Post on 14-Jul-2015
© Copyright 2013Wellesley Information Services, Inc.
All rights reserved.
Providing Best Response Times, Tightest Security and Highest Availability for Your Virtual and Cloud-Based SAP Applications
Prakash SinhaRadware
1
In This Session …
We’ll discuss:
• How to maximize SAP application availability
Utilizing server load balancing, global server load balancing,
and content switching
• How to improve performance of SAP applications
Discuss techniques such as TCP optimization, SSL, and offload
and WAN optimization
• How to reduce latency for Web delivery and monitor performance
Techniques such as caching, compression, and end-user
performance monitoring
• How to maximize SAP application security
Securing Layer 4 and Layer 7
2
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
What We’ll Cover …
3
Web Application Delivery Challenges
Apps consolidated to fewer data centers
Many users access apps remotely
Web protocols are not efficient
Web apps increase security requirements
4
• Data center consolidation, driven by cost savings and regulatory
compliance
Leading to fewer data centers
SAP data center
consolidation
Common requirement of SAP application owners:
Reduce response time
• As a result: More users accessing SAP services over the WAN
WAN connections introduce higher latency
Heavier load on the SAP application
SAP Application Trends — Data Center Consolidation
5
• SAP applications are now transitioning to browser-based clients
• Rising use of B2B transactions via Web Services
• Growing mobile user base – Key driver for adopting Web Services
The transition to Web-based services introduces
increased latency to many SAP application modules
SAP Application Trends — Web-Enabled Applications
6
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
What We’ll Cover …
7
Web
Dispatcher
Mobile Users
Branch Office
Data Center
Local SAP Users
Partners
SAP
RouterSAP Application
Servers
SAP Message
Server
WAN latency impacts SAP
application performance
SAP Application Deployment: Challenges
Single point of failure – Risking
SAP application availability
SAP application
must continue
even under attack
8
Composite Enterprise Application
Business App
Web Services
Consumers
XML/Web Service Applications
Composite
servers
Business
Warehouse
Payment/Billing Apps
Web-enabled apps
introduce new security
threats
XML/HTTP messages are
up to 10X larger than their
binary equivalent
Access control must be
enforced to prevent
malicious users
Mission critical
applications must be
reliable and available
9
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
What We’ll Cover …
10
Introduction to Application Delivery Controllers (ADC)
App Servers
Business
Warehouse
Payment/Billing Systems
Availability
Acceleration
Performance
Security
Web Services
Consumers
ADC
11
ADC — Deployment
DB Servers
Identity
Management
Services
Consumers
ADC
Web/App Servers
Services
Providers
App Servers
ADC
May be virtualized, on-premise,
cloud-based, or hybrid
12
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
What We’ll Cover …
13
Making Your SAP Applications Shine
• Addressing SAP deployment challenges
Ensuring high availability for SAP applications
Reducing latency for users of SAP applications
Securing SAP applications
Addressing WAN latency
14
Data Center
ADC Deployment with SAP Applications
ADC
Local SAP UsersPartners
Branch Office
24x7 SAP application availability
via health monitoring and traffic
redirection
SAP application security and
compliance
Faster response for
SAP users
SAP Application
Servers
Better IT utilization – Do
more by offloading SAP
servers
15
Data Center 1
SAP Application
Servers
Ensuring SAP Application High Availability
ADC
LAN connected(Local)
SAP Users
Data Center 2
SAP Application
ServersADC
LAN connected(Local)
SAP Users
remote office
Road warriors
Commuters Tra
ns
pa
ren
t S
ite
Fa
il o
ve
r
(GS
LB
)
Automatically redirect traffic to the most available
server with SAP application health checks
Bypass ISP connectivity issues with ADC’s
Link Load Balancing functionality
Traffic redirection between
sites / DR site, in case one
data center is totally
unavailable
16
Data Center
Reducing Latency for Users of SAP Applications
ADC
Local SAP Users
Remote Office
Remote Office
SAP
Application
Servers
Caching
Compression
Faster response for SAP users – Look for validation by SAP
SSL OffloadingTCP Protocol
Optimization
TCP Multiplexing
17
Securing SAP Applications
Data Center
SAP Application
Servers
ADC
LAN connected(Local)
SAP Users
Web App Security
DDoS Protection
Visibility
Hide SAP application deployment
topology from end users
• Provide application-level DDoS
protection
Attack mitigation for:
• DDoS protection
• Network Behavioral
Analysis
• IPS
• Reputation
Web application firewall providing:
• Mitigation of OWASP top 10 threats
• Prevention of data theft and
manipulation of sensitive corporate and
customer information
SEM for correlation reports on:
• Session hijacking
• Non-valid XML structure
• Audit and access
18
Data Center
Central ADC
Local SAP Users
Branch Office
Branch Office
SAP Application
Servers
Central unit automatically sets up an
accelerated and secured tunnel with the
branch units’ clients and centrally
manages them
A central ADC unit deployed in the
data center
Together with a branch client for
SAP
Secured & Accelerated
Tunnels
ADC integrated with SAP’s acceleration
module – Dedicated for SAP NetWeaver
applications
Addressing WAN Latency: Symmetric Acceleration
SAP
AccAD
SAP
AccAD
SAP
AccAD
19
• WAN improvements reduce load and tasks processing from SAP application
servers
Secured accelerated tunnels — Eliminate the need for SSL connections
Compression eliminates the need for it in the SAP servers
Caching in the SAP endpoints reduces the amount of tasks processed by
servers
Secured & Accelerated
Tunnels
Data CenterLocal SAP Users
Branch Office
SAP Application
Servers
Clear, uncompressed
trafficSecured (encrypted)
and compressed/
accelerated traffic
Clear traffic
Central ADC
Secured (SSL) and
accelerated traffic
Better SAP Server Utilization
SAP
AccADSAP
AccAD
20
Symmetric Acceleration: How Does It Work?
Network
time (request)
Server time
Network
time (reply)
Overall
transaction
time
Offload commodity
processes
(e.g., SSL, compre
ssion)
TCP traffic
optimization
Efficient compression
mechanisms
End-to-end
security
Integrated
cache
WAN
User
&
Client wait / pre-
processing time
Client wait /
rendering timet
Time spent in browser before the request leaves
Time for transmitting the request over WAN
Processing time at application server
Time for transmitting the reply over WAN
Time spent for rendering and waiting for the sub requests
SAP ApplicationsBranch Central ADC
SAP
AccADSAP
AccAD
21
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
What We’ll Cover …
22
• Configuration templates –
For fast application rollout
• Auto discovery and synchronization of
application changes via ASLR integration –
Simplifying operations
• Reporting, compliance and logging –
For complete visibility
• Simple ADC customization per specific
application flow
Deployment — What to Look for?
23
Data CenterEnterprise
Portal
Automated Discovery and Provisioning (ASLR Integration)
ADC
Partners
Config Management/Monitoring
Branch Office
Rapid rollout – Auto discovery of SAP configuration and ADC provisioning
Simplified operation – Auto synchronization of the ADC with SAP’s configuration
2. Using SAP templates,
configuration manager updates
the ADC configuration and
policies 3. The ADC is ready to
load balance to
updated SAP services
1. Configuration Manager periodically
queries the ASLR to retrieve updated
SAP services configuration
SAP Application
Servers
SAP Message
Server
24
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
What We’ll Cover …
25
Demo 1: Logging in to the Web Portal
26
Demo 2: Navigating to Learning Solutions Overview
27
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
What We’ll Cover …
28
Customer
• Net 2010 revenues:
$6.98 billion
• Over 120,000
employees
• 72 plus global
delivery centers
• Gold partner with
SAP
Challenges and Objective• Slow SAP Web Services response time
• Network upgrades to 10GE required ADC support
• Increase SAP services’ availabilities
• Solution must be certified with SAP
Solution Overview• 7 X Alteon 5224-XL with:
• 5 vADCs on each – For multi-zone SAP support (and other
apps support)
• GSLB license for cross DC redundancy
• 2 units for dev environment
Solution Business Benefits
• 80% improvement in page load times
• 99.999% SAP applications service availability with GSLB,
advanced health checks, no single point of failure
• Faster Web app response time through third-party tool
• Virtualization enabling cost effective flexibility in deployment
• 10GE support – Leveraging their recent network upgrade
Case Study: Delivering Accelerated IT Services
29
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
What We’ll Cover …
30
Where to Find More Information
• http://searchnetworking.techtarget.com/definition/Application-delivery-
controller
Application Delivery Controller
• http://searchnetworking.techtarget.com/tip/Application-delivery-controller-
technology-plays-many-roles
Many Roles of an ADC
• http://www.radware.com/workarea/showcontent.aspx?ID=7973
Application and Service Delivery Handbook
• http://scn.sap.com/docs/DOC-18660
Accelerated Application Delivery for SAP Netweaver
31
7 Key Points to Take Home
• Datacenter consolidation is driving remote users to access SAP applications
over the Web
• Web access requires tighter security, reducing latency and providing high
availability for mission critical SAP applications
• Two ways of addressing these challenges using ADCs – Asymmetric and
symmetric
• Asymmetric deployment addresses challenges of availability, security, and
latency and delivers performance and improves ROI by offloading from SAP
servers
• Symmetric acceleration utilizes integration with SAP AccAD to deliver high
performance over WAN
• Ensure your ADC supports your virtualization environment, management tools,
and integrates with ASLR for automation
• Make sure that the ADC technologies you utilize and deploy are certified by
SAP
32
Your Turn!
How to contact me:
Prakash Sinha
prakash.sinha@radware.com
Please remember to complete your session evaluation
33
Disclaimer
SAP, R/3, mySAP, mySAP.com, SAP NetWeaver®, Duet®, PartnerEdge, and other SAP products and services mentioned herein as well as their
respective logos are trademarks or registered trademarks of SAP AG in Germany and in several other countries all over the world. All other product and
service names mentioned are the trademarks of their respective companies. Wellesley Information Services is neither owned nor controlled by SAP.