APV X800 Series Datasheet - Array Networks

A PV x800 SER I ES DATASHEETApplicationDelivery ControllersAPV x800 Series next-gen ADCs optimize the availability,performance and security of cloud services and enterpriseapplications while reducing cost and complexity in the data center.Powered by Array’s 64-bit SpeedCore architecture, APV x800 Series next-generation application delivery controllers (ADCs)cost-effectively drive industry-leading performance across a robust set of availability, acceleration and security features todeliver unmatched overall value. Available as high-performance appliances that feature the latest in hardware accelerationand energy-efficient components or as agile virtual appliances that enable flexible pay-as-you-go business models, APVSeries ADCs are engineered to boost application performance in modern data center, cloud and virtual environments andspeed ROI for service provider, enterprise and public sector organizations.

APV x 800 SER IES DATASHE E THighlights & Benefits Dedicated appliances from 7 Gbps to 160 Gbps and Industry-leading performance and ECC/RSAvirtual appliances with support for one to eight vCPUsthroughput and transactions per second, and theto scale-up and scale-out as needed; also availableindustry’s best overall SSL performance/price ratio,on popular public cloud marketplaces such as AWSwith advanced client certificate handling for secureand Azureapplication support and easy application integration Integrated Layer-4 and Layer-7 server load balancing, Intelligently load balances traffic across optimallink load balancing, global server load balancing,WAN links to reduce costs and improve theconnection multiplexing, SSL acceleration, SSLperformance of business-critical applicationsintercept, caching, compression, traffic shaping, DDoSprotection, IPv6 and web application security High-performance, kernel-level Layer-7 policyengine to enable customizable application trafficmanagement without impacting performance orscalability Multi-level security including a hardened OS, forwardor reverse-proxy architecture and kernel-level webfirewall for guarding applications without impactingperformance Secure Application Access to authenticate andstreamline user access to web-based and other Application-specific certifications, guides andpolicies for rapid deployment and accelerateddelivery of business-critical enterprise applications ePolicy L7 application scripting and eRoute L4routing for custom control of application traffic IPv6 gold certified for IPv4 preservation, IPv4/6translation and IPv6 migration Array eCloud RESTful API and XML-RPC forseamless interaction with cloud managementsystems and 3rd party monitoring solutions Integration with VMware vRealize Orchestrator andapplications in conjunction with AAA servers includingMicrosoft System Center, as well as OpenStack loadSAML, LDAP, RADIUS and OAuth for Single Sign-Onbalancing-as-a-service (LBaaS) Delivers 99.999% application availability, up to 5x Space-efficient, redundant-power hardwareapplication acceleration and provides a first line ofappliances that consume 10-35% less power versusdefense for web-enabled applications and cloudalternative solutionsservices Familiar CLI, intuitive cloud-friendly WebUI and Offloads SSL processing from web and applicationservers for increased efficiency, capacity and return oninvestment (ROI) Intercepts and decrypts/re-encrypts SSL traffic for3rd-party security appliances, allowing full inspectioncentralized management for ease of use andconfiguration

APV x 800 SER IES DATASHE E TServer Load BalancingAPV x800 Series application delivery controllersenvironments, and business-critical applications thatrequire high-volume secure connectivity.ensure 99.999% availability for cloud services andThe APV Series’ SSL/TLS engine includes advancedenterprise applications. Leveraging robust distributionsecurity to minimize the possibility of attacks, thusalgorithms, health check mechanisms, clustering andfurther enhancing the security of applications andfailover capabilities, APV Series appliances maintainservers. For example, if an SSL renegotiation attack isconnections, ensure persistence, direct traffic away fromdetected, the APV Series can disable SSL renegotiationfailed servers and intelligently distribute applicationor enable rate limiting. Secure SSL renegotiation isservices across multiple servers for optimizedalso supported. In addition, some applications mayperformance and availability. APV Series can loadsupport only SSL 3.0 or TLS 1.x, which have proven to bebalance traffic for a wide variety of protocols at Layers 2,vulnerable to attacks. The APV Series can bridge from3, 4 and 7, including WebSocket and WebSocket Secure.current SSL/TLS versions to provide improved clientside security without requiring changes to the server orLayer-7 Policy EngineCustomized traffic management is often a trade-offbetween performance, control and ease-of-use. UnlikeADCs that rely on complex, compute-intensive scriptingto enable custom Layer-7 policies, Array supportsa vast library of policies that are hard-coded at thekernel level, are configurable with point-and-clicksimplicity via the WebUI or CLI, and can be combinedand nested to create advanced customized applicationtraffic management. With Array’s unique approach toLayer-7 traffic management, customers get the best ofall worlds: ease of use, granular control and superiorperformance and scalability.application.APV Series SSL/TLS processing is performed inhardware to provide high performance and capacity, aswell as industry-leading TCO.SSL InterceptSSL-encrypted data traffic is increasing rapidly, whichcan place data centers and enterprises at risk – inmany cases, encrypted traffic cannot be inspected bysecurity appliances such as firewalls, IDS/IPS, data lossprevention and deep packet inspection, thus bypassingthese important security measures.Array’s SSL Intercept capability decrypts SSL traffic,SSL/TLS Acceleration & Offloadingallowing 3rd-party appliances to inspect them fully,The majority of internet traffic is now protected bydestination. Flexible deployment options include L2SSL/TLS encryption, which ensures data privacyor L3 mode, integrated or distributed mode, forwardand integrity; however, SSL/TLS comes with a costor reverse proxy, and load balancing across multiplein terms of processing compute-intensive 2048-bit3rd-party security appliances. In addition, an APV Seriesencryption. Array SSL offloading reduces the numberADC can operate as a Webagent service to implementof servers required for secure applications, improvesexplicit forward proxy mode for additional security.server efficiency and dramatically improves applicationperformance. The APV Series also simplifies SSLcertificate/key management to enable intelligentcontent management and routing.then re-encrypts before forwarding the traffic to itsAs an option, the Webroot BrightCloud ThreatIntelligence Service is available for the APV Series.BrightCloud includes reputation services thatprotect users from malicious sites, as well as aIn addition, the APV Series provides SSL accelerationweb classification service to allow blacklisting ofto offload compute-intensive key exchange and bulkinappropriate sites and/or whitelisting of sites for whichencryption, and delivers industry-leading client-traffic must flow without inspection due to regulatorycertificate performance. SSL acceleration is idealand other requirements – such as financial or healthcarefor scaling secure SaaS offerings, e-commercesites that contain confidential personal information.

