Riverbed Tech Event 2014 Wan Optimization. Copyright 2014 Data Systems, todos os direitos reservados.

Transcrição

1 Riverbed Tech Event 2014 Wan Optimization

2 Agenda 09:00 Check-in 09:30 Apresentação Riverbed Wan Optimization 11:00 Coffee-Break 11:30 Riverbed Wan Optimization (continuação) 13:00 - Almoço 14:30 Riverbed Wan Optimization Hands On 16:30 Coffee-Break Copyright 2013 DataSystems, todos os direitos reservados. 2

3 RiOS: Overcoming the Bottlenecks 3

4 RiOS: Underlying Framework 4

5 RiOS: Scalable Data Reference (SDR)

6 RiOS: Data Streamlining Files & Data Data Request Reconstructed Files & Data WAN DATA CENTER BRANCH OFFICE Requests go directly from the client to the server Steelhead auto-intercepts response, and segments data De-dupes data so only new bytes compressed & sent over the WAN 16-Byte references represent megabytes of warm data Remote Steelhead reconstructs data and delivers it to the client Works bi-directionally, cross-protocol and across applications 6

7 RiOS: Transport Streamlining overcomes TCP Limitations The net effect is a 60-98% reduction in TCP round trips WAN DATA CENTER BRANCH OFFICE Make TCP payload bigger Data 16KB Repack payload to with references 100KB+ From 100KB+ to Virtual 1MB+ References New data 7

8 Application Streamlining overcomes Application Protocol Limitations Request Optimized WAN Transfer WAN DATA CENTER BRANCH OFFICE Steelhead completes transaction locally Steelhead completes transaction locally The net effect is 65-98% reduction in WAN round trips 8

9 RiOS Auto-Discovery 9

10 Steelhead Transparency modes 10

11 In-Path Rules: Connection Interception 11

12 Peering Rules: Adding a Peering Rule 12

13 Deployment Options 13

14 Server-side Out-of-Path Deployment (SSOOP) 14

15 Hybrid Deployment 15

16 Connection Forwarding in Parallel Deployments 16

17 Configuring Connection Forwarding 17

18 In-path First Connection Packet Flow 18

19 Enhanced Auto-Discovery Simplifies deployments for complex environments Automatically finds and optimizes between most distant Steelhead pair Eliminates the need for manual peering rules Requires no additional configuration Supports unlimited Steelheads in transit between C-SH and S-SH Improves performance finds optimal Steelhead pairing for maximum optimization DATA CENTER BRANCH OFFICE 19

20 Satellite Cleans TCP Field Options 20

21 Optimize only for Wan 21

22 Optimize San Francisco New York 22

23 Active-Active sync for business critical WAN optimization Customers believe Steelhead appliances are critical infrastructure Downtime is not an option High availability with datastore synchronization o Both Steelheads can optimize connections o Both Steelheads share the same segstore data o Supports both serial and parallel clustering (1:1 mode) DATA CENTER X sync Same warm performance BRANCH OFFICE 23

24 In-path Redundancy using Master/Backup Failover 24

25 Data Store Synchronization 25

26 Secure Vault 26

27 Segstore Encryption 27

28 Physical and Logical Interfaces 28

29 Steelhead Desktop Chassis 29

30 Steelhead 1U Rack Chassis 30

31 Steelhead NICs 31

32 Steelhead Initial Configuration 32

33 Post Install 33

34 Steelhead Health Check 34

35 Troubleshooting Duplex Mismatch 35

36 Troubleshooting Firewall Filtering 36

37 Packet Ricochet 37

38 Packet Ricochet 38

39 Packet Ricochet 39

40 Packet Ricochet 40

41 Asymmetric Routing 41

42 Troubleshooting Asymmetric Routing 42

43 Information Dumps 43

44 Steelhead in Window s Domains 44

45 Configure Steelhead for Window s Domains 45

46 File System Protocol Errors 46

47 File System Protocol Errors 47

48 Exchange Configuration 48

49 MAPI & CIFS Prepopulation 49

50 SSL Configuration 50

51 SSL Server Certificate Configuration 51

52 SSL Peering Trust Configuration 52

53 SSL Acceleration Request Optimized WAN transfer over SSL BRANCH OFFICE WAN DATA CENTER SSL Auto-discovery Temporary Session Key SSL session setup SSL Certificates and private keys copied to server-side Steelhead appliance (no certificate faking in branch offices) Steelheads use their own identity Certs to establish secure connection On secure data request, client connection is intercepted by sever-side Steelhead Server-side SH establishes SSL connection with origin server and client Temporary session key/client session is migrated to client-side Steelhead Transfers accelerated via RiOS; End-to-End SSL encryption maintained; Optionally, Steelhead-to-Steelhead IPSec can secure Raw data in motion Legend SSL Certificate Temporary Session Key Secured connection Encrypted Data Store feature protects Data at rest - AES 128, 192, 256-bit 53

54 Enhanced HTTP/HTTPS App Streamlining: how it works Intelligent learning mechanism more effective than any other method Optimized WAN Transfer Page request WAN DATA CENTER BRANCH OFFICE 1. Request is seen by client-side Steelhead 2. Client-side Steelhead has knowledge of the objects on the page 3. Client-side Steelhead forwards requests of all page objects in parallel 4. RiOS streamlining optimizes WAN transfer 5. Steelhead appliance learns about the objects/pages if it didn t know them before

55 What does QoS Do? 55

56 When is QoS Useful? 56

57 QoS Enforcement On Steelheads 57

58 Citrix Optimization 58

59 Steelhead System Alerts 59

60 Steelhead Alerts 60

61 IPsec 61

62 Interceptor Steelhead Aware Load-Balancer 62

63 Interceptor Rules 63

64 Steelhead Mobile Deployment & Operation Steelhead Mobile Controller Mobile Users WAN or Home Users Internet VPN Steelhead Appliance DMZ DATA CENTER 1. Steelhead Mobile Controller deployed in the data center 2. Client establishes a WAN/VPN connection as they usually do Small Branch Offices 3. Once connected, Steelhead Mobile first gets policy and license from the Controller 4. Steelhead Mobile then connects to the Steelhead appliance & begins accelerating data transfers 64

65 Steelhead Mobile Controllers 65

66 Steelhead Mobile Client Configuration 66

67 Steelhead Mobile Considerations 67

68 Location Awareness Overview 68

69 Location Awareness Overview 69

70 Branch Warming Process Overview 70

71 Branch Warming Process Overview 71

72 CMC Overview 72

73 CMC Features 73

74 Automatic Registration and Configuration 74

75 Touchless Steelhead Deployment With CMC 75

76 Optimizing Office365 with SCA 76

77 SCA and Certificates 77

78 Contactos Data Systems Nuno Carvalho Fausto Martins Tiago Vaz Márcio Isidro Departamento Técnico Departamento de marketing Departamento comercial Website Siga-nos nas comunidades online Obrigado. 78