BLUECOAT PRODUCTS
PACKETSHAPER
BlueCoat Systems
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
1
應用網路頻寬監控資源管理
及效能分析
PacketShaper
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
2
BLUECOAT 效能管理方案產品
PacketShaper S500
企業總部
Packetshaper 12000
Packetshaper 7500
Packetshaper 3500
遠端
微型辦公室
Packetshaper 1700
Intelligent Center
Policy Center
3
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
3
PACKETSHAPER FAMILY (THEN)
For EVERY Enterprise Environment
SMALL/BRANCH OFFICE
MEDIUM ENTERPRISE
LARGE ENTERPRISE/
DATACENTER
PacketShaper S500
PacketShaper 7500
PacketShaper 12000
PacketShaper 1700
PacketShaper 3500
PS-S500
PS-7500
2Gbps to 10Gbps
2Mbps to 100Mbps
PS-1700
2Mbps to 45Mbps
PS-3500
PS-12000
200Mbps to 2Gbps
10Mbps to 200Mbps
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
4
PACKETSHAPER FAMILY (NOW)
The
New!PacketShaper Family
SMALL/BRANCH OFFICE
MEDIUM ENTERPRISE
LARGE ENTERPRISE/
DATACENTER
PacketShaper S500
PacketShaper S400
PacketShaper S200
PS-S500
PS-S200
(10Mbps to 500Mbps)
(2Gbps to 10Gbps)
PS-S400
(250Mbps to 2Gbps)
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
5
應用程式可視度
Visibility
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
6
客戶的問題 - 不知問題在那
 Key Applications Not Performing
 Network Performance Issues
 Network Takes Blame
 New Apps/Initiatives Planned
7
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
7
無法躲避的重要問題原因
 Recreation 40-60% of WAN
• Port hop, tunneled, encrypted
• Backhauled over WAN
• Drive out Mission Critical
Typical View from
Probes & NetFlow Tools
MSFT
(137)
7%
Other
8%
Email
5%
HTTP
(Port 80)
50%
Intranet
SaaS
SSL (443)
30%
(Software as a Service)
Wiki Blog
Shares
8
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
8
可視度為管理的第一項重要工作
你看的到有哪些應用=
才能做好真正的管理
Sources: *Network World / Packeteer Application Performance Survey
9
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
9
領先業界的應用程式探索技術
10
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
10
LAYER 7+ 可視度
• Bandwidth: 10Mbps
Layer 3
10Mbps
HTTP
Web Surfing
Each SAP
Transaction
SAP
Email
Layer 4
Video Conf
P2P
Unknown
Each Video
Conf Call
Deep Visibility is
Essential for Control
Layer 7
Layer 7
Plus
• TCP 80 - HTTP
• TCP 25/110 – Email
• Dynamic port - Unknown
• HTTP - Web Surfing / SAP
• Dynamic port – P2P / Video Conf
• Each SAP transaction
• Each Video Conf Conversation
• QoS for User Experience
11
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
11
LAYER 7+ VISIBILITY FOR MPLS
CLASSIFICATION
Router limit
Without PacketShaper
Classes of Service
Automatic classification
Port 80 complex
- HTTP
– Sub-classify
business & web applications
– Port
Reveal
recreational applications
10Mbps
25/110 - Email
– Define custom applications
Unknown
With PacketShaper
Router limit
PacketShaper added value
SAP
Classes of Service
Each SAP Session
Port 80 - HTTP
Web Surfing
10Mbps
12
Port 25/110 - Email
P2P
Unknown
VoIP Each Voice Call
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
12
頻寬應用使用率統計
 對應網路應用和業務運作的目標
NetWare consumes entire
T1 for two days:
Serious impact on Citrix
performance
Find out why
and who
13
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
13
網路流量分析
 平均和尖峰流量分布(Average and
peak)
 網路傳輸效率 (Network
Efficiency)
See up-to-the
minute
network
utilization
 應用程式資料傳輸/接收
(Top Talkers/Listeners)
 封包數統計及大小分布(Packets
and packet sizes)
Understand
cause and
effect
14
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
14
網路傳輸效率
 分析網路傳輸效率, 進而了解效能的問題
Identify times when
network efficiency drops
below 100%
See when
bandwidth is
being wasted by
retransmissions
15
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
15
應用程式回應時間
 瞭解應用程式回應的分布統計
Start solving
performance issues
before users report
them as problems
See how applications
actually perform
16
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
16
應用程式回應時間 (EX: SAP)
 評估較敏感的應用程式效
能及使用者經驗
 分析那一個環節的成為資
料交易的瓶頸
Example: SAP roundtrip
times are suffering: what
is the cause?
