparate authentication points, for asingle sign-on (SSO) experience.PROACTIVEINFRASTRUCTURE MODIFICATIONSDynamic traffic profiles and throughputlevels require detailed visualization intoapplication usage to implement networkchanges in real-time.When combined with A10 Harmony Controller, Thunder ADC provides ultragranular visibility and L4-7 analytics toaccelerate troubleshooting and head offpotentially reduced user experiences.THUNDER7440-11 ADCBY THE NUMBERS220/200 GbpsL4/L7 ApplicationThroughput10044M10.5MGbEPortsL4HTTP RPSL4 ConnectionsPer Second1,02375 GbpsApplicationDeliveryPartitions (L3V)SSL BulkThroughput** With Maximum SSLINDUSTRY-LEADINGPERFORMANCEThunder ADC delivers up to an industry-leading 220 Gbps of throughput in a singleone-rack unit appliance — or 1.7 Tbps of throughput in a cluster — and features thebroadest range of form factors, including physical, virtual, bare metal multi-tenantand cloud.3
REFERENCE ARCHITECTURESBACKUP DATA YGSLBHigh AvailabilityHealth ChecksServer Load BalancingWAFDAFAAM (SSO)DDoS MitigationACCELERATIONSSL OffloadTCP ReuseRAM CachingCompressionTHUNDER ADCWEB APPSDNSREMOTESERVICESA10 Threat IntelligenceDownloadsENTERPRISE APPSREMOTE DATA CENTERINTERNETTHUNDER ADCTraffic SteeringSLBService ChainingPERSONALIZEDCONTENT SERVICESOffering up to an industry-leading 220 Gbps ofthroughput in a single one-rack unit appliance,Thunder ADC may be deployed at the core ofan environment to deliver high-performanceapplication delivery, load balancing and security.Authenticate viaThird-Party IdP ServiceHARMONY CONTROLLERMOBILE USERSENTERPRISE DEPLOYMENTVIDEOOPTIMIZATIONDNS SERVERSTHUNDER ADCDNS SLBDNS Application FirewallSERVICE PROVIDER DEPLOYMENTTHUNDER ADCSLB/GSLBSSL OffloadDDoS MitigationOTHERSERVICESTRAFFIC STEERING & ADC FUNCTIONALITYin a Mobile Service Provider SpaceWEB &APPLICATIONSERVERSADC FEATURESfor Service ProvidersProven in large-scale service providerenvironments, Thunder ADC may be deployedto optimize network efficiency and servicesvia traffic-steering and service-chaining tomultiple value-added services, such as videooptimization. The solution includes carrier-gradenetworking (CGN) support for IPv4 addressexpansion and IPv6 migration.APPLICATION DELIVERYPARTITIONSINTERNAL USERSADP 1ADP 2ADP NTHUNDER ADCHARMONY ENVIRONMENTA10 Thunder ADC supports multi-tenantenvironments with application delivery partitions(ADP). Configure more than 1,000 virtual ADCson a single appliance that also enables Layer 3virtualization. Each partition may be configuredfor a unique set of policies and offers sufficientresource isolation for most application-orienteduse cases.4
FEATURESAPPLICATION DELIVERY & PERFORMANCEADVANCEDGLOBALThunder ADC is a full-proxy, load-Extend load balancing on a global basis.balancing and content-switching solution.Thunder ADCs, distributed worldwide,SERVER LOAD BALANCINGSERVER LOAD BALANCING (GSLB)With aFleX scripting, deep packetcontinuously update each other on theirinspection, comprehensive load-balancingrespective individual nodes for optimalalgorithms and persistence support,site selection and status to ensureThunder ADC enables application layerdisaster recovery. visibility to optimally