Packeteer`s PacketShaper

Packeteer’s PacketShaper
®
The performance of mission-critical applications across the WAN and Internet is critical to business. And yet large emails, peer-to-peer downloads, and Web browsing --- which compete for the
same network resources --- can swamp business applications like Oracle, SAP, and VoIP.
PacketShaper is an application traffic management appliance that provides visibility into these
problems and the control to resolve them. By monitoring, controlling, and compressing network traffic, PacketShaper provides high quality of service to critical applications and enables
enterprise and other organizations to align precious network resources with business priorities.
Gain Visibility
Into Network
and Application
Performance
Optimize
Business Traffic,
Control
Unwanted
Applications
Shape
Traffic With
Minimums and
Maximums
Compress Traffic
to Increase WAN
Capacity
Identify
Infected Hosts
Align Application Performance
With Business Priorities
PacketShaper safeguards application performance by monitoring, controlling, and
compressing traffic at congestion-prone
WAN and Internet access links.
Visibility
PacketShaper automatically classifies network traffic into categories based on application, protocol, subnet, URL, and other
criteria — yielding thousands of potential
categories. PacketShaper goes beyond static port-matching and IP address schemes.
Its Layer 7 classification pinpoints hundreds of applications, from Oracle and
SAP to Gnutella and KaZaA.
PacketShaper collects more than 100 measurements for each traffic type to provide
detailed analysis of network utilization,
application performance, and network efficiency. In-depth diagnostics reveal the
source of complex performance problems,
including identifying hosts infected with
viruses or worms.
PacketShaper’s extensive onboard reporting capabilities provide reports, graphs,
and statistics via SNMP and XML that validate WAN and application performance.
With service-level agreements, you can
define performance standards, compare
actual performance with service-level goals,
and generate reports on compliance.
Control
PacketShaper protects critical applications
from performance disruptions by leveraging its application-layer visibility to administer policy-based bandwidth control and
traffic shaping. Specify bandwidth minimums and maximums to protect critical
applications, contain unsanctioned traffic,
and pace bursty applications that are less
urgent. Dynamically provision bandwidth
by application, user, or customer.
Compression
PacketShaper’s Xpress™ combines application-intelligent compression with active
management techniques to simplify
deployment and maximize bandwidth
gains. By combining compression with control-based bandwidth management capabilities, PacketShaper ensures that business
organizations generate greater bandwidth
availability, avoid unnecessary link
upgrades, and remove repetitive data.
Deliver Key Applications Reliably Over the WAN & Internet
PacketShaper is a versatile application traffic management system. It can be tailored to fit the specific needs of an
organization, with monitoring features to identify and analyze performance, shaping capabilities to allocate
resources once an accurate assessment of network behavior has been determined, and compression to further
enhance performance.
PacketShaper
Transparent Deployment
Router
Branch
PacketShaper
Router
Main Site
Router
WAN
Branch
(Frame Relay,
MPLS, TDM,
IP, etc.)
Router
PacketShaper
PacketShaper
ReportCenter
Applications
Branch
PolicyCenter
Whether you rely on frame-relay, MPLS, IP-VPN, ATM, point-to-point, or wireless WAN or Internet links, PacketShaper fits seamlessly into your IP network. It
operates as an in-line bridge, transparent to your router, switch, and application infrastructure. LAN Expansion Modules (LEM) provide extra flexibility for
complex switched networks. In the event of failure, PacketShaper’s automatic hardware bypass prevents it from blocking traffic; additionally, two units can be configured in redundant failover mode.
Functional Overview
Site Deployment Options
Traffic Monitoring
Main Site WAN
Monitor WAN and Internet traffic, leveraging Layer 7 classification, network utilization, and application response time management. Identify causes of network and application performance problems, baseline performance and service-level expectations, and
monitor and report results continuously.
Monitor and shape traffic for multiple sites where application traffic flows
to a single central site in a hub-and-spoke topology.
