For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ronenb's avatar
Ronenb
Icon for Cirrus rankCirrus
Dec 13, 2022

BIG-IP i5600 and throughput limits

Hello

 

Please advise on the i5600  throughput limits base on AWAF license .

Ronen

3 Replies

  • Hi Ronenb , 
    There is no relation between throughput and AWAF license,  as throughput is a hardware parameter not an explanation of how F5 inspect http L7 traffic for AWAF.
    > I want to say throughput relies on i5600 hardware limits.

    > For more info about i5600 hardware Capabilites and throughput  , take a look in this Article: 

    https://wtit.com/f5-products/f5-big-ip-i5600-i5800-hardware-datasheet/
    Also I would Like to inform you about expandtion from i5600 to i5800 , you can expand your license and take the advantages of i5800.

    Regards 

  • Hi Ronenb,

    I have a different view here. While the throughput limits in the datasheet are theoretic numbers from a lab, the reality is often different. When the AWAF module on your BIG-IP is enabled the real troughput depends on different factors (for example which features of AWAF are used, how many attack signature patterns  are checked for each request). Roughly speaking: the more checks the AWAF performs on each request, the less troughput is possible.
    Since the sizing of a WAF requires quite a lot of consultation, I would recommend you to reach out to your local F5 representatives to help you with this project.

    KR
    Daniel