F5互联网出口解决方案培训资料(共37页).ppt

1、电信联通移动互联网接入区应用服务器群组 应用服务区域SwitchSwitchClientsF5 BIG-IP标准版解决方案说明： GTM+LTM结合，完美解决进站出站流量负载、多链路接入问题，智能聚合多条运营商链路，同时为业务级容灾（双活）数据中心预留空间； GTM提供DNSSEC功能，确保DNS来源的真实性与完整性，保障用户DNS系统安全； DNS Service为用户提供最大超过8M QPS的高性能DNS系统，并可有效防御DNS DDoS攻击； LTM设备确保大量并发业务系统的安全、快速和高可用性，解决大流量并发处理问题； AFM网络防火墙为IDC提供3-4层网络安全防护； TMOS融合了

2、可定制的iRules和UIE，为处理应用访问或流程中的应用流量提供了强大的控制力； AVR模块提供WEB应用性能检测、监控； 自带 SSL VPN模块帮助用户在任何地点安全快速地接入内网，实现对设备的远程管理； 提供高性能的硬件体系架构，满足用户性能和功能的按需扩展需求； 简化整个数据中心多层架构，减少故障点及设备运维管理成本。主要技术：主要技术：多链路负载均衡外网智能DNS及安全防护应用双活L3-L4 DDOS防护数据中心防火墙核心业务：核心业务：电子商务平台CMSEPS系统电子邮件系统产销管理系统设备部署：设备部署：BR-4000s * 2用户需求：用户需求：业务创新，从传统商务模式向O2

3、O服务模式转变建立高可用，具备高并发处理能力的电子商务平台有能力防护L3-L4层的DDoS攻击确保用户的访问体验解决方案优势：GTM+LTM结合，完美解决进站出站流量负载、多链路接入问题，智能聚合多条运营商链路，同时为业务级容灾数据中心预留空间GTM提供完善的DNS服务，提供智能的DNS解析功能LTM设备确保大量并发业务系统的安全、快速和高可用性，解决大流量并发处理问题AFM数据中心防火墙可部署1-4层网络安全策略，实现了安全边界隔离，并提供了L3-L4的DDOS攻击防护高性能的体系架构，支撑数据中心业务的处理能力；满足用户性能和功能的按需扩展需求TMOS融合了可定制的iRules和UIE，为

4、处理访问中的应用流量提供了强大的控制力APM提供安全便捷的远程SSL VPN接入，方便远程进行数据中心维护管理客户收益：通过F5 BR-4000S的部署，使用F5 Synthesis新融合架构，在一台设备上完成客户的L4-L7服务的需求，大大降低了管理的复杂度实现了企业各种核心业务系统应用的高可用提升了 DNS 基础架构的性能和其安全防护能力完善的DDOS安全防护架构，对恶意攻击起到了很好的防护，减少70%的外部攻击Two- to three-line summary of findings. Further detail in the right hand column below.9%10

5、%58%58%23%Two- to three-line summary of findings. Further details in the right hand column below.Two- to three-line summary of findings. $X millionSept 12, 2013You can double-click on these charts to open in Excel and change the data there.50%74%82%95%Heres another option for percentage-based inform

6、ation. Three to four max per slide.Next-Generation FirewallUsers leverage NGFW foroutbound protectionEmployeesCan inspect SSL at either tierCustomersDDoS AttackPartnersDDoS AttackISP providesvolumetric DDoSserviceCloudScrubbing ServiceGOOD BETTER BESTSimplified Business Models+ IP IntelligenceBIG-IP

7、 Advanced Firewall Manager BIG-IP Local Traffic Manager BIG-IP Global Traffic ManagerBIG-IP Access Policy ManagerBIG-IP Application Security ManagerISPaISPbNetwork Firewall Services + DNS Services + Simple Load Balancing to Tier 2BIG-IP Platform+ IP Intelligence(IPI) ModuleBIG-IP PlatformWeb Applica

8、tion Firewall Services+ SSL TerminationTier 2: Protecting L7Tier 1: Protecting L34 and DNSBIG-IP Local Traffic ManagerBIG-IP Global Traffic ManagerBIG-IP Application Acceleration ManagerBIG-IP Advanced Firewall ManagerBIG-IP Access Policy ManagerBIG-IP Application Security ManagerBIG-IP Edge ClientB

9、IG-IP Carrier-Grade NATBIG-IP Policy Enforcement ManagerSignaling Delivery ControllerOpenBloxMobile App ManagerBIG-IQBIG-IQ SecurityBIG-IQ CloudBIG-IQCloudVirtual EditionsBIG-IQSecurityBIG-IPLocal TrafficManager BIG-IPGlobal TrafficManager Application ExamplesName of Solution, Functionality, or Feat