Considerations: To protect VPN traffic from browsing and other recreational use (using
Internet VPN to supplement WAN), add Main Site Internet Link deployment. Deploy at multiple branch sites to control bandwidth allocations and performance for networks with
branch-to-branch traffic or multiple main sites, including distributed applications, departmental applications, Web servers, multiple intranet sites, VoIP, video-over-IP, distributed
email servers, etc., or to enable Xpress acceleration.
Traffic Shaping
Main Site Internet Link
Utilize traffic-shaping to control allocation
of network resources through explicit bandwidth policies per user, session, or application. Leverage TCP and UDP Rate Control
technologies to manage congestion and control end-to-end latency to ensure performance of mission-critical applications.
Monitor and shape traffic flowing through Internet service links including
protection of VPN traffic and general Internet traffic backhauled through
the WAN.
Traffic Compression
Combine application-intelligent compression, latency management, and
ActiveTunnel management to accelerate
and enhance information delivery. Active
between two Xpress-enabled PacketShaper
units, Packeteer’s compression increases
network capacity for bandwidth-constrained
branch offices.
Considerations: For significant branch-to-branch IP-VPN traffic, multiple main sites, or
meshed network topologies, utilize Distributed Branch Deployment. When converting from a
"backhauled" Web access model to distributed Internet access at multiple sites, Packeteer
appliances enable monitoring and control of all traffic to and from these sites (that would
no longer traverse a main site PacketSeeker or PacketShaper).
Distributed Branch or Multi-Main Site
As applications are distributed to multiple main sites or branch offices,
deploy at multiple locations to monitor and shape meshed application flows
or to enable compression.
Considerations: When deploying multiple PacketSeeker or PacketShaper units, consider
deploying centralized reporting, analysis, and administration to streamline management
and lower ownership costs. This can be achieved using Packeteer’s ReportCenter and
PolicyCenter, or utilizing SNMP or XML access to integrate with existing reporting and
event management infrastructures.
ROI -- PacketShaper’s Business Benefits
Controls Overall Business TCO and Cost Containment
• Extends existing network and bandwidth resources.
• Avoids bandwidth and infrastructure upgrades.
• Protects investments in critical business applications
like SAP, Oracle, VoIP, and Citrix.
Aligns Network Resources With Business Needs
• Ensure bandwidth and other network investments
support business applications --- not rogue traffic.
• Efficient, reliable performance of CRM and other
customer-facing applications propel efforts to support customers, partners, and branch offices.
Key PacketShaper Features
Application Traffic Monitoring
Description
Feature
Traffic Classification
Classify traffic by application signature, protocol, port number, URL or wildcard, host name, LDAP host
lists, Diffserv setting, ISL, 802.1p/q, MPLS tag, IP precedence bits, IP or MAC address, direction
(inbound/outbound), source, destination, host speed range, Mime type, web browser, Oracle database,
Citrix published application, and VLAN. Detect dynamic port assignments, track transactions with migrating port assignments, and differentiate among applications using the same port.
Response-Time Analysis
and Management
View more than 30 measured variables, such as response times (divided into server and network delays),
clients and servers with the slowest performance, users who generate or receive the most traffic of a given
type, the percentage of bandwidth wasted by retransmissions, dropped packets and their correlation with
their corresponding applications or servers.
Service-Level Agreements Set response-time commitments in milliseconds. Measure and track service-level compliance. For example,
suppose a SLA states that 98% of JD Edwards' OneWorld transactions should complete in 1,100ms. Actual
response time averages 867ms. But only 95% complete within limits, so SLA is in violation.
Top 10
Zero in on the traffic types that generate the most traffic. Top Ten helps users spot trouble and fix it -quickly and without a big learning curve. Confirm how much bandwidth goes to web browsing, music
downloads, MS Exchange, SAP, and more.
Centralized Management
& Reporting
PolicyCenter centrally manages multiple PacketShaper units via LDAP policy architecture; ReportCenter
aggregates and correlates metrics from multiple PacketShaper or PacketSeeker units for simplified insight
into large enterprise deployments or as part of a managed application service.
