Sizing for ASM

Hi Alex,

 

Trust me that for a WAF, you don't want to perform a sizing decision based on best case scenario numbers that can be reproduced in a lab with benchmark testing gear. These numbers are good to show some capabilities, (capabilities that sometimes even not relevant for any real use case) not for sizing.

 

Web Application Firewall performance mainly depends on the following parameters which most are are highly affected by the application itself

 

1. Response size

 

2. Request size

 

3. Application/server response latency

 

4. Policy in use

 

5. Number of simultaneous connections

 

6. Logging profile

 

7. SSL key length in use

 

 

F5 partners and sales reps wil help you to make a good decision.

 

i remember old ASM data sheets had HTTP TPS value for each hardware but new hardware data sheet does not have

 

 

You can check L7 Req/sec then you can decide which product enough for you but you know Module or Standalone box give different performance if you want buy modular be careful

 

 

zafer

 

Posted By Alex on 11/10/2009 9:12 PM

 

 

Thanks Ido, but I think each Vendor have a tool for sizing as the same L4 performance or testing in the LAB.

 

 

 

 

Alex,

 

 

It is a little harder then that. It depends on what you are connecting to, how many VIP's, http profiles, learning mode etc...

 

 

What exactly are you trying to accomplish?

Thanks Ido, but I think each Vendor have a tool for sizing as the same L4 performance or testing in the LAB.

 

Hi Alex,

 

ASM's performance is impacted by many variables which are dependent on the application it protects.

 

I suggest you consult with your sales rep, he will survey your specific environment and will help you.

 

Cheers,

 

 

Ido