Telenor Microfinance Bank
Application LoadBalancing
Innovative Integration
Agenda
• Current Traffic and System Utilization
• Design Considerations
• Possible Design Options
• BIGIP r10600 Hardware
• BIGIP VE High Performance Computing
• Pros and Cons
• Proposed Solution
Current Traffic and System Utilization
• TB’s has an exponential traffic growth.
• Had been using i4800 and used to
face maxout situations frequently.
• Moved traffic to i5800 machines
• Currently using BIG IP LTM i5800 with
Adv WAF license
• Peak hours memory utilization 60%
• Peak hours CPU utilization 75%
• BIG IP i5800 is equipped with 1x4Core
Intel Xeon and 48 GB DRAM
• F5 i5800 boxes have gone EOS and
has been replaced by rSeries boxes
Design Consideration
• The propsosed design
• Should be highly available design
• Should be a technically stable product
• Should Ensure Traffic Scaling considerations
• Five to Seven years Investement Protection
Possible Design Options
• Hardware
• Since we are already touching the upper limit of i5800 platform, we
would suggest r10600 LTM + AWAF x 2 hardware
• Advantages:
• Robust hardware with built-in SSL performance cards
• License upgradable to r10800 or r10900 as and when required
• Support for f5’s future application delivery roadmap including f5 BIGIP
Next and f5 Cloud XC
• Advnace Replacement of Hardware in case of failure
Possible Design Options
• BIGIP VE High Performance Computing
• VEs are vailable for all major Virtual Environments including VMware,
HyperV, KVM, Xen
• SmartNICs and SSL acceleration cards is not supported on all
evnironments
• Highly Scalable Model for WAF tier only
• Technical Support from f5 is always limited to f5OS or TMOS.
Overview of F5 r10600 (Hardware) and
f5 HPC VE
Introduction to F5 r10600
• Overview:
• The F5 R10600 is a high-performance Application Delivery
Controller (ADC) designed to optimize application performance,
ensure availability, and enhance security.
• Supports Local Traffic Manager (LTM) and Web Application Firewall
(WAF) capabilities.
• Key Features:
• Advanced traffic management.
• Comprehensive security controls.
• High scalability and reliability.
F5 r10600(LTM) Statistics
• What LTM Does:
• Distributes application traffic across servers.
• Provides load balancing, health monitoring, and SSL offloading.
• Key LTM Metrics:
• Traffic Throughput: 190 Gbps/125 Gbps L4/L7
• Requests Per Second (RPS): 4.5M
• Connections Per Second: 1.9M
• HTTP Requests Per Second: 36M
• WAF Impact: Enabling the WAF module increases the load on
system resources, including memory, CPU, and network
throughput.
Overview of F5 VE (Virtual Edition)
• What is F5 VE?
• A virtualized version of F5's Application Delivery Controller.
• Designed for deployment in virtualized and cloud environments.
• Key Features:
• Same functionality as hardware appliances, including LTM and WAF.
• Flexible licensing and deployment options.
• High availability and scalability in software-defined infrastructures.
• Supported Platforms:
• VMware, Hyper-V, KVM and Community Xen.
F5 High-Performance VE Statistics
• Key Metrics:
• L4 Throughput: 85 Gbps
• Requests Per Second (RPS): 4.6M
• Connections Per Second: 1.4M
• HP vCPUs: F5 offers High-Performance VE licenses with no
throughput limits and allows you to increase the number of
vCPUs to increase performance—up to a maximum of 24
vCPUs.
F5 r10600 (Hardware) vs HPC Virtual
Edition
• F5 r10600 can be upgrade to r10800 and then r10900 if
needed in future, depends upon the traffic increase. Hardware
remains same, Only license will be added.
• HP VE can’t get more than 24 vCPUs per node. So, to increase
capacity, Separate nodes will be added in the network.
• F5 r10600 has dedicated built in recourses for SSL offloading.
So, its an advantage.
• HP VE deployment involves multiple vendors which makes it
complex to deal with cases in future. While r10600 Hardware
deployment revolves around single vendor F5.
Questions ?
