TECH 5 - Beyond WAN Acceleration: WAN acceleration. David S. Michel CIO: Burr & Forman LLP Sean M. Power Manager IT Security and Infrastructure:

(1)

TECH 5 - Beyond WAN Acceleration:

Using Riverbed for more than just

WAN acceleration

David S. Michel – CIO: Burr & Forman LLP

Sean M. Power – Manager – IT Security and Infrastructure:

L h

& G

LLP

Lathrop & Gage LLP

Steven R. Smoot, Ph.D. – VP of Technical Operations

Riverbed

(2)

Agenda

• What does Riverbed do in your Network?

What does Riverbed do in your Network?

• Branch Office Box Solution

–

Riverbed Services Platform - RSP

Riverbed Services Platform RSP

–

Steelhead Mobile Controller - SMC

• End to End Visibility and Performance Monitoring

y

g

–

Cascade

• Summaryy

• Q/A

(3)

Imagine if You Could….

Cut consolidation time by 50% with no performance hit

Avoid WAN bandwidth upgrades for 3 years

3 Avoid WAN bandwidth upgrades for 3 years

YEARS

3 Improve worker productivity globally

Drive more than 400% ROI in 6-9 months

457%

(4)

For 7800+ Customers, the

Answer Is Riverbed

$6 5M d

i

S i $20M/ A hi

6 S

d $5M i

_{$6.5M saved in}

1 year $60M in

5 years

Saving $20M/yr

via faster value

chain

collaboration

Achieve a 6 mo

payback and

save $20M

Saved $5M in

software costs

collaboration

“With Riverbed, remote users regularly access centralized data without

g

y

experiencing 45 minute wait times. Users are less frustrated and more productive,

while IT costs have been lowered”

---- Nat Thomas, Technical Director, CSX

Nat Thomas, Technical Director, CSX

(5)

Riverbed is the IT Performance

Company

Optimize

Consolidate

Understand

The ROI from Network, Storage, App, and Cloud

Investments

To the data center and within the branch The Total Performance

Picture SIMPLIFY CONSOLIDATION / VIRTUALIZATION AND ENABLE LOCAL-LIKE PERFORMANCE SPOTLIGHT CURRENT

PERFORMANCE PAIN & POTENTIAL

ACCELERATE APPS, CUT BANDWIDTH COSTS,

ENHANCE BCDR, IMPROVE STAFF PRODUCTIVITY PRODUCTIVITY

(6)

Riverbed

’

s Complete Family

of Performance Products

BRANCH OFFICE BRANCH OFFICE

Steelhead Appliances & Virtual

Steelhead*

Cascade

PRIVATE DATA CENTER PRIVATE DATA CENTER

WAN

PRIVATE DATA CENTER PRIVATE DATA CENTER PRIVATE CLOUD PRIVATE CLOUD Steelhead Mobile MOBILE WORKERS MOBILE WORKERS Steelhead Mobile Cloud Steelhead* PUBLIC CLOUD PUBLIC CLOUD

SECONDARY DATA CENTER SECONDARY DATA CENTER

(7)

Riverbed’s Cloud Direction

Cloud Services Provider

Backups or

D t C t

WAN

Data Center

_WAN

WAN

(8)

What is RSP?

• VMware Virtualization running on the

VMware Virtualization running on the

Steelhead – VM Server 2

• S pport for 5 VM instances

• Support for 5 VM instances

• Steelhead is always in-path, but RSP provides

f

ff

f

flexible configurations for different data flow

scenarios (VNI’s – virtual network interfaces)

• RSP is a separate service running in own

memory space – traffic and optimization

always preserved

(9)

Use Cases for RSP

• Branch Services

Branch Services

–

DC, AD, File and Print, BranchCache

Consolidated core network services Infoblox

–

Consolidated core network services - Infoblox

• Security

/

–

IDS/IPS,

–

Firewall (e.g. Checkpoint, Forefront),

–

Web Filtering (e.g. Websense)