route inboundrequests.Geographic and network proximity policymetrics optimize multi-site deployments.Customizable server health checksDNS Proxy or DNS Server methods furtherensure only fully functional servers areimprove implementation flexibility andused to service client needs. The serverdeployment simplicity.best able to respond is selected and totalservers required can be substantiallyreduced for lower TCO.BROADACCELERATION METHODOLOGIESLeverage numerous techniques toovercome inherent distance-relatedlatency, inefficient internet protocolsand application design limitations.Acceleration methods, including TCPconnection multiplexing, RAM caching,GZIP compression and SSL-offload,expedite content transfer. The solutionsupports TCP optimization standards,such as selective acknowledgment,client keep-alive and window scaling, toHIGH-DENSITYAPPLICATION DELIVERY PARTITIONSProvide support for multi-tenantenvironments with applicationdelivery partitions (ADP). They allowthe configuration of more than 1,000partitions on a single Thunder ADCappliance, which enables Layer 3virtualization. Each partition may beconfigured for a unique set of policiesand offers resource isolation for mostapplication-oriented use cases.further speed delivery.5
ULTRA LOWLATENCYFOR FINANCIAL APPLICATIONSThe Thunder ADC family also offerssolutions for Low Latency applications,featuring specialized Thunderappliances, with custom softwareto meet the low latency and jitterrequirements of financial applications.Featuring ultra-low latency hardware,these appliances offer nearinstantaneous execution times andprovide granular program policiesfor efficient packet forwarding, whilealso consolidating multiple networkfunctions and thus reducing hops.APPLICATION SECURITYEXTENSIVEAPPLICATIONHardware-based SSL offload enginesThe integrated application accesssupport advanced cryptographicmanagement (AAM) module optimizesmethods at ultra-high capacity.and enforces authentication andThunder ADC can manage sessionauthorization to applications.CIPHER SUITE SUPPORTsecurity, such as Perfect ForwardSecrecy (PFS), with an advancedcipher suite, including elliptic curvecryptography (ECC).AUTHENTICATION & SSOThe module integrates withauthentication servers, identity datastores, identity providers (IdPs) andapplications to authenticate users andAppliances can process SSLenforce access privileges. Commonencryption and decryption at ratesAAA and single sign-on (SSO) methodsover 50 Gbps — and up to 90,000include LDAP, RADIUS, RSA SecurID,connections per second — when usingTDS SQL, SAML and Kerberos.ECC with 256-bit keys.AAM interfaces to OCSP respondersto validate client certificate status, aswell as to Microsoft Active Directoryfor SharePoint and Outlook WebAccess users.6