Application Traffic Shaping
Feature
Per-App Minimum
Per-App Maximum
Per-Session Minimum
Description
Protect all the traffic in one class. You specify the size of the reserved virtual link, choose if it can exceed
that size, and optionally cap its growth. For instance, reserve a minimum of 20% of the WAN link for MS
Exchange. Allow Exchange to exceed the minimum if bandwidth is available, but cap it at 60% of the link.
Cap all the traffic in one class. Even when the traffic bursts, other applications are not impacted. e.g. Limit
FTP total to 128 Kbps in a T1 link.
Protect latency-sensitive sessions. Deliver a minimum rate for each individual session of a traffic class, allow
that session prioritized access to excess bandwidth, and set a limit on the total bandwidth it can use.
Per-Session Maximum
Keep greedy traffic sessions in line. For example, cap each FTP download at 10 Kbps.
Dynamic Per-User
Minimum & Maximum
Dynamically control per-user bandwidth without need for tedious per-user configuration. Unused bandwidth is loaned to others.
TCP Rate Control
Force a smooth, even flow rate that maximizes throughput. Reduce latency on both inbound and outbound traffic. Measure network latency; forecast packet inter-arrival times; adjust window size accordingly; meter acknowledgement to ensure just-in-time delivery.
UDP Rate Control
Manage inbound and outbound UDP traffic to a very specific rate, guarantee precise amounts of bandwidth, and control jitter. For instance, VoIP requires a minimum amount of bandwidth, and PacketShaper
provides the precise amount to de-jitter flows and ensure reliable performance.
Denial-of-Service Attack
Avoidance
Use classification and control features to contain DoS attacks. Detect and stop SYN floods or similar DoS
attacks. e.g. Detect and block ICMP variants that can plant malicious instructions. Block flows to the
KeySales web server after 15,000 flows-per-minute exceeded.
Application Traffic Compression
Feature
Description
Application-Intelligent
Compression
Knowledge of applications and plug-in architecture allows Xpress to apply the most effective technique.
Adaptive algorithms learn and dynamically build pattern libraries across packets. Predictive exclusion
limits compression to data that is compressible.
ActiveTunnel
Management
Dynamically discovers and automatically establishes compression tunnels that provide a system that is easy
to deploy and manage. Active sizing ensures that the virtual pipe is filled based on predictive algorithms,
maximizing network utilization.
Latency Management
Adapts to different application flows and utilizes advanced traffic management technologies to ensure
optimum application performance, even during heavy traffic loads.
Centralized Reporting
And Management
Packeteer provides several tools to manage large environments. ReportCenter™ provides central reporting and
analysis; PolicyCenter™ provides central policy management and administration. Additionally, SNMP and XMLAPI is used to integrate with systems from leading vendors
like HP, InfoVista, Concord, and Aprisma.
