Providing best response times, tightest security and highest availability for your virtual and...

© Copyright 2013Wellesley Information Services, Inc.

All rights reserved.

Providing Best Response Times, Tightest Security and Highest Availability for Your Virtual and Cloud-Based SAP Applications

Prakash SinhaRadware

1

In This Session …

We’ll discuss:

• How to maximize SAP application availability

Utilizing server load balancing, global server load balancing,

and content switching

• How to improve performance of SAP applications

Discuss techniques such as TCP optimization, SSL, and offload

and WAN optimization

• How to reduce latency for Web delivery and monitor performance

Techniques such as caching, compression, and end-user

performance monitoring

• How to maximize SAP application security

Securing Layer 4 and Layer 7

2

• SAP application trends — A Quick Overview

• SAP application challenges — Latency, availability, security

• Application Delivery Controller (ADC) — A brief introduction

• Using ADC to make your SAP applications shine

• Deploying ADC for SAP

• Demo: ADC acceleration in action for SAP LSO

• Case Study: Accelerating IT services

• Wrap-up

What We’ll Cover …

3

Web Application Delivery Challenges

Apps consolidated to fewer data centers

Many users access apps remotely

Web protocols are not efficient

Web apps increase security requirements

http://www.google.com/url?sa=i&source=images&cd=&cad=rja&docid=yuHgXuvYgmZCAM&tbnid=zoViH4XLbYJF0M:&ved=0CAgQjRwwAA&url=http://www.jambitz.com/google-chrome-continua-ganando-terreno-entre-los-navegadores-web/google-chrome-logo-wallpaper/&ei=5OU8UbT3BMqAygHF04HACQ&psig=AFQjCNHl_gaA2gKQbn196L2zIz3FGWBJCA&ust=1363031908126500

http://www.google.com/url?sa=i&source=images&cd=&cad=rja&docid=yuHgXuvYgmZCAM&tbnid=zoViH4XLbYJF0M:&ved=0CAUQjRw&url=http://www.amisdemontmelian.com/&ei=F-Y8UYLSNuSwyQHOz4Bw&psig=AFQjCNHl_gaA2gKQbn196L2zIz3FGWBJCA&ust=1363031908126500

http://www.google.com/url?sa=i&source=images&cd=&cad=rja&docid=DFvETojRf9M-FM&tbnid=qO4G_AZqzXpkAM:&ved=0CAgQjRwwAA&url=http://en.wikipedia.org/wiki/File:Internet_Explorer_7_Logo.png&ei=V-Y8UaN-zevIAf-fgdgN&psig=AFQjCNFEoariZge4-CJrbCu9Emv6WjwZbA&ust=1363032023063942

http://www.google.com/url?sa=i&source=images&cd=&cad=rja&docid=gBA1AJnnveKQFM&tbnid=NM8H-93pSHOnrM:&ved=0CAUQjRw&url=http://cloudstorage.us/encrypted-cloud-storage-and-how-it-affects-your-file-storage-practices/183/&ei=Aeg8UYmILaTqyQGh74GoCQ&psig=AFQjCNGK1-IfoRXBByL9Vq3fL7mslkLDJQ&ust=1363032432101637





4

• Data center consolidation, driven by cost savings and regulatory

compliance

Leading to fewer data centers

SAP data center

consolidation

Common requirement of SAP application owners:

Reduce response time

• As a result: More users accessing SAP services over the WAN

WAN connections introduce higher latency

Heavier load on the SAP application

SAP Application Trends — Data Center Consolidation

5

• SAP applications are now transitioning to browser-based clients

• Rising use of B2B transactions via Web Services

• Growing mobile user base – Key driver for adopting Web Services

The transition to Web-based services introduces

increased latency to many SAP application modules

SAP Application Trends — Web-Enabled Applications

6








• Wrap-up


7

Web

Dispatcher

Mobile Users

Branch Office

Data Center

Local SAP Users

Partners

SAP

RouterSAP Application

Servers

SAP Message

Server

WAN latency impacts SAP

application performance

SAP Application Deployment: Challenges

Single point of failure – Risking

SAP application availability

SAP application

must continue

even under attack

8

Composite Enterprise Application

Business App

Web Services

Consumers

XML/Web Service Applications

Composite

servers

Business

Warehouse

Payment/Billing Apps

Web-enabled apps

introduce new security

threats

XML/HTTP messages are

up to 10X larger than their

binary equivalent

Access control must be

enforced to prevent

malicious users

Mission critical

applications must be

reliable and available

http://www.google.com/url?sa=i&source=images&cd=&cad=rja&docid=DFvETojRf9M-FM&tbnid=qO4G_AZqzXpkAM:&ved=0CAgQjRwwAA&url=http://en.wikipedia.org/wiki/File:Internet_Explorer_7_Logo.png&ei=V-Y8UaN-zevIAf-fgdgN&psig=AFQjCNFEoariZge4-CJrbCu9Emv6WjwZbA&ust=1363032023063942