See immediately
how an overloaded
server is the root of
the problem
17
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
17
建立SLA 服務品質的參考
 建立服務品質報表於:
• 設定服務水準標準 (Set thresholds)
• 評量服務等級(Measure compliance)
• 主動警示服務等級不足(Proactively send alerts)
Graph % of transactions
that meet service level
objectives
18
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
18
語音和影像品質評量
 追蹤語音,影像和 MPLS 服務的
SLA
• 提供語音及影像應用的服務資訊
(jitter, loss and delay)
• 監控IP Telephony和影像會議
(Video Conference)的品質
• 監控MPLS內的即時的(Real –Time)
應用程式效能
Rich performance, call data
and quality ensures your
network or your service
provider meet or exceed
service level objectives
19
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
19
檢測分析(DIAGNOSTICS)
 詳細的資料流分析(Detailed Traffic Flow Analysis)
 連線分析(Connection analysis)
 連線健康度分析(TCP health analysis)
 封包擷取 (Packet capture)
Drill down to lowlevel metrics to spot
attacks as they
happen
Double click on a server to
see the flows and isolate
failed connections
20
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
20
診斷和告警
 監控和告警不正常流量行為
• 異常的連線增加, 所可能隱藏的病毒或視DoS的攻擊
• 伺服器忽略(Ignore)或拒絕(Refuse)行為, 可能產生的負載過重的問題
Example: Worms cause
signature increase in
connection attempts
Set up alerts
to warn you in
future
21
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
21
智慧型頻寬控管
Intelligent Bandwidth Control
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
22
沒有管制頻寬的問題
娛樂型應用:
遠端辦公室
Surfing the Internet,
iTunes, VOD, P2P,
Skype, Virus & Worm
propagation
所有應用程式
競爭窄頻連線
頻寬消耗型應用:
Email, File Transfers,
Backup, Database Sync,
Distributed Storage
WAN
延遲, 敏感型商業應用:
SAP, Oracle, Siebel
PeopleSoft, VoIP,
IP Video, Mainframe
64k
to
T1/E1
10Meg
to
1Gig
23
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
23
使用PACKETSHAPER提供的QOS方案之後
娛樂型應用:
遠端辦公室
Surfing the Internet,
iTunes, VOD, P2P,
Skype, Virus & Worm
propagation
應用程式資源分配
,可符合企業預期
頻寬消耗型應用:
Email, File Transfers,
Backup, Database Sync,
Distributed Storage
WAN
延遲, 敏感型商業應用:
SAP, Oracle, Siebel
PeopleSoft, VoIP,
IP Video, Mainframe
64k
to
T1/E1
10Meg
to
1Gig
24
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
24
智慧型策略控制
動態控制
• 每個應用
• 每次呼叫流
檢測到新的
應用結束
應用呼叫
保證應用品質及效能,沒有頻寬浪費
25
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
25
智慧型TCP速率管控
一般的QoS機制
Blue Coat
TCP 速率管控 (Rate Control)
資料流來源
Data Sender
資料流來源
Data Sender
10
Mbps
2Mbps
10 Mbps
LAN
丟棄
Drop
現今的技術機制
Queuing
And Bucket
Technologies
傳輸效率優化
TCP 傳送速率管控
修正頻寬壅塞, 封包丟棄
及重新傳送的問題
減少60% 延遲, 及封包遺失產
生的機會
WAN Link
2 Mbps
WAN Link
26
WAN
應用程式
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
26
智能的策略管控
 Inbound Rate Control
Multi-point
Control Unit
(MCU)
TCP Rate
Control
Enterprise app
Remote access
Border
Controller
Terminal
Web
Congestion
Video Conf
Occurs Before
Protected
the
Router
Mobile
Video Conf
Expand high quality video conferencing to Tele-workers
27
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
27
智能的策略管控
 Adaptive Policy
• No Video Conf → SAP(Guaranteed 10M), FTP(Best Effort)
• Video Conf > 5M → SAP(Guaranteed 5M), FTP(Best Effort)
