Marketplace Overview:

Three main market place drivers:

1. Application Availability: Primary reason why to prefer Barracuda Load Balancer ADC. All the resources,
the email, the website, everything being hosted to be available 24/7

It can help make applications make more available, regardless of server failure.

2. Application Acceleration: We want to improve the experience that the end user are having, we want
them to access the data faster and faster while reducing the workload on the physical server. This is
achieved through caching, compression and SSL offloading. This allows the workloads on the physical
server and provide a better experience to the end user.
Help backend server applications to work better.
3. Application Control: We want full control over the traffic, where it is going where it came from and
monitoring it for any threats against the network.

It gives the administrator full control over the application traffic.

Features:

L4/L7 Load Balancing Content routing

Intelligent Application Monitors Application Attack and DDoS Protection

Global Server load Balancing Data Loss Prevention

SSL Offloading Automatic Security update

Authentication And Authorization Microsoft Certified for Exchange and Lync

HTTP Caching

Data compression

L4/L7 Load Balancing:

- Load Balance hardware or virtual servers

- These include HTTP/S, RDP, SMTP, IMAP, FTP/S, DNS, XML, TCP, and UDP
- IPv6 and IPv4 load balancing
- Supports mixed environments where an address translation is needed to bridge the IPv6 and IPv4
networks

If deep-packet inspection is needed, then L7 Load Balancing needs to be done.

Intelligent Application Monitors:

Monitoring the health and availability of the real server is the primary and critical function on any Load
Balancer. Barracuda has a lot of methods available to monitor the availability of the server:

- Ensure high application availability

- Monitor server health to determine that application servers are not only reachable, but alive
- Automatically removes down servers from the server pool and rebalances traffic among the
remaining servers
- Ability to group servers in the application groups
Methods available to check server availability:

- TCP/UDP port check (Standard Method)

- HTTP GET request
- DNS query
- RADIUS query (Authentication Query) -- Unique to Barracuda LB ADC
- LDAP (Authentication Query) -- Unique to Barracuda LB ADC

Default test interval is 30 seconds and the minimum is 5 seconds.

GLOBAL SERVER LOAD BALANCING:

Redundancy and Global Balancing

- Health Check between sites provides GSLB redundancy

- Direct traffic to multiple data centers using DNS resolution (routing traffic based on region)
- Balance traffic among different sites in different sites in different geographic regions.
- Route traffic using a variety of methods such as:
o Priority
o Closest geographical data center
o Primary disaster recovery (DR)

So, if a traffic originates in Europe for Europe server, which is down, then Load Balancer will check what’s the
next closest site, that we have the Load Balancer at that we can send traffic to.

SSL Offloading:

It allows, all the SSL encryption and decryption on Barracuda Load Balancer ADC itself instead of the server
having to do it.

- Improving application performance

- Offloading the SSL transactions to Barracuda Load Balancer ADC frees up application server resources
- Standard 2048-bit SSL keys
- Also supports the more secure and more process-intensive 4096-bit SSL keys (Since, it is more process
intensive, recommended only when needed.

We can do Deep-packet inspection as needed on L7

There is proxy, which goes from end user to the LB ADC, and another connection from ADC to the real server

The connection between the ADC and the real server is standard HTTP and not HTTPS, since it is already
behind the corporate firewall, behind the ADC, there is no need to have that security.

Authentication:

Multiple authentication services:

- Fully integrates with Active Directory, RADIUS & LDAP

- Administrators can provide granular control over users/groups access
- Ensures only authorized users can reach restricted applications
- Guarantees that non-authenticated traffic never crossed the DMZ

Unauthorized access get blocked at the ADC, before it reaches to the physical server.

Additional Features in Authentication:

- Perfect Forward Secrecy (PFS)

 - Pre authentication Supported
- Supports SSL certificates in PKCS #12 & PEM formats (these are the two main types)
- Server Name Indication (SNI)
- Certificate Revocation list (CRL)
- Online Certificate Status Protocol (OCSP)

HTTP Caching

- Caching web content saves network bandwidth

- Reduces loads on backend web servers
- Improves user experience by increasing server response time

Data compression

- Maximize outbound bandwidth (by compressing languages like HTML, Javascript)

- Automatically compress content to minimize network traffic between application servers and the end
user
- Compatible with most modern browsers, requiring no additional software

Content Routing:

- Full traffic control

- ‘Route traffic to servers based on:
o Region
o Device
o Browser
- This enables organizations to deliver customized application responses to users

Application Security:

- Industry-leading security to critical applications

- Protect against OWASP Top 10 attacks
- Intelligently fingerprint and throttle or drop traffic based on IP or client

Data loss Prevention

- Outbound content inspection for Data loss Prevention

- Prevents data loss by either masking or blocking responses
- Protect sensitive information such as credit card and SSN numbers
- Supports custom data patterns

Automatic Security Updates

- 150,000+ sensors worldwide monitor for new threats

- Security definitions automatically update on units in the field
- Energized Updates ensure the highest security posture for critical applications

Microsoft Certified:

- Barracuda provides a complete application delivery solution for Microsoft Exchange, Lync and
Sharepoint
- Certified by Microsoft as a preferred Hardware Load Balancing Solution since 2010
- Robust Solutions for Scaling Exchange and Lync Applications
Pre-Built Templates

- Ensure high