ADX application delivery ensures your business continuity and improves your access experience

The purpose of IT informatization is to improve the service capabilities of business systems. Planning, design, and construction are all centered around applications. The most fundamental function of application systems is to provide users with the services they need. Any interruption of business service capabilities is unacceptable. Therefore, you need tools that effectively ensure business sustainability. On the basis of providing basic business capabilities, it is also crucial to improve your application access experience, ensuring that your business system is securely defended and improving the access speed of your business system.

As a proxy between your business system and external network, ADX3000 application delivery products can load balance and optimize data traffic according to your business system load, network status, and business management strategy, while ensuring the security of business traffic. In this way, your business system will continue to be in the best performance, highest reliability, and most secure data protection.

In addition, the ADX3000 application delivery product (ADX for short) is based on its own leading converged operating system ConPlat, high-performance unified hardware architecture APP-X, and application identification and threat signature library APP-ID core technology, allowing you to obtain comprehensive functions including link load balancing, server load balancing, global load balancing, security protection, and performance optimization with a relatively small investment.

ADX3000 application delivery = server load balancing/application acceleration/security protection + link load balancing + global load balancing

Server load balancing: Improving business system carrying capacity and reliability

Nowadays, with the expansion of business systems, the servers that carry the business also need to face greater access pressure. Usually, a single server can no longer cope with business pressure. You need a more effective and low-cost way to make multiple servers work in parallel, making the performance expansion of the server more flexible and simple, while reducing the probability of single point failure and maintaining the stability of the business system.

◆ Intelligent scheduling of business load: allocate business access on demand and make full use of server cluster resources

Deploying one or more ADXs before the service can "pool" server resources. ADX first configures the real service as a virtual service, and only provides a virtual IP for user access. Internal server expansion and configuration changes do not affect user access. When the user's access request reaches ADX, it is reasonably distributed to the real server for processing based on the optimal server traffic scheduling strategy, thereby improving the efficiency of each server and achieving optimal server utilization.

◆Server cluster health monitoring: Make server status clearly visible to facilitate business scheduling and operation and maintenance

ADX provides a variety of health check algorithms to monitor the availability of servers and business applications, and achieves redundancy of multiple servers, so that business access will not be affected by the downtime of a server, thereby ensuring the stability of the business system. It not only shares the overload pressure of a single server and reduces the probability of single point failure, but also makes server expansion more flexible and simple, so that you no longer have to worry about server purchase plans.

Figure 1. Server load balancing

◆Application acceleration: Unleash server performance

SSL (security Socket Layer) encryption mechanism is a technology created to protect the secure transmission of sensitive data. However, the encryption and decryption process consumes a lot of business system overhead, seriously reducing server performance. Tests have shown that 80% of server performance is spent on SSL processing that is unrelated to business data. ADX has an internal integrated SSL encryption/decryption module that can replace the server and the client to perform complex SSL handshakes and encryption and decryption operations, placing SSL offloading at the front end, thereby greatly reducing the actual computing pressure on the server.

HTTP compression technology improves access speed. It significantly improves website performance by reducing the amount of data transmitted between the server and the client. The characteristic of this method is that the data compression between the server and the client is real-time. ADX integrates HTTP compression and caching, and is configured with the BestTCP acceleration module, which combines TCP transmission window optimization, error checking optimization and other functions to solve data access TCP blocking and jitter problems, reduce user service access delays from the perspective of the protocol layer, and improve user access experience.

Figure 2. HTTP compression optimization

◆ Ensure business security: Improve the business system's ability to resist attacks

ADX provides a stateful firewall function that can effectively identify various network layer and application layer attacks, and prevent dangers from outside the business system. Especially for attacks such as DoS/DDoS that are extremely harmful to business systems, ADX can defend against various attacks including SYN Flood, DNS Query Flood, HTTP Get Flood, CC attacks, etc. through static vulnerability attack feature inspection, dynamic rule filtering and other technologies, further realizing multi-level security protection for business systems. In addition, ADX also hides the real IP address of the internal server through NAT address translation, making it impossible for attackers to launch attacks on the business system, thereby protecting the security of the business system.

Typical successful cases of server load balancing

China Mobile's centralized procurement shortlisted

Became the first domestic manufacturer to be shortlisted for China Mobile's load balancing equipment centralized procurement, and successfully won the bid with the first place. It is the only new shortlisted brand of this product for China Mobile in the past three years.

China Telecom Cloud Platform

It has been successfully applied to China Telecom's Guangdong Cloud Computing Center, Shanghai Cloud Computing Center, Inner Mongolia Cloud Computing Center, Sichuan Cloud Computing Center, Guizhou Cloud Computing Center and other telecommunications cloud platforms, providing strong support for the construction of internal and external cloud platforms.

China Unicom Smart City

Application delivery products are deployed in "one center and four nodes" in Beijing, Xi'an, Jinan, Guangzhou, Shanghai and other cities to help them advance the "smart city" strategy and provide high-quality services to more than 200 cities in 26 provinces.

State Grid

It has been selected for the centralized procurement of load balancing products by the State Grid for four consecutive years, with a market share of over 85%. In the first centralized procurement in 2016, Deepin Technology's load balancing products once again won nearly 50% of the purchase share. It is widely used in the business systems of power dispatching and marketing, providing business optimization services for hundreds of thousands of power employees.

CNPC BeiDou System

The "Logistics and Transportation Intelligent Perception and Positioning Service System Based on Beidou Navigation Technology" used in CNPC is deployed in data centers in Beijing and Xinjiang to ensure stable and reliable system operation, becoming the first domestic application delivery manufacturer to enter CNPC's first-level business system procurement.

General Administration of Customs

After several phases of construction, the application delivery products have been fully applied to core customs businesses such as the customs office system and cloud desktop application system, achieving full coverage of the General Administration of Customs and directly affiliated customs.

Zhejiang University Access Certification

It provides authentication guarantee for WLAN Internet access for 100,000 teachers and students in the whole school, and its excellent network characteristics adapt to the complex network environment of Zhejiang University.

National Tax Core System

It is widely used in more than 60% of tax units across the country, including Heilongjiang, Fujian, Liaoning, Guizhou, Hunan, Yunnan, etc., and deployed in core systems such as online tax filing systems, online invoice systems, and OA office systems.

Ministry of Public Security National Citizen Identity Information System

It provides security guarantee and business optimization to achieve the goal of "interconnection and high data sharing" between the query service center and other national citizen information systems.

Member of National Development and Reform Commission

Provide access security for tens of thousands of coal enterprises registered on the National Development and Reform Commission portal website and the carbon trading registration system.