2011.05.24 F5 Solution Day - F5 with VMware Solution

Preview:

DESCRIPTION

F5 Networks 技術經理 林志斌

Citation preview

F5 VMware Solution OverviewF5 VMware Solution Overview

Alen Lin 林志斌

台灣技術經理

F5 Networks Taiwan

2

Common Practical Issues

H I i i l l ?• How can I provision more seamlessly?

• How can I make application performance better?pp p

• How can I automate more administrative tasks?

• How can I simplify network configuration for VMs?

• How can I take full advantage of VMotion?• How can I take full advantage of VMotion?

• How can I secure my virtual desktop deployments?

• How can I streamline virtual desktop access steps?

3

F5 & VMware

• F5 & VMware are active, global partners

• 4 years of history as managed partnersy y g p

• Primary partnership goals Compatibility / Interoperability Testing Compatibility / Interoperability Testing

New Solution Development

N S l ti D t ti New Solution Documentation

• Across all major F5 and VMware products

• Ongoing cooperative solution development

• Coordinated back-end customer supportpp

4

Recent Highlights

• F5 named Global Technology Innovator Partner of the Year VMware awards highest honor to F5 at 2011 PartnerVMware awards highest honor to F5 at 2011 Partner

Exchange Recognition for deep integration and solution

developmentdevelopment• “VMware-Ready” certifications

LTM Virtual Edition and FirePass VE• Recent Releases

View desktop solution (Edge Gateway and APM for LTM VE))

vCloud Director – joint cloud bursting solution Management Plug-in for vSphere

5

Current Mapping F5/VMware Solutions to Features

Top 6 Most Common Customer Virtualization Project Types

Top 10 F5Solutions for VMware

Application Virtualization

(vSphere)

Server Consolidation

(vSphere)

Data Center Consolidation

(vSphere)

BC/DR (SRM)

Desktop Virtualization

(View)

Cloud (vCD)(vSphere) (vSphere) (vSphere) (View)

Server Offload

Management Integration

Automated Provisioning

SRM Integration

Global Availability

Long Distance vMotion

WAN Optimization

Multi-Tenant ADC

Single Sign-On Single Sign-On

Secure Access

6

Server Virtualization & F5

7

Improving VM DensityImproving VM Density

Offloa

Typical virtualized Typical virtualized

ad

Same serverSame serverypypserver server

SSL Caching Compression

with BIGwith BIG--IPIP

One Connect TCP Optimization

8

Reduced CPU Utilization on SAP Portal

68

Reduced CPU Utilization on SAP Portal

%

3838%

Joint testing conducted at SAP Co-Innovation Lab

9

Automating Network Changes: vCenter

• BIG-IP LTM & VMware vCenter can be integrated for automatic provisioning of local VMs on demand

• Respond to changes in traffic volume• Provision to mean rather than peak• Reduce manual labor

10

F5 Management Plug-In for vSphere

11

F5 Management Plug-In for vSphere

• Free Software Plug-In for VMware vSphere

• Attaches to vCenter Server – modifies vSphere Client GUI

• Operates with both physical and virtual LTM editions

• Streamlines the administrative steps of adding VM nodes from load b l i lbalancing pools

• Automates actions based on pre-defined policies

f• Reduces risk of error

• Reduces manual effort

• Officially supported by F5 (in it’s unmodified state)

12

vSphere Client GUI

13

Plug-In Home Screen

14

Illustration: LTM & vCenter IntegrationIllustration: LTM & vCenter Integration

Web Clients

Frontends Virtualization

Web Clients Demand ↑ ↑ ↑

F tE d

Frontends VirtualizationBIG-IP LTM

F tE d FrontEnd

iControlDetection

Automation

VM Provision nage

men

t

FrontEnd

AppServers VirtualizationBIG-IP LTM

FrontEnd FrontEnd

iControl

vCenter

+

AppSpeed

F5 Provision

VM Provision

D d ↓ ↓ ↓ orin

g &

Ma

App. Server App. Server App. Server

pp p

(optional)Demand ↓ ↓ ↓

Detection Mon

ito

Storage Virtualization

VM Deprovision

Automation

F5 Deprovision

VM Deprovision

15

Automating Network Changes: SRM

• BIG-IP GTM & VMware SRM integrated to enable failover between sites

• GTM makes traffic follow SRM failover• Automatic• Minimize Application Downtime

16

Automating Network Changes:Automating Network Changes:Inter-Data Center Traffic Management

• Serving an application across multiple data centers BIG-IP Global

Traffic Managerp

• Cloud Bursting

A t t d F il

Traffic Manager

• Automated Failover

• Global Traffic OptimizationvCentervCenter--11 vCentervCenter--22

• Intelligent Persistence

• Federated Cloud AuthenticationFederated Cloud Authentication

• Control via – iControl API– Pre-defined global traffic policies– iRules

17

Illustration: GTM & SRM IntegrationIllustration: GTM & SRM Integration

SRM FailoverSRM Failover

Ongoing Replication

Site 1 Site 2

(a) GTM Health checks reveal unhealthy site 1.