ZERO-DAYPOWERFULAPPLICATION PROTECTIONDNSDNS FIREWALLAn ICSA-certified web applicationThunder ADC incorporates afirewall (WAF) guards vulnerablesophisticated DNS application firewallsoftware from dozens of application(DAF) to stop buffer overflows,layer attacks, including the Open Webmalformed requests and head off DNSApplication Security Project (OWASP)amplification-based DDoS attacks.top-10 threats. These attacks includeIt delivers validated DNSSEC pass-cross-site request forgery, SQL injectionthrough support to prevent threats suchand buffer overflows that target codingas DNS cache-poisoning and spoofing.flaws. Integrated into Thunder ADC, theIn addition, the ADC can load-balanceWAF blocks these and other applicationmultiple DNS servers and cache DNSbehavior anomaly attacks, as well asresponses to provide scalability to DNSprevents unauthorized data leakage.servers.SERVERTHREATINTELLIGENCEDDOS PROTECTIONDDoS protection is standard in allappliances. With FTA-based hardwaremodels, using field-programmablegate arrays (FPGA), protection maybe enabled for high-volume attacksagainst application servers. FPGAsmitigate common volumetric attacks,while general-purpose CPUs mitigatemore sophisticated low-and-slow andapplication attacks, such as Slowlorisand HTTP floods. Additional methodsto limit unwarranted data floods includeconnection rate limiting and bandwidthSERVICEAn optional subscription, the A10 ThreatIntelligence Service provides data frommore than three dozen security sources,including DShield and Shadowserver.The service enables Thunder ADC toinstantly recognize and block traffic toand from known malicious IP addresssources. The service protects networksfrom future threats, blocks threatssuch as spam and phishing, and greatlyincreases Thunder ADC efficiency.rate limiting per source IP.CERTIFIED BYICSA LABSThe integrated Thunder ADC web application firewall has achieved WAFcertification from ICSA Labs. ICSA Labs testing and certification ensuresthat Thunder ADC performs as intended to secure application services fromexploitation and attack.SEE ALL CERTIFICATIONS7
APPLICATION VISIBILITY & MANAGEMENTRICHANALYTICS AND VISIBILITYWhen deployed in conjunction with the FULLYPROGRAMMABLEThe Thunder ADC platform leveragesA10 Harmony Controller, Thunder ADCA10’s REST-based aXAPIs to configureprovides access to dozens of aggregateall features with 100 percent APIor per-request metrics in real-time.coverage. This interface is used toThese include end-to-end responseintegrate with third-party or customtimes, latency, popular URLs, and errormanagement consoles, such as SDNand health indicators. This data isplatforms (e.g., Cisco ACI and VMware)analyzed to provide per-app reportingand cloud orchestration systems (e.g.,and alerts on availability, security andOpenStack and Microsoft SCVMM). Aperformance.software plug-in is available for privateDetailed Layer 4 based analyticsinformation is separately provided byclouds leveraging vRealize Orchestratorfrom VMware.individual clients, ADC (single applianceor as a cluster) and per server.SMARTCOMPREHENSIVETo optimally deliver server content, theThunder ADC is supported by the A10ADC front-ending the application shouldHarmony Controller; this controller is abe ‘tuned’ with configurations that bestcentralized management platform thatfit the needs of that application; thatcoordinates and distributes applicationtakes time and iterative efforts to getcentric service policies and configurationthe ideal settings.files to hundreds of Thunder appliancesTEMPLATESThunder ADCs bypass this step byproviding select