APV x 800 SER IES DATASHE E TWebWall Web Application Firewalland DDoS ProtectionWith WebWall , Array’s suite of web application securitycapabilities, APV Series application delivery controllerscan protect against distributed denial of service (DoS/as a SAML SP, the APV Series interacts with a SAMLIdP (such as Array’s AG Series SSL VPN) to securelyauthenticate the user, thus simplifying and streamliningaccess.DDoS) and malformed URL attacks and allow a wideLink Load Balancing & GSLBrange of Layer 2 through Layer 7 protective policies toLink load balancing (LLB) and global server loadbe stacked atop one another for increased security.balancing (GSLB) ensure 99.999% availability for wideAPV appliances are security-hardened to protectapplications and servers from L4 and L7 DDoS attacksat the application, session and network layers, andsupport content filtering to guard against protocol andapplication DDoS attacks as well as Syn-flood, teardrop, ping-of-death, Nimda, Smurf and other maliciousattacks. In addition, Array’s DDoS protection featuresmachine learning for anomaly detection and automaticconfiguration of threshold values. APV appliancesalso feature extensive access control lists, networkaddress translation and stateful packet flow inspection– all executed at the kernel level – to guard againstattacks and unauthorized access without impactingperformance or scalability.area network (WAN) connections and geographicallydispersed sites and hybrid cloud environments. Linkload balancing with end-to-end health monitoringand dynamic routing detects outages and monitorsperformance in real time to distribute traffic acrossmultiple WAN connections for a premium, alwayson end-user experience. Ideal for geographicallydistributed applications, multi-site architectures andhybrid cloud applications, global server load balancingdirects traffic away from failed data centers or cloudservices and intelligently distributes services betweensites based on proximity, language, capacity, loadand response times for maximum performance andavailability. In addition, Array’s GSLB supports mixedhealth check relationships across SDNS service pools,In addition, integrated web application firewallas well as EDNS-client-subnet to provide improvedcapabilities provide deep application data inspection –resolution services and thus improve the userbeyond IP and TCP headers – to deal with attacks suchexperience.as SQL injection and cross-site scripting. Deployablein front of multiple web or application servers, Array’sweb application firewall detects and responds toApplication Accelerationsignatures for known application vulnerabilities and isAPV Series appliances leverage multiple accelerationprogrammable to deal with future threats.technologies and optimizations to deliver a premiumend-user experience for a wide range of applicationsSecure Application Accessand data services. In-memory caching increases serverWeb-based and other applications typically requireby over 500%, hardware or software compressionsecure authentication in order to grant access tocan reduce bandwidth utilization and end-userusers; however, when users require access to multipleresponse times by more than half and TCP connectionapplications, or applications include subsystems thatmultiplexing aggregates millions of short-lived clientalso require authentication, the process of logging inconnections into persistent fast lanes that increasecan become cumbersome and difficult. The APV Seriesserver efficiency by up to 70% while improvingsupports Secure Application Access and multiple AAAapplication performance.efficiency and improves seek and response timesmethods including Security Assertion Markup Language(SAML), LDAP, RADIUS and OAuth to allow users toSingle Sign-On (SSO) just once, and gain access to allePolicy L7 Application Scriptingapplications for which they are authorized; Single Log-Where Array’s Layer-7 policy engine cannot meetOut closes all active logins at session’s end. Servingapplication traffic management requirements, ePolicy