跳转到内容

User:DukeAnt/F5网络

坐标：47°37′20″N 122°21′49″W / 47.622219°N 122.363493°W / 47.622219; -122.363493
维基百科，自由的百科全书
F5 Networks, Inc.
公司類型Public
股票代號NASDAQ：FFIV
S&P 500 Component
公司前身F5 Labs
成立1996
代表人物John McAdam, products = Networking
總部Seattle, Washington, United States
产业Technology
營業額
  • ▲ US$ 1,481.314 million (2013) [1]
  • ▲ US$ 1,377.247 million (2012) [1]
息税前利润
  • ▲ US$ 430.818 million (2013) [1]
  • ▲ US$ 426.303 million (2012) [1]
净利润
  • ▲ US$ 277.314 million (2013) [1]
  • ▲ US$ 275.186 million (2012) [1]
總資產
  • ▲ US$ 2,230.554 million (2013) [2]
  • ▲ US$ 1,911.201 million (2012) [1]
資產淨值
  • ▲ US$ 1,538.712 million (2013) [2]
  • ▲ US$ 1,329.4 million (2012) [1]
員工人數3600 (2015)
网站www.f5.com

F5 Networks, Inc. is a multinational American company which specializes in Application Delivery Networking (ADN) technology that optimizes the delivery of network-based applications and the security, performance, availability of servers, data storage devices, and other network resources. F5 is headquartered in Seattle, Washington and has development, manufacturing, and sales/marketing offices worldwide. F5 originally manufactured and sold some of the industry's first load balancing products. In 2010 and 2011, F5 Networks was on Fortune's list of 100 Fastest-Growing Companies worldwide.[3] The company was also rated one of the top ten best-performing stocks by S&P 500 in 2010.[4]

F5 offers products in various segments of the application delivery controller market. According to Gartner, in 2010 F5 had "a continued market-leading position"[5] in the Application Delivery Controller (ADC) market and the Advanced Platform Application Delivery Controller market. As of June 2011, Gartner cites the most significant competitors (in terms of market share) as Cisco Systems, Citrix Systems, and Radware.

Corporate history

[编辑]

F5 Networks, originally named F5 Labs,[6] was established in 1996.[7] The company name was inspired by the 1996 movie, Twister, in which reference was made to the fastest and most powerful tornado on the Fujita Scale: F5.

F5's first product was a load balancer called BIG-IP. When a server went down or became overloaded, BIG-IP directed traffic away from that server to other servers that could handle the load. In June 1999, the company went public as F5 Networks and was listed on the NASDAQ stock exchange (NASDAQ: FFIV). As it was in 1999, corporate focus in 2013 remains on providing network intelligence that enables customers to respond quickly to change, streamline business processes, reduce costs, and provide differentiated offerings that help increase revenue.

Through internal development and acquisitions, F5 extended its reach beyond load balancing, producing a range of integrated products for Application Delivery Networking. These products seek to improve the delivery of web-based applications by attempting to make them run faster and more securely.

Acquisitions

[编辑]
  • uRoam (SSL VPN vendor) for USD $25 million in 2003[8]
  • Magnifire WebSystems (web application firewall) for USD $29 million in 2004[9]
  • Swan Labs (WAN acceleration and web acceleration) for USD $43 million in 2005.[10]
  • Acopia Networks (file virtualization) for USD $210 million in 2007[11]
  • DPI intellectual property from Crescendo Networks in 2011 (amount undisclosed) [12]
  • Traffix Systems (Diameter protocol switching technology) in 2012 (amount undisclosed) [13]
  • LineRate Systems in 2013 (high-performance, software-based Load Balancer for x86 systems with nodejs datapath scripting)[14]
  • Versafe in 2013[15]
  • Defense.Net in 2014[16]

Products

[编辑]

BIG-IP

[编辑]

F5's BIG-IP product family comprises purpose-built hardware, modularized software, and virtualized solutions that run the F5 TMOS operating system.[17][18] Depending on the appliance selected, one or more BIG-IP product modules can be added to a BIG-IP device to deliver multiple networking functions on a single, unified platform.

BIG-IP appliances

[编辑]

On the line of BIG-IP appliances released between 2008 and 2010, the hardware models used a single custom-fabricated system board. The previous platforms had two internal boards — a PC/server-type motherboard connected to a switchplane. Some models included hardware SSL acceleration for key exchanges and bulk encryption/decryption provided by Cavium Networks, and hardware compression assistance. The new hardware used Intel CPUs, but some previous models included AMD Opteron CPUs. Hardware models included a front LCD panel for configuration and monitoring and a separate service processor for out-of-band management.

The Viprion is a chassis that can hold up to four blades for enhanced redundancy and performance using clustered multiprocessing. In early 2010 F5 released a BIG-IP LTM virtual appliance for VMware.