business-criticalapplications — from Microsoft (e.g.,Exchange, Skype for Business andSharePoint), Oracle and many more— with predefined templates thatinclude the key policy settings on a perapplication basis for rapid deployment.MANAGEMENT TOOLSand device cluster infrastructuresacross multi-cloud environments.Administrators can automaticallydiscover, track and monitor eachappliance including key operationalmetrics such as CPU and disk usage aswell as device partitions and users. Thecontroller performs configuration backupand restore operations and schedulessoftware upgrades.8
APPLICATION SERVER VIEWThunder ADC with Harmony Controller providesdetailed analytics from the server perspective.Including server health, response times, numberof new and existing connections. Multiple filteringoptions customize the reports.THUNDER ADC CLUSTER VIEWGranular real-time reports on the health of theThunder ADC may be generated. Informationavailable includes CPU and memory utilizationrates, bandwidth utilized and total clusterconnections.CLIENT VIEWThe experience from the end-user perspectivemay be measured and reported. Includes endto-end latency, app server latency and clientperformance.RESPONSE TIME DETAILSThis information is useful for troubleshootingdelayed application response times. The screendetails the time taken in various portions ofa HTTP transaction. These graphs also helpdistinguish application vs. Infrastructure relatedissues.9
THUNDER ADC PHYSICAL APPLIANCETHUNDERTHUNDER5 Gbps / 5 Gbps5 Gbps / 5 Gbps10 Gbps / 7.5 Gbps10 Gbps / 10 Gbps20 Gbps / 20 Gbps200K200K240k450K450kLayer 4 HTTP RPS1 Million1 Million1 Million2 Million2 MillionLayer 4 Concurrent Sessions16 Million16 Million16 Million32 Million32 Million50K50K75K150K150K1 Gbps1 Gbps1 Gbps7 Gbps7 GbpsRSA (1K): 2KRSA (2K): 500RSA (1K): 1.9KRSA (2K): 400RSA (1K): 2KRSA (2K): 1kRSA (1K): 25KRSA (2K): 7KRSA: 16KECDSA: 8K1.7 Million2 Million2 Million4 Million4 Million32323232321 GE Copper565651 GE Fiber (SFP)020201/10 GE Fiber (SFP )22424840 ADCPERFORMANCEApplication Throughput (L4/L7)Layer 4 CPSLayer 7 CPS (1:1)*1SSL Bulk Throughput*2SSL CPS*2DDoS Protection (SYN Flood) SYN/secApplication Delivery Partitions (ADP)930 ADCTHUNDERTHUNDER940 ADC1030S ADCTHUNDER1040 ADCNETWORK INTERFACEManagement Ports1 x Ethernet Mgmt port, 1 x RJ-45 console portHARDWARE SPECIFICATIONSIntelCommunicationsProcessorIntel Xeon2-coreIntelCommunicationsProcessorIntel Xeon4-coreIntelCommunicationsProcessorMemory (ECC RAM)8 GB8 GB8 GB8 GB8GB / reSoftwareSoftwareProcessorHardware AccelerationSSL Security Processor ('S' Models)Dimensions (inches)Rack Units (Mountable)Unit WeightPower Supply (DC option available)Power Consumption (Typical/Max)*3Heat in BTU/hour (Typical/Max)Cooling Fan*3N/AN/AN/AYesYes1.75 (H) x 17 (W) x12 (D)1.75 (H) x 17.5 (W) x17.45 (D)1.75 (H) x 17.5 (W) x17.25 (D)1.75 (H) x 17.5 (W) x17.45 (D)1.75 (H) x 17.5 (W) x17.25 (D)1U1U1U1U1U8.8 lbs17.8 lbs19.9 lbs (RPS)14 lbs16 lbs (RPS)18.0 lbs20.1 lbs (RPS)15 lbs17 lbs (RPS)Single 150W (AC only)Single 600W*6Single 750W*6Single 600W*6Single 750W*6100 - 240 VAC 50-60Hz57W / 75W66W / 76W60W / 80W98W / 108W80W / 110W195 / 256225 / 259205 / 273334 / 369273 / 376Single