The advanced multicore multithread hardware architecture allows the device to concurrently perform health monitoring, load balancing scheduling, security, and routing tasks without sacrificing performance. The data flow-based fast forwarding reduces route lookup time and improves packet forwarding efficiency. These features enable the device to bring high load balancing and security performance.
The device provides rich interface types and multiple expansion slots to meet varied requirements for interfaces. It provides GE copper and fiber ports and 10GE fiber ports. With NSQM1QG2A interface modules installed, it can also provide 40GE fiber ports.
Efficient health monitoring
The device supports multiple health monitoring algorithms. It allows you to monitor the health status of servers and applications at the network layer and application layer by using the H3C-proprietary network quality analyzer (NQA) technology. This consumes minimum system resources and ensures load balancing performance. The health monitoring algorithms are applicable to Layer 4 server load balancing and Layer 7 server load balancing.
Flexible link load balancing scheduling
The device supports load balancing among ingress links and egress links. It can intelligently schedule the ingress and egress traffic by using the built-in global ISP IP address database and implement load balancing based on service providers, link health conditions, and link bandwidths. This improves user experience, realizes link backup, and improves bandwidth efficiency.
Rich load balancing scheduling algorithms
The device supports multiple load balancing scheduling algorithms for different application scenarios, including round robin, weighted round robin, least connection, weighted least connection, random, source address hash, destination address hash, and source address and port hash algorithms. These algorithms are applicable to Layer 4 server load balancing and Layer 7 server load balancing.
Layer 4 and Layer 7 server load balancing
Layer 4 server load balancing is implemented based on Layer 4 features such as IP address and TCP or UDP port number.
Layer 7 server load balancing is implemented based on Layer 7 contents. It parses and analyzes packets based on the HTTP header, HTTP URL, HTTP cookie, or HTTP content and allows you to configure Layer 7 policies based on the analysis result to distribute HTTP packets and keep the sessions.
SSL offloading and acceleration
SSL offloading and acceleration (RSA, ECDHE, ECC, and GM algorithms) take off encryption and decryption processing from the server and use no or weak SSL ciphers to communicate with the server. This feature greatly reduces SSL processing workloads on the server and saves server CPU resources.
Application optimization
The device takes over all traffic from the clients and servers and can parse and optimize protocol fields of all layers.
The device allows users to use the following profiles to optimize and improve application delivery:
IP parameter profile—You can use the IP ToS field to optimize various types of transmission protocols and improve the transmission performance of key applications.
TCL parameter profile—Options such as transmit and receive buffer sizes improve the link transmission quality and optimize TCP data transmission.
HTTP parameter profile—You can use the following options and parameters to satisfy the user requirements for optimizing and improving HTTP application delivery.
Rebalance per-request
Header modify per-transaction
Header maxparse-length
Secondary-cookie
Content maxparse-length
The device supports TCP multiplexing. It allows numerous HTTP requests to be multiplexed over a small number of TCP connections. This reduces the server load greatly, decreases the delay caused by new TCP connection establishments, minimizes the number of concurrent connections of the server, and saves server resources.
The device supports HTTP caching, which caches the frequently accessed page elements on the server in its high-speed memory to respond to the client's requests instead of the server. This can reduce the IO overhead of the server and shorten the access path of the client.
In addition, the device supports HTTP content compression, which compresses the contents in HTTP responses by using a high-performance algorithm, greatly reducing network bandwidth cost, decreasing performance cost associated with compression by the server, eliminating redundant data, and increasing the webpage response speed.
Comprehensive security features
The device provides powerful and complete security features such as IPS, AV, and WAF. It can decrypt HTTPS traffic and take actions against attacks, and can defend against various types of attacks such as DoS/DDoS, ARP spoofing, ICMP flood, and address/port scanning.
High availability
H3C proprietary software and hardware platforms make the device highly reliable. Highly welcomed at the market, it is widely used by service provider and enterprise customers.