LoadMaster Hardware - Cdn.cnetcontent

Transcription

LoadMaster HardwareData SheetScalable high-performance application deliveryKEMP LoadMaster hardware Application Delivery Controllers (ADC) offer the scalability, featuredepth and security required to enable resilient delivery of a wide range of application workloadsfor organizations of all sizes and capabilities. LoadMaster simplifies application delivery with easymanagement via web UI, API and KEMP 360 Central with a compelling TCO and outstandingcustomer support.The Benefits of KEMP LoadMasterResilientLoadMaster can enhance application availability and resilience with the option for HighlyAvailable (HA) paring of appliances and geographic server load balancing (GSLB) removing singlepoints of failure in the data center and also across data centers. Application server health checksenable redirection of traffic to healthy servers and the optional KEMP 360 Vision service provides24/7 proactive support to ensure continuous application availability.SecureAs the access point for applications, LoadMaster provides authentication and attack mitigationservices to prevent malicious and unauthorized access to application resources. The EdgeSecurity Pack (ESP) enables pre‐authentication of clients (LDAP, Active Directory, RADIUS andSAML) while the Web Application Firewall (WAF) offers continuous application level protectionthrough daily rule updates.Easily ManagedLoadMaster appliances can be managed via the intuitive web UI, via API (PowerShell/RestFUL) orvia KEMP 360 Central. Application templates simplify deployment and optimization, while theAPI provides an easy way to automate configuration and management tasks whether throughDevOPS toolsets or operational frameworks.ScalableAs application delivery demands grow, LoadMaster can scale by clustering multiple appliancestogether into a single ADC entity. As well as scaling to meet increasing capacity requirements,clustering also provides resilience as the failure of a cluster member is gracefully handled withremaining members continuing to provide service.Low Cost of OwnershipLoadMaster delivers performance and functionality at a compelling price point when measuredagainst the key metrics of SSL transactions per second, application throughput and activeconnections. Coupled with the low operational overheads delivered by features such asapplication templates and our world class customer support services, organizations can achievesignificant TCO reductions on application delivery.Fully FeaturedLoadMaster includes a comprehensive set of features to enable deployment of applicationdelivery and interfaces and API to integrate with existing authentication, logging, managementand provisioning systems. 2017 KEMP Technologies, all rights reserved. KEMP , KEMP Technologies , LoadMaster , and the K logo are trademarks of KEMP Technologies, Inc.V3.0 Nov 2018

