F5互联网出口解决方案

《F5互联网出口解决方案》由会员分享，可在线阅读，更多相关《F5互联网出口解决方案（37页珍藏版）》请在装配图网上搜索。

1、F5 互联网出口解决方案CharlesCharles ZhuZhu2 2016.11.23016.11.23F5互联网出口解决方案CharlesZhu F5 Networks,Inc2 出向或入向流量不能出向或入向流量不能选择选择最最优优的运的运营营商商链链路，影响互路，影响互联联网网访问访问效率？效率？不能不能对对多条运多条运营营商商链链路路实现实现完善的健康完善的健康检查检查和故障切和故障切换换？为为解决互解决互联联网出口安全网出口安全问题问题而部署了多台不同功能的而部署了多台不同功能的设备设备，维护维护人人员员无法无法应应对对？后期希望后期希望实现实现互互联联网网发发布布业务业务在同城双

2、中心平滑切在同城双中心平滑切换换的的应应用用级级容灾容灾？用户面临的业务问题出向或入向流量不能选择最优的运营商链路，影响互联网访问效率？F5 Networks,Inc3F5的解决方案电信联通移动互联网接入区应用服务器群组应用服务区域SwitchSwitchClients F5BIG-IP标准版解决方案说明：GTM+LTM结合，完美解决进站出站流量负载、多链路接入问题，智能聚合多条运营商链路，同时为业务级容灾（双活）数据中心预留空间；GTM提供DNSSEC功能，确保DNS来源的真实性与完整性，保障用户DNS系统安全；DNSService为用户提供最大超过8MQPS的高性能DNS系统，并可有效防御

3、DNSDDoS攻击；LTM设备确保大量并发业务系统的安全、快速和高可用性，解决大流量并发处理问题；AFM网络防火墙为IDC提供3-4层网络安全防护；TMOS融合了可定制的iRules和UIE，为处理应用访问或流程中的应用流量提供了强大的控制力；AVR模块提供WEB应用性能检测、监控；自带SSLVPN模块帮助用户在任何地点安全快速地接入内网，实现对设备的远程管理；提供高性能的硬件体系架构，满足用户性能和功能的按需扩展需求；简化整个数据中心多层架构，减少故障点及设备运维管理成本。F5的解决方案电信联通移动互联网应用服务器群组应用服务区 F5 Networks,Inc4 让让用用户户可智能可智能选择

4、选择最最优链优链路路访问访问InternetInternet资资源，源，实现实现多条运多条运营营商商链链路高可用；路高可用；确保用确保用户户在互在互联联网网发发布的布的业务业务系系统统能能够够被安全快速地被安全快速地访问访问；为为用用户户提供可控的外网提供可控的外网DNSDNS服服务务，并可有效防范，并可有效防范针对针对DNSDNS的的DDOSDDOS攻攻击击（*）；）；可提供可提供2-42-4层层网网络络防火防火墙墙安全防安全防护护和和L3-L4DDOSL3-L4DDOS防防护护功能（功能（*）；）；可可为为用用户户打造打造应应用用级级容灾容灾的双活数据中心（的双活数据中心（*）；）；多种多

5、种功能融合在一个平台上功能融合在一个平台上实现实现，简简化了数据中心架构，降低了化了数据中心架构，降低了ITIT投入成本（投入成本（*）注注：*标识标识功能需功能需扩扩展至展至标标准版准版。推荐解决方案推荐解决方案：低配低配LC2000S*2;LC2000S*2;高配高配-BR4000S*2-BR4000S*2方案优势让用户可智能选择最优链路访问Internet资源，实现多条运 F5 Networks,Inc5 使用使用F5SynthesisF5Synthesis新融合架构，在一台新融合架构，在一台设备设备上上实现实现客客户户的的L4-L7L4-L7的需求，降的需求，降低了低了30%30%管理