PacketShaper Features and Specifications
1550
Series
6500
2500
8500
9500
Capacity
7,500
30,000
150,000
300,000
600,000
2Mbps
10Mbps
100Mbps
200Mbps
500Mbps
Maximum IP flows*
Maximum throughput
Maximum dynamic partitions
**
512
5,000
10,000 or 20,000
10,000 or 20,000
Maximum classes
256
512
1,024
1,024 or 2,048
1,024 or 2,048
Maximum static partitions
128
256
512
1,024
1,024
Maximum policies
256
512
1,024
2,048
2,048
5,000
10,000
25,000
100,000
200,000
10
30
50
100
300
Maximum IP hosts*
Maximum tunnels
Options & Upgrades
Monitoring (PacketSeeker)
Shaping link size (PacketShaper)
Monitoring
Monitoring
Monitoring
Monitoring
Monitoring
128K, 512K, 2M
128K, 512K, 2M, 6M, 10M
10M, 45M, 100M
200M
200M, 500M
512K
2M
10M
45M
45M
2x10/100Base-T
2x10/100Base-T
2x10/100Base-T
No
2X10/100Base-T
Compression (Xpress***)
Interfaces
Network Interfaces (in and out)
LAN Expansion Modules
(2 slots available)
2x10/100/1000Base-T; 2x1000Fiber SFP - SX (275m)
or LX (5km or 20km)****
2x10/100Base-T (6500 only); 2x10/100/1000Base-T; 2x1000Fiber SFP - SX (275m)
or LX (5km or 20km)****
All have RS-232 (AT-compatible) with male DB-9 connectors
Console Port
Dimensions -- All are 19” rack-mountable
Height
1U or 1.75in (4.45cm)
2U or 3.5in (8.89cm)
2U or 3.5in (8.89cm)
2U or 3.5in (8.89cm)
Width
17in (43.18cm)
17in (43.18cm)
17in (43.18cm)
17.31in (43.97cm)
17.31in (43.97cm)
Depth
14in (35.56cm)
14in (35.56cm)
15.25in (38.74cm)
19.25in (48.90 cm)
19.25in (48.90 cm)
Weight
11lb (4.99kg)
16lb (7.26kg)
17lb (7.71kg)
27lb (12.25kg)
27lb (12.25kg)
100/240 VAC;
50/60Hz, 2A
100/240 VAC;
50/60Hz, 2A
100/240 VAC;
50/60Hz, 2A
100/240 VAC;
50/60Hz, 6A
100/240 VAC;
50/60Hz, 6A
No
No
Yes
Yes; Hot-swappable
Yes; Hot-swappable
2U or 3.5in (8.89cm)
Power
Power supply
Dual, redundant load sharing
Additional Features
Interoperability
XML, XML and CGI APIs, SNMP MIB, SNMP event traps; HP OpenView, InfoVista, Concord eHealth, Aprisma Spectrum, Micromuse Netcool
Device management
RS-232 compatible (DB-9 connector) console port, Web browser interface, Telnet CLI, SNMP Packeteer MIB and MIB-II support
Agency Approval
Safety
CAN/CSA-C22.2 No.1950-95/UL 1950, IEC 60950, EN 60950
Emissions
AS/NZS 3548 Class A; AS/NZS 4252.1; ICES-003, Class A; EMC Directive 89/336/EEC; EN 300 386 v1.3.1: 2001 Telecom EMC standard; EMC Directive 73/23/EEC; EMC Directive 93/68/EEC; EN 55022: 1998 Class A; EN 61000-3-2:1995_A1(98) +A2(98), & prA14(00);
EN 61000-3-3:1995; EN 55024:1998; VCCI:2002, Class A; KN55022 Class A KN6100-4-2,3,4,5,6,8,11; GOST-R 60950-2002; GOST-R
51318.22-99, .24-99; PSB; FCC 47 CFR pt 15, subpt B, Class A
Immunity
IEC 60950:1999 3rd Edition; EN 60950:2000; UL 60950: 2000; CAN/CSA C22.2 No.60950-00; EN 60825-1,-2 Class I Laser
*PacketShaper can support more hosts and flows, however these figures represent ideal maximums for producing optimal results; Figures represent total TCP and other IP
flows respectively. **No extra partitions are specifically allocated for dynamic partitions. This model can have a maximum of 128 partitions, which can be a combination of static and dynamic partitions. ***Refers to post-compressed traffic rates -- Due to the impact on memory and processor capacity, maximum compressed traffic specifications for
PacketShaper Xpress are lower than PacketShaper units that have not enabled the Xpress option. ****New LEM requires PacketWise 6.1.
1107.K 4/04
10201 N. De Anza Blvd. • Cupertino, CA 95014
Tel: (408) 873-4400 • Fax: (408) 873-4410 • www.packeteer.com
2000-2004 Packeteer, Inc. All rights reserved. Packeteer, PacketShaper, PacketSeeker, PacketWise, PolicyCenter and ReportCenter are trademarks or registered trademarks of Packeteer, Inc. All other trademarks are property of their respective owners.