Re : L7 packet inspection
Surya ARBY <[email protected]> Fri, 22 Jan 2010 12:25:01 +0000 (GMT)
| Newsgroups | gmane.comp.programming.load-balancing.general |
|---|---|
| Message-ID | <[email protected]> |
--===============0225756404== Content-Type: multipart/alternative; boundary="0-470696699-1264163101=:82739" --0-470696699-1264163101=:82739 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Hello. By adding an external L7 inspection device, you'll add some network latency= to the whole RTT of your flows Surya --- En date de=A0: Ven 22.1.10, S. Stef=E1n Sigur=F0sson <[email protected]= om> a =E9crit=A0: De: S. Stef=E1n Sigur=F0sson <[email protected]> Objet: [load balancing] L7 packet inspection =C0: "[email protected]" <[email protected]> Date: Vendredi 22 Janvier 2010, 12h28 =0A=0A=0A=0A=0A =0A=0A=0A=0A=0A=0A=0AHi, my company wants to start doing pa= cket=0AL7 inspection on all traffic going through the load balancer. =0A=0A= =A0 =0A=0ANow my=0Aconcern (cost aside) is how will I get the best perform= ance possible, ever ms=0Acounts. =0A=0A =A0 =0A=0AWe are currently =A0using= an Ace module=0Ato do our SLB and it has the option of L7 inspect but will= that perform any=0Abetter than putting a good L7 firewall in front of the = ACE. =0A=0A =A0 =0A=0AWe are still just in the concept stage of=0Athis plan= so any advice or good idea would be greatly appreciated.. =0A=0A =A0 =0A= =0AS. Stefan =0A=0A=0A=0A =0A=0A -----La pi=E8ce jointe associ=E9e suit----- _______________________________________________ lb-l mailing list [email protected] http://vegan.net/mailman/listinfo/lb-l Searchable Archive: http://vegan.net/lb/archive http://lbdigest.com Load Balancing Digest http://lbwiki.com Load Balancing Wiki =0A=0A=0A --0-470696699-1264163101=:82739 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable <table cellspacing=3D"0" cellpadding=3D"0" border=3D"0" ><tr><td valign=3D"= top" style=3D"font: inherit;">Hello.<br><br>By adding an external L7 inspec= tion device, you'll add some network latency to the whole RTT of your flows= <br><br>Surya<br><br>--- En date de : <b>Ven 22.1.10, S. Stef=E1n Sigu= r=F0sson <i><[email protected]></i></b> a =E9crit :<br><blockq= uote style=3D"border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; pa= dding-left: 5px;"><br>De: S. Stef=E1n Sigur=F0sson <[email protected]&= gt;<br>Objet: [load balancing] L7 packet inspection<br>=C0: "[email protected]= " <[email protected]><br>Date: Vendredi 22 Janvier 2010, 12h28<br><br><d= iv id=3D"yiv577148529">=0A=0A=0A=0A=0A =0A<style>=0A<!--=0A#yiv577148529 = =0A _filtered #yiv577148529 {font-family:"Cambria Math";panose-1:2 4 5 3 5 = 4 6 3 2 4;}=0A _filtered #yiv577148529 {font-family:Calibri;panose-1:2 15 5= 2 2 2 4 3 2 4;}=0A#yiv577148529 =0A#yiv577148529 p.MsoNormal, #yiv5771485= 29 li.MsoNormal, #yiv577148529 div.MsoNormal=0A=09{margin:0cm;margin-bottom= :.0001pt;font-size:11.0pt;font-family:"Calibri", "sans-serif";}=0A#yiv57714= 8529 a:link, #yiv577148529 span.MsoHyperlink=0A=09{color:blue;text-decorati= on:underline;}=0A#yiv577148529 a:visited, #yiv577148529 span.MsoHyperlinkFo= llowed=0A=09{color:purple;text-decoration:underline;}=0A#yiv577148529 span.= EmailStyle17=0A=09{font-family:"Calibri", "sans-serif";color:windowtext;}= =0A#yiv577148529 span.EmailStyle18=0A=09{font-family:"Calibri", "sans-serif= ";color:#1F497D;}=0A#yiv577148529 .MsoChpDefault=0A=09{font-size:10.0pt;}= =0A _filtered #yiv577148529 {margin:70.85pt 70.85pt 70.85pt 70.85pt;}=0A#yi= v577148529 div.Section1=0A=09{}=0A-->=0A</style>=0A=0A<div class=3D"Section= 1">=0A=0A<p class=3D"MsoNormal"><span lang=3D"EN-US">Hi, my company wants t= o start doing packet=0AL7 inspection on all traffic going through the load = balancer.</span></p> =0A=0A<p class=3D"MsoNormal"><span lang=3D"EN-US"> &nb= sp;</span></p> =0A=0A<p class=3D"MsoNormal"><span lang=3D"EN-US">Now <span = style=3D"color: rgb(31, 73, 125);">m</span>y=0Aconcern (cost aside) is how = will I get the best performance possible, ever ms=0Acounts.</span></p> =0A= =0A<p class=3D"MsoNormal"><span lang=3D"EN-US"> </span></p> =0A=0A<p = class=3D"MsoNormal"><span lang=3D"EN-US">We are currently using an Ac= e module=0Ato do our SLB and it has the option of L7 inspect but will that = perform any=0Abetter than putting a good L7 firewall in front of the ACE.</= span></p> =0A=0A<p class=3D"MsoNormal"><span lang=3D"EN-US"> </span><= /p> =0A=0A<p class=3D"MsoNormal"><span lang=3D"EN-US">We are still just in = the concept stage of=0Athis plan so any advice or good idea would be greatl= y appreciated..</span></p> =0A=0A<p class=3D"MsoNormal"> </p> =0A=0A<= p class=3D"MsoNormal">S. Stefan </p> =0A=0A</div>=0A=0A =0A=0A</div><br>---= --La pi=E8ce jointe associ=E9e suit-----<br><br><div class=3D"plainMail">__= _____________________________________________<br>lb-l mailing list<br><a ym= ailto=3D"mailto:[email protected]" href=3D"/mc/[email protected]">lb= [email protected]</a><br><a href=3D"http://vegan.net/mailman/listinfo/lb-l" targ= et=3D"_blank">http://vegan.net/mailman/listinfo/lb-l</a><br>Searchable Arch= ive: <a href=3D"http://vegan.net/lb/archive" target=3D"_blank">http://vegan= .net/lb/archive</a><br><a href=3D"http://lbdigest.com" target=3D"_blank">ht= tp://lbdigest.com</a> Load Balancing Digest<br><a href=3D"http://lbwiki.com= " target=3D"_blank">http://lbwiki.com</a> Load Balancing Wiki<br></div></bl= ockquote></td></tr></table><br>=0A=0A=0A=0A=0A --0-470696699-1264163101=:82739-- --===============0225756404== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ lb-l mailing list [email protected] http://vegan.net/mailman/listinfo/lb-l Searchable Archive: http://vegan.net/lb/archive http://lbdigest.com Load Balancing Digest http://lbwiki.com Load Balancing Wiki --===============0225756404==--