LoadMaster Hardware DatasheetSupport SubscriptionsLoadMaster support subscriptions offer flexibility, simplicity and value to meet your application delivery requirements andchallenges. Support subscriptions are annual and can be upgraded and downgraded as application delivery demandschange for maximum flexibility. The tiers are mapped to common customer challenges and requirements, simplifying thetask of selecting the appropriate feature set and support levels. This also offers additional value of up to 40% whencompared to individually selecting features.LoadMaster Support Subscription TiersEach support subscription tier adds to the features and services delivered by lower tiers as follows.StandardEnterpriseEnterprise PlusIncl. Standard FeaturesIncl. Enterprise Features10x5 Customer Support24x7 Customer SupportWAF with rule updatesSoftware UpdatesEdge Security Pack (ESP)GSLB with IP ReputationSecurity PatchesIntrusion PreventionFloating LicenseL4‐L7 Application DeliveryKEMP 360 VisionKEMP 360 CentralFeaturesL4‐L7 Application DeliveryGeneralSession PersistenceSource IP (L4)TLS (SSL) SessionID (L4)Server Load Balancing (SLB) for TCP/UDP basedprotocolsTLS (SSL) OffloadHTTP/HTTPS Browser‐session (L7)Layer 7 Content SwitchingRDP Login ID (L7)Transparent caching for HTTP/HTTPSPort Following for mixed HTTP/HTTPS sessionsCompression of static and dynamic HTTP/HTTPScontentHTTP/2 SupportSession reconnection for Microsoft RDSUp to 1000 Virtual and 1000 Real ServersHTTP/HTTPS WebClient‐session (L7)Scheduling and Balancing MethodsSDN AdaptiveNAT‐based forwardingRound RobinSupport for Direct Server Return (DSR)configurationsConfigurable S‐NAT supportWeighted Round RobinVLAN Trunking (802.1Q)Link interface bonding (802.3ad)IPv6 support for addressing and featuresIPv6 ‐ IPv4 bidirectional conversionHealth CheckingAggregated health checksLeast ConnectionWeighted Least ConnectionAgent‐based AdaptiveChained Failover (Fixed Weighting)Source‐IP HashLayer 7 Content SwitchingGlobal Server Load Balancing (GSLB)AD Group based traffic steeringICMP health checkingLayer 7 checking against any target server portActive/Hot Standby configurations for HighAvailabilityStateful FailoverSSL/TLS FeaturesConfigurable TLS (1.0, 1.1, 1.2) and SSL (2.0, 3.0)Support for EV (Extended Validation) certificatesOCSP certificate validationScale‐out ClusteringServer Name Identification (SNI) supportAggregated health checksSupport for up to 1,000 TLS (SSL) certificatesAutomated TLS (SSL) certificate chaining 2017 KEMP Technologies, all rights reserved. KEMP , KEMP Technologies , LoadMaster , and the K logo are trademarks of KEMP Technologies, Inc.V3.0 Nov 2018

