KEMP LoadMaster - 產品功能

Standard

·       Server Load Balancing (SLB) for TCP/UDP based protocols

·       Layer 7 Content Switching

·       Advanced, App-Transparent Caching Engine for HTTP/HTTPS protocols

·       Optimized Compression for Static and Dynamic HTTP/HTTPS Content

·       Layer 7 Intrusion Prevention System (IPS), SNORT-Rule Compatible

·       Up to 256 Virtual and 1000 Real Servers

·       NAT-based forwarding

·       Support for Direct Server Return (DSR) configurations

·       Support for MS Terminal Services with Session Reconnection Built-in

·       Configurable S-NAT support

·       VLAN Trunking (802.1Q)

·       Link Interface Bonding (Modes supported: 802.3ad, Link Failover)

·       GSLB Add-On Support

SSL Acceleration features and Performance

·       SSL Acceleration/Offload with support for 2048bit RSA Keys

·       Support for EV (Extended Validation) Certificates

·       PCI-DSS Requirement #4 ready SSL Implementation

·       Support for up to 256 SSL Certificates

·       Support for Third Party Certificates

·       Automated SSL Certificate Chaining

·       SSL Certificate Signing Request (CSR) Generation

Health Checking and High Availability

·       ICMP health checking of server farm machines

·       Layer 7 checking for DNS, FTP, HTTP, IMAP, NNTP, POP3, SMTP,WTS (RDP), TELNET

·       Automatic reconfiguration for defective real server machines

·       Active/Hot Standby configurations for High Availability

·       Stateful Failover

Administration

·       Fully configurable using Web User Interface (WUI)

·       Secure, SSH and HTTPS (WUI) remote access for administration

·       Easy start and maintenance using wizards

·       WUI-based Help Assistant

·       Virtual Service Configurations can be edited and tuned on-the-fly

·       Real time performance and availability displays

·       Graceful Administrative removal of Real Servers

·       Console port for local administration

·       Remote syslogd support

·       Selective restore of LoadMaster and Virtual Service data

·       Support for Connection Draining

·       Download software updates for LoadMaster firmware

·       WUI Log Reporting with Tabbed Browser Support

·       SNMP support for event traps & performance metrics

·       Diagnostic shell with in-line tcpdump

Scheduling and Balancing Methods

·       Round Robin

·       Weighted Round Robin

·       Least Connection

·       Weighted Least Connection

·       Agent-based Adaptive

·       Chained Failover (Fixed Weighting)

·       Layer 7 Content Switching

Sticky (Persistence) Connection Options

·       Source IP (L4)

·       SSL SessionID (L4)

·       HTTP/HTTPS Browser-session (L7)

·       HTTP/HTTPS WebClient-session (L7)

·       RDP Login ID (L7)

·       Port Following for mixed HTTP/HTTPS sessions

Security Functionality

·       Layer 7 Intrusion Prevention System (IPS),

·       SNORT-Rule Compatible

·       Black List (Access Control List system)

·       IP address filtering

·       Firewall filtering (everything forbidden except VS’s)

·       DDoS mitigation

 

KEMP ADC產品應用

取代Microsoft TMG

Kemp Edge Security Pack (ESP)通過對客戶端進行預身份驗證和單一登錄入(SSO)簡化了應用程式的安全佈署,從而改善了用戶體驗。

過去,許多Microsoft應用程式(例如Exchange,Lync / Skype,SharePoint 與基於 IIS的Web服務)都是與Microsoft的Forefront威脅管理閘道器(TMG)一起部署的,以滿足這些要求。 但在2012年9月,Microsoft宣布他們將停止發布TMG更新版本。

現在, 您可以使用Kemp Edge Security Pack (ESP)來取代Microsoft TMG的功能角色。

 

Always On VPN

Always On VPN是Microsoft流行的DirectAccess遠程訪問技術的替代解決方案。 它利用Windows 10操作系統中的本機VPN客戶端為移動工作人員提供無縫,透明且始終處於遠程訪問狀態。 Always On VPN獨立於基礎架構,可以配置為使用許多常見的VPN設備,包括Windows Server Routing and Remote Access Services (RRAS)。

 

Load Balancing Remote Desktop Services

Microsoft遠程桌面服務(RDS)為用戶提供了一種通過位於任何地方的各種設備從任何位置訪問Windows應用程序的方法。 即使在應用程序要求復雜的情況下,Kemp LoadMaster負載均衡器也可以幫助組織最大程度地提高網絡效率和有效性。

典型的RDS部署的體系結構由Web訪問服務器,安全服務器,連接代理和會話主機組成。 在基礎架構中部署為負載平衡器/應用程序交付控制器(ADC)的Kemp LoadMaster,已增加RDS的負載能力。

 

取代Windows Network Load Balancing (WNLB)

Windows Server平台隨附Windows NLB(WNLB)功能,它只能達到第4層負載平衡能力,因此不了解應用程式或伺服器的運行狀況,只能將來源IP位址當成session identifier。 對應用程式和服務器狀態的意識不足會導致流量轉發到過載的伺服器或該應用程式無法用於服務請求的伺服器。 使用KEMP負載平衡器代替WNLB不僅可以提供伺服器和應用程序狀態感知,以實現更智慧化的負載平衡,而且還可以消除來自應用程式伺服器的WNLB功能負擔和來自WNLB unicast 與broadcast,進而影響網路效能。

 

 

任何KEMP在台灣的業務/技術支援, 歡迎隨時聯絡我們