|
SysMaster 7000 is the more powerful
solution from the SysMaster family.
SysMaster 7000 is a high availability, intelligent traffic management
device for business-critical local Internet sites or data centers.
It is designed to satisfy the more demanding needs of the large
businesses. It provides automatic and intelligent management of
Internet traffic and content, with ultimate performance, reliability,
scalability, and manageability.
- Over 2Gb/s throughput
- 40,000 connections/sec. per device
- Scaling to over 2 million concurrent connections
- Virtually limitless support for network devices including web
servers, firewalls, cache servers, routers, LDAP, VPN, DB, application
servers and more
- 2 x 1Gb/s Ethernet cards
  |
Key Features and Benefits: |
 |
|
|
- A high availability loadbalancing device for servers, caches,
firewalls, VPN gateways and more
- NAT, Direct Path routing and Global IP tunneling for advanced
loadbalancing
- Provides persistence mode for enhanced security and reliability
- Dual Configuration options for additional performance and availability
- Advanced security features for diverting well known malicious
web attacks
- Proxy Servers Load Balancing
- Advanced network monitoring with statistics and trending of
Internet traffic through the SysMaster Web GUI Console
- IP, Port and Protocol based loadbalancing
- Traffic prioritization and rate shaping for efficient bandwidth
allocation
- Direct Routing optional mode that allows servers to bypass
SysMaster 7000 when returning traffic to client for faster
return responses
- Global IP Tunneling feature for geographically distributed
networks and services
- Full TCP/IP protocol support, including UDP
- Bi-directional Secure Network Address Translation (SNAT)
- SysMaster Web GUI console for traffic monitoring and trending
for your entire network
- Optional GB Ethernet interfaces
Overview
Due to its modern technology design and extensive
set of features, SysMaster 7000 offers one extremely flexible and
cost effective solution to Internet Enterprises that is easy to
setup, manage and maintain. Using SysMaster, corporations can effectively
service tens of thousands of simultaneous connections to their domain
servers. In addition, the product allows unlimited server clustering
that increases cluster performance and reduces dramatically investment
and maintenance overhead.
|
Viable
Solution for the Internet |
|
|
|
The SysMaster 7000 addresses the increased
demand for web site availability and performance. It is a highly
efficient, multifunctional, and cost effective network device for
cluster management and intelligent loadbalancing. SysMaster 7000
transparently distributes Internet traffic among servers and firewalls
providing reliable, fast, secure and flexible network infrastructure
solutions. Thanks to its robust and versatile features, users have
the option to choose the infrastructure implementation that satisfies
their needs most. Furthermore, the device has a quick and easy setup
and configuration procedure that allows even people with limited
network experience to install and manage it.
|
High Availability
and Reliability |
|
|
|
The SysMaster 7000 guarantees consistent
cluster performance and full server fault tolerance. This is achieved
by removing single points of failure and possible bottleneck effects
in the network solutions, as well as implementing solid security
algorithms. The SysMaster 7000 provides high availability to server
arrays by means of:
Server-level Health Detection
SysMaster constantly monitors the status of your servers. Web
traffic is directed only to healthy servers, guaranteeing the
best Quality of Service to your clients.
Service-level Health Detection
SysMaster constantly monitors the status of your applications
(services) running on your servers. Web traffic is directed only
to servers with healthy services, guaranteeing the best Quality
of Service to your clients.
Dual Configurations
SysMaster can additionally work in configuration together with
secondary SysMaster devices to act as backup if the primary device
fails or goes down. For dual configurations, SysMaster works in
active/active and active/standby modes.
The SysMaster 7000 offers exceptional scalability
and flexibility.
- Server Level Scalability
Additional servers can be added to the cluster on the
fly, or they can be taken out of service for upgrade or maintenance
without disrupting or affecting the quality of service.
- Traffic Level Scalability
When web traffic increases, you can easily add another server
to the cluster to achieve the necessary performance gain instead
of upgrading to expensive hardware. This way, your web site infrastructure
can easily grow along with the demand for its services, while
protecting investments made in existing hardware.
- Platform Level Scalability
The SysMaster platform offers easy integration with multiple heterogeneous
hardware platforms, allowing organizations to protect their investments
in legacy hardware installations, as well as easily integrate
future hardware investments.
