Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Nauticus Simplifies Load Balancing: Page 3 of 4

Good

• Fixed-configuration switches with optional modules
• Virtual switch technology takes VLAN idea to the application layer
• Use of custom TideRunner chipset for content-switching functionality reduces latency

Bad

• Gigabit version is FC; will require converters to SC

• No gigabit over copper option
• VLAN IDs are numerical only

Nauticus N2000 Series, starts at $25,000. Nauticus Networks, (508) 270-0500. www.nauticusnet.com

More Infrastructure Resouces
• white papers & research reports
• books

Also unique to the N2000 is the ability to create rules based on HTTP responses as well as HTTP requests. I configured two policies, one to match on JPEG images and the other a default wildcard-based rule. Matching is case sensitive, so it's necessary to consider all possible cases that could make rules grow unwieldy. Policies make use of rules and assign positive matches of a rule to a group of real servers. Rules are not strictly bound to groups or individual servers, as they are with other Layer 7 devices; they are instead used by policies to make routing decisions. Running the same test on Layer 7 that I had run on Layer 4, TCP latency was still less than 1 ms, but as expected, HTTP latency increased, peaking at 1,000 ms and averaging 500 ms to 600 ms overall under heavy load.

Speed

SSL acceleration is provided using two different integrated chipsets: one for bulk encryption, the other for the handshaking process. Changing the virtual service from HTTP to HTTPS requires only the generation (or installation) of a certificate and changing the service of the port and the service type. The Avalanche managed to churn out 1,600 SSL sessions per second and the N2000 handled it without breaking a sweat.

The potential for creative network design with virtual switching is limitless. You can consolidate load balancers or use a single N2000 to support a tiered Web infrastructure. Four virtual switches can be supported, and each can be managed as a separate entity with user authentication and authorization provided internally or via TACACS+ (LDAP or RADIUS will be provided in a future release). Pricing is flexible, depending on functionality.

Lori MacVittie is a Network Computing technology editor working in our Green Bay, Wis., labs. Write to her at [email protected].