(10)

IT Consolidation

INSIDE

the branch

Further

Consolidation at

Further

Consolidation at

Branch Office

Today

Branch Office

Today

Server

Consolidation to

Server

Consolidation to

Branch Office

Today

Data Center

AD AD AD, DNS/DHCP FIREWALL DNS/ DHCP PRINT SERVER FIREWALL FILE SERVERS MAIL SERVER AD, DNS/DHCP FIREWALL DNS/ DHCP PRINT SERVER FIREWALL FILE SERVERS MAIL SERVER FIREWALL

ANY VIRTUALIZED SERVICE

MAIL SERVER FILERS STORAGE FIREWALL PRINT SERVER WAN OPTIMIZATION MAIL SERVER FILERS STORAGE

(11)

Use Cases for RSP

• Enterprise Video

Enterprise Video

–

Efficient video streaming

Live video splitting at the edge

–

Live video splitting at the edge

–

Content prepositioning

A t

t d di

ti

f

th

–

Automated redirection for the user

–

Support for Flash and Windows Media

P l

Q

d W d

M d

(12)

Use Cases for RSP

• Networking & Management

Networking & Management

–

Routing – Vyatta

Riverbed Virtual Editions

–

Riverbed Virtual Editions

• Steelhead Mobile Controller - SMC VE,

• Cascade Sensor VE

Cascade Sensor VE

–

Satellite communication – SCPS

–

OPNET

(13)

RSP - Screenshot

RSP Screenshot

(14)

RSP Networking

• In-band packages

AN N f

AN

WAN d

fl

–

LAN VNI for LAN to WAN dataflow

–

WAN VNI for WAN to LAN dataflow

–

Virtual In-Path packages

• DNAT (IP, Port, IP & Port) – Proxy based solutions like

SAP/ADOW

• Mirror – Span port for network monitoring

–

Management VNI’s – primary/aux ports

Management VNI s primary/aux ports

• Out-of-band packages

• e g Windows Ser er

• e.g. Windows Server

(15)

RSP Networking

(16)

RSP Networking

(17)

Summary of Dataflow rules

Package Solution VNI Integration Interaction with Opt traffic

Windows / Infoblox Branch Services Mgmt / Aux None

Websense URL Filtering Virtual Inpath All traffic copied to the

package package Checkpoint, McAfee

Firewall Enterprise, Microsoft TMG

VPN and Firewall LAN/WAN Bridging Optimizable traffic redirected to package

Polycom, Qumu,

Accordent Media Services Virtual Inpath

Redirected to

package with Layer 3 NAT

Opnet Ace Live,

Riverbed Cascade Network Monitoring LAN/WAN Bridging Span port

Vyatta Routing Virtual Inpath Layer 2 switch

(18)

RSP - Technical Considerations

RSP Technical Considerations

• VM creation in VMserver, Workstation and P2V

• Virtual machine versions 4, 6, 7

• Check 32Bit/64Bit support per appliance model depending on what VM

you want to run

–

Desktop Models – 250, 500 32-bit

Desktop Models 250, 500 32 bit

–

1U and Above – 64-bit

• For production critical RSP packages

–

recommend RAID kit for SH for the 1U models

• No thin provisioning

• Must install VMware tools

• No USB or CD/DVD support

• Memory supported disc space supported

• Memory supported, disc space supported

• RiOS 6.0 and above – more RAM supported

• Check resources that appliance needs

(19)

Steelhead Mobile

• Software based implementation of Steelhead

Software based implementation of Steelhead

technology for your end-points

• Gi e o r laptops and PC’s their own

• Give your laptops and PC’s their own

Steelhead for optimization when working

remotely

(20)

Three Challenges For Mobile Workforce

p g

Location

Inconsistent connection types, costs, and user volumes: Inconsistent connection types, costs, and user volumes:

All conspire against a

y

““standardstandard

g p

”” environment environment

Latency

Is the major issue how long it takes people to accomplish a task?

