As far as the network is concerned, F5 Networks have become part of the furniture for most hosting providers, and I mean that in a good way. Load balancing across multiple servers has progressed a long way since the early days of Cisco’s Local Director, and Checkpoint’s early load balancing capabilities. F5 have evolved too. A number of acquisitions now puts them in a strong position in the market, and with a broad range of products and technologies to offer to customers.
Talking earlier this month with Bill Beverley, Security Manager at F5 Networks, F5′s focus is clear: “deploying applications is really the central role of IT”. That’s certainly part of it. Keeping them up and running is too, and that has been bread and butter business for F5, delivering kit to put in front of servers to deal with the peaks in capacity and inevitable server failures.
Load balancing provides availability, but acceleration and optimization are also key in today’s infrastructures. That has made WAN optimization a hot area, especially now that bandwidth prices are no longer falling rapidly. Bill talked about how F5 are adding extra layers of security for web applications, something that is big in PCI and compliance driven environments. F5 see their solutions as complementary to the network firewalls, with the firewall dealing with the high-load, low-intelligence packet filtering. As Bill was keen to point out, “if you have a really efficient smaller piece of kit doing that job, then we can deal with traffic in an effective and more intelligent way.”
F5 boxes terminate the TCP connection and then regenerate it out of the other side. Since the devices have application-level visibility into the application streams, this is the perfect place to apply application acceleration and application security magic. However, this isn’t going to be a clean battle. The traditional firewall players like Cisco, Juniper Networks and Checkpoint, are keen for a piece of the action too.
A battle is brewing between the folks coming from the application towards the network, and the network folks heading up the stack to optimize applications. On the application side, F5 might be the baby gorilla, but there are a number of chimps ready to fight it out with them. Database security has seen specialist players like Secerno emerge. In talking to Bill about SQL security, his comment was “I think you will see consolidation in that area.” I wouldn’t take that as a statement that F5 is feeling acquisitive (although they have been), but rather that smaller players will get swept up or washed away in the coming quarters.
Hosting and data centres are becoming more and more sophisticated environments, as you can see from the diagram. Layers have been added to the network to provide security, then availability, and now application acceleration. Those layers are spreading in their functionality too, with SSL VPN being added to the security layer, and storage virtualization added into availability. The latter will help many IT managers to clear up the NAS(ty) mess on the network, by balancing across multiple NAS devices, and migrating data at rest to slower storage devices.
F5 solutions are purchased as a mixture of sticking plaster remedies and strategic design, where acceleration and availability are part of the fundamental architecture, rather than an add on when capacity gets exceeded. F5 have some interesting developments coming down the line in the virtualization space. Because they see the application performance, then can provide feedback into VMotion / ESX running on the servers, to tell it to provision extra servers or deprovision them. The integration works through SNMP and SYSLOG, so could potentially be open to other vendor combinations too. Certainly lots for F5′s channel partners to apply their expertise to.

(+6 rating, 3 votes)

0 readers responded to this post
4 Pings & Trackbacks On This Post
Add Your Comment