(b) GTM self executes a redirection to site 2(b) GTM self-executes a redirection to site 2.

18

Acceleration & Encryption• F5 testing results of common bandwidth/latency combinations• iSessions™ or WAN Optimization Module™• SSL encryption• Acceleration: TCP Optimization Deduplication CompressionAcceleration: TCP Optimization, Deduplication, Compression• Able to successfully VMotion in conditions where previously failed

Bandwidth Link Link Packet Average Average AccelerationBandwidth(Mbps)

Link Latency

(RTT ms)

Link Packet Loss (%)

Average Time without

WOM in Minutes

AverageTime

with WOM in Minutes

Acceleration Factor

45 (T3) 100 0% 13:43 3:35 3.8X

100 25 0% 6:10 1:18 4.7X

155 (OC3) 100 0% 13:25 3:29 3 9X155 (OC3) 100 0% 13:25 3:29 3.9X

622 (OC12) 40 0% 5:57 1:57 3.1X

1000 (Eth t)

20 0% 2:38 0:38 3.5X(Ethernet)

19

LTM-Virtual Edition• Available as a trial developer or production editions• Available as a trial, developer or production editions• Runs on any server compatible with ESX• Managed just like a physical LTMg j y• Same functionality.

ESX v4, ESXi v4

20

Benefits

• BIG-IP LTM provides high availability, security and performance for the app.

• Availability - BIG-IP GTM provides high availability for redirecting traffic in case there’s a problem with the primary siteprimary site.

• Distance - The cloud does not have to be within metro distance latency for this solution to workdistance latency for this solution to work.

• Choice of cloud providers – only requirement here is that they are running vCloud Director or a VMware vCloudthey are running vCloud Director or a VMware vCloudAPI-compatible environment.

f5 /www.f5.com/vmware

22

Server Consolidation

23

Advanced Application Delivery Features

24

Cloud Customers Benefit From F5

25

Architecture

vSphereCli t

Plug-InLinux

vCenterServer

ClientBIG-IP Mgmt Console

BIG-IP Local Traffic Manager

26

Cloud Computing & F5

27

Escaping Boundaries Between DCsp g

New Use Cases for Well Established Functionality

Mi ti• Migration• Disaster avoidance• Capacity expansionCapacity expansion

K T h i l P bl S l dKey Technical Problems Solved:• Performance problems caused by

latency or bandwidth• Dynamic, transparent rerouting of

client traffic from site 1 to site 2• Loss of app sessions or pp

connections when migrating to another location

28

On-Demand Scalability in the Cloud

O D d

Scale‐up by simply plugging in a new blade.  

On‐DemandScaleability

p gg gZero configuration

Internal Cloud External CloudO i S

LAN

te a C oudOn‐Premise Servers

29

Dynamic & Intelligent Traffic Management between Cloud & DC

Dynamically load balance between data centers based on

Remote Users

Dynamically load balance between data centers based on application availability, time of day, etc. Take into account all tiers of the application

Internet or WANEnterprise Manager

Firewalls

BIG‐IPLink Controller

DMZ

BIG‐IP SAM

Internet or WAN

BIG‐IPGlobal Traffic Manager

BIG‐IPLocal Traffic Manager

Enterprise Manager

i llFirePass

BIG‐IPLink Controller

DMZ

D t bBladeServers

Firewalls

BIG‐IP Global Traffic Manager

BIG‐IPLocalTraffic

Manager

FirePass

DatabaseServers

Servers

HQ Site 1 DatabaseServers

BladeServers

30

Secure & Optimized Tunnel between Cloud & DC “BIG-IP iSessions”

Integrated and free with BIG-IP LTM v10

Symmetric Compression• Adaptive• DeflateDeflate• LZO

SSL Encryption

Note: Not available on the 1500 and 3400

31

M lti TMulti-Tenancy“Route Domains”

BIG-IP v10: Managing Networks in the CloudBIG IP v10: Managing Networks in the Cloud

