Comparison of the KEMP Virtual LoadMaster with F5 Big-IP VE and Citrix Netscaler VPX Virtual Load Balancers and ADCs

 

Enterprise Strategy Group Lab Report

KEMP Technologies' mission has always been to help customers get the best ROI from their investment in our load balancers.

The following information* is intended to compare the price/performance value of KEMP Virtual Load Balancers compared to F5 Networks BIG-IP VE 200M through VE10G and Citrix Systems Netscaler VPX-10 through VPX 3000 Load Balancers.

Compare Load Balancer Pricing

F5 - Big IP, Citrix Netscaler
 
Vendor   KEMP   F5 Networks   Citrix 
Model VLM-200 VLM-2000 VLM-5000 VLM-10G VE-200M VE-1G VE-3G VE-5G VE-10G VPX-10 VPX-200 VPX-1000 VPX-3000
USD (MSRP) $2,500 $6,000 $10,000 $18,000 $7,995 $15,995 $21,995 $25,995 $29,995 $2,000 $5,000 $15,000 $21,000

Performance

F5 - Big IP, Citrix Netscaler
 
Vendor   KEMP   F5 Networks   Citrix 
Model VLM-200 VLM-2000 VLM-5000 VLM-10G VE-200M VE-1G VE-3G VE-5G VE-10G VPX-10 VPX-200 VPX-1000 VPX-3000
Max Throughput (Gbps) 0.2 2 5 10 0.2 1 3 5 10 0.01 0.2 1 3
SSL TPS (2K Keys) 200 1,000 10,000 12,000 N/A N/A N/A N/A 3,400 up to 100 up to 100 up to 100 up to 100
Concurrent Conn (at 1GB) >3M >3M >3M >3M N/A N/A N/A N/A 10M 1.2M 1.2M 1.2M 1.2M

Key Features

F5 - Big IP, Citrix Netscaler
 
Vendor   KEMP   F5 Networks   Citrix 
Model VLM-200 VLM-2000 VLM-5000 VLM-10G VE-200M VE-1G VE-3G VE-5G VE-10G VPX-10 VPX-200 VPX-1000 VPX-3000
Full L4/L7 ADC

Caching

Extra Cost Extra Cost Extra Cost Extra Cost
HTTP Compression

Extra Cost Extra Cost Extra Cost Extra Cost
TMG Replacement [Pre-auth, SSO, Logging (ESP)]

Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost
GSLB Multi-Site Load Balancing Add-On Add-On Add-On Add-On Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost
IPv6 Support

WAF Engine

Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost Extra Cost

Hypervisors Supported

F5 - Big IP, Citrix Netscaler
 
Vendor   KEMP   F5 Networks   Citrix 
Model VLM-200 VLM-2000 VLM-5000 VLM-10G VE-200M VE-1G VE-3G VE-5G VE-10G VPX-10 VPX-200 VPX-1000 VPX-3000
VMware

Hyper-V

X

Xen

X

KVM

X

X

X

X

X

Oracle VM

X

X

X

X

X

X

X

X

X

Oracle Virtual Box

X

X

X

X

X

X

X

X

X

Cloud Platforms Supported

F5 - Big IP, Citrix Netscaler
 
Vendor   KEMP   F5 Networks   Citrix 
Model VLM-200 VLM-2000 VLM-5000 VLM-10G VE-200M VE-1G VE-3G VE-5G VE-10G VPX-10 VPX-200 VPX-1000 VPX-3000
Windows Azure

X

X

X

X

X

X

X

X

X

Amazon Web Services (AWS)

X

X

X

X

X

VMware vCHS

BIG-IP GTM

BIG-IP GTM

BIG-IP GTM

BIG-IP GTM

BIG-IP GTM

X

X

X

X

Web Application Firewall Features

F5 - Big IP, Citrix Netscaler
 
Vendor   KEMP   F5 Networks   Citrix 
Model Application Firewall Pack ASM AppFirewall
OWASP Top 10

Cookie Tampering

Cross Site Request Forgery (XSRF)

Cross Site Scripting

Data Loss Prevention

SQL Injection

Support PCI-DSS requirement - Section 1.2

Support PCI-DSS requirement - Section 3.3

Support PCI-DSS requirement - Section 3.5

Support PCI-DSS requirement - Section 4.1

Support PCI-DSS requirement - Section 6.6

 

View the KEMP Virtual load balancer matrix

Higher Throughput at a Fraction of the Cost

Below are charts comparing the throughput performance of KEMP Load Balancers to F5 BIG-IP and Citrix NetScaler VPX at three different levels: high, mid and entry level.