The 2010 model line-up was, with approximate best-case throughput indicated:[19]

Model Advertised throughput
BIG-IP LTM Virtual Edition 10 Mbit/s, 200 Mbit/s or 1 Gbit/s
BIG-IP 1600 1 Gbit/s
BIG-IP 3600 2 Gbit/s
BIG-IP 3900 4 Gbit/s
BIG-IP 6900 6 Gbit/s
BIG-IP 8900 12 Gbit/s
BIG-IP 8950 20 Gbit/s
BIG-IP 11050 42 Gbit/s
Viprion 2400 Up to 160 Gbit/s L4 & Up to 72  Gbit/s L7. Per Blade Up to 40G L4 & Up to 20G L7
Viprion 4480 Up to 320 Gbit/s[20]

BIG-IP product modules

[编辑]
  • Local Traffic Manager (LTM): Local load balancing based on a full-proxy architecture.
  • Global Traffic Manager (GTM): Global server load balancing using DNS.
  • Link Controller: Inbound and outbound ISP load balancing.
  • Application Security Manager (ASM): A web application firewall.
  • WebAccelerator: An asymmetric or symmetric advanced caching solution for HTTP and HTTPS traffic.
  • Edge Gateway: An SSL VPN.
  • WAN Optimisation Module: A data centre symmetric WAN optimization solution.
  • Access Policy Manager (APM): Provides access control and authentication for HTTP and HTTPS applications.
  • Secure Web Gateway (SWG): URL filtering, malicious website blocking, safe corporate web browsing, Websense OEM
  • Advanced Firewall Manager (AFM): On-premise DDoS protection, data centre firewall
  • IP Intelligence (IPI): Blocking known bad IP addresses, prevention of phishing attacks and botnets
  • WebSafe: Protects against sophisticated fraud threats, leveraging advanced encryption, client-less malware detection and session behavioral analysis capabilities

BIG-IP software development history

[编辑]

On September 7, 2004 F5 Networks released version 9.0 of the BIG-IP software in addition to a new collection of BIG-IP appliances on which customers could run said software. Version 9.0 was significantly different than the previous versions of BIG-IP. The significant changes include:

  • Moved from BSD to Linux to handle sys management functions (disks, logging, bootup, console access, etc.)
  • Creation of a Traffic Management Microkernel (TMM) to directly talk to the networking hardware and handle all network activities.[18][21][22]
  • Creation of the standard full-proxy mode, which fully terminates network connections at the BIG-IP and establishes new connections between the BIG-IP and the real servers. This allows for optimum TCP stacks on both sides as well as the complete ability to modify traffic in either direction.

On April 3, 2009, F5 Networks released version 10.0 of the BIG-IP software. BIG-IP v10 is a major release supporting the company goals of "Unified Application and Data Delivery Services". This is the company vision on how applications, servers, storage, and network resources are managed in an organization.

Version 10 of BIG-IP contained new features to reduce latency, remove congestion or other impediments. Application delivery is enhanced by features such as symmetric adaptive compression operates between any two BIG-IP appliances, providing the data reduction, optimization and acceleration found in WAN traffic optimization products.[來源請求]

BIG-IP software features

[编辑]
  • iControl Application Programming Interface (API): an open API for management of the BIG-IP
  • iRules: a TCL-based scripting language allowing arbitrary manipulation of traffic flowing through the BIG-IP, including real-time modification of said data.

FirePass

[编辑]

The FirePass is an SSL VPN appliance and comes in the following models:[23]

Model Recommended Concurrent Users
FirePass Virtual Edition Up to 2000
FirePass 1200 100
FirePass 4100 500
FirePass 4300 2000

Compared to a traditional IPsec VPN, FirePass and other competing SSL VPNs have the following differences:

  • Granular access control: grant users different sets of privileges based on who they are, what client they are on, and where they are coming from. When combined with an authentication server such as Active Directory or LDAP, the group memberships for the user can determine which resources they can access with fine-grained control.
  • Access through firewalls: IPsec connections may be blocked by firewalls or proxy servers while port 443/TCP is almost always allowed.
  • Endpoint security: the client can be checked for an active virus scanner, registry entries, personal firewall, etc., before being allowed access to the network.
  • In addition to providing full network access like IPsec, the FirePass can provide access to only one server and port, and provide portal access to web sites and file shares, thus eliminating the need for any network access.

ARX Series

[编辑]

The ARX series is a series of file virtualization appliances that use technology F5 acquired through its acquisition of Acopia Networks. The devices work as proxies for CIFS and NFS, enabling administrators to control where files physically reside based on policies for age, file type, etc. whilst presenting users with a single target.

Enterprise Manager

[编辑]

Enterprise Manager is an F5 product that provides centralized management of multiple F5 BIG-IP devices. Enterprise Manager is available both as a physical and virtual appliance.

