Cisco Cisco ACE Application Control Engine Module 产品宣传册
Copyright © 2007 Miercom
Application Accelerator
Page 3
High Availability Tests: For the first test a “ft” (fault-tolerant) switchover command was issued to the Cisco ACE module during the
generation of 100 HTTP transactions from the Spirent Avalanche. In the second test, the external VLAN interface configured on the
Catalyst 6509 was manually brought down during the HTTP transactions. The Spirent Avalanche Commander was used to monitor any
unsuccessful transactions during the fail-over.
Datacenter Efficiency Tests: Using a CYBERSwitching Dualcom external power management devices the actual power consumed by
the DUT during the load was measured.
Virtualization Tests: A simple script was used to create 250 virtual devices each with dedicated resources on the Cisco ACE module.
Management access and load balancing configurations were manually created on several virtual devices. Manually logged in to virtual
devices through dedicated management interfaces and verified the configurations.
Roles Based Administration (RBA) Tests:
- RBA tests: Several administrative user roles were created with appropriate pre-defined roles on the Cisco ACE module. In addition, a
user with custom role was created to restrict access to only selected security functions on the Cisco ACE module. Commands were
issued to verify the scope of access and functions available in the various roles.
- Hierarchical Management Domain: Created two separate management domains each with a VIP and real server objects inside a
virtual device of the Cisco ACE module. Two administrative user roles were created with access to a specific domain. Commands
were issued to verify the scope of access and functions within a management domain.
Security Tests: Security attacks and real application traffic were generated from the Spirent Avalanche servers. The Spirent
Avalanche commander GUI was used to monitor the number of security attack transactions that were successfully blocked by the DUT.
generation of 100 HTTP transactions from the Spirent Avalanche. In the second test, the external VLAN interface configured on the
Catalyst 6509 was manually brought down during the HTTP transactions. The Spirent Avalanche Commander was used to monitor any
unsuccessful transactions during the fail-over.
Datacenter Efficiency Tests: Using a CYBERSwitching Dualcom external power management devices the actual power consumed by
the DUT during the load was measured.
Virtualization Tests: A simple script was used to create 250 virtual devices each with dedicated resources on the Cisco ACE module.
Management access and load balancing configurations were manually created on several virtual devices. Manually logged in to virtual
devices through dedicated management interfaces and verified the configurations.
Roles Based Administration (RBA) Tests:
- RBA tests: Several administrative user roles were created with appropriate pre-defined roles on the Cisco ACE module. In addition, a
user with custom role was created to restrict access to only selected security functions on the Cisco ACE module. Commands were
issued to verify the scope of access and functions available in the various roles.
- Hierarchical Management Domain: Created two separate management domains each with a VIP and real server objects inside a
virtual device of the Cisco ACE module. Two administrative user roles were created with access to a specific domain. Commands
were issued to verify the scope of access and functions within a management domain.
Security Tests: Security attacks and real application traffic were generated from the Spirent Avalanche servers. The Spirent
Avalanche commander GUI was used to monitor the number of security attack transactions that were successfully blocked by the DUT.
Overview
The Cisco Application Control Engine (ACE) is a
multi-service Cisco Catalyst 6500 series switch
module designed for application delivery with
features of intelligent server load balancing,
server off-load, SSL acceleration, application
acceleration, and network security for enterprise
data centers and service providers. Miercom
conducted a wide range of tests on the Cisco
ACE module with software release A1.3. The
testing and evaluation focused on several key
areas: Scalability, Delivery Performance,
Availability, Data Center Efficiency and
Management