6、运管理运维维任任务务 实现实现了企了企业业互互联联网出口多网出口多链链路出向与入向的智能流量管理，保路出向与入向的智能流量管理，保证证了互了互联联网出网出口口7*247*24的的连续连续性；性；完善的完善的DDOSDDOS安全防安全防护护架构，架构，对恶对恶意攻意攻击击起到了很好的防起到了很好的防护护，减少，减少70%70%的外的外部攻部攻击击；为为用用户户未来未来扩扩展展为为双活数据中心提供了保障双活数据中心提供了保障。方案优势使用F5Synthesis新融合架构，在一台设备上实现客户 F5 Networks,Inc6主要技术：多链路负载均衡外网智能DNS及安全防护应用双活L3-L4DDOS

7、防护数据中心防火墙核心业务：电子商务平台CMSEPS系统电子邮件系统产销管理系统设备部署：BR-4000s*2用户需求：业务创新，从传统商务模式向O2O服务模式转变建立高可用，具备高并发处理能力的电子商务平台有能力防护L3-L4层的DDoS攻击确保用户的访问体验成功案例xxxx企业电子商务平台互联网出口解决方企业电子商务平台互联网出口解决方案案解决方案优势：GTM+LTM结合，完美解决进站出站流量负载、多链路接入问题，智能聚合多条运营商链路，同时为业务级容灾数据中心预留空间GTM提供完善的DNS服务，提供智能的DNS解析功能LTM设备确保大量并发业务系统的安全、快速和高可用性，解决大流量并发处

8、理问题AFM数据中心防火墙可部署1-4层网络安全策略，实现了安全边界隔离，并提供了L3-L4的DDOS攻击防护高性能的体系架构，支撑数据中心业务的处理能力；满足用户性能和功能的按需扩展需求TMOS融合了可定制的iRules和UIE，为处理访问中的应用流量提供了强大的控制力APM提供安全便捷的远程SSLVPN接入，方便远程进行数据中心维护管理客户收益：通过F5BR-4000S的部署，使用F5Synthesis新融合架构，在一台设备上完成客户的L4-L7服务的需求，大大降低了管理的复杂度实现了企业各种核心业务系统应用的高可用提升了DNS基础架构的性能和其安全防护能力完善的DDOS安全防护架构，对恶

9、意攻击起到了很好的防护，减少70%的外部攻击主要技术：核心业务：设备部署：用户需求：成功案例xx企业电 F5 Networks,Inc7 帮助用帮助用户户解决互解决互联联网出口多网出口多链链路路问题问题，杜，杜绝链绝链路路单单点故障，消除多运点故障，消除多运营营商商链链路路间间的瓶的瓶颈颈。还还可可为为用用户户在互在互联联网出口网出口实现实现外网外网DNSDNS、应应用用级级容灾和容灾和L3-L4DDOSL3-L4DDOS防防护护等等服服务务。业务价值帮助用户解决互联网出口多链路问题，杜绝链路单点故障，消除多运 F5 Networks,Inc8为什么选择F5为什么选择F5 F5 Network

10、s,Inc9欢迎关注F5微信公众号欢迎关注F5微信公众号F5互联网出口解决方案Charts and GraphsThefollowingslidesareexamplesofhowtopresentstatisticsanddatainvisualformats.Thefollowingslidesareexamplesofhowtopresentstatisticsanddatainvisualformats.ChartsandGraphsThefollowing F5 Networks,Inc12Line graphsCategory1Category2Category3Category4

11、Category500.511.522.533.544.55Loremipsumdolorsitamet,Loremipsumdolorsitamet,nibhnibhetconsecteturetconsecteturloremloremipsumdoloripsumdolorsitametsitamet,nibhet,nibhetconsectetur.consectetur.LoremLoremipsumdolorsitamet,ipsumdolorsitamet,nibhnibhet.Consecteturet.Consecteturloremloremipsumdoloripsumd

12、olorsitametsitamet,nibhet,nibhetconsecteturLoremconsecteturLorem2013 PROJECTIONS2013 PROJECTIONSTwo-tothree-linesummaryoffindings.Furtherdetailintherighthandcolumnbelow.LinegraphsLoremipsumdolors F5 Networks,Inc1358%23%10%9%1st Qtr2nd Qtr3rd Qtr4th QtrLoremipsumdolorsitamet,nibhLoremipsumdolorsitame