LoadMaster Hardware DatasheetCertificate Signing Request (CSR) generationFIPS 140‐2 Level 1 (Level 2 on FIPS models)STARTTLS mail protocols (POP3, SMTP, IMAP)AdministrationChange auditingKEMP 360 CentralLoadMaster Configuration ManagementAutomated LoadMaster backupsCentralized & scheduled firmware updatesLoadMaster logfile consolidationWeb User Interface (WUI)Performance ManagementSSH & physical console3rd party ADC supportRESTful and PowerShell APIsVMware vRealize OrchestratorKEMP 360 VisionContext based help (WUI)24/7 Automated issue escalation serviceReal time display of performance and availabilityProactive issue managementApplication templatesIntegrated with KEMP Support ticketingRemote syslogd supportAutomated configuration backupWeb Application Firewall (WAF)Selective restore of configurationConnection drainingComprehensive logging and reportingSNMP supportDiagnostic shell with in‐line tcpdumpSecurityPermit /Deny Access Control ListsIP address filteringReal‐time application threat mitigationDaily rule updatesThreats Mitigated Cookie tampering Cross site request forgery Cross site scripting Data loss prevention SQL InjectionPCI‐DSS Section 6.6 complianceIPsec Tunnel supportDDoS mitigation, including L7 rate based attacksIPSec VPN to Azure, AWS and public cloudsGlobal Server Load Balancing (GSLB)Scheduling and BalancingAuthenticated NTPRound RobinEdge Security PackWeighted Round RobinMicrosoft TMG replacementChained Failover (Fixed in authentication & SSOReal Server LoadX.509 client certificate authenticationLocation BasedCustom login formsTwo factor authenticationSAML, Active Directory, RADIUS & LDAPForms to Forms based authenticationIntrusion PreventionSnort Compatible IPSPermit/Deny IP by addressAutomated IP reputation updates for GSLBSecurityBlack List (Access Control List)IP reputation filtering with automatic updatesDDoS mitigationHealth Checking & FailoverICMP health checking of server farm machinesLayer 4 TCP checkingAutomatic reconfiguration for defective realserverActive/Active High Availability 2017 KEMP Technologies, all rights reserved. KEMP , KEMP Technologies , LoadMaster , and the K logo are trademarks of KEMP Technologies, Inc.V3.0 Nov 2018

LoadMaster Hardware DatasheetSpecificationsSupport Subscription Tiers SupportedPerformanceApplication throughput (Layer 4)Application throughput (Layer 7)SSL TPS (2K Keys)Concurrent Layer 4 ConnectionsConcurrent Layer 7 ConnectionsLayer 7 HTTP requests/secHardware PlatformCPUMemory (RAM Size)StorageHardware SSL AccelerationGigabit Ethernet Ports10 Gigabit Ports (SFP )VGA PortsConsole PortsRack SizeDimensionsWeightStorage TemperatureOperating TemperatureStorage HumidityOperating Relative HumidityMax Altitude in Operational ModeMax Altitude in Non‐Operational ModeInput Voltage and Frequency RangesRedundant Power SupplyMax power supplyTotal Power Consumption (W)Total Amp Drawn (A)Power DissipationHeat Output (BTU)Acoustic Noise (dB)Certification & ComplianceFIPSULIECCEFCCVCCIRoHS Directive Gbps1,7008,600,000125,00069,00015.8 Gbps15 Gbps12,00035,000,000262,500175,000Intel Pentium G440 @3.3GHz8GB500GB HDDNo8N/A11 RJ451U438 x 300 x 44mm (17.2 x 11.81 x 1.7 in )17.63lbs /8Kg‐4 to 167 F (‐20 to 75 C)32 to 104 F (0 to 40 C)10% to 90% non‐condensing10% to 90% non‐condensingNot over 5000 metersNot over 5000 meters100‐240VAC, 50‐60Hz, 6‐3ANo300W125.4W14.55A125.4W427.6 BTU59.4Intel Xeon E3‐1275 @ 3.8GHz32GB2 x 500GB HDD (RAID 1)Cavium Nitrox III CNN3530‐500‐NHB‐2.0‐G16411 RJ451U438 x 470 x 44mm (17.2 x 18.5 x 1.7 in )26.01lbs / 11.8kg‐4 to 167 F (‐20 to 75 C)32 to 104 F (0 to 40 C)10% to 90% non‐condensing10% to 90% non‐condensingNot over 5000mNot over 5000m100‐240VAC, 50‐60Hz, 8‐4A (Per Inlet)Yes2 x 450W165.27W16.37A165.27W563.57 BTU62.7FIPS 140‐2 Level 1 NIST Cert 2473UL 60950‐1, 2nd Edition, 2011‐12‐19CAN/CSA‐C22.2 No. 60950‐1‐07,Amd 1:2011,Amd 2:2014IEC 60950‐1(ed.2), IEC 60950‐1(ed.2);am1, IEC60950‐1(ed.2);am2 EN 60950‐1:2006 /A11:2009 / A1:2010 / A12:2011 / A2:2013 andAS/NZS 60950.1:2015;EN 55032 : 2015 AC:2016‐07 (Class A)EN 55024 : 2010 A1:2015 (Class A)EN 61000‐3‐2 : 2014IEC 61000‐4‐2 : 2008FCC Part 15:2017, Subpart B, Class A CanadaICES‐003 Issue 6(June 2016), Class AVCCI‐CISPR 32:2016YesYesYesFIPS 140‐2 Level 1 NIST Cert 2473UL 60950‐1, 2nd Edition, 2011‐12‐19CAN/CSA‐C22.2 No. 60950‐1‐07,Amd 1:2011,Amd 2:2014IEC 60950‐1(ed.2), IEC 60950‐1(ed.2);am1, IEC60950‐1(ed.2);am2 EN 60950‐1:2006 /A11:2009 / A1:2010 / A12:2011 / A2:2013 andAS/NZS 60950.1:2015;EN 55032 : 2015 AC:2016‐07 (Class A)EN 55024 : 2010 A1:2015 (Class A)EN 61000‐3‐2 : 2014IEC 61000‐4‐2 : 2008FCC Part 15:2017, Subpart B, Class A CanadaICES‐003 Issue 6(June 2016), Class AVCCI‐CISPR 32:2016YesYesYes 2017 KEMP Technologies, all rights reserved. KEMP , KEMP Technologies , LoadMaster , and the K logo are trademarks of KEMP Technologies, Inc.V3.0 Nov 2018

LoadMaster Hardware DatasheetSpecificationsSupport Subscription Tiers SupportedPerformanceApplication throughput (Layer 4)Application throughput (Layer 7)SSL TPS (2K Keys)SSL TPS (1K Keys)Concurrent Layer 4 ConnectionsConcurrent Layer 7 ConnectionsLayer 7 HTTP requests/secHardware PlatformCPUMemory (RAM Size)StorageHardware SSL AccelerationGigabit Ethernet Ports10 Gigabit Ports (SFP )VGA PortsConsole PortsRack SizeDimensions (with Bezel)WeightStorage TemperatureOperating TemperatureStorage HumidityOperating Relative HumidityMax Altitude in Operational ModeMax Altitude in Non‐Operational ModeInput Voltage and Frequency RangesRedundant Power SupplyMax power supplyTotal Power Consumption (W)Total Amp Drawn (A)Power DissipationHeat Output (BTU)Acoustic Noise (dB)Certification & ComplianceFIPSULIECCEFCCVCCIRoHS Directive 2011/65/EUWEEEREACHLM‐8000LM‐8020AllAll21 Gbps20 Gbps16,00025,00075,800,000525,000380,00031.4 Gbps30.0 Gbps30,00046,00075,800,000525,000450,000Intel Xeon, E5‐2640v4 @2.4GHz; 10C/20T64GB1TB HDD1x Cavium CNN3550‐C20‐NHB‐2.0‐G0621 DB9 (male)2U482.4 x 716.0 x 87.3mm (19.0 x 28.2 x 3.4 in)55.12lbs / 25kg‐40 to 149 F (‐40 to 65 C)50 to 95 F (10 to 35 C)5% to 95% non‐condensing10% to 80% non‐condensing10000 feet (3048 meters)39370 feet (12000 meters)200 ‐ 240 VAC; 47‐63HzYes2 x 495W171W13.0 – 6.0 A20 ‐ 25W1908Idle 15, Standby 29, Stressed 312 x Intel Xeon E5‐2687Wv4 @3.0GHz; 12C/24T64GB1TB HDD1x Cavium CNN3550‐C20‐NHB‐2.0‐G0821 (DB9 male)2U482.4 x 716.0 x 87.3mm (19.0 x 28.2 x 3.4 in)55.12lbs / 25kg‐40 to 149 F (‐40 to 65 C)50 to 