• Host multiple departments/organizations on one BIG-IP without conflicts

• Granular control to provide separate routing domains and overlapping IPsp p g pp g

Department A Department B

32

Solution: Federated Authentication andSolution: Federated Authentication and Authorization• Retain user data

in private cloud• Leverage publicLeverage public

cloud compute resources

Direct auth, session creation in private cloud

Direct (authenticated) app workload to public cloudp

vCentervCenter--11 vCentervCenter--22

DirectoryS iService

33

F5/VMware Cloud Bursting Solution(Hybrid Cloud)

Hybrid Cloud

APP APPAPP

Management Management

APPLoads

APPLoads

APPLoads

Private Clouds Public Clouds

vSphere vSphere

34

Customer Needs – the perfect stormCustomer Needs – the perfect stormDesire to keep CapEx / OpEx low

( t)(servers, power, rent)

Facing unpredictable application demand

App SLA’s must be maintained

Want to leverage the cloud – but carefully

35

Solution: Cloudbursting with vCloud Director

• Integrated solution that enables automatic cloud bursting• Combine Several Components

• vCloud Director• vCloud API• vSphere

Shi ld Ed

• Gemstone SQLFabric• F5 BIG-IP LTM• F5 BIG-IP GTM

• vShield Edge

• Enables start/stop of bursting (keep costs low)

• F5 BIG-IP WOM

• Enables start/stop of bursting (keep costs low)• Enables “right-sizing” in the cloud (scale-out)• Completely seamless for application users• Completely seamless for application users• Bursting hinges on application performance trigger

36

VMware vCloud Director OverviewVMware vCloud Director OverviewOrganization 1 Organization m

• Multi-tenant: secureAdmin

U P t l

Users

C t l S it

Multi tenant: secure organizational separation

• On-demand: Self-service virtual machine and virtual

li i d l

Vi t l D t t 1 Vi t l D t t

User Portals Catalogues Security

rivat

e C

loud

application deployment• Hybrid: Compatible cloud

service internally and at service providers

vCloud API

Virtual Datacenter 1(Gold)

Virtual Datacenter n(Silver)

Secu

re P

service providers• Controlled: self-service

within boundaries of virtual data centerS i ti l

VMware Cloud Director

• Secure: organizational and app level security and control

• Manageable: role-based

vSphere

vCenter Server

vSphere

vCenter Server

vSphere

vCenter ServerManageable: role based access and authentication using enterprise directory

37

Solution Workflow

1. Begin with application in private cloud only2. Ramp up application traffic until it exceeds performance threshold3 “Burst” to public cloud dynamically adding application nodes3. Burst to public cloud, dynamically adding application nodes

– Traffic management is globally balanced between private and public clouds

4. Continue ramping up traffic and expanding capacity in public cloud5. Decrease application traffic, contracting the application by

removing public nodes and eventually returning to steady state inremoving public nodes and eventually returning to steady state in private cloud

38

Solution Architecture at a Glance

LTM WAN Optimization

n+1

Public CloudPublic CloudPrivate Data CenterPrivate Data Center

39

Hybrid Cloud Architecture

Definition: Serving an application across multiple clouds, data centers, or both Use Cases

• Automated Failover• Federated Cloud Authentication• Federated Cloud Authentication• Elastic Applications

Architectural featuresvCentervCenter--11 vCentervCenter--22• Global traffic management

• Intelligent application and session persistence

• Network API• Global traffic policies• L7 content inspection and routingL7 content inspection and routing

40

Scaling the Cloud

• Global load balancing– Can be policy-based for automated

changes (re: SRM)changes (re: SRM)– Minimize unused resources– Geo-location improves user

experience– Provision to Mean vs. Peak

S i• Scenarios– Capacity Expansion– BC/DR– BC/DR– Cloud Bursting

41

Customer Benefits

• BIG-IP LTM provides high availability, security and performance for the app.

• Availability - BIG-IP GTM provides high availability for redirecting traffic in case there’s a problem with the primary siteprimary site.

• Distance - The cloud does not have to be within metro distance latency for this solution to workdistance latency for this solution to work.

• Choice of cloud providers – only requirement here is that they are running vCloud Director or a VMware vCloudthey are running vCloud Director or a VMware vCloudAPI-compatible environment.