Fixed FanHot Swap Smart FansRemovable FansHot Swap Smart FansRemovable FansFCC Class A, UL, CE,TUV, CB, VCCI, CCC,BSMI, RCM RoHSFCC Class A, UL, CE,TUV, CB, VCCI, CCC,MSIP, BSMI, RCM, FAC RoHSOperating RangesRegulatory CertificationsStandard Warranty80 Plus Platinum efficiency, 100 - 240 VAC, 50 – 60 HzTemperature 0 - 40 C Humidity 5% - 95%FCC Class A, UL, CE,GS, CB, VCCI, CCC,BSMI , RCM RoHSFCC Class A, UL, CE,TUV, CB, VCCI, CCC,KCC, BSMI, RCM, FAC RoHS, CC EAL2 FCC Class A, UL, CE,GS, CB, VCCI, CCC,BSMI , RCM RoHS90-Day Hardware and Software10
Thunder ADC Physical Appliance Specifications (Cont.)THUNDER3030S ADCPERFORMANCEApplication Throughput (L4/L7)Layer 4 CPSTHUNDERTHUNDERTHUNDERTHUNDER3040 ADC3230 ADC3430 ADC4430 ADC30 Gbps / 30 Gbps30 Gbps / 30 Gbps30 Gbps / 30 Gbps42 Gbps / 42 Gbps38 Gbps / 38 Gbps750K750K1.5 Million2.5 Million2.7 MillionLayer 4 HTTP RPS3 Million3 Million7.5 Million12 Million12 MillionLayer 4 Concurrent Sessions64 Million64 Million64 Million128 Million128 Million250K280K420K620K620K11 Gbps11 Gbps14 Gbps20 Gbps20 GbpsRSA (1K): 47KRSA (2K): 14KRSA: 30KECDSA: 20KRSA: 40KECDSA: 26KRSA: 45KECDSA: 32KRSA (1K): 86KRSA (2K): 84K7.5 Million8 Million55 Million55 Million55 Million6464641271271 GE Copper660001 GE Fiber (SFP)22440Layer 7 CPS (1:1)*1SSL Bulk Throughput*2SSL CPS*2DDoS Protection (SYN Flood) SYN/secApplication Delivery Partitions (ADP)NETWORK INTERFACE1/10 GE Fiber (SFP )44441640 GE Fiber (QSFP )00004Management Ports1 x Ethernet Mgmt port, 1 x RJ-45 console port, 1 x Lights Out ManagementHARDWARE SPECIFICATIONSProcessorMemory (ECC RAM)StorageHardware AccelerationSSL Security Processor ('S' Models)Dimensions (inches)Rack Units (Mountable)Unit WeightPower Supply (DC option available)Power Consumption (Typical/Max)*3Heat in BTU/hour (Typical/Max)*3Intel Xeon4-coreIntel Xeon4-coreIntel Xeon4-coreIntel Xeon6-coreIntel Xeon6-core16 GB16 GB16 GB32 GB32 sYesYesYesYes1.75 (H) x 17.5 (W) x17.45 (D)1.75 (H) x 17.5 (W) x17.45 (D)1.75 (H) x 17.5 (W) x17.15 (D)1.75 (H) x 17.5 (W) x17.15 (D)1.75 (H) x 17 (W) x24.6 (D)1U1U1U1U1U20.1 lbs20.6 lbs23 lbs23 lbs25.2 lbsDual 600W RPSDual 600W RPSDual 600W RPSDual 600W RPSDual 600W RPS131W / 139W180W / 240W190W / 240W210W / 260W266W / 319W447 / 474615 / 819648 / 819717 / 887908 / 1,08880 Plus Platinum efficiency, 100 - 240 VAC, 50 – 60 HzCooling FanHot Swap Smart FansOperating RangesRegulatory CertificationsStandard WarrantyTemperature 0 - 40 C Humidity 5% - 95%FCC Class A, UL, CE,TUV, CB, VCCI, CCC,KCC, BSMI, RCM, EAC,FAC RoHS, CC EAL2 ,FIPS 140-2 *5FCC Class A, UL, CE,CB, GS, VCCI, CCC, KCC,BSMI, RCM RoHSFCC Class A, UL, CE,GS, CB, VCCI, CCC,KCC, BSMI, RCM, NEBS RoHSFCC Class A, UL, CE,GS, CB, VCCI, CCC,KCC, BSMI, RCM, NEBS RoHSFCC Class A, UL, CE,TUV, CB, VCCI, CCC,KCC, BSMI, RCM, NEBS RoHS, CC EAL2 90-Day Hardware and Software11
