|
Thunder CGN
A10 Networks Thunder CGN is a high-performance carrier-grade NAT (CGN) product line that provides enterprises and operators with highly transparent URL and protocol conversion for IPv4 connectivity extension and migration to IPv6. As a high-end CGN solution, Thunder CGN delivers up to 160 Gbps throughput with the widest range of device models (physical, virtual, and hybrid) and incorporates DDoS attack protection.
The A10 Thunder CGN product line is based on the A10's highly scalable ACOS platform (Advanced Core Operating System) and uses the SSMP architecture (Symmetric Scalable Multi-Core Processing, scalable symmetric multi-processor architecture). Enterprise and carrier networks provide high performance and a broad range of deployment options.
Extending IPv4 connectivity: Although today's networks have completed bandwidth augmentation, the rapid growth in the number of Internet access devices has led to the exhaustion of IPv4 address resources. Both enterprises and operators are faced with the need to expand resources, but it is not realistic to complete IPv6 migration in a short period of time. Carrier-class NAT (CGN/CGNAT) solutions help customers solve this problem, extend connectivity to standardized IPv4 translation, preserve existing IPv4 address allocation, and maximize the lifecycle and investment of built IPv4 systems for IPv6 deployment The migration strategy strives for time and cost savings.
Extended Conversion Options: The Thunder CGN product line offers a variety of technology options for smooth transitions to IPv6 networks and devices based on customer deployment. Regardless of which IP version the system uses, Thunder CGN supports multiple IPv6 translation technologies, ensuring that enterprise applications and users can connect to the entire Internet while meeting the needs of different IPv6 network transitions. Optimized for customers in a variety of conversion technologies on a high-performance platform.
Application Reliability: With Application Layer Gateways (ALGs) and other important features, the Thunder CGN product line provides the highest connection reliability, enabling applications to remain accessible and transparently manipulated after address translation. When failover occurs, High Availability (HA) can continue to hold established calls for user-insensitive switching. The high reliability of Thunder CGN not only meets the needs of enterprises for cost control, but also meets the requirements of service level agreements (SLAs) to improve user satisfaction.
The A10 Thunder CGN delivers high-quality service for critical applications with the most compact and efficient hardware and software architecture. At the same time, it helps customers use the machine room space most efficiently, reducing power and cooling consumption, thereby reducing operating expenses (OPEX).
Products and advantages
The A10 Thunder CGN offers a variety of advanced features to help enterprises and operators extend IPv4 connectivity and transition to IPv6 Internet connectivity. Different companies and even the same company's internal network address scheme and IPv6 transition architecture may be very different, customers need a solution that provides the most comprehensive industry standard support, while meeting different address and protocol conversion requirements. The Thunder CGN product line offers a wide range of standard IPv4 extensions and IPv6 transition technologies - all integrated into the A10 ACOS-based high-performance physical, virtual and hybrid devices.
Extended IPv4 connection
The Thunder CGN product family offers advanced CGNAT capabilities to easily alleviate IPv4 address exhaustion and extend the life of your IPv4 network infrastructure. The A10 CGNAT solution has many features and functions to meet the needs of enterprises that want to deploy CGNAT.
• Advanced CGNAT functionality: CGNAT provides a standards-based mechanism for reusing existing public IPv4 address space through address and port translation. This creates a network that translates private network addresses into routable public IP addresses that can be used on external networks. Since the address conversion ratio between the private network IP and the public network IP is high, the IPv4 address of a large space is reused. The simultaneous implementation of CGNAT for a large number of users requires a lot of computation and memory resources to store user state information. The A10 Thunder CGN product family uses an efficient ACOS platform architecture to deliver high-performance CGNAT expansion in a compact and efficient chassis that supports up to 256 million concurrent sessions and ultra-high session setup and cleanup rates. To achieve the same performance, other brands of solutions require a large chassis and multiple application blades.
• Advanced logging: The government may require operators to track user connection details at a particular point in the past, a task that becomes more complex when scaling large-scale IPv4 CGNAT solutions. The Thunder CGN solution uses a variety of techniques to increase log detail and reduce log capacity to reduce the need for logging infrastructure. For example, log compression can greatly reduce the amount of data required to describe a particular log event. Deterministic or fixed network address translation (NAT) essentially eliminates log conversions, and the details of user connections can be easily obtained with a simple algorithm.
Wide range of conversion options
Since IPv6 is not backward compatible with IPv4, A10 offers customers a variety of solutions to achieve a full connection without being affected by source or destination IP protocols.
• Ubiquitous protocol connections: Transition technologies such as Dual-Stack Lite (DS-Lite) enable operators to run a network with pure IPv6 access, while IPv4 devices can also use IPv6 infrastructure through softwires (also called tunnels) And then connect to the internet. Light Weight 4 over 6 (LW4o6) or IPv6 Rapid Deployment (6rd) provides similar functionality, allowing different IP versions to access the network.
