Re: L7 packet inspection
Tony Bourke <[email protected]> Fri, 22 Jan 2010 13:06:25 -0800
| Newsgroups | gmane.comp.programming.load-balancing.general |
|---|---|
| Message-ID | <[email protected]> |
--===============1403775530== Content-Type: multipart/alternative; boundary=Apple-Mail-12-271860773 --Apple-Mail-12-271860773 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=iso-8859-1 Hello Stefan,=20 While the Cisco ACE does do some L7 inspection, that functionality is = not meant as a true Web Application Firewall. Cisco has the ACE WAF = (Web Application Firewall) for that purpose, and is specifically a L7 = firewall (scrubbing HTTP messages as firewalls scrub IP packets). = There are also several other vendors (F5, etc.) that also sell = stand-alone L7 firewalls. =20 Tony On Jan 22, 2010, at 3:28 AM, S. Stef=E1n Sigur=F0sson wrote: > Hi, my company wants to start doing packet L7 inspection on all = traffic going through the load balancer. > =20 > Now my concern (cost aside) is how will I get the best performance = possible, ever ms counts. > =20 > We are currently using an Ace module to do our SLB and it has the = option of L7 inspect but will that perform any better than putting a = good L7 firewall in front of the ACE. > =20 > We are still just in the concept stage of this plan so any advice or = good idea would be greatly appreciated.. > =20 > S. Stefan > _______________________________________________ > lb-l mailing list > [email protected] > http://vegan.net/mailman/listinfo/lb-l > Searchable Archive: http://vegan.net/lb/archive > http://lbdigest.com Load Balancing Digest > http://lbwiki.com Load Balancing Wiki --Apple-Mail-12-271860773 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=iso-8859-1 <html><head><base href=3D"x-msg://43/"></head><body style=3D"word-wrap: = break-word; -webkit-nbsp-mode: space; -webkit-line-break: = after-white-space; ">Hello Stefan, <div><br></div><div>While the = Cisco ACE does do some L7 inspection, that functionality is not meant as = a true Web Application Firewall. Cisco has the ACE WAF (Web = Application Firewall) for that purpose, and is specifically a L7 = firewall (scrubbing HTTP messages as firewalls scrub IP packets). = There are also several other vendors (F5, etc.) that also sell = stand-alone L7 firewalls. = </div><div><br></div><div>Tony</div><div><br></div><div><br></div><d= iv><br></div><div><br><div><div>On Jan 22, 2010, at 3:28 AM, S. Stef=E1n = Sigur=F0sson wrote:</div><br = class=3D"Apple-interchange-newline"><blockquote type=3D"cite"><span = class=3D"Apple-style-span" style=3D"border-collapse: separate; = font-family: Helvetica; font-size: medium; font-style: normal; = font-variant: normal; font-weight: normal; letter-spacing: normal; = line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; = white-space: normal; widows: 2; word-spacing: 0px; = -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: = 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: = auto; -webkit-text-stroke-width: 0px; "><div lang=3D"IS" link=3D"blue" = vlink=3D"purple"><div class=3D"Section1"><div style=3D"margin-top: 0cm; = margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: = 11pt; font-family: Calibri, sans-serif; "><span lang=3D"EN-US">Hi, my = company wants to start doing packet L7 inspection on all traffic going = through the load balancer.<o:p></o:p></span></div><div = style=3D"margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; = margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; = "><span lang=3D"EN-US"><o:p> </o:p></span></div><div = style=3D"margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; = margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; = "><span lang=3D"EN-US">Now<span = class=3D"Apple-converted-space"> </span><span style=3D"color: = rgb(31, 73, 125); ">m</span>y concern (cost aside) is how will I get the = best performance possible, ever ms counts.<o:p></o:p></span></div><div = style=3D"margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; = margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; = "><span lang=3D"EN-US"><o:p> </o:p></span></div><div = style=3D"margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; = margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; = "><span lang=3D"EN-US">We are currently using an Ace module to do = our SLB and it has the option of L7 inspect but will that perform any = better than putting a good L7 firewall in front of the = ACE.<o:p></o:p></span></div><div style=3D"margin-top: 0cm; margin-right: = 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 11pt; = font-family: Calibri, sans-serif; "><span = lang=3D"EN-US"><o:p> </o:p></span></div><div style=3D"margin-top: = 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; = font-size: 11pt; font-family: Calibri, sans-serif; "><span = lang=3D"EN-US">We are still just in the concept stage of this plan so = any advice or good idea would be greatly = appreciated..<o:p></o:p></span></div><div style=3D"margin-top: 0cm; = margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: = 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div = style=3D"margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; = margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; = ">S. = Stefan<o:p></o:p></div></div>_____________________________________________= __<br>lb-l mailing list<br><a href=3D"mailto:[email protected]" = style=3D"color: blue; text-decoration: underline; = ">[email protected]</a><br><a href=3D"http://vegan.net/mailman/listinfo/lb-l"= style=3D"color: blue; text-decoration: underline; = ">http://vegan.net/mailman/listinfo/lb-l</a><br>Searchable Archive:<span = class=3D"Apple-converted-space"> </span><a = href=3D"http://vegan.net/lb/archive" style=3D"color: blue; = text-decoration: underline; ">http://vegan.net/lb/archive</a><br><a = href=3D"http://lbdigest.com" style=3D"color: blue; text-decoration: = underline; ">http://lbdigest.com</a><span = class=3D"Apple-converted-space"> </span>Load Balancing Digest<br><a = href=3D"http://lbwiki.com" style=3D"color: blue; text-decoration: = underline; ">http://lbwiki.com</a><span = class=3D"Apple-converted-space"> </span>Load Balancing = Wiki<br></div></span></blockquote></div><br></div></body></html>= --Apple-Mail-12-271860773-- --===============1403775530== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ lb-l mailing list [email protected] http://vegan.net/mailman/listinfo/lb-l Searchable Archive: http://vegan.net/lb/archive http://lbdigest.com Load Balancing Digest http://lbwiki.com Load Balancing Wiki --===============1403775530==--