95 F (10 to 35 C)5% to 95% non‐condensing10% to 80% non‐condensing10000 feet (3048 meters)39370 feet (12000 meters)200 ‐ 240 VAC; 47‐63HzYes2 x 750W468W10.0 A40 ‐ 45W2843Idle 15, Standby 29, Stressed 31FIPS 140‐2 Level 1 NIST Cert 2473UL 60950‐1, 2nd Edition, 2011‐12‐19CSA C22.2 No. 60950‐1‐07, 2nd Ed., 2011‐12IEC 60950‐1:2005 ed2 A1:2009EN 60950‐1:2006 A1:2010 A2:2013 A11:2009 A12:2011EN 55022:2010EN 55024:2010EN 61000‐3‐2:2006 A1:2009 A2:2009EN 61000‐3‐3:2008US CFR Title 47, FCC Part 2, 15ANSI C63.4 2009Canadian ICES‐3(A)/NMB‐3(A), Issue 52013‐04 ClassA / Classification code A1YesYesYesFIPS 140‐2 Level 1NIST Cert 2473UL 60950‐1, 2nd Edition, 2011‐12‐19CSA C22.2 No. 60950‐1‐07, 2nd Ed., 2011‐12IEC 60950‐1:2005 ed2 A1:2009EN 60950‐1:2006 A1:2010 A2:2013 A11:2009 A12:2011EN 55022:2010EN 55024:2010EN 61000‐3‐2:2006 A1:2009 A2:2009EN 61000‐3‐3:2008US CFR Title 47, FCC Part 2, 15ANSI C63.4 2009Canadian ICES‐3(A)/NMB‐3(A), Issue 52013‐04 ClassA / Classification code A1YesYesYes 2017 KEMP Technologies, all rights reserved. KEMP , KEMP Technologies , LoadMaster , and the K logo are trademarks of KEMP Technologies, Inc.V3.0 Nov 2018

LoadMaster Hardware DatasheetSpecificationsSupport Subscription Tiers SupportedPerformanceApplication throughput (Layer 4)Application throughput (Layer 7)SSL TPS (2K Keys)SSL TPS (1K Keys)Concurrent Layer 4 ConnectionsConcurrent Layer 7 ConnectionsLayer 7 HTTP requests/secHardware PlatformCPUMemory (RAM Size)StorageHardware SSL AccelerationGigabit Ethernet Ports10 Gigabit Ports (SFP )VGA PortsConsole PortsRack SizeDimensions (with Bezel)WeightStorage TemperatureOperating TemperatureStorage HumidityOperating Relative HumidityMax Altitude in Operational ModeMax Altitude in Non‐Operational ModeInput Voltage and Frequency RangesRedundant Power SupplyMax power supplyTotal Power Consumption (W)Total Amp Drawn (A)Power DissipationHeat Output (BTU)Acoustic Noise (dB)Certification & ComplianceFIPSULIECCEFCCVCCIRoHS Directive l31.4 Gbps30.0 Gbps30,00046,000300,000,0003,000,000450,00031.4 Gbps30.0 Gbps9,000N/A75,800,000525,000450,0002x Intel Xeon E5‐2687Wv4 @3.0GHz; 12C/24T256GB1TB HDD1x Cavium CNN3550‐C20‐NHB‐2.0‐G0821 (DB9 male)2U482.4 x 716.0 x 87.3mm (19.0 x 28.2 x 3.4 in)55.12lbs / 25kg‐40 to 149 F (‐40 to 65 C)50 to 95 F (10 to 35 C)5% to 95% non‐condensing10% to 80% non‐condensing10000 feet (3048 meters)39370 feet (12000 meters)200 ‐ 240 VAC; 47‐63HzYes2 x 750W470W10.0 A40 ‐ 45W2843Idle 15, Standby 29, Stressed 312x Intel Xeon E5‐2687Wv4 @3.0GHz; 12C/24T64GB1TB HDD1x Cavium CN1620‐NFBE3‐3.0‐FW2.2‐G0821 (DB9 male)2U482.4 x 716.0 x 87.3mm (19.0 x 28.2 x 3.4 in)55.12lbs / 25kg‐40 to 149 F (‐40 to 65 C)50 to 95 F (10 to 35 C)5% to 95% non‐condensing10% to 80% non‐condensing10000 feet (3048 meters)39370 feet (12000 meters)200 ‐ 240 VAC; 47‐63HzYes2 x 750W470W10.0 A40 ‐ 45W2843Idle 15, Standby 29, Stressed 31FIPS 140‐2 Level 1 NIST Cert 2473FIPS 140‐2 Level 2NIST Cert 2316FIPS 140‐2 Level 1NIST Cert 2473UL 60950‐1, 2nd Edition, 