How to maximize SAP application availability by utilizing server load balancing, global server load balancing, and content switching.

1. Providing Best Response
Times, Tightest Security
and Highest Availability for
Your Virtual and Cloud-
Based SAP Applications
Prakash Sinha
Radware
© Copyright 2013
Wellesley Information Services, Inc.
All rights reserved.

2. In This Session …
We’ll discuss:
• How to maximize SAP application availability
 Utilizing server load balancing, global server load balancing,
and content switching
• How to improve performance of SAP applications
 Discuss techniques such as TCP optimization, SSL, and offload
and WAN optimization
• How to reduce latency for Web delivery and monitor performance
 Techniques such as caching, compression, and end-user
performance monitoring
• How to maximize SAP application security
 Securing Layer 4 and Layer 7
1

3. What We’ll Cover …
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
2

4. Web Application Delivery Challenges
Web protocols
are not efficient
Many users access
apps remotely
Apps consolidated to Web apps increase
fewer data centers security requirements
3

5. SAP Application Trends — Data Center Consolidation
• Data center consolidation, driven by cost savings and regulatory
compliance
 Leading to fewer data centers
SAP data center
consolidation
• As a result: More users accessing SAP services over the WAN
 WAN connections introduce higher latency
 Heavier load on the SAP application
Common requirement of SAP application owners:
Reduce response time 4

6. SAP Application Trends — Web-Enabled Applications
• SAP applications are now transitioning to browser-based clients
• Rising use of B2B transactions via Web Services
• Growing mobile user base – Key driver for adopting Web Services
The transition to Web-based services introduces
increased latency to many SAP application modules
5

7. What We’ll Cover …
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
6

8. SAP Application Deployment: Challenges
Data Center
SAP Message
Local SAP Users Server
Branch Office
SAP Web SAP Application
Partners Router Dispatcher Servers
Single point of failure – Risking SAP application
SAP application availability must continue
even under attack
Mobile Users
WAN latency impacts SAP
application performance
7

9. Composite Enterprise Application
XML/HTTP messages are
up to 10X larger than their
binary equivalent
Web-enabled apps Business
Warehouse
introduce new security
threats
Business App
Payment/Billing Apps
Composite
Web Services servers
Consumers
Mission critical XML/Web Service
Access control must be Applications
applications must be enforced to prevent
reliable and available malicious users
8

10. What We’ll Cover …
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
9

11. Introduction to Application Delivery Controllers (ADC)
Business
Warehouse
ADC
Payment/Billing
Systems
Availability
Acceleration
Web Services Performance
Consumers Security
App Servers
10

12. ADC — Deployment
Identity
Management
DB Servers
ADC ADC
Web/App Servers
Services App Servers
Services Providers
Consumers
May be virtualized, on-premise,
cloud-based, or hybrid
11

13. What We’ll Cover …
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
12

14. Making Your SAP Applications Shine
• Addressing SAP deployment challenges
 Ensuring high availability for SAP applications
 Reducing latency for users of SAP applications
 Securing SAP applications
 Addressing WAN latency
13

15. ADC Deployment with SAP Applications
Better IT utilization – Do
more by offloading SAP
servers
Partners Local SAP Users
SAP Application
ADC Servers
SAP application security and
compliance
Branch Office
Data Center
Faster response for 24x7 SAP application availability
SAP users via health monitoring and traffic
redirection
14

16. Ensuring SAP Application High Availability
LAN connected(Local) Data Center 1
Automatically redirect traffic to theUsers available
SAP most
server with SAP application health checks
remote office
SAP Application
Servers
ADC
Transparent Site Fail over
Bypass ISP connectivity issues with ADC’s
Link Load Balancing functionality
(GSLB)
Road warriors
LAN connected(Local) Data Center 2
SAP Users
Commuters
Traffic redirection between
SAP Application
sites / DR site, in case one Servers
ADC
data center is totally
unavailable
15

17. Reducing Latency for Users of SAP Applications
Caching
Local SAP Users
Compression
Remote Office TCP Multiplexing
ADC SAP
Application
Servers
Remote Office Data Center
TCP Protocol SSL Offloading
Optimization
Faster response for SAP users – Look for validation by SAP
16

18. Securing SAP Applications
Attack mitigation for: Hide SAP application deployment
• DDoS protection topology from end users
LAN connected(Local)
Data Center
• Provide application-level DDoS
• Network Behavioral SAP Users
Analysis protection
• IPS
• Reputation
ADC
DDoS Protection SAP Application
Servers
Visibility
Web App Security
SEM for correlation reports on: Web application firewall providing:
• Session hijacking • Mitigation of OWASP top 10 threats
• Non-valid XML structure • Prevention of data theft and
• Audit and access manipulation of sensitive corporate and
customer information
17

19. Addressing WAN Latency: Symmetric Acceleration
Together with a branch client for A central ADC unit deployed in the
SAP data center
Local SAP Users
SAP
AccAD
Branch Office
SAP
SAP Application
AccAD Servers
Secured & Accelerated
SAP Central ADC
Tunnels
AccAD
Branch Office Data Center
Central unit automatically sets up an
accelerated and secured tunnel with the
branch units’ clients and centrally ADC integrated with SAP’s acceleration
manages them module – Dedicated for SAP NetWeaver
applications
18