Latency is the secret throughput killer

Steelhead Mobile Solves All Three Challenges!

_{Low bandwidth links (e.g. satellite)}

Link

Lots of applications on overwhelmed bandwidth

pp

Expensive

(21)

Making Acceleration Easy –

For All Mobile Users

Concurrent licensing model

A

workers

‘

pool

’

of licenses for use by all mobile

Estimated 1 license per every 3 to 5 mobile

workers

Other vendors do licensing

per user

$87 cost estimate per mobile ser (1 4 model)

Pricing

$87 cost estimate per mobile user (1:4 model)

Steelhead Mobile Controller: $12,995

(includes 30 licenses)

Steelhead Mobile Licenses: Starts at $3 500

Steelhead Mobile Licenses: Starts at $3,500

for 10

Deploy to all laptops pay only for what you

Easy to manage

Deploy to all laptops – pay only for what you

_need

Cluster Steelhead Mobile Controllers as

needed

(22)

Steelhead Mobile Solution –

The 3 Components

Steelhead Mobile Software Steelhead Mobile Controller Steelhead Appliance

• Deployed on a laptop or desktop

PC

• Runs in ‘invisible’ or ‘visible’ mode • Reduces bandwidth needs

• Optimizes protocol inefficiencies

Deployed in the data center

Handles all licensing, detailed reporting, packaging &

policies pp Deployed in data center Any model RiOS 4 i d

• Optimizes protocol inefficiencies • Windows 2000 SP4: XP SP3 (32

bit versions only), Vista SP1 (32 bit versions only)

• Celeron 450MHz CPU

• Minimum 250 MB hard drive

policies

Supports up to 2,000 concurrent active Mobile clients

RiOS 4.x required

Communicates directly with Steelhead Mobile

• Minimum 250 MB hard drive

(configurable up to 20 GB)

• 256 MB RAM

Clusters for scale

Minimum one Steelhead Mobile Controller required

(23)

Two Deployment Options

SMC-VE SMC

PRIMARY DATA CENTER BRANCH OFFICE

SMC-VE, SMC

Steelhead Mobile Controller

Appliance

Designed for large

deployments and rapidly Steelhead Mobile Controller

Virtual Edition

Enterprise grade acceleration for SMB or smaller strategic

WAN

growing organizations

Standalone appliance deployed in the data center.

$12,995 with 30 concurrent

mobile deployments

Virtual package deployed in the Riverbed Services Platform on Steelhead Appliance

MOBILE WORKERS

licenses

Supports up to 4,000

concurrent active Mobile clients

Clusters for scale

$5,995 with 10 concurrent licenses

Supports up to 100 concurrent active Mobile clients

(24)

Steelhead Mobile - Benefits

HTTP & HTTPS Optimization

Steelhead Mobile Benefits

HTTP Acceleration

Improved performance for all HTTP(S)

applications

Same approach to HTTP(S) optimization as RiOS 6.0 provides a complete

pp

( ) p

p

solution for web application acceleration for branch office and mobile workers

Branch Warming

“

Warm

Warm performance regardless of location

“

performance regardless of location

Sharing data references between mobile and branch office

workers improves acceleration for the entire organization

Expanded Support for Next Generation Operating Systems & Platforms

Branch Office (LAN)

Expanded Support for Next Generation Operating Systems & Platforms

64-Bit Systems: Optimization for memory and data intensive

applications

W d

7 C

f

f ll f M

f '

Windows 7: Consistent performance for all of Microsoft's

(25)

Use Cases for

Steelhead Mobile

Pandemic Planning

Backup Optimization

• Tools for mobility need to be in

place

• Business processes essential

• Cost-effective Steelhead

backup mechanism

• Only active when Steelhead is

t

• Most large customers do some

form of planning

• Federal Telework Mandate

G

IT I iti ti

not

Desktop Virtualization

• Integration into virtualization

tools

Green IT Initiatives

• Consolidation efforts save

energy, staff, equipment

• SHM saves cost of additional

tools

• Accelerate full virtualization

tools

• Accelerate Application

• SHM saves cost of additional

appliances

• Real estate costs

Accelerate Application

virtualization tools

(26)

