F5 BIG-IP Standard Series 7000 License
The BIG-IP i7000 series is designed and manufactured on the medium-to-high performance ADC platform for medium and large organizations. The BIG-IP i7000 series in both i7600 / i7800 models is designed with TurboFlex optimization technology. This licensed solution has a height of one unit in the rack, has the ability to provide twice the power of layer 4.7, twice the simultaneous connection of layer 4, 60% more SSL TPS and 50% more vADC guest support compared to previous similar models.
Advantages of F5 BIG-IP Standard Series 7000 hardware
The licensed F5 BIG-IP Standard Series 7000 platform incorporates a combination of hardware and software innovations. This solution can solve organizations’ need for power, scalability and speed. F5 TMOS operating system provides full visibility, flexibility and control over all application distribution services.
With TMOS, organizations can intelligently adapt to the diverse and growing requirements of applications and networks. Other unique or patented hardware and software innovations that contribute to the BIG-IP iSeries platform and provide organizations with unparalleled capabilities include the following.
- FPGAs optimization technology is fully integrated with processors, memory, TMOS, and software, optimizing packet flow, L4 offload, support for private cloud tunneling protocols, and DoS (Denial of Service) protection. These hardware optimizations improve not only network performance, but also free processor capacity to distribute other applications and security tasks. Only BIG-IP iSeries appliances have TurboFlex performance profiles (user-selectable optimizations that give you different performance characteristics depending on your business needs):
- L4 offload provides unparalleled throughput and reduces software load.
- SYN protection for each virtual IP ensures that if one application is attacked, other applications are not affected. Only F5 ADCs can implement hardware SYN cookies in L4 and L7 full proxy mode.
- More than 100 types of denial-of-service (DoS) attacks can be detected and repelled in hardware, and compared to software tools, the number of attacks that can be supported increases significantly.
- Network virtualization and protocol processing overlays (such as VXLAN and NVGRE tunneling) increase traffic processing capacity.
- UDP traffic processing increases throughput and reduces latency and instability, thereby improving VPN or streaming media performance.
- Superior SSL performance accelerates SSL/TLS adoption by removing the burden of costly SSL processing and speeding up key exchange and bulk encryption. BIG-IP iSeries products have ECC hardware encryption that ensures transmission confidentiality. Additionally, the ability to achieve an A+ rating from SSL Labs along with a few simple steps helps reduce SSL configuration complications and errors.
- BIG-IP platforms have the maximum amount of hardware compression and significantly reduce the processing load of traffic compression to minimize page load times and bandwidth usage.
- Enterprise SSD technology in BIG-IP platforms improves performance and reliability, saves power, and minimizes heat and noise generation.
- Among the features that have an effect on efficiency, we can mention the reliable 80 Plus Platinum power supplies and management through touch LCD on the panel, support for remote boot and multi-boot, as well as USB support.
F5 ScaleN technology helps organizations scale the performance of different BIG-IP devices and virtualize them. In this way, a flexible infrastructure is provided for the application distribution network, which adapts itself to the needs.
With the ability to scale instantly, you can increase capacity and efficiency by adding more power to your current infrastructure (instead of adding devices). Some BIG-IP appliances can be upgraded to a higher performance model through an instant software license, and in this way, organizations can expand their infrastructure without the need for new hardware.
Change in operational scale
With a multi-tenant architecture that supports different BIG-IP versions and modules on a single device, ADC services can be virtualized. vCMP F5 technology helps hardware platforms run multiple different BIG-IP guest instances. Each guest instance acts just like a physical device with dedicated CPU, memory and other resources. vCMP has the possibility of applying a separate limit for each guest, and in this way, each guest can have its own performance.
In addition, each vCMP guest is also divided using leased capabilities such as partition and route domains, and with this configuration, the network is made separately for each virtual domain. You can further segregate the network within each virtual domain with role-based access to the system for administrative and configuration control. When routing domains are combined with vCMP guests, F5 achieves maximum multi-tenant virtualization capacity and is scalable to thousands of virtual ADC (vADC) instances. The ability to virtualize services in the F5 BIG-IP Standard Series 7000 means that service providers and users of the organization can perform isolation based on the version of BIG-IP, thereby ensuring efficiency, consistent management of the application distribution platform, and increasing Productivity will be guaranteed by F5 BIG-IP Standard Series 7000.
Change the scale of the application
By adding BIG-IP resources through a fully dynamic approach, network capacity can be increased and scaled beyond the traditional pairing of devices to eliminate idle and standby resources. Application scaling achieves this feature with two types of universal categories. The first category, which is called the application service category, focuses on the scalability and high availability of the application. The second category is called Service Device category, which is designed for scaling BIG-IP application distribution services and harmonizing application policies. Application service clustering provides the possibility of application recovery and connection mirroring for a cluster of up to 8 different devices, thus creating a multi-tenant infrastructure with high availability.
In addition, it is possible to distribute the workload among a group of equipment or virtual instances (without disrupting other services) and its scale can be changed according to needs. The device service category is able to synchronize the complete device configuration in a fully active deployment model, enabling continuous policy implementation and enforcement across up to 32 active nodes. This feature helps maintain device configuration consistency with enhanced firewall synchronization and access policies, thereby simplifying operations and reducing attack surface.