Accelerator
 

Expanding the Boundaries of the Enterprise

Foundry and SAP test their combined solutions to offer customers secure and efficient global performance

The simple days of driving to the office, finishing a project for the boss, and dropping the folder in the outbox are barely a memory for most modern-day corporations. Instead, the workday is 24 hours long, the office is where the employees are, and the projects require real-time business applications.

With this extended enterprise becoming more commonplace, IT deals with the difficult task of supporting company employees, business partners, and customers, wherever in the world they might be. The boundaries of businesses are no longer dictated by physical space, and business application integration is essential to maintain the anytime, anywhere workplace. In today's successful businesses, the network is the glue between globally distributed business application components and end-users.

Foundry Proves Its Mettle in SAP Environments

As a leading provider of business software, SAP has more than 43,000 customers in more than 120 countries. These businesses support anytime, anywhere workplaces and a global workforces. Without a secure, high-performance, highly available network infrastructure, these businesses cannot remain competitive.

Adding Foundry's ServerIron® application switches in front of SAP business applications can help businesses extend their enterprises successfully. Foundry's ServerIron high-performance application switches provide maximum availability to applications by intelligently distributing traffic among all available servers, and dynamically monitoring the servers and applications to ensure they are performing optimally.

To confirm its value in an SAP environment, Foundry and SAP designed a set of tests to illustrate how ServerIron application switches can accelerate the delivery of SAP applications and secure the SAP servers.

The test landscape incorporated many features that customers need to use SAP eSOA applications productively. All tests were performed with ServerIron switches in front of an SAP NetWeaver platform over an emulated Wide Area Network (WAN) link and used encrypted (https) and secure traffic.

SAP enterprise SOA with Foundry Networks ServerIron test environment

The lab engineers tested:

  • Secure login and logoff from a user portal
  • Secure login and download of a large file from a remote office
  • Application-to-application communication in a distributed SOA architecture with basic data exchange

The suite of tests demonstrated:

  • Server load balancing
  • High availability
  • Performance scalability
  • Security

Performance Results

Foundry Networks' ServerIron application delivery controller switches successfully integrated with SAP's NetWeaver application architecture and provided the necessary load balancing, session persistence, security, performance, and high availability and reliability for SAP application server farms.

Proven Reliability and High Availability Infrastructure

The overall SAP and Foundry environment was very stable over an extended period of time. Tests showed stable activity over 6 hours, under an increasing load of up to 300 concurrent users. Response time decline can be explained as a result of first-time users logging in with an empty browser cache. In this scenario, there was a high download volume. Repeat users who logged in with a pre-filled browser cache yielded lower response times. Toward the end of the test, a larger portion of users logged in with pre-filled browser cache and response times consistently decreased over time.

Tests were completed over DSL and T3 lines. It is not unusual to have some Web-download errors under these challenging WAN conditions. We checked the error rate and found only 1 error in 4,000 login attempts and no errors in 12,000 login attempts in the T3 case. Based on these numbers, the login success rate was 99.975% and better—proving the reliability and the high availability standards of the application delivery infrastructure with Foundry Networks ServerIron.

Three other test scenarios were completed with 1 user test. All were verified to be functionally correct under both WAN conditions with the Foundry appliances in front of all 3 major SAP components. End-user response times in all tests were equal to or better when the Foundry appliance was added to the SAP environment.

Performance and Utilization Improvement with SSL Offloading
The ServerIron application delivery controller switch offloaded SSL processing from SAP servers (SSL acceleration) by terminating client side SSL connections. Offloading SSL processing improved the SAP application server's CPU utilization by approximately 30% because the server no longer handled SSL processing overheads. In all the tests, network traffic over the WAN was encrypted.

Industry leading Network Security for Denial-of-Service attack
The team also tested the Denial-of-Service (DoS) attack prevention functionality in the ServerIron application delivery switches. This security feature can potentially thwart up to 10 Million SYN attacks per second and defend backend server farms.

The figure above illustrates a few iterations of one user login and the response time of a welcome page in a T3 case scenario:

  • Upper curve SAP only, no Foundry ServerIron, no DOS attack
  • Lower curve: With Foundry ServerIron while the SAP server farm is under DOS attack
  • Not shown: SAP application under heavy DOS attack without Foundry ServerIron. That case showed 100% error rate rendering the NW portal unavailable to end users.

An Ixia system was used to simulate the DoS Attacks. TCP-SYN DoS attack packet flow was sent to the ServerIron and slowly ramped up to about 2,000 packets per second of attacks. It was verified that there was no impact to the portal performance.

 
Products Solutions Technologies Services News Contacts