The SysMaster 7000 is easy to set up, and
easy to manage. The SysMaster 7000 is a self-contained 'plug and
play' appliance that doesn't require the additional overhead of
software installation on your servers. Network management is made
easier, too, because administrators can deploy new servers and take
individual servers offline for routine maintenance without disrupting
service to end users.
Secure Management
The SysMaster 7000 provides secured interface for management by
means of a robust authentication mechanism for granting access
to system resources implemented through Access Control Lists.
SysMaster management consoles provide the tools for access and
management of all device settings. SysMaster has two management
consoles - web based and VGA menu based.
Simplified Management
The SysMaster 7000 centralizes the management of server resources
and devices such as firewalls, proxy servers and caches. End users
are directed to a single virtual address, easing network administration
and maintenance.
Easy Installation and Serviceability
The SysMaster 7000 can be installed in almost any type of network
environment. There are no internal or external interface limitations;
there are just ports with features assigned. This gives the network
administrator the flexibility to install the SysMaster 7000 on
the network, and easily configure features for any port. The service
and upgrade of the software core of SysMaster can be easily and
security administered from the web console. In addition, the SysMaster
7000 provides all necessary ports for hooking up a keyboard and
monitor for on-site configuration.
|
SysMaster 7000 as a Traffic
Monitor |
|
|
|
SysMaster displays a detailed graphical
representation of the traffic that goes through it. Network administrators
receive data about the type of traffic as well as traffic statistics
showing how it changes in time and the number of managed connections
by the device that helps them understand site's performance in order
to efficiently optimize their resources.
|
Comprehensive Web Management
GUI Console |
|
|
|
SysMaster comes with a comprehensive Web
management GUI console to facilitate the configuration and maintenance
of enterprise networks. This utility provides detailed statistical
information about the traffic loads of your network, and gives estimated
traffic load increases and decreases for achieving maximum efficiency
of your servers.
Due to its modern technology design and extensive
set of features, the SysMaster 7000 offers one extremely flexible
and cost effective solution to Internet Enterprises that is easy
to setup, manage and maintain. Using SysMaster, corporations can
effectively service tens of thousands of simultaneous connections
to their domain servers. The device allows unlimited server clustering
which results in improved overall performance, while reducing the
need of future investments and maintenance overhead dramatically.
|
SysMaster 7000 as a Load Balancer |
|
|
|
High-volume web sites usually consist of
multiple servers or server clusters providing the same service from
synchronized contents. With SysMaster 7000, all these servers are
addressed from the Internet using a single Virtual IP address. SysMaster
loadbalances the traffic for this IP among the servers based upon
the workload and the processing capabilities of the individual servers.
SysMaster uses both static and dynamic algorithms for optimized
loadbalancing.
Direct-Path Routing mode for High Speed
loadbalancing
SysMaster takes into account the individual capabilities of every
server. This allows administrators to put servers with varying
capabilities in one cluster thus obtaining optimum performance
and high utilization of the available resources along with investment
costs reduction. To increase the overall throughput of the server
cluster, the SysMaster 7000 implements the Direct-Path Routing
technique allowing servers to send responses directly to the clients
without passing traffic through the loadbalancing device.
NAT loadbalancing
The great advantage of NAT is that real servers can run any OS
that supports TCP/IP protocol. The only requirement for the real
servers is that they should use SysMaster as their default gateway.
Another advantage is that real servers use private IP addresses
and ports, which increases security and conserves real IP addresses.
Advanced Flexibility - Huge variety of balanced
traffic
SysMaster supports the following IP Protocols:
Web (http), FTP, UDP, DNS, E-Mail, LDAP, TCP,
SSL, Streaming Audio, Streaming Video and others.
Advanced Flexibility - Huge variety of balanced
devices
SysMaster allows for loadbalancing a vast number of different
types of network devices:
- Web servers;
- Firewalls;
- Routers;
- Cache servers;
- Proxy servers;
- Multimedia servers;
- VPN;
- NFS;
- LDAP servers;
- Others.
Security
SysMaster has an inherently high level of security because
using it, administrators can build high performance server arrays
that can failover easily. This is a much more viable and scalable
solution than using only one or two powerful but expensive servers
whose failure can be critical.
Persistence
SysMaster integrates another feature allowing your users to resume
their connection to the same server they communicated with. SysMaster
offers two modes of persistence: Source-Server and
Mega Proxy Sever Persistence - Big enterprises and
ISPs use loadbalancing across multiple proxy servers to connect
to the Internet.