13、t,nibhloremetloremetconsecteturloremipsumconsecteturloremipsumdolordolorLoremipsumdolorsitamet,nibhLoremipsumdolorsitamet,nibhloremetloremetconsecteturloremipsumconsecteturloremipsumdolordolorLoremipsumdolorsitamet,nibhLoremipsumdolorsitamet,nibhloremetloremetconsecteturloremipsumconsecteturloremips

14、umdolordolorLoremipsumdolorsitamet,nibhLoremipsumdolorsitamet,nibhloremetloremetconsecteturloremipsumconsecteturloremipsumdolordolor9%10%58%23%Pie ChartTwo-tothree-linesummaryoffindings.Furtherdetailsintherighthandcolumnbelow.Loremipsumdolorsitamet,ni F5 Networks,Inc14Two-tothree-linesummaryoffindin

15、gs.$XXXMProjectedincomeforthefirstProjectedincomeforthefirst3monthsof3monthsof20132013Category1Category2Category3Category40123456$XmillionSept12,2013Bar charts$XXXMProjectedincomeforthefirstProjectedincomeforthefirst33monthsof2013monthsof2013$XXXMProjectedincomeforthefirstProjectedincomeforthefirst3

16、3monthsof2013monthsof2013Two-tothree-linesummaryof F5 Networks,Inc15Doughnut chartsYoucandouble-clickonthesechartstoopeninExcelandchangethedatathere.SUBJECT:SUBJECT:400,000400,000SUBJECT:SUBJECT:400,000400,00050%74%82%95%SUBJECT:SUBJECT:400,000400,000SUBJECT:SUBJECT:400,000400,000Heresanotheroptionf

17、orpercentage-basedinformation.Threetofourmaxperslide.DoughnutchartsYoucandouble-Icons and DiagramsForyourconvenience,weveincorporatedcommoniconsintotheF5corporatetemplateusingForyourconvenience,weveincorporatedcommoniconsintotheF5corporatetemplateusingasamplediagram.ThesehavebeenconvertedtoPowerPoin

18、tobjects.Youcanchangethemasamplediagram.ThesehavebeenconvertedtoPowerPointobjects.Youcanchangethemtowhiteifyouneedtousethemagainstacolorbackground.Ifyouscalethesizeofanobject,towhiteifyouneedtousethemagainstacolorbackground.Ifyouscalethesizeofanobject,youmustresizethetextseparatelyyoumustresizethete

19、xtseparately.IconsandDiagramsForyourcon F5 Networks,Inc17Next-GenerationFirewallUsersleverageNGFWforoutboundprotectionEmployeesCaninspectSSLateithertierCustomersDDoSAttackPartnersDDoSAttackISPprovidesvolumetricDDoSserviceCloudScrubbingServiceGOODBETTERBESTSimplifiedBusinessModels+IPIntelligenceBIG-I

20、PAdvancedFirewallManagerBIG-IPLocalTrafficManagerBIG-IPGlobalTrafficManagerBIG-IPAccessPolicyManagerBIG-IPApplicationSecurityManagerDiagram example with licensingISPaISPbNetworkFirewallServices+DNSServices+SimpleLoadBalancingtoTier2BIG-IPPlatform+IPIntelligence(IPI)ModuleBIG-IPPlatformWebApplication

21、FirewallServices+SSLTerminationTier2:ProtectingL7Tier1:ProtectingL34andDNSNext-GenerationFirewallUsers F5 Networks,Inc18 F5 softwareBIG-IP Local Traffic ManagerBIG-IP Global Traffic ManagerBIG-IP Application Acceleration ManagerBIG-IP Advanced Firewall ManagerBIG-IP Access Policy ManagerBIG-IP Appli

22、cation Security ManagerBIG-IP Edge ClientBIG-IP Carrier-Grade NATBIG-IP Policy Enforcement ManagerSignaling Delivery ControllerOpenBloxMobile App ManagerBIG-IQBIG-IQ SecurityBIG-IQ CloudBIG-IQCloudVirtualEditionsBIG-IQSecurityBIG-IPLocalTrafficManagerBIG-IPGlobalTrafficManagerApplicationExamplesName