10、ure HereBIG-IP Local Traffic ManagerBIG-IP Access Policy ManagerBIG-IP Application Security ManagerSignaling Delivery ControllerMobile App ManagerData CenterSignaling DeliveryControllerMobile AppManagerVIPRION PlatformBIG-IP PlatformBIG-IP Virtual EditionForm factor not requiredForm and platform nam

11、e needed, but not specific model numberTo represent F5 or third-party hardware, you can choose from the three options below. When deciding which to use, consider how much information your audience needs.VIPRION PlatformVIPRION PlatformBIG-IP PlatformLoad BalancingDDoS ProtectionFirewallInternetInter

12、netVIPRION PlatformLoad BalancingDDoS ProtectionFirewallBIG-IP Local Traffic ManagerBIG-IP Access Policy ManagerBIG-IP Application Security ManagerDevicesData CenterDevicesData CenterDesktopLaptopPhoneTabletDesktopLaptopSmartphoneTabletDesktopE-CommerceInfectedLaptopWithAuthenticationTablet withApps

13、DesktopReportingMobileHotspotMobileHotspotPasscodeTablet withCollaborationMobileHotspotClustered GroupingsHorizontal GroupingsVertical GroupingsDevicesDevicesDevicesMobileDevicesMobile DevicesMobile DevicesServerServersServersServersServerClassicServerBladeServerServerRackStorageDatabaseDataPublicCl

14、oudPrivate/PublicCloudHybridCloudPrivateCloudInternetWANRouterSwitchADCFirewallSupport NodesPEMMESGSNPolicies or FunctionsControl NodesDatabasesAlternate RoutersPCRFHSSGGSN/PGWv-PCRFSGWh-PCRFPGWOCSGGSN/PGW/ASNGWSIP ASIGRActive DirectoryDEARoaming HubAccess NodeNetworks and ProtocolsDiameterDSLCableF

15、TTHGbGiGnGTPGx/SdGyGzHTTPLDAPLogging MirrorAccesslu-PSMAPOpenStack APIRADIUSRxS1S11S6aS8S9SGiSIPSOAPSS7SSLXMLx-CSCFnetworkAdjustable blank box for alternate abbreviations General HypervisorHypervisorVirtualApplicationsHypervisorVirtualApplicationsThe Hypervisor label is used for generic hypervisors,

16、 to be more specific replace the label with a brand name product:VirtualApplicationsHypervisorVirtualApplicationsHypervisorVirtualApplicationsHypervisorVirtualApplicationsHypervisorVirtualApplicationsHypervisorHyper-VKVMvSphereXenFinanceFinanceFinanceFinanceManufacturingRetailMediaPublishingE-Commer

17、ceSolarHealthcareAutomotiveGovernmentEducationalternatesExplosive Data GrowthRising Security Threats/AttacksNew NetworkInnovations NetworkVirtualization HacktivismHigher Cost Structure/ Lower MarginsHigher Cost Structure/ Lower MarginsHigher Cost Structure/ Lower MarginsHigher Cost Structure/ Lower

18、MarginsMalwareHigh Network ComplexityLow CustomerSatisfactionLong time to deploynew servicesLower NetworkQualityState Sponsored AttacksDifficult to ManageLots of BoxesNetwork AvailabilitySignaling stormsMassive Scalabilityand CapacityFull-ProxyArchitecture for Visibility and ControlExtensibilityUnif

19、ied Framework andManagementSimplerArchitecture/NetworkDNSDynamic Multi-LayeredSecuritySSLNFV-ReadyFlexibilityStorageTieringGlobal Load BalancingData MigrationDataBackupDDoSProtectionDNSSECApplicationSecurityData CenterFirewallAccessSecurityLocal Load BalancingCloudSecurity and AccessCloudStorageClou

20、dProvisioningBYODSSLVPNSecuritySecuringExchangeand SharePointDocumentCachedDocumentLogData PacketCachedData Packet EmailSpamData/CommunicationsVideoCameraPOSMediaPerformanceDial, lowPerformanceDial, mediumPerformanceDial, highPerformanceLevelsData CenterHeadquartersBranchGeolocationHomePlace/Locatio

21、nCloud Hosted AppPhysical Hosted AppCloud Hosted AppsFolderAttackersAttackerWeb BotShieldID TagAuthenticationProvisioningDDoSProtectionDataMigrationTieringWANOptimizationLocal LoadBalancingGlobal Load BalancingLink Load BalancingUserUser 2AdminUnidentified UserSecurityTechnologysolutionsUsers/AdminA

22、lternativeUserAlternativeUserWirelessOtherTransmissionTowerWiFiSatelliteSatelliteDishDoorwayTrafficLightSupportCallCenterVisibility and ControlInfrastructureQuoteSearch InspectionVirtualServerVirtual PrivateNetworkCalendarWebsiteAppAppsGeneric Industry AppsUnsecureMore information and details.Even more information and details.And even more information and details. Always center text to