 

High Performance Virtual Load Balancer

Comparing the throughput of High Performance Virtual Load Balancers (5Gb+), the KEMP VLM-10G provides the same throughput as the F5's BIG-IP LTM VE-10G at 2/3 of the cost.

 

 

Mid Level Performance Virtual Load Balancer

The KEMP VLM-2000 provides close to the same throughput as the F5 BIG-IP LTM VE-3G and Citrix NetScaler VPX-3000 at nearly 1/3 of the cost.

 

 

Entry Level Performance Virtual Load Balancer

The KEMP VLM provides close to the same throughput as the F5 BIG-IP LTM VE-200 at 1/4 of the cost and Citrix System's NetScaler VPX at more than 1/2 of the cost.

 

More SSL TPS per Dollar

The KEMP VLM-10G supports more SSL TPS on more hypervisor platforms than the F5 BIG-IP LET VE-10G at nearly 20% of the cost and 93% of the cost when compared to the Citrix NetScaler VPX-3000.

 

 


Standard vs. Add-ons

When comparing load balancers, it is important to understand what features are considered “standard” and what features are considered “add-ons.” In the case of KEMP load balancers vs. those from F5 and Citrix, consider the following: These features are standard on all KEMP LoadMaster load balancers (ADC) platforms:

  • Compression/Caching
  • WAF - Web Application Firewall Pack (AFP) Engine
  • Edge Security Pack (ESP) - KEMP’s Microsoft TMG replacement
    • Dual-Factor Authentication Support
    • Persistent Logging
    • Pre-Authentication
    • Security Group Validation
    • Single Sign On (SSO)
  • IPv6

KEMP load balancers provide Compression/Caching, GSLB, IPv6, API programmability and Web Application Firewall (WAF) protection as standard features* on all supported products, whereas the F5 Big-IP LTM and Citrix Systems Netscaler MPX provide these features only with their “Better” and Enterprise & Platinum License Editions respectively. For additional security functionality comparable to KEMP’s Edge Security Pack, F5 requires purchasing its APM module with a starting price of approximately $11,000 USD MSRP.


KEMP Application Firewall Pack

KEMP’s Application Firewall Pack (AFP) combines Layer 7 Web Application Firewall (WAF) protection with other application delivery services including intelligent load balancing, Intrusion Prevention, Intrusion Detection and edge security and authentication through the KEMP Edge Security Pack (ESP).

By integrating the world’s most deployed web application firewall engine, ModSecurity - augmented by threat intelligence and research from information security provider Trustwave - KEMP AFP provides real-time threat protection for packaged and custom published applications, exfiltration prevention, mitigation of the OWASP Top Ten common vulnerabilities and support for organizational PCI-DSS compliance requirements. The Application Firewall Pack (AFP) comes standard on most KEMP models.

KEMP AFP is available on all cloud, virtual and bare metal LoadMasters and the following hardware appliances: LM-3000, LM-3400, LM-4000, LM-5305-FIPS, LM-8000, LM-8020, LM-8020M.

* The pricing of the products under comparison has been sourced from public data. The performance data for comparison is has been sourced from the company published Specifications as available to general public

Listed prices are USD-based MSRP and subject to change without prior notice. Prices vary by country and exclude local taxes, duties and transportation charges. Please contact your local KEMP office or authorized distributor for further pricing information specific to your country. All LoadMasters must be licensed prior to use in the country where they were purchased and are subject to local licensing and trade regulations.