23、ofSolution,Functionality,orFeatureHereLTMLTMAPMAPMASMASMSDCSDCMAMMAMBIG-IPLocalTrafficManagerBIG-IPAccessPolicyManagerBIG-IPApplicationSecurityManagerSignalingDeliveryControllerMobileAppManagerDataCenterSignalingDeliveryControllerMobileAppManagerF5softwareBIG-IPLocalTraf F5 Networks,Inc19F5 product

24、representationVIPRIONPlatformBIG-IPPlatformBIG-IPVirtualEditionFormfactornotrequiredFormandplatformnameneeded,butnotspecificmodelnumberTorepresentF5orthird-partyhardware,youcanchoosefromthethreeoptionsbelow.Whendecidingwhichtouse,considerhowmuchinformationyouraudienceneeds.VIPRIONPlatformVIPRIONPlat

25、formBIG-IPPlatformF5productrepresentationVIPRI F5 Networks,Inc20F5 product representationoptionsLoadBalancingDDoSProtectionFirewallInternetInternetVIPRIONPlatformLoadBalancingDDoSProtectionFirewallLTMLTMAPMAPMASMASMBIG-IPLocalTrafficManagerBIG-IPAccessPolicyManagerBIG-IPApplicationSecurityManagerDev

26、icesDataCenterDevicesDataCenterF5productrepresentationopti F5 Networks,Inc21Hardware user devicesDesktopLaptopPhoneTabletDesktopLaptopSmartphoneTabletDesktopE-CommerceInfectedLaptopWithAuthenticationTabletwithAppsDesktopReportingMobileHotspotMobileHotspotPasscodeTabletwithCollaborationMobileHotspotH

27、ardwareuserdevicesDesktopLa F5 Networks,Inc22Hardware user devicesoptionsClusteredGroupingsHorizontalGroupingsVerticalGroupingsDevicesDevicesDevicesMobileDevicesMobileDevicesMobileDevicesHardwareuserdevicesoptionsC F5 Networks,Inc23ServerServersServersServersServerClassicServerBladeServerServerRackS

28、torageDatabaseDataPublicCloudPrivate/PublicCloudHybridCloudPrivateCloudInternetWANRouterSwitchADCFirewallNetwork hardwareServerServersServersServersSer F5 Networks,Inc24Service provider-specificSupportNodesPEMMESGSNPoliciesorFunctionsControlNodesDatabasesAlternateRoutersPCRFHSSGGSN/PGWv-PCRFSGWh-PCR

29、FPGWOCSGGSN/PGW/ASNGWSIPASIGRActiveDirectoryDEARoamingHubAccessNodeNetworksandProtocolsDiameterDSLCableFTTHGbGiGnGTPGx/SdGyGzHTTPLDAPLoggingMirrorAccesslu-PSMAPOpenStackAPIRADIUSRxS1S11S6aS8S9SGiSIPSOAPSS7SSLXMLx-CSCFnetworkAdjustableblankboxforalternateabbreviationsServiceprovider-specificSupp F5 N

30、etworks,Inc25Virtual instancesGeneralHypervisorHypervisorVirtualApplicationsHypervisorVirtualApplicationsTheHypervisorlabelisusedforgenerichypervisors,tobemorespecificreplacethelabelwithabrandnameproduct:VirtualApplicationsHypervisorVirtualApplicationsHypervisorVirtualApplicationsHypervisorVirtualAp

31、plicationsHypervisorVirtualApplicationsHypervisorHyper-VKVMvSphereXenVirtualinstancesGeneralHyper F5 Networks,Inc26IndustriesFinanceFinanceFinanceFinanceManufacturingRetailMediaPublishingE-CommerceSolarHealthcareAutomotiveGovernmentEducationIndustriesFinanceFinanceFinanc F5 Networks,Inc27alternatesC

32、ustomer challengesExplosiveDataGrowthRisingSecurityThreats/AttacksNewNetworkInnovationsNetworkVirtualizationHacktivismHigherCostStructure/LowerMarginsHigherCostStructure/LowerMarginsHigherCostStructure/LowerMarginsHigherCostStructure/LowerMarginsMalwareHighNetworkComplexityLowCustomerSatisfactionLon