Steelhead Mobile

Real World Performance

• Laptop offline for 1 week, mailbox not synched – Outlook 2003

p p

y

• After full synchronization – 52% reduction of MAPI traffic

(27)

Steelhead Mobile

Real World Performance

• New OST file (e g OST file corruption)

New OST file (e.g. OST file corruption)

• Mailbox – 1.14 GB

f

M

• Time for full caching over 15Mb DSL, 50ms

latency

Æ

29 minutes

Æ

5Mb/s

• 72% bandwidth reduction

Æ

1031 MB

(28)

Steelhead Mobile

(29)

Technical Considerations

• Windows and Mac support

Windows and Mac support

• Careful with Out of path support depending

where ser er side SH is

where server side SH is

• Datastore size – larger data store translates to

AM

more RAM

• Processor considerations

• Images did not have sysprep or ghostwalker –

(30)

Cascade

• End to End layer 4 - 7 visibility and performance

End to End layer 4 7 visibility and performance

monitoring

–

Which applications at which sites still require acceleration?

–

What performance level is each of your users experiencing

now?

A

l

h

& l

h

–

Are critical metrics such as throughput & latency where the

business needs them to be?

–

Are specific applications or users slowing down your

network?

(31)

Cascade = Visibility

Manage Application

P f

Monitor application delivery on the

network

Performance

Minimize impact of service outages

Resolve issues proactively

Streamline WAN

Optimization

Plan for WAN optimization, quickly identify

best candidate sites for optimization

A

i

t f WAN

ti i ti

p

_{Assess impact of WAN optimization}

deployment and quantify benefits

Ensure Successful

Consolidation

Reduce costs and risks of IT consolidation

Accelerate application discovery and

dependency mapping

(32)

Cascade: a different way to

look at your network

Behavioral Analytics

Learns typical network and application behavior patterns and alerts you to meaningful changes

A cost-effective way to monitor your applications

Drill down to network performance metrics per application, host,

Network Drill-Down

user, and much more

Business-centric view of your infrastructure, with extended troubleshooting capabilities

End-to-End

Dependency

Mapping

Identifies application, server and client dependencies without agents

Helps you understand the impact of change on application delivery

Riverbed Steelhead

Fluency

Analyze application performance across optimized and non-optimized sites

Fluency

(33)

Cascade Deployment Topology

(34)

Cascade Analytics

• End-user experience metrics feed into the Cascade behavioral model

• Normal behavior is automatically learned – no configuration is

necessary

If

i

l

f

l

diti

i t i

d

(35)

Use Cascade to drill down &

discover problem sources

Example: problem related

to high WAN utilization

L t’ fi d th

li ti

Let’s find the application

Let’s find the server

Which user is responsible?

Let s find the server

Which user is responsible?

(36)

The Cascade product line

NOC Cascade

The Cascade product line

Data Center Web Tier Cascade Sensor NOC Cascade Profiler & Gateway Web Tier App Tier Cascade S VE DB Tier DNS AD NTP Sensor -VE

Profiler

• Centralized

reporting & analysis

• Behavioral analytics

Gateway

Sensor

• Layer 7 application

classification

• End-user experience

Sensor-VE

• Collects data from

sensors & gateways

• Sized based on flow

per minute capacity

• Collects flow data from selected

sources

• Supports all flow types

• Deploy w/profiler or regionally

• Performance metrics

• Collects traffic from

SPAN ports or taps

• Deployed in data center

• End-user experience

• Performance metrics

• Loads as RSP package

(37)

Cascade competitive overview

Cascad e Blue Coat NetQoS (Cisco) Ipanema NetScou t OPNET Generic NetFlow Automated analytics based on u o a ed a a y cs based o