BIG-IQ

[编辑]

BIG-IQ is an emerging control plane for BIG-IP devices. F5 describes BIG-IQ as an intelligent framework for managing BIG-IP devices and application services, irrespective of their form factors (hardware, software or cloud) or deployment model (on-premises, private/public cloud or hybrid). BIG-IQ supports integration with other ecosystem participants such as public cloud providers, and orchestration engines through cloud connectors and through a comprehensive set of open RESTful APIs. Complementing the orchestration capability of BIG-IQ is a multi-tenant approach to management. This allows organizations to move closer to IT as a Service without concern that it might affect the stability or security of the services fabric.[24]

Three BIG-IQ modules are currently available:

  • BIG-IQ Device: Manages physical and virtual BIG-IP devices including device deployment and provisioning, license management, and inventory and monitoring as well as device configuration backup and restore.
  • BIG-IQ Cloud: Provides dynamic provisioning of devices in VMware, Amazon and OpenStack-based cloud environments.
  • BIG-IQ Security: Provides a single point of management for F5 BIG-IP Advanced Firewall Manager (AFM) and F5 BIG-IP Application Security Manager (ASM) solutions.

Additional BIG-IQ modules have been described but not formally announced.

LineRate

[编辑]

LineRate is a high-performance, software-based load balancer. It can be deployed on bare-metal x86 hardware or in virtual machine environments, including Amazon Web Services, VMWare, and KVM.

LineRate includes Node.js for running scripts. When a script is created for a Virtual Server, it sits in the data path and can add very custom logic to an application. There are several demonstration use-cases of scripting provided by F5 on the LineRate web site. They include:

  • Production Web Traffic Replication
  • Web Traffic Steering
  • Custom Content Filtering
  • Stronger Security in Software: SSL Offload via ECC and PFS

References

[编辑]
  1. ^ 1.0 1.1 1.2 1.3 1.4 1.5 1.6 1.7 F5 NETWORKS INC 2013 Annual Report Form (10-K) (XBRL). United States Securities and Exchange Commission. November 22, 2013. 
  2. ^ 2.0 2.1 F5 NETWORKS INC 2014 Q2 Quarterly Report Form (10-Q) (XBRL). United States Securities and Exchange Commission. May 8, 2014. 
  3. ^ 100 Fastest-growing companies. CNN. [2010-08-27]. 
  4. ^ http://www.thestreet.com/story/10957734/1/10-best-performing-sp-500-stocks-of-2010.html
  5. ^ Magic Quadrant for Application Delivery Controllers. [2010-08-27]. [失效連結]
  6. ^ http://www.alacrastore.com/storecontent/Thomson_Venture_Economics/F5_Networks_Inc_AKA_F5_Labs_Inc-Y45115
  7. ^ F5 Networks Form 10-K. [2012-05-02]. 
  8. ^ Quick Takes: F5 lassos uRoam. [2010-08-27]. 
  9. ^ John Leyden. F5 snaps up MagniFire. The Register. July 1, 2004 [July 16, 2013]. 
  10. ^ F5 to acquire Swan Labs. [2010-08-27]. 
  11. ^ F5 Networks Completes Acquisition of Acopia Networks. [2010-08-17]. 
  12. ^ F5 Acquires Intellectual Property Assets of Crescendo Networks. [2 May 2012]. 
  13. ^ F5 Networks Acquires Traffix Systems. [2 May 2012]. 
  14. ^ F5 Networks Acquires LineRate Systems. [11 Feb 2013]. 
  15. ^ F5 Networks Acquires Versafe to Help Customers Protect Against Online Fraud. [2 Nov 2013]. 
  16. ^ F5 Networks Acquires Defense.Net. [5 Aug 2014]. 
  17. ^ Steven Iveson. What the Heck Is F5 Networks’ TMOS?. packetpushers.net. 2013-04-20 [2013-12-02]. 
  18. ^ 18.0 18.1 Ryan Kearny; Steve Graves. No operating system is an island. embedded.com. 2008-12-14 [2013-12-02]. 
  19. ^ BIG-IP Hardware Data Sheet (PDF). October 28, 2010 [July 17, 2013]. （原始内容 (PDF)存档于December 3, 2010）. 
  20. ^ Press Release. [2012-05-02]. 
  21. ^ Manual Chapter: Understanding Core System Services. f5.com. [2013-12-02]. 
  22. ^ Overview of BIG-IP Traffic Management Microkernel (TMM) CPU and RAM usage. f5.com. [2013-12-02]. 
  23. ^ FirePass Data Sheet (PDF). [2010-08-17]. 
  24. ^ Sean Michael Kerner. F5 Gears up for BIG-IQ. enterprisenetworkingplanet.com. 2013-04-25 [2013-12-15]. 
[编辑]

Company Homepage

47°37′20″N 122°21′49″W / 47.622219°N 122.363493°W / 47.622219; -122.363493

检索自“https://zh.wikipedia.org/w/index.php?title=User:DukeAnt/F5网络&oldid=35785086”