33、gtimetodeploynewservicesLowerNetworkQualityStateSponsoredAttacksDifficulttoManageLotsofBoxesNetworkAvailabilitySignalingstormsalternatesCustomerchallengesE F5 Networks,Inc28Customer benefitsMassiveScalabilityandCapacityFull-ProxyArchitectureforVisibilityandControlExtensibilityUnifiedFrameworkandMana

34、gementSimplerArchitecture/NetworkDNSDynamicMulti-LayeredSecuritySSLNFV-ReadyFlexibilityCustomerbenefitsMassiveScala F5 Networks,Inc29TechnologiesStorageTieringGlobalLoadBalancingDataMigrationDataBackupDDoSProtectionDNSSECApplicationSecurityDataCenterFirewallAccessSecurityLocalLoadBalancingCloudSecur

35、ityandAccessCloudStorageCloudProvisioningBYODSSLVPNSecuritySecuringExchangeandSharePointTechnologiesStorageGlobalLoa F5 Networks,Inc30GeneralDocumentCachedDocumentLogDataPacketCachedDataPacketEmailSpamData/CommunicationsVideoCameraPOSMediaPerformanceDial,lowPerformanceDial,mediumPerformanceDial,high

36、PerformanceLevelsDataCenterHeadquartersBranchGeolocationHomePlace/LocationCloudHostedAppPhysicalHostedAppCloudHostedAppsFolderGeneralDocumentCachedLogDataP F5 Networks,Inc31AttackersGeneralAttackerWebBotShieldIDTagAuthenticationProvisioningDDoSProtectionDataMigrationTieringWANOptimizationLocalLoadBa

37、lancingGlobalLoadBalancingLinkLoadBalancingUserUser2AdminUnidentifiedUserSecurityTechnologysolutionsUsers/AdminAlternativeUserAlternativeUserAttackersGeneralAttackerWebBo F5 Networks,Inc32GeneralWirelessOtherTransmissionTowerWiFiSatelliteSatelliteDishDoorwayTrafficLightSupportCallCenterVisibilityand

38、ControlInfrastructureQuoteSearch InspectionVirtualServerVirtualPrivateNetworkCalendarWebsiteAppAppsGeneric Industry AppsGeneralWirelessOtherTransmissi F5 Networks,Inc33Small iconsUnsecureMoreinformationanddetails.Evenmoreinformationanddetails.Andevenmoreinformationanddetails.Alwayscentertexttobracke

39、t.SecureNo EntryApprovedNotApprovedCertifiedTokenizedPlacethesesmalliconsdirectlyontopofconnectinglinestohelptellthestory.Ingeneral,theseiconsdontneedlabels.Usethesesmalliconscanbeplacedonlargericonstochangetheirstate.Usethebracketandsmallertextboxtodescribewhatsgoingoninmoredetail.SmalliconsUnsecur

40、eMoreinfo F5 Networks,Inc34ContainersDataCenterDataCenterDataCenterExampleofanestedboxthatusesathinnerlineNetworkFirewallServices+DNSServices+SimpleLoadBalancingtoTier2BIG-IPPlatformDataCenterContainersDataCenterDataC F5 Networks,Inc35DDoSProtectionS/GiNetworkSimplificationSecurityforServiceProvider

41、sApplicationServicesMigrationtoCloudDevOpsLTERoamingDNSCloudFederationCloudBurstingNFVVDIHigh-PerformanceIPSWebFraudProtectionSecureWebGatewayReference Architecture Icons(March 2013)DDoSProtectionS/GiNetworkSiNext Steps ThisisanoptionalendingslidetothelogoonlyslideThisisanoptionalendingslidetothelog

42、oonlyslide ListthreekeyitemsthatyouwantpeopletotakeawayfromyourListthreekeyitemsthatyouwantpeopletotakeawayfromyourpresentationpresentation Keeptheseitemsbriefandonpoint.Keeptheseitemsbriefandonpoint.If I can be of further assistance please contact me:If I can be of further assistance please contact me:J|206.272.5555J|206.272.5555NextStepsThisisanoptionalF5互联网出口解决方案