Good
Fixed-configuration switches with optional modules
Virtual switch technology takes VLAN idea to the application layer
Use of custom TideRunner chipset for content-switching functionality reduces latency
Bad
Gigabit version is FC; will require converters to SC
No gigabit over copper option
VLAN IDs are numerical only
Nauticus N2000 Series, starts at $25,000. Nauticus Networks, (508) 270-0500. www.nauticusnet.com
More Infrastructure Resouces
white papers & research reports
books
|
Also unique to the N2000 is the ability to create rules based on HTTP responses as well as HTTP requests. I configured two policies, one to match on JPEG images and the other a default wildcard-based rule. Matching is case sensitive, so it's necessary to consider all possible cases that could make rules grow unwieldy. Policies make use of rules and assign positive matches of a rule to a group of real servers. Rules are not strictly bound to groups or individual servers, as they are with other Layer 7 devices; they are instead used by policies to make routing decisions. Running the same test on Layer 7 that I had run on Layer 4, TCP latency was still less than 1 ms, but as expected, HTTP latency increased, peaking at 1,000 ms and averaging 500 ms to 600 ms overall under heavy load.
Speed
SSL acceleration is provided using two different integrated chipsets: one for bulk encryption, the other for the handshaking process. Changing the virtual service from HTTP to HTTPS requires only the generation (or installation) of a certificate and changing the service of the port and the service type. The Avalanche managed to churn out 1,600 SSL sessions per second and the N2000 handled it without breaking a sweat.
The potential for creative network design with virtual switching is limitless. You can consolidate load balancers or use a single N2000 to support a tiered Web infrastructure. Four virtual switches can be supported, and each can be managed as a separate entity with user authentication and authorization provided internally or via TACACS+ (LDAP or RADIUS will be provided in a future release). Pricing is flexible, depending on functionality.
Lori MacVittie is a Network Computing technology editor working in our Green Bay, Wis., labs. Write to her at [email protected].