• Ensure IPv6 clients can access IPv4 content: IPv6 is not designed to be backward compatible with IPv4, which increases the complexity of IPv6 client deployment. NAT64/DNS64 solves this problem, enabling IPv6 devices to access IPv4 content and allowing clients to access most of the current Internet content.
• Collaborative operation, phased transition: It is common to deploy multiple transition technologies simultaneously on the network. Thunder CGN products ensure that customers can deploy all transition technologies at the same time, such as deploying CGNAT first to address the urgent need for IPv4 address exhaustion, and then deploy NAT64/DNS64 in stages when you are ready to enable IPv6 clients to access IPv4 Internet.
Application access capability and reliability
While the OSI network layer principles should ensure isolation between different applications and network behavior, this is not the case in all cases. Many applications rely on the network to transmit information to run, which can cause problems when only a portion of the network is converted. The reliability of the connection is critical for applications that need to remain available at all times.
• CGNAT transparency: Advanced CGNAT features such as EIM and hairpinning ensure predictability of NAT behavior and provide a transparent end-user experience. For example, user quotas ensure that public network IP ports are fairly distributed among end users, while viruses and malware cannot exhaust resources allocated to other users.
• Application Layer Gateways (ALGs): It is important for operators to ensure the normal connectivity of all application services and users. ALGs in CGNAT ensure that protocols such as FTP, TFTP, RTSP, PPTP, SIP, ICMP, H.323, and DNS work properly, and many traditional NAT implementations cannot achieve this transparency.
• Stateful session synchronization (smooth failover): In HA (High Availability) deployment mode, the A10 Thunder CGN device synchronizes all active sessions to ensure that the session is not interrupted during failover, and the end user is not aware of it. Anything happens. In this way, the user does not have to re-do large file downloads and the like, which greatly improves user satisfaction.
In addition, Thunder CGN integrates DDoS protection for CGN devices that serve the public, protecting against massive multi-vector DDoS attack traffic. All A10 Thunder CGN products feature DDoS protection, while the Thunder SPE special-purpose device uses the Hardware Security Policy Engine (SPE) to enforce security policies at high speed. These CGN hardware and software features are integrated to maximize the online time of network resources to handle user traffic.
product description
The A10 Thunder Series is a complete solution for hardware and software application delivery that meets the needs of a variety of deployment environments. Each Thunder product features a flexible Advanced Core Operating System (ACOS) architecture that delivers the accuracy and efficiency of unique shared memory, as well as 64-bit scalability and advanced stream processing.
• Thunder SPE Appliances: Thunder SPE appliances enable high-speed execution of security policies with up to 155Gbps performance for the most demanding application network and security needs. Thunder SPE appliances use A10's innovative Security Policy Engine (SPE) for higher security and policy enforcement, leveraging leading flexible traffic acceleration (FTA) technology and high-speed inspection capabilities. In addition, Thunder SPE features an advanced design architecture with scalable security policy enforcement capabilities. All models support dual power supplies and feature solid state drives (SSDs) and easy-to-expand detachable accessories to ensure high availability. Thunder SPE devices with high-density port selection of 1Gbps, 10Gbps, 40Gbps and 100Gbps, and the highest level of 80 PLUSTM Platinum-certified power supply ensure a green solution and reduce power costs, providing the best unit rack performance .
• Thunder Hardware: The Thunder Hardware CGN Series features high-performance models ranging from 30Gbps entry-level models to 155Gbps for networks of all sizes for the most demanding applications. All models support dual power supplies and feature solid state drives (SSDs) and easy-to-expand detachable accessories to ensure high availability. All product models benefit from FTA technology, and some models also use FPGAs to handle hardware-optimized flow distribution, using switching and routing processors to provide high-performance network processing. Each unit delivers the highest unit rack performance, while the highest level of 80 PLUSTM Platinum certified power supply ensures a green solution and reduces power costs. With high-density 1Gbps, 10Gbps, 40Gbps and 100Gbps ports, Thunder CGN meets the highest network bandwidth requirements.
• vThunder Virtual Appliance: More and more customers need to run flexible and easy-to-deploy IPv4 extensions and IPv6 migration solutions in a virtualized infrastructure that meets this need. Each vThunder virtual unit has all the features of CGNAT and runs on any commercial hardware and mainstream hypervisor, such as VMware ESXi and KVM.
• Thunder Hybrid Virtual Appliance (HVA): The A10 Thunder HVA appliance combines the flexibility and high performance of virtual appliances with the power of optimized hardware to allow multiple vThunder virtual appliances to run on dedicated turnkey hardware for multi-tenant Application requirements, and high-density virtual cells are completely isolated from each other, with their own dedicated ACOS and computing resources. All vThunder CGN virtual units are included in the HVA device.
A variety of management solutions are available for customers to choose from. The A10 aGalaxy® intelligent unified management platform centrally manages all Thunder series hardware and software devices, enhances Thunder infrastructure solutions, and simplifies operations, thereby reducing operating expenses (OPEX).
|
