Cisco 11151 仕様ガイド

Cisco Systems, Inc.

All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.

Page 2 of 3

With the industry’s most comprehensive URL- and cookie-based

switching, Cisco Web NS software lets network managers tailor

customer or content-specific service agreements, offer premium

services for preferred customers, and deploy content delivery services

for streaming audio and video, distance learning, and Internet audio

and video broadcasting. Support for “sticky” connections based on IP

address, secure socket layer (SSL) session ID, and cookies ensures

reliability and security for e-commerce transactions.

The unique Cisco content replication technology enables dynamic

expansion of site capacity in response to sudden “flash crowds” for

“hot” content, or seasonal peaks in traffic that can overwhelm servers.

Cisco CSS 11000 series switches learn where specific content

resides, either locally or remotely, and dynamically select the best

Web server or cache for specific content requests—ending

frustrating error messages such as “Server Not Found.” In a

distributed Web site, Cisco CSS 11000 series switches perform

comprehensive resource verification before routing user requests,

ensuring they are directed to the location that has the best response

time and the least load for the requested content. Local server

selection is based on server load and application response time, as

well as traditional least connections and round-robin algorithms.

Global server load balancing is based on Domain Name System

(DNS) and proximity by source IP address. Any application that

uses standard Transmission Control Protocol (TCP) or User

Datagram Protocol (UDP) protocols can also be load-balanced

including firewalls, mail, news, chat, and lightweight directory

access protocol (LDAP).

Cisco CSS 11000 series switches ensure high levels of security

without compromising site performance, providing wire-speed,

per-flow filtering of content requests. Security policies can be

implemented based on any combination of source address, destination

address, protocol, type, or content URL. Intelligent flow inspection

prevents common denial of service attacks such as SYN floods,

ping floods, and “smurfs.” Wire-speed network address translation

protects server IP addresses.

For backend system security, Cisco CSS 11000 series switches

intelligently direct traffic across multiple routers, SSL encryption

hardware, and firewall security servers. Firewall load balancing

eliminates system downtime that results when an overloaded

security server fails or shuts down, closing off the connection to the

network, and disrupting e-commerce purchases or other mission-

critical transactions.

System management capabilities include a powerful command line

interface (CLI), a graphical user interface (GUI), and support for

Simple Network Management Protocol (SNMP), remote

monitoring (RMON), and log files. Effective management tools

reduce the ongoing cost of operating a business-critical Web site.

• Provides high-speed Web content delivery by selecting the

best site and server based on full URL, cookie, and resource

availability information

• Offers site-level security with wire-speed denial-of-service (DoS)

prevention; firewall load-balancing provides scalable security for

back-end data-bases and applications

• Delivers up to 400 percent improvement in Web cache efficiency

for transparent, proxy, and reverse proxy configurations

• Provides 12 or 16 full-duplex fast Ethernet ports or 12 fast

Ethernet plus 2 gigabit Ethernet ports

• Supports all TCP- and UDP-based Web protocols, wire-speed

network address translation (NAT), and integrated IP routing

• Optimizes both content requests and delivery for HTTP, passive

File Transfer Protocol (FTP), and streaming media protocols

• Enables advanced service level agreements (SLAs), and a variety

of new fee-based services