42

Solution Architecture at a GlanceSolution Architecture at a Glance

LTM WAN Optimization

vCD

n+1

Public CloudPublic CloudPrivate Data CenterPrivate Data Center

43

Solution Components• VMware vCloud Director (aka “Redwood”)• VMware vCloud Director (aka Redwood )

– Private and Public Cloud infrastructure built on vCenter and vSphere• Java PetStore Demo Application powered by Tomcat• SQLFabric

– Database caching and synchronization between clouds• F5 Global Traffic Manager5 G oba a c a age

– Global load balancing between private and public clouds• F5 Local Traffic Manager

L l l d b l i f li ti i t i h l d– Local load balancing of application instances in each cloud– WAN optimization between clouds for acceleration of database caching

• API integrations– vCloud API– iControl API

44

Long Distance VMotionLong Distance VMotion

D t il d R iDetailed Review

45

Escaping Boundaries Between DCsp g

New Use Cases for Well Established Functionality

Mi ti• Migration• Disaster avoidance• Capacity expansionCapacity expansion

Key Technical Problems Solved:• Performance problems caused by

latency or bandwidthlatency or bandwidth• Network retransmission of client

traffic from site 1 to site 2L f i h• Loss of app sessions when migrating to another location

46

How it works – the fundamental steps

1. Storage VMotion to Site 22. VMotion to Site 23. LTM routes incoming connections for existing sessions

to Site 2 VM4. GTM routes new connections to Site 25. Register host and VM in vCenter Site 2 (optional)

47Logical representation, not physical

InternetEtherIP Tunnel EtherIP Tunnel

vCenter Server

48

Acceleration & Encryption• F5 testing results of common bandwidth/latency combinations• iSessions™ or WAN Optimization Module™• SSL encryption• Acceleration: TCP Optimization Deduplication CompressionAcceleration: TCP Optimization, Deduplication, Compression• Able to successfully VMotion in conditions where previously failed

Bandwidth Link Link Packet Average Average AccelerationBandwidth(Mbps)

Link Latency

(RTT ms)

Link Packet Loss (%)

Average Time without

WOM in Minutes

AverageTime

with WOM in Minutes

Acceleration Factor

45 (T3) 100 0% 13:43 3:35 3.8X

100 25 0% 6:10 1:18 4.7X

155 (OC3) 100 0% 13:25 3:29 3 9X155 (OC3) 100 0% 13:25 3:29 3.9X

622 (OC12) 40 0% 5:57 1:57 3.1X

1000 (Eth t)

20 0% 2:38 0:38 3.5X(Ethernet)

49

Initial Environment

BIG-IP Global Traffic Manager

BIG-IP LocalTraffic Manager

BIG-IP LocalTraffic Manager

vCenter A vCenter B

50

Step 1: F5 BIG-IP Local Traffic Manager Opens WAN Optimization Tunnel

BIG-IP Global Traffic Manager

BIG-IP LocalTraffic Manager

BIG-IP LocalTraffic Manager 1

vCenter A vCenter B• Compressed• De-Duplicated• Encryptedc ypted

51

Step 2: Storage VMotion Executed AcrossStep 2: Storage VMotion Executed Across WAN Optimized Tunnel

BIG-IP Global Traffic Manager

BIG-IP LocalTraffic Manager

BIG-IP LocalTraffic Manager

vCenter A vCenter B

2 This step can be 2 pavoided if storageis already being synchronously

replicated between sites

52

Step 2: Pending App VMotion, t ti l VM i Sit A b t St i Sit Btransactions rely on VM in Site A, but Storage in Site B

BIG-IP Global Traffic Manager

BIG-IP LocalTraffic Manager

BIG-IP LocalTraffic Manager

vCenter A vCenter B

vCenter A still managing VM

53

Step 3: Application VMotion Executed OverStep 3: Application VMotion Executed Over WAN Optimized Tunnel

BIG-IP Global Traffic Manager

BIG-IP LocalTraffic Manager

BIG-IP LocalTraffic Manager

vCenter A vCenter B

3

54

Step 4: GTM health checks register the move, and Cut Over to Site-BOver to Site B

BIG-IP Global Traffic Manager

BIG-IP LocalTraffic Manager

BIG-IP LocalTraffic Manager 4

vCenter A vCenter B

55

F5 BIG-IP Global Traffic Manager Routes All NEW Application Connections/Sessions Directly to Site BConnections/Sessions Directly to Site B.