2011‐12‐19CSA C22.2 No. 60950‐1‐07, 2nd Ed., 2011‐12IEC 60950‐1:2005 ed2 A1:2009EN 60950‐1:2006 A1:2010 A2:2013 A11:2009 A12:2011EN 55022:2010EN 55024:2010EN 61000‐3‐2:2006 A1:2009 A2:2009EN 61000‐3‐3:2008US CFR Title 47, FCC Part 2, 15ANSI C63.4 2009Canadian ICES‐3(A)/NMB‐3(A), Issue 52013‐04 ClassA / Classification code A1YesYesYesUL 60950‐1, 2nd Edition, 2011‐12‐19CSA C22.2 No. 60950‐1‐07, 2nd Ed., 2011‐12IEC 60950‐1:2005 ed2 A1:2009EN 60950‐1:2006 A1:2010 A2:2013 A11:2009 A12:2011EN 55022:2010EN 55024:2010EN 61000‐3‐2:2006 A1:2009 A2:2009EN 61000‐3‐3:2008US CFR Title 47, FCC Part 2, 15ANSI C63.4 2009Canadian ICES‐3(A)/NMB‐3(A), Issue 52013‐04 ClassA / Classification code A1YesYesYes 2017 KEMP Technologies, all rights reserved. KEMP , KEMP Technologies , LoadMaster , and the K logo are trademarks of KEMP Technologies, Inc.V3.0 Nov 2018

LoadMaster Hardware DatasheetSpecifications – Multi-Tenant PlatformsLM‐X15‐MTSupport Subscription Tiers SupportedPerformanceApplication throughput (Layer 4)Application throughput (Layer 7)SSL TPS (2K Keys)Recommended TenantsMaximum TenantsConcurrent Layer 4 ConnectionsHardware PlatformCPUMemory (RAM Size)StorageHardware SSL AccelerationGigabit Ethernet Ports10 Gigabit Ports (SFP )VGA PortsConsole PortsRack SizeDimensions (with Bezel)WeightStorage TemperatureOperating TemperatureStorage HumidityOperating Relative HumidityMax Altitude in Operational ModeMax Altitude in Non‐Operational ModeInput Voltage and Frequency RangesRedundant Power SupplyMax power supplyTotal Power Consumption (W)Total Amp Drawn (A)Power DissipationHeat Output (BTU)Acoustic Noise (dB)Certification & ComplianceFIPSULIECCEFCCVCCIRoHS Directive 2011/65/EUWEEEREACHAll5.2 Gbps5.0 Gbps4,00041635 MillionIntel Xeon E3‐1275 @ 3.8GHz32GB2 x 500GB HDD (RAID 1)Cavium Nitrox III CNN3530‐500‐NHB‐2.0‐G16411 RJ451U438 x 470 x 44mm (17.2 x 18.5 x 1.7 in )26.01lbs / 11.8kg‐4 to 167 F (‐20 to 75 C)32 to 104 F (0 to 40 C)10% to 90% non‐condensing10% to 90% non‐condensingNot over 5000mNot over 5000m100‐240VAC, 50‐60Hz, 8‐4A (Per Inlet)Yes2 x 450W165.27W16.37A165.27W563.57 BTU62.7FIPS 140‐2 Level 1 NIST Cert 2473UL 60950‐1, 2nd Edition, 2011‐12‐19CAN/CSA‐C22.2 No. 60950‐1‐07,Amd 1:2011,Amd 2:2014IEC 60950‐1(ed.2), IEC 60950‐1(ed.2);am1, IEC60950‐1(ed.2);am2 EN 60950‐1:2006 /A11:2009 / A1:2010 / A12:2011 / A2:2013 andAS/NZS 60950.1:2015;EN 55032 : 2015 AC:2016‐07 (Class A)EN 55024 : 2010 A1:2015 (Class A)EN 61000‐3‐2 : 2014IEC 61000‐4‐2 : 2008FCC Part 15:2017, Subpart B, Class A CanadaICES‐003 Issue 6(June 2016), Class AVCCI‐CISPR 32:2016YesYesYes 2017 KEMP Technologies, all rights reserved. KEMP , KEMP Technologies , LoadMaster , and the K logo are trademarks of KEMP Technologies, Inc.V3.0 Nov 2018

Microsoft TMG replacement Pre‐Authentication Multi‐Domain authentication & SSO X.509 client certificate authentication Custom login forms Two factor authentication SAML, Active Directory, RADIUS & LDAP Forms to Forms based authentication Intrusion Prevention