LoadMaster LM-8020-FIPS Load Balancer

LM-8020-FIPS Server Load Balancer – The LoadMaster 8020-FIPS provides optimized performance for high transaction web infrastructures and features:

  • 8 X 10Gb SFP+ Direct Attach Ports
  • 30 Gbps L7 balancer throughput
  • SSL TPS (2K Keys): 9,000
  • Servers Supported: 1,000 Physical /1,000 Virtual
  • L4 Concurrent Connections: 75,800,000
  • Cavium CN1620-NFBE3-3.0-FW2.2-G HSM (FIPS 140-2 L2) – NIST Cert 2316
  • LoadMaster Operating System (LMOS)7.2 (FIPS 140-2 L1)– NIST Cert 2473
  • 750W Hot-plug, Redundant (1+1) PSU
  • Support for EV (Extended Validation) certificates
  • Server Name Identification (SNI) support
  • Support for up to 1000 TLS (SSL) certificates

The LoadMaster™ 8020-FIPS offers capacity and features to support high traffic application requirements in FIPS-compliant infrastructures. High performance load balancing and content switching combined with web application firewall protection, intrusion prevention and endpoint authentication ensures that published applications are highly available and protected from malicious threats. Multinode clustering capabilities support a scale out strategy and investment protection. An integrated FIPS 140-2 L2 Validated HSM combined with KEMP’s LoadMaster Operating system (LMOS) validated under cert # 2473 means that traffic can be securely terminated and distributed for mission critical application deployments. The LoadMaster™ 8020-FIPS is an essential component for deployments requiring application performance optimization and FIPS 140-2-compliant handling of SSL operations.

LoadMaster 8020-FIPS Data Sheet

Standard Features

  • Server Load Balancing (SLB) for TCP/UDP based protocols
  • TLS (SSL) Offload
  • Layer 7 Content Switching
  • Advanced application transparent caching for HTTP/HTTPS
  • Optimized compression of static and dynamic HTTP/HTTPS Content
  • SNORT-rule compatible Layer 7 intrusion prevention system (IPS)
  • Up to 1000 Virtual and 1000 Real Servers
  • IPv6 support for addressing and features
  • IPv6 - IPv4 bidirectional conversion
  • NAT-based forwarding
  • Support for Direct Server Return (DSR) configurations
  • Session reconnection for Microsoft remote desktop services (RDS)
  • Configurable S-NAT support
  • VLAN Trunking (802.1Q)
  • Link interface bonding (802.3ad)
  • Edge Security Pack (Pre-Auth& SSO)
  • CAC/PIV – Kerberos Constrained Delegation support

Scheduling and Balancing Methods

  • Round Robin
  • Weighted Round Robin
  • Least Connection
  • Weighted Least Connection
  • Agent-based Adaptive
  • Chained Failover (Fixed Weighting)
  • Source-IP Hash
  • Layer 7 Content Switching
  • Global Server Load Balancing (GSLB)

Administration

  • Flexible administration Options
    • Web User Interface (WUI)
    • SSH
    • Console
    • RESTful API
    • Java API Wrapper
    • Powershell API Wrapper
  • Wizards for simplified deployment
  • Context based help (WUI)
  • Automation and orchestration via RESTful API
  • Real time display of performance and availability
  • Application templates for all major workloads
  • Remote syslogd support
  • Automated configuration backup
  • Selective restore of configuration
  • Connection draining for managed outages
  • Comprehensive logging and reporting
  • SNMP support
  • Diagnostic shell with in-line tcpdump

Hardware Specifications

  • Intel Xeon 2x12 Core Processor
  • 8 X 10Gb SFP+ Ports
  • 64 GB RAM
  • Local admin via serial and VGA/USB
  • Dimension (2U): 482.4mm (W) x 684mm(D) x 87.3mm (H)
  • 750W Hot-plug, Redundant (1+1) PSU
  • Includes ‘Leave-Behind’ Disk Option