Thunder ADC Physical Appliance Specifications (Cont.)THUNDER4440 ADCPERFORMANCEApplication Throughput (L4/L7)Layer 4 CPSTHUNDERTHUNDERTHUNDERTHUNDER5330 ADC5430-11ADC5440 ADC5630 ADC80 Gbps / 80 Gbps78 Gbps / 78 Gbps79 Gbps / 78 Gbps100 Gbps / 100 Gbps79 Gbps / 78 Gbps2.9 Million3.1 Million3.7 Million4 Million6 MillionLayer 4 HTTP RPS15 Million15 Million20 Million22 Million32.5 MillionLayer 4 Concurrent Sessions128 Million128 Million256 Million256 Million256 Million750K770K790K950K1.5 Million25 Gbps30 Gbps30 Gbps45 Gbps45 GbpsSSL CPSRSA: 70KECDSA: 42KRSA: 70KECDSA: 50KRSA (1K): 111KRSA (2K): 110KRSA: 100KECDSA: 60KRSA (1K): 180KRSA (2K): 174KDDoS Protection (SYN Flood) SYN/sec166 Million112 Million112 Million166 Million100 Million1271271,0231,0231,0231 GE Fiber (SFP)000041/10 GE Fiber (SFP )24816242440 GE Fiber (QSFP )40444Layer 7 CPS (1:1)*1SSL Bulk Throughput*2*2Application Delivery Partitions (ADP)NETWORK INTERFACEManagement Ports1 x Ethernet Mgmt port, 1 x RJ-45 console port, 1 x Lights Out ManagementHARDWARE SPECIFICATIONSProcessorMemory (ECC RAM)StorageHardware AccelerationIntel Xeon6-coreIntel Xeon10-coreIntel Xeon10-coreIntel Xeon12-core2 x Intel Xeon8-core32 GB32 GB64 GB64 GB128 GBSSDSSDSSDSSDSSD2 x FTA-4FTA-42 x FTA-32 x FTA-44 x FTA-2SSL Security Processor ('S' Models)YesYesYesYesYesHardware Security Module (HSM)N/AN/AN/AYesN/A1.75 (H) x 17.5 (W) x30 (D)1.75 (H) x 17.5 (W) x17.15 (D)1.75 (H) x 17 (W) x24.6 (D)1.75 (H) x 17.5 (W) x30 (D)5.3 (H) x 16.9 (W) x28 (D)1U1U1U1U3U32.5 lbs23 lbs25.6 lbs32.5 lbs72 lbs / 76.5 lbs*4Dual 1100W RPSDual 600W RPSDual 600W RPSDual 1100W RPS2 2 1100W RPSPower Consumption (Typical/Max)*3360W / 445W210W / 260W288W / 345W360W / 445W780W / 890WHeat in BTU/hour (Typical/Max)1,229 / 1,519717 / 887983 / 1,1781,229 / 1,5192,661 / 3,037Dimensions (inches)Rack Units (Mountable)Unit WeightPower Supply (DC option available)*380 Plus Platinum efficiency, 100 - 240 VAC, 50 – 60 HzCooling FanHot Swap Smart FansOperating RangesRegulatory CertificationsStandard WarrantyTemperature 0 - 40 C Humidity 5% - 95%FCC Class A, UL, CE,GS, CB, VCCI, CCC, KCC,BSMI, RCM RoHS,FIPS 140-2 *5FCC Class A, UL, CE,GS, CB, VCCI, CCC,BSMI, RCM, NEBS RoHSFCC Class A, UL, CE,TUV, CB, VCCI, CCC,KCC, BSMI, RCM RoHSFCC Class A, UL, CE,GS, CB, VCCI, CCC,BSMI, RCM RoHSFCC Class A, UL, CE,TUV, CB, VCCI, KCC ,EAC, FAC RoHS,CC EAL2 90-Day Hardware and Software12
Thunder ADC Physical Appliance Specifications (Cont.)THUNDERTHUNDER5840 ADCPERFORMANCEApplication Throughput (L4/L7)5840-11ADCTHUNDERTHUNDER6440 ADC6430 ADC115 Gbps / 113 Gbps115 Gbps / 113 Gbps150 Gbps / 145 Gbps160 Gbps / 150 GbpsLayer 4 CPS6.2 Million6.2 Million5.3 Million5.5 MillionLayer 4 HTTP RPS31 Million31 Million31 Million31 MillionLayer 4 Concurrent Sessions256 Million256 Million256 Million256 MillionLayer 7 CPS (1:1)1.5 Million1.5 Million1.35 Million1.4 Million*1SSL Bulk Throughput55 Gbps55 Gbps46 Gbps60 GbpsSSL CPS*2RSA: 150KECDSA: 90KRSA: 150KECDSA: 90KRSA (1K): 134KRSA (2K): 130KRSA (1K): 180KRSA (2K): 180KDDoS Protection (SYN Flood) SYN/sec166 Million166 Million223 Million332 Million1,0231,0231,0231,0231/10 GE Fiber (SFP )2448164840 GE Fiber (QSFP )4044100 GE Fiber04 (QSFP28)00*2Application Delivery Partitions(ADP) L3VNETWORK INTERFACEManagement Ports1 x Ethernet Mgmt port, 1 x RJ-45 console port, 1 x Lights Out ManagementHARDWARE SPECIFICATIONSProcessorMemory (ECC RAM)StorageHardware AccelerationIntel Xeon 18-coreIntel Xeon 18-core2 x Intel Xeon 8-core2 x Intel Xeon 10-core64 GB64 GB /128 GB*4128 GB128 