BIG-IP Global Traffic Manager

BIG-IP LocalTraffic Manager

BIG-IP LocalTraffic Manager

vCenter A vCenter B

56

F5 BIG-IP Local Traffic Manager in Site A retransmits incoming connections for EXISTING Sessions to Site B Until Clientsconnections for EXISTING Sessions to Site B Until Clients Register DNS Change

BIG-IP Global Traffic Manager

BIG-IP LocalTraffic Manager

BIG-IP LocalTraffic Manager

vCenter A vCenter B

57

Eventually, ALL Connections Go Directly to Site B. CThe Process Can Be Reversed When Necessary.

BIG-IP Global Traffic Manager

BIG-IP LocalTraffic Manager

BIG-IP LocalTraffic Manager

vCenter BvCenter ASuccessful ApplicationApplication Migration Complete

58

Option:

Have Original IP Space (Site A) BIG-IP LocalTraffic Manager

Reclaimed and Re-Used

for Other Applications

vCenter A

for Other Applications

59

WAN Optimization Module™WAN Optimization Module™ Acceleration of VMotion and Storage VMotion

• F5 tested many different bandwidth/latency combinations

• Base Scenario:• 1 GB Virtual Machine• Windows & Linux Servers• Source host CPU 100% utilizedSource host CPU 100% utilized• 10 individual test runs averaged for each scenario• First Pass only (deduplication)

• SSL encryption

• AccelerationAcceleration– TCP Optimization– Byte-level deduplication

Dynamic compression– Dynamic compression

60

Requirements

• Duplicates in Primary & Secondary sites:– F5 BIG-IP Local Traffic Manager– F5 BIG-IP Global Traffic Manager– F5 BIG-IP WAN Optimization Module– LTM iRule collecting any TCP connections that arrive to primary site after VM has

been migrated, and forwards these connections to the secondary site.– vSphere, VMotion, Storage VMotion– Shared storage mounted via iSCSI or NFS that both ESX servers can mount

• TCP Ports 8000 (VMotion) & 443 (LTM) must be open• Guest IP & Network config (e.g. port groups) on hosts in migration must be

identicalidentical• For VMotion, VMware officially supports 622Mbps or higher WAN (type of

WAN is irrelevant)

61

Online Follow Up Resources:Online Follow-Up Resources: Long Distance VMotion Solution

• Overall F5/VMware Solution Guide– http://www.f5.com/pdf/solution-center/f5-for-virtualized-it-environments.pdf

• Online Demo– http://devcentral.f5.com/weblogs/nojan/archive/2010/02/02/introducing-long-distance-vmotion-with-

vmware.aspx

• Deployment Guide– http://www.f5.com/pdf/deployment-guides/vmware-vmotion-dg.pdf

• Whitepaper– http://www.f5.com/pdf/white-papers/cloud-vmotion-f5-wp.pdf

62

Desktop Virtualization & F5

63

33% of organizations plan to deploy hosted virtual desktops in 2010

Gartner April 2010

64

Common Desktop Virtualization Challenges

• User Experience– Performance over the Wide Area Network– Access methods / complexityAccess methods / complexity– Login steps / annoyance

S it• Security– Encryption of all WAN traffic– Unified Access (Local vs. Remote, Desktop vs. Smart Phone)– Integration with existing authentication infrastructure– Endpoint integrity inspection

• Scalability/Availability– Scaling VDM servers without more power or rackspace– Ensuring total availability of connection brokers

65

Traditional Model is InflexibleTraditional Model is Inflexible

Users

Resources

Private Public

Physical Virtual Multi-Site DCsCloud

66

Finding a Better SolutionFinding a Better Solution

Degree of Control Outsource

DynamicServices

ModelDegree of Control Everything

TraditionalInfrastructure

Degree of Flexibility

67

WAN

Remote Office ClientsRemote Clients Remote Office

InternetBIG-IP Edge Gateway

L l M d D kt

BIG-IP Edge Gateway

Local Mode Desktop

Primary Site

BIG-IP Local Traffic Manager

g yLocal LAN Clients

Connection ServersConnection Servers

Local Mode Desktop Centralized VirtualDesktops

Encryption (DTLS or SSL)Unencrypted RDP or Natively Encrypted PCoIP)

68

VMware Recommends UDP Native Support

• Scott Davis, CTO End User Computing Business Unit• October 25, 2010• http://communities.vmware.com/blogs/cto-scott/2010/10/25/a-simple-experiment

• “There are numerous ways to configure such VPN’s, however PCoIP utilizes UDP for the graphics packets and optimizes parallelism and retransmits at the higher layers of th t l H d i VPN t h l th t t UDPthe protocol. Hence we recommend using a VPN technology that support UDP packets natively, not to tunnel the UDP traffic over TCP/IP as doing so will typically cause responsiveness issues…”

• Native UDP support is available in F5 FirePass and BIG-IP Access Policy Manager.