• Video Conf > 10M → SAP(Best Effort), FTP(Block)
5 Mbps
10 Mbps
10 Mbps
28
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
28
TCP速率管控(RATE CONTROL)
 更積極的管理頻寬壅塞管
理技術的
Without App QOS
With App QOS
• 降低延遲
• 最小化封包遺失
• 降低資料重送的機率
(retransmissions)
• 改善應用程式整體效能
 改善傳輸效率, 增加資料
的傳輸量
29
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
29
VIDEO/VOICE 品質改善案例
沒有管理:
Video流量與其他流量
競爭, 衝擊影像品質
Video 會議在實際網
路的品質: 管控政策
有效改善影像品質
30
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
30
VIDEO會議的成功案例
31
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
31
管控應用及內容的解決方案
(業界惟一)
Only solution to control
applications & content
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
32
許多應用都使用WEB 平臺
Business Apps Moving to Web:
ERP, Sales Automation, HR, Online Meetings
In the Middle:
Email, Chat, Browsing, Networking, Video
Recreational Web Content Exploding:
Games, Peer to Peer, Adult
33
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
33
新的挑戰
Web Applications and Content:
 Range from Inappropriate to Important
 They all look the same
 Potential for Performance Problems
 Defy traditional classifications
34
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
34
PACKETSHAPER OWNS THE WEB
 Only solution to control applications & content
• Understands the merged Web-based world
 Leverages WebPulse cloud
• Community of 75 Million Users
• 8B+ ratings per day
• 80 Categories across 50 Languages
 Instant awareness of new applications & content
• Up to 4 Categories per URL
WebPulse
PacketShaper
35
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
35
CLASSIFY BY URL CATEGORY
WebPulse
Category
Web Server
Request
Request
1.
2.
3.
4.
5.
3
Content
PacketShaper Sees Request
Checks Local Cache
Queries WebPulse Cloud
Retrieves Category
Applies Policy
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
36
ORGANIZED TO SCALE
 Each trend started with a dominant application
 Then became dozens or even hundreds
 Chasing individual applications doesn’t scale
700
Applications
IM
37
23
Groups
Billions
of URLs
Games
80
Categories
Schwab
Fidelity
Financial
HSBC
P2P
E*Trade
Services
Lloyds
TD Ameritrade
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
37
HIGH LEVEL LOGICAL GROUPINGS
 Manage by Content
 Example: Simple Categories
• Auto-discover up to 80 Categories
• Set policy today for tomorrow’s applications and content
Prioritize
Contain
Squeeze
Block
38
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
38
VERY GRANULAR WHEN REQUIRED
• Sub-classify Web 2.0 Applications
• Example: Manage by Facebook Content
– > 1600 Categorized Apps in > 40 Categories
– Set policy by what users are doing on Facebook
Prioritize
Contain
Squeeze
Block
39
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
39
SUMMARY – PACKETSHAPER
DELIVERS
• Applications Are Moving to the Web
• PacketShaper has the Deepest Visibility
• And the Most Powerful Control
• To Ensure Critical Application Performance
40
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
40
THANKS
Copyright © 2013 Blue Coat Systems Inc. All Rights Reserved.
41