BIG-IP Local Traffic Manager: Implementations

1 BIG-IP Local Traffic Manager: Implementations Local Traffic Manager: Implementationsi BIG-IP Copyright 2009, F5 Networks, Inc. All rights Networks, Inc. F5 F5 F5 F5 F5 F5 Networks F5 BIG-IP 3-DNS Acopia Acopia Networks Application Accelerator Ask F5 Application Security Manager ASM ARX Data Guard Enterprise Manager EM FirePass FreedomFabric Global Traffic Manager GTM iControl Intelligent Browser Referencing InternetControl Architecture IP Application Switch iRules Link Controller LC Local Traffic Manager LTM Message Security Module MSM NetCelera OneConnect Packet Velocity SSL Accelerator SYNC heck Traffic Management Operating System TMOS TrafficShield Transparent Data Reduction uRoam VIPRION WANJet WebAccelerator ZoneRunner F5 Networks, Inc.

2 F5 6,374,300; 6,473,802; 6,970,933; 7,051,126; 7,102,996; 7,146,354; 7,197,661;7,206,282; 7,287,084 Export Administration Act Class A FCC FCC 15 Class A FCC 15 Class A ICES-003 IEC European Union ANSI/UL Canadian CSA ii Bill Paul Jonathan Stone Manuel Bouyer Paul Richards NetBSD Foundation, Inc.

3 Politecnico di Torino Swedish Institute of Computer Science University of California, Berkey Lawrence Berkeley Laboratory Computer System Engineering Group NetBSD Christopher G. Demetriou Adam Glass Christian E. Hopps Dean Huxley John Kohl Paul Kranenburg Terrence R. Lambert Philip A. Nelson Herb Peyerl NetBSD Jochen Pohl Chris Provenzano Theo de Raadt David Muir Sharnoff SigmaSoft Th. Lockert NetBSD Jason R.

4 Thorpe And Communications Jason R. Thorpe NetBSD Frank Van der Linden NetBSD John M. Vinopal Christos Zoulas University of Vermont State Agricultural College Garrett A. Wollman Balazs Scheidler GNU Public License Niels Mueller GNU Public License Mitsumi CD-ROM Holger Veit Brian Moore 386 BSD NetBSD FreeBSD Mach CMU Apache Group Apache HTTP GNU Library General Public License 1998, Red Hat Software Richard H. Porter BIG-IP Local Traffic Manager: Implementationsiii Perl Artistic License 1997, 1998 Tom Christiansen and Nathan Torkington Perl All rights reserved.

5 Perl Jared Minch OpenSSL Toolkit OpenSSL Eric Young GNU Public License oprofile Tobi Oetiker GNU General PublicLicense RRDtool GNU General Public License GPL Dr. Brian Gladman Apache Software Foundation < > Hypersonic SQL Sun Microsystems, Inc. Scriptics Corporation Internet Software Consortium Nominum, Inc. Broadcom Corporation GNU Public License iv BIG-IP Local Traffic Manager: Implementationsvii1 BIG-IP LTM BIG-IP ..1-1 ..1-1 ..1-1 ..1-2 ..1-2 ..1-3 ..1-52nPath nPath.

6 2-1nPath ..2-2 Fast L4 ..2-3nPath ..2-4 ..2-4 ..2-5 .. bigdb ..2-5nPath ..2-6 UDP ..2-6 TCP ..2-63 Web Web ..3-1 ..3-2 ..3-2 ..3-34IP BIG-IP IP BIG-IP ..4-1 IP BIG-IP ..4-3 VLAN IP ..4-3 VLAN ..4-4 VLAN IP ..4-5 Web ..4-5 ..4-65 Web ..5-1 ..5-2 VLAN ..5-2 ..5-3 ..5-3 ..5-5 VLAN ..5-66 ..6-1 ..6-2 viii ..6-2 ..6-37 ISP ISP ..7-1 ISP ..7-2 ..7-2.

7 7-3 ..7-58 HTTP HTTP ..8-1 HTTP ..8-2 ..8-2 ..8-39 Cookie HTTP HTTP ..9-1 Cookie HTTP ..9-2 Cookie ..9-2 ..9-3 ..9-410 HTTP HTTP ..10-1 HTTP ..10-2 ..10-311 HTTPS HTTPS ..11-1 SSL ..11-2 SSL ..11-3 ..11-5 ..11-612 HTTPS HTTPS ..12-1 SSL ..12-2 Client SSL ..12-3 HTTP ..12-4 ..12-6 ..12-713 HTTP RAM HTTP RAM ..13-1 HTTP ..13-2 BIG-IP Local Traffic Manager: Implementationsix .. 13-314 FTP FTP .. 14-1 FTP .. 14-2 ..14-3.

8 14-415 FTP FTP .. 15-1 FTP .. 15-2 ..15-3 .. 15-4 .. 15-516 IP IP .. 16-1 IP .. 16-2 .. 16-3 .. 16-4 SNAT .. 16-517 VLAN VLAN .. 17-12 .. 17-2 .. 17-3 VLAN .. 17-3 Web .. 17-4 Web .. 17-51 .. 17-6 VLAN IP .. 17-7 VLAN .. 17-7 VLAN IP .. 17-818 .. 18-1 .. 18-2 SNAT .. 18-2 .. 18-2 .. 18-3 .. 18-419 .. 19-1 .. 19-3 ..19-4 .. 19-4 x ..19-5 ..19-620 IPv6 radvd.

9 20-1 IPv4 IPv6 ..20-2 IPv6 ..20-2 ..20-321 IP IP ..21-1 ..21-1 ID ..21-1 ..21-3 VLAN ..21-4 IP ..21-6 ..21-7 ..21-8 ..21-9 .. 21-1022 ..22-1 ..22-2 ..22-3 DoS ..22-4 TCP UDP ..22-4IP ..22-5 ..22-6iRule ..22-7 Code Red ..22-7 Nimda ..22-7 BIG-IP ..22-8 SYN ..22-8 ICMP ..22-9 UDP ..22-9 UDP .. 22-10 Ping of Death .. 22-10 Land .. 22-10 Teardrop .. 22-11 .. 22-11 WinNuke .. 22-11 Sub 7 .. 22-11 Back Orifice .. 22-1223 ..23-1 ..23-2 ..23-3 ..23-4.

10 23-4 BIG-IP ..23-5 BIG-IP Local Traffic Manager: Implementationsxi24 BIG-IP .. 24-1 BIG-IP .. 24-2 BIG-IP .. 24-6remoterole .. 24-7remoterole .. 24-7 .. 24-8 BIG-IP .. 24-1125 .. 25-1 LDAP Active Directory .. 25-2 LDAP .. 25-2 LDAP .. 25-5 LDAP .. 25-5 RADIUS .. 25-7 RADIUS .. 25-7 RADIUS .. 25-8 RADIUS .. 25-9 RADIUS .. 25-9 TACACS+ .. 25-11 TACACS+ .. 25-11 TACACS+ .. 25-12 TACACS+ .. 25-13 LDAP SSL .. 25-14 SSL LDAP .. 25-14 SSL LDAP .. 25-15 SSL LDAP .. 25-16 OCSP SSL .. 25-17 SSL OCSP.