GBSSDSSDSSDSSD2 x FTA-42 x FTA-44 x FTA-33 x FTA-4SSL Security Processor ('S' Models)YesYesN/AYesHardware Security Module (HSM)YesN/AN/AN/A1.75 (H) x 17.5 (W) x 30 (D)1.75 (H) x 17.5 (W) x 30 (D)1.75 (H) x 17.5 (W) x 30 (D)1.75 (H) x 17.5 (W) x 30 (D)Dimensions (inches)Rack Units (Mountable)Unit WeightPower Supply (DC option available)1U1U1U1U32.5 lbs34.3 lbs39 lbs36 lbsDual 1100W RPSDual 1500W RPSDual 1100W RPSDual 1100W RPS80 Plus Platinum efficiency, 100 - 240 VAC, 50 – 60 HzPower Consumption (Typical/Max)*3375W / 470W550W / 760W590W / 680W480W / 550WHeat in BTU/hour (Typical/Max)*31,280 / 1,6041,877 /2,5942,013 / 2,3201,638 / 1,877Cooling FanHot Swap Smart FansOperating RangesRegulatory CertificationsStandard WarrantyTemperature 0 - 40 C Humidity 5% - 95%FCC Class A, UL, CE, GS, CB,VCCI, CCC, BSMI, RCM RoHSFCC Class A, UL, CE, GS,CB, VCCI, CCC , BSMI, RCM RoHS FCC Class A, UL, CE, TUV, CB,VCCI, CCC, KCC, BSMI, RCM,EAC, FAC, NEBS RoHS,CC EAL2 FCC Class A, UL, CE, GS, CB,VCCI, CCC, BSMI, RCM RoHS90-Day Hardware and SoftwareThe specifications, performance numbers are subject to change without notice, and may vary depending on configuration and environmental conditions.As for network interface, it’s highly recommended to use A10 Networks qualified optics/transceivers to ensure network reliability and stability.*1 Layer 7 connections per second - measures number of new HTTP connections (1 HTTP request per TCP connection, without TCP connection reuse ) within 1 second *2 Testedwith maximum SSL option. Products showing both RSA and ECDSA are tested using 3rd generation SSL card(s). Cipher “TLS RSA WITH AES 128 CBC SHA256” with RSA 2K keys,unless noted, are used for RSA cases, “TLS ECDHE ECDSA WITH AES 128 CBC SHA256” with EC P-256 are used for PFS cases. *3 With base model. Number varies by SSL model *4 With maximum SSL option *5 For FIPS 140-2 Level 2 validated, FIPS models must be purchased *6 Optional RPS available Certification in process13
Thunder ADC Physical Appliance Specifications (Cont.)THUNDERTHUNDER6630 ADCPERFORMANCEApplication Throughput (L4/L7)THUNDER7440 ADC7440-11ADC150 Gbps / 145 Gbps220 Gbps / 200 Gbps220 Gbps / 200 GbpsLayer 4 CPS7.1 Million10.5 Million10.5 MillionLayer 4 HTTP RPS38 Million44 Million44 MillionLayer 4 Concurrent Sessions256 Million256 Million256 MillionLayer 7 CPS (1:1)1.6 Million2.8 Million2.8 Million*1SSL Bulk Throughput64 Gbps75 Gbps75 GbpsRSA (1K): 190KRSA (2K): 174KRSA (1K): 200KRSA (2K): 200KRSA (1K): 200KRSA (2K): 200K223 Million332 Million332 Million1,0231,0231,0231/10 GE Fiber (SFP )12484840 GE Fiber (QSFP )040100 GE Fiber (CXP)404 (QSFP28)*2SSL CPS*2DDoS Protection (SYN Flood) SYN/secApplication Delivery Partitions(ADP) L3VNETWORK INTERFACEManagement Ports1 x Ethernet Mgmt port, 1 x RJ-45 console port, 1 x Lights Out ManagementHARDWARE SPECIFICATIONSProcessorMemory (ECC RAM)StorageHardware Acceleration2 x Intel Xeon12-core2 x Intel Xeon18-core2 x Intel Xeon 18-core128 GB128 GB128 GBSSDSSDSSD4 x FTA-33 x FTA-43 x FTA-4SSL Security Processor ('S' Models)YesYesYesHardware Security Module (HSM)YesN/AN/A5.3 (H) x 16.9 (W) x 28 (D)1.75 (H) x 17.5 (W) x 30 (D)1.75 (H) x 17.5 (W) x 30 (D)Dimensions (inches)Rack Units (Mountable)Unit WeightPower Supply (DC option available)Power Consumption (Typical/Max)Heat in BTU/hour (Typical/Max)*3*33U1U1U74.5 lbs / 78 lbs*436 lbs37 lbs2 2 1100W RPSDual 1100W RPSDual 1500W RPS80 Plus Platinum efficiency, 100 - 240 VAC, 50 – 60 Hz995W / 1,150W690W / 820W820W / 950W3,395 / 3,9242,355 / 2,7982,798 / 3,242Cooling FanHot Swap Smart FansOperating RangesRegulatory CertificationsStandard WarrantyTemperature 0 - 40 C Humidity 5% - 95%FCC Class A, UL, CE, TUV, CB, VCCI,KCC , EAC, FAC RoHS, CC EAL2 , FIPS140-2 *5FCC Class A, UL, CE, GS, CB, VCCI, CCC,KCC, BSMI, RCM RoHS, FIPS 140-2 *5FCC Class A, UL, CE, GS, CB, VCCI, CCC ,KCC , BSMI, RCM RoHS 90-Day Hardware and SoftwareThe specifications, performance numbers are subject to change without notice, and may vary depending on configuration and environmental conditions.As for network interface, it’s highly recommended to use A10 Networks qualified optics/transceivers to ensure network reliability and stability.*1 Layer 7 connections per second - measures number of new HTTP connections (1 HTTP request per TCP connection, without TCP connection reuse ) within 1 second *2 Testedwith maximum SSL option. Products showing both RSA and ECDSA are tested using 3rd generation SSL card(s). Cipher “TLS RSA WITH AES 128 CBC SHA256” with RSA 2K keys,unless noted, are used for RSA cases, “TLS ECDHE ECDSA WITH AES 128 CBC SHA256” with EC P-256 are used for PFS cases. *3 With base model. Number varies by SSL model *4 With maximum SSL option *5 For FIPS 140-2 Level 2 validated, FIPS models must be purchased *6 Optional RPS available Certification in process14
THUNDER ADC SPE PHYSICAL APPLIANCETHUNDERTHUNDER4435 SPEPERFORMANCEApplication Throughput (L4/L7)5435 SPETHUNDERTHUNDER6435 SPE6635 SPE38 Gbps / 38 Gbps78 Gbps / 77 Gbps153 Gbps / 150 Gbps150 Gbps / 145 GbpsLayer 4 CPS3.1 Million3.7 Million7.1 Million7.1 MillionLayer 4 HTTP RPS12 Million20 Million38 Million38 MillionLayer 4 Concurrent Sessions128 Million256 Million256 Million256 Million660K790K1.6 Million1.6 Million26 Gbps37 Gbps60 Gbps64 Gbps65K65K135K174K55 Million112 Million223 Million223 Million1,0231,0231,0231,0231/10 GE Fiber (SFP )1616161240 GE Fiber (QSFP )0440100 GE Fiber (CXP)0004Layer 7 CPS (1:1)*1SSL Bulk Throughput (RSA 2K keys)SSL CPS (RSA 2K keys)*2*2DDoS Protection (SYN Flood) SYN/secApplication Delivery Partitions (ADP)NETWORK INTERFACEManagement Ports1 x Ethernet Mgmt port, 1 x RJ-45 console port, 1 x Lights Out ManagementHARDWARE SPECIFICATIONSProcessor (Intel Xeon)Memory (ECC RAM)StorageHardware AccelerationSSL Security Processor ('S' Models)Dimensions (inches)Rack Units (Mountable)Unit WeightPower Supply (DC option available)10-core10-core2 x 12-core2 x 12-core64 GB64 GB128 GB128 GBSSDSSDSSDSSDFTA-3, SPE2 x FTA-3, SPE4 x FTA-3, SPE4 x FTA-3, SPEN/AN/AYesYes1.75 (H
APPLICATION DELIVERY CONTROLLER & LOAD BALANCER AGILE APPLICATION DELIVERY & SECURITY From SMBs and large enterprises to service providers and cloud operators, organizations are hosting a large and rapidly growing set of mission-critical applications. A purpose-built solution, A10 Thunder ADC ensures these applications are highly