High Speed
Direct-Path Routing Performance
The SysMaster 7000 includes a loadbalancing mode called Direct-Path
Routing. This mode allows servers to bypass SysMaster when returning
traffic to the client. This method allows for supporting an
increased number of simultaneous connections that translates
to greater throughput of your services as a whole.
Easy Performance Upgrades
Internet traffic demands are advancing rapidly. SysMaster 7000
is ready, thanks to its unique hardware/software module design
which allows organizations to achieve performance gains without
having to upgrade expensive hardware.
|
Global Scalability and Availability |
|
|
|
The unique architecture of the SysMaster
7000 allows loadbalancing to be performed on both a local and global
basis. Utilizing the Global IP Tunneling feature of SysMaster, real
servers can be geographically distributed, maintaining uninterruptible
service even when site-wide failure occurs.
|
SysMaster 7000 as a Network
Cache Controller |
|
|
|
The SysMaster 7000 loadbalances user requests
to the cache server best able to process the requests. If the requested
data is not available locally, the Proxy server fetches it from
the Internet and then redirects it to the end user that requested
it. The whole process remains totally invisible to the end user.
SysMaster facilitates this process by efficiently decreasing the
latency time from requesting Internet content to actually receiving
it.
|
Firewall and Security Module |
|
|
|
The firewall module of SysMaster acts in
both incoming and outgoing directions. Network administrators can
grant Internet access for corporate networks only to selected "trusted"
locations, or public access can be limited to selected "safe" services.
On the other hand, outgoing traffic can also be filtered to protect
valuable data.
Security
SysMaster provides solid security to Enterprise networks utilizing
various security mechanisms.
Extensive set of attacks that SysMaster
handles
SysMaster is designed to protect itself from attacks
and provide protection for the servers being loadbalanced. Basic
functionalities include:
- Specially designed core software for advanced
security;
- Packet Filtering (IPFW);
- Security script identifies any services/ports
being probed;
- Default deny device - tight control of traffic
allowed to pass through;
- Administration through Access Control Lists;
- Protects itself and servers from ICMP attack
(thwarts ping attacks);
- Can reap idle connections (thwarts Denial of
Service attacks);
- Can perform source route tracing (thwarts IP
spoofing);
- Unacknowledged SYN without ACK buffers (thwarts
SYN floods);
- Thwarts teardrop and land attacks;
- Can map well known ports to any ports on the
servers (Port mapping);
- Real Servers IP addresses can be hidden from
the public;
- Not running SMTPd, FTPd, or any other attackable
daemons.
SysMaster 7000 as a Gateway in NAT mode
SysMaster 7000 connects local corporate networks to the Internet.
Corporate computers have private IP addresses and are not directly
accessible from the global network. LAN users access the Internet
through SysMaster 7000. SysMaster rewrites packets as they pass
through it, so that they always seem to come from the device itself.
It then rewrites the responses so that they can reach the original
recipient.
SysMaster allows for all managed servers to be visible
via a Virtual IP, and on specified ports that can be easily enabled
and filtered, resulting in enhanced security.
In Network Address Translation mode, well-known
ports such as 80, 443, 20, and 21 can be mapped to any port number
on the actual servers. This provides greater security by making
it difficult for intruders to identify what services are running
on which port.
|
Quality of Service Module |
|
|
|
Bandwidth Management and Denial of Service Prevention.
The SysMaster 7000 uses IP QoS together with TCP
and UDP level filtering to implement Bandwidth Management
and Denial of Service Prevention.
Bandwidth Management - SysMaster manages
incoming and outgoing traffic by filtering traffic using specified
sets of filter parameters for refined bandwidth utilization and
restriction policies. The QoS module supports the DiffServ
protocol provisioning for the proper treatment of the DiffServ marked
IP packets throughout the core network of the Internet.
Denial of Service Prevention
- SysMaster provides extended capabilities for filtering
out any malicious attacks based on TCP, UDP, IP, and ICMP protocols.
This greatly improves the security of your network resources, and
guarantees that such attacks will not disrupt the normal operation
of your systems.
|
WAN Link Module for effective
Internet / Extranet connectivity. |
|
|
|
The SysMaster 7000 along with its WAN link module
can connect offices to remote facilities. In addition, all T1 terminal
ports are managed, allowing loadbalancing between several CSU/DSU
interfaces for achieving effective utilization of the available
WAN bandwidth. This module runs most effectively when coupled with
the SysMaster Router/Gateway, Firewall and QoS modules.
|