20. Better SAP Server Utilization
• WAN improvements reduce load and tasks processing from SAP application
servers
 Secured accelerated tunnels — Eliminate the need for SSL connections
 Compression eliminates the need for it in the SAP servers
 Caching in the SAP endpoints reduces the amount of tasks processed by
servers
Local SAP Users Data Center
Clear traffic
SAP
SAP Application
AccAD Servers
SAP Secured & Accelerated
Tunnels
AccAD Central ADC
Branch Office
Secured (SSL) and Secured (encrypted) Clear, uncompressed
accelerated traffic and compressed/ traffic
accelerated traffic 19

21. Symmetric Acceleration: How Does It Work?
SAP
SAP
WAN AccAD
AccAD
Branch Central ADC
User SAP Applications
Client wait / pre-
Time spent in browser before the request leaves
processing time
Network
Time for transmitting the request over WAN time (request)
Overall
Processing time at application server Server time transaction
time
Network
Time for transmitting the reply over WAN
time (reply)
Time spent for rendering and waiting for the sub requests Client wait /
t rendering time
Offload commodity
Integrated Efficient compression processes
cache mechanisms (e.g., SSL, compre
ssion)
TCP traffic
optimization
& End-to-end
security
20

22. What We’ll Cover …
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
21

23. Deployment — What to Look for?
• Configuration templates –
For fast application rollout
• Auto discovery and synchronization of
application changes via ASLR integration –
Simplifying operations
• Reporting, compliance and logging –
For complete visibility
• Simple ADC customization per specific
application flow
22

24. Automated Discovery and Provisioning (ASLR Integration)
1. Configuration Manager periodically
SAP Message
queries the ASLR to retrieve updated Server
SAP services configuration
Branch Office
Config Management/Monitoring
ADC SAP Application
Servers
Partners
Enterprise
2. Using SAP templates, Data Center
configuration manager updates Portal
the ADC configuration and
policies 3. The ADC is ready to
load balance to
updated SAP services
Rapid rollout – Auto discovery of SAP configuration and ADC provisioning
Simplified operation – Auto synchronization of the ADC with SAP’s configuration
23

25. What We’ll Cover …
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
24

26. Demo 1: Logging in to the Web Portal
25

27. Demo 2: Navigating to Learning Solutions Overview
26

28. What We’ll Cover …
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
27

29. Case Study: Delivering Accelerated IT Services
Challenges and Objective
• Slow SAP Web Services response time
• Network upgrades to 10GE required ADC support
• Increase SAP services’ availabilities
• Solution must be certified with SAP
Solution Overview Customer
• 7 X Alteon 5224-XL with: • Net 2010 revenues:
• 5 vADCs on each – For multi-zone SAP support (and other $6.98 billion
apps support) • Over 120,000
• GSLB license for cross DC redundancy employees
• 2 units for dev environment • 72 plus global
delivery centers
Solution Business Benefits • Gold partner with
• 80% improvement in page load times SAP
• 99.999% SAP applications service availability with GSLB,
advanced health checks, no single point of failure
• Faster Web app response time through third-party tool
• Virtualization enabling cost effective flexibility in deployment
• 10GE support – Leveraging their recent network upgrade
28

30. What We’ll Cover …
• SAP application trends — A Quick Overview
• SAP application challenges — Latency, availability, security
• Application Delivery Controller (ADC) — A brief introduction
• Using ADC to make your SAP applications shine
• Deploying ADC for SAP
• Demo: ADC acceleration in action for SAP LSO
• Case Study: Accelerating IT services
• Wrap-up
29

31. Where to Find More Information
• http://searchnetworking.techtarget.com/definition/Application-delivery-
controller
 Application Delivery Controller
• http://searchnetworking.techtarget.com/tip/Application-delivery-controller-
technology-plays-many-roles
 Many Roles of an ADC
• http://www.radware.com/workarea/showcontent.aspx?ID=7973
 Application and Service Delivery Handbook
• http://scn.sap.com/docs/DOC-18660
 Accelerated Application Delivery for SAP Netweaver
30

32. 7 Key Points to Take Home
• Datacenter consolidation is driving remote users to access SAP applications
over the Web
• Web access requires tighter security, reducing latency and providing high
availability for mission critical SAP applications
• Two ways of addressing these challenges using ADCs – Asymmetric and
symmetric
• Asymmetric deployment addresses challenges of availability, security, and
latency and delivers performance and improves ROI by offloading from SAP
servers
• Symmetric acceleration utilizes integration with SAP AccAD to deliver high
performance over WAN
• Ensure your ADC supports your virtualization environment, management tools,
and integrates with ASLR for automation
• Make sure that the ADC technologies you utilize and deploy are certified by
SAP
31

33. Your Turn!
How to contact me:
Prakash Sinha
prakash.sinha@radware.com
Please remember to complete your session evaluation
32

34. Disclaimer
SAP, R/3, mySAP, mySAP.com, SAP NetWeaver®, Duet®, PartnerEdge, and other SAP products and services mentioned herein as well as their
respective logos are trademarks or registered trademarks of SAP AG in Germany and in several other countries all over the world. All other product and
service names mentioned are the trademarks of their respective companies. Wellesley Information Services is neither owned nor controlled by SAP.
33