69

U E iUser Experience

70

Simplify Sign-On Frustrations

Step 1Local Login

Step 2VPN Login

Step 3Desktop

LoginLogin Login Login

SSOLogin OnceOnce

71

Simplify Restarts:At Home (wireless)

On the way to work(Ai d)

?Simplify Restarts:

Ongoing Logins!( )

(Aircard)?

Constantly Re‐connecting

? ??

?

In the office PresentingIn the office(docked LAN connection)

Presenting(corporate wireless)In the Cafe

(wireless)

72

Simplify Restarts: Reconnect AutomaticallySimplify Restarts: Reconnect AutomaticallyAt Home (wireless)

On the way to work(Ai d)

Auto‐Connect!( )

(Aircard)

Always Connected Application Access

In the office PresentingIn the office(docked LAN connection)

Presenting(corporate wireless)In the Cafe

(wireless)

73

Accelerate Connection Restarts

1

Source IPProxy/NAT Persistence to Desktop

2

App InfoJSessionID

Etc.

Edge Gateway

Send the user to his existing desktop session – much faster restarts

74

Traffic QoS

View Desktops

Edge Client Desktops

Edge

d

Edge Client

Edge Client

Rate Shape to ensure client-side View traffic receives priority li t tb d tb d t ffiover client-outbound outbound traffic

75

SSecurity

76

Unify Access to the Data CenterUnify Access to the Data Center

DMZBIG IP Edge Gateway DMZBIG-IP Edge Gateway

Mobile Users

View ServersInternet

Branch Office Users

Internal LANVLAN1

Use existing user directories

Wireless Users

VLAN1

• One solution to manage all access policies regardless of access network

• Capacity and performance to secure all user trafficOptimizes application delivery to remote and mobile users

Internal LANVLAN2

• Optimizes application delivery to remote and mobile users• Improves quality of real-time applications; soft phones and

streaming mediaLAN Users

77

Maintain Native PCoIP Performance DTLS EncryptionPCoIP

Mobile Users

DTLS EncryptionPCoIP

ConnectionB k

Branch Office Users

DTLS Encryption

View

PCoIP

n Brokers

Remote Users

Servers

SSL EncryptionRDP

ncry

ptio

n

e ote Use s

DTL

S E

Support for DTLS (UDP) encryption Support for SSL (TCP) encryption

PCoI

P

Support for SSL (TCP) encryptionAvoids the alternative method of encapsulating UDP into TCP for SSL encryption (thus degrading UDP)

LAN Users

encryption (thus degrading UDP).

78

Optimize Authentication & Authorization• Integration with existing authentication g g

mechanisms– AD, LDAP, RADIUS, 2-Factor, Client Certs, Etc.– Full support PKI infrastructures

• Check the device prior to logonCheck the device prior to logon – OS, AV, firewall, process, file, registry,

client/machine certs, etc.

• Remediate if necessary, automatically

• Use protected workspaces when the device is not completely• Use protected workspaces when the device is not completely trustworthy

E f G P li i ll t ( t t )• Enforce Group Policies on all assets (even non-corporate assets)• Full FIPS compliant solution

79

Unified AAA Services for ViewUnified AAA Services for View• Pre-Logon Checks:

– OS, AV, firewall, process, file, registry, extended windows info, client and machine certs, etc.

• Remediation: – Group Policy enforcement (Corp & Non-Corp Assets)– Protected Workspace

• Intuitive, Visual Policy Editor

80

Availability & Scalability a ab ty & Sca ab tyin the DataCenter

81

Enable Scalability by Offloading ProcessesEnable Scalability by Offloading Processes from View Manager Servers

1. Improve efficiency by offloading SSL

2. HA & load balancing for View Manager servers

82

Bandwidth Reduction for RDP in View

LTM can also reduceLTM can also reduce bandwidth consumption up to 12:1 using its WAN O ti i ti M d lOptimization Module

1. Compression2. Deduplication2. Deduplication3. TCP Optimization4. Encryption

83

Ensure Global AvailabilityEnsure Global Availability

Failover

WAN AcceleratedOngoing Replication

Sit 1 Sit 2

(a) GTM Health checks reveal unhealthy site 1.

Site 1 Site 2

( ) y

(b) GTM self-executes a redirection to site 2.

f5 /www.f5.com/vmware

Recommended