9








• Wrap-up


10

Introduction to Application Delivery Controllers (ADC)

App Servers

Business

Warehouse

Payment/Billing Systems

Availability

Acceleration

Performance

Security

Web Services

Consumers

ADC

11

ADC — Deployment

DB Servers

Identity

Management

Services

Consumers

ADC

Web/App Servers

Services

Providers

App Servers

ADC

May be virtualized, on-premise,

cloud-based, or hybrid

12








• Wrap-up


13

Making Your SAP Applications Shine

• Addressing SAP deployment challenges

Ensuring high availability for SAP applications

Reducing latency for users of SAP applications

Securing SAP applications

Addressing WAN latency

14

Data Center

ADC Deployment with SAP Applications

ADC

Local SAP UsersPartners

Branch Office

24x7 SAP application availability

via health monitoring and traffic

redirection

SAP application security and

compliance

Faster response for

SAP users

SAP Application

Servers

Better IT utilization – Do

more by offloading SAP

servers

15

Data Center 1

SAP Application

Servers

Ensuring SAP Application High Availability

ADC

LAN connected(Local)

SAP Users

Data Center 2

SAP Application

ServersADC


SAP Users

remote office

Road warriors

Commuters Tra

ns

pa

ren

t S

ite

Fa

il o

ve

r

(GS

LB

)

Automatically redirect traffic to the most available

server with SAP application health checks

Bypass ISP connectivity issues with ADC’s

Link Load Balancing functionality

Traffic redirection between

sites / DR site, in case one

data center is totally

unavailable

16

Data Center

Reducing Latency for Users of SAP Applications

ADC

Local SAP Users

Remote Office

Remote Office

SAP

Application

Servers

Caching

Compression

Faster response for SAP users – Look for validation by SAP

SSL OffloadingTCP Protocol

Optimization

TCP Multiplexing

17

Securing SAP Applications

Data Center

SAP Application

Servers

ADC


SAP Users

Web App Security

DDoS Protection

Visibility

Hide SAP application deployment

topology from end users

• Provide application-level DDoS

protection

Attack mitigation for:

• DDoS protection

• Network Behavioral

Analysis

• IPS

• Reputation

Web application firewall providing:

• Mitigation of OWASP top 10 threats

• Prevention of data theft and

manipulation of sensitive corporate and

customer information

SEM for correlation reports on:

• Session hijacking

• Non-valid XML structure

• Audit and access

18

Data Center

Central ADC

Local SAP Users

Branch Office

Branch Office

SAP Application

Servers

Central unit automatically sets up an

accelerated and secured tunnel with the

branch units’ clients and centrally

manages them

A central ADC unit deployed in the

data center

Together with a branch client for

SAP

Secured & Accelerated

Tunnels

ADC integrated with SAP’s acceleration

module – Dedicated for SAP NetWeaver

applications

Addressing WAN Latency: Symmetric Acceleration

SAP

AccAD

SAP

AccAD

SAP

AccAD

19

• WAN improvements reduce load and tasks processing from SAP application

servers

Secured accelerated tunnels — Eliminate the need for SSL connections

Compression eliminates the need for it in the SAP servers

Caching in the SAP endpoints reduces the amount of tasks processed by

servers

Secured & Accelerated

Tunnels

Data CenterLocal SAP Users

Branch Office

SAP Application

Servers

Clear, uncompressed

trafficSecured (encrypted)

and compressed/

accelerated traffic

Clear traffic

Central ADC

Secured (SSL) and

accelerated traffic

Better SAP Server Utilization

SAP

AccADSAP

AccAD

20

Symmetric Acceleration: How Does It Work?

Network

time (request)

Server time

Network

time (reply)

Overall

transaction

time

Offload commodity

processes

(e.g., SSL, compre

ssion)

TCP traffic

optimization

Efficient compression

mechanisms

End-to-end

security

Integrated

cache

WAN

User

&

Client wait / pre-

processing time

Client wait /

rendering timet

Time spent in browser before the request leaves

Time for transmitting the request over WAN

Processing time at application server

Time for transmitting the reply over WAN

Time spent for rendering and waiting for the sub requests

SAP ApplicationsBranch Central ADC

SAP

AccADSAP

AccAD

21








• Wrap-up


22

• Configuration templates –

For fast application rollout

• Auto discovery and synchronization of

application changes via ASLR integration –

Simplifying operations

• Reporting, compliance and logging –

For complete visibility

• Simple ADC customization per specific

application flow

Deployment — What to Look for?

23

Data CenterEnterprise

Portal

Automated Discovery and Provisioning (ASLR Integration)

ADC

Partners

Config Management/Monitoring

Branch Office

Rapid rollout – Auto discovery of SAP configuration and ADC provisioning

Simplified operation – Auto synchronization of the ADC with SAP’s configuration

2. Using SAP templates,

configuration manager updates

the ADC configuration and

policies 3. The ADC is ready to

load balance to

updated SAP services

1. Configuration Manager periodically

queries the ASLR to retrieve updated

SAP services configuration

SAP Application

Servers

SAP Message

Server

24








• Wrap-up


25

Demo 1: Logging in to the Web Portal

26

Demo 2: Navigating to Learning Solutions Overview

27








• Wrap-up


28

Customer

• Net 2010 revenues:

$6.98 billion

• Over 120,000

employees

• 72 plus global

delivery centers

• Gold partner with

SAP

Challenges and Objective• Slow SAP Web Services response time

• Network upgrades to 10GE required ADC support

• Increase SAP services’ availabilities

• Solution must be certified with SAP

Solution Overview• 7 X Alteon 5224-XL with:

• 5 vADCs on each – For multi-zone SAP support (and other

apps support)

• GSLB license for cross DC redundancy

• 2 units for dev environment

Solution Business Benefits

• 80% improvement in page load times

• 99.999% SAP applications service availability with GSLB,

advanced health checks, no single point of failure

• Faster Web app response time through third-party tool

• Virtualization enabling cost effective flexibility in deployment

• 10GE support – Leveraging their recent network upgrade

Case Study: Delivering Accelerated IT Services

29








• Wrap-up


30

Where to Find More Information

• http://searchnetworking.techtarget.com/definition/Application-delivery-

controller

Application Delivery Controller

• http://searchnetworking.techtarget.com/tip/Application-delivery-controller-

technology-plays-many-roles

Many Roles of an ADC

• http://www.radware.com/workarea/showcontent.aspx?ID=7973

Application and Service Delivery Handbook

• http://scn.sap.com/docs/DOC-18660

Accelerated Application Delivery for SAP Netweaver

http://searchnetworking.techtarget.com/definition/Application-delivery-controller





http://searchnetworking.techtarget.com/tip/Application-delivery-controller-technology-plays-many-roles













http://www.radware.com/workarea/showcontent.aspx?ID=7973

http://www.radware.com/workarea/showcontent.aspx?ID=7973

http://scn.sap.com/docs/DOC-18660



31

7 Key Points to Take Home

• Datacenter consolidation is driving remote users to access SAP applications

over the Web

• Web access requires tighter security, reducing latency and providing high

availability for mission critical SAP applications

• Two ways of addressing these challenges using ADCs – Asymmetric and

symmetric

• Asymmetric deployment addresses challenges of availability, security, and

latency and delivers performance and improves ROI by offloading from SAP

servers

• Symmetric acceleration utilizes integration with SAP AccAD to deliver high

performance over WAN

• Ensure your ADC supports your virtualization environment, management tools,

and integrates with ASLR for automation

• Make sure that the ADC technologies you utilize and deploy are certified by

SAP

32

Your Turn!

How to contact me:

Prakash Sinha

[email protected]

Please remember to complete your session evaluation

33

Disclaimer

SAP, R/3, mySAP, mySAP.com, SAP NetWeaver®, Duet®, PartnerEdge, and other SAP products and services mentioned herein as well as their

respective logos are trademarks or registered trademarks of SAP AG in Germany and in several other countries all over the world. All other product and

service names mentioned are the trademarks of their respective companies. Wellesley Information Services is neither owned nor controlled by SAP.

Providing best response times, tightest security and highest availability for your virtual and...

Technology

Transcript of Providing best response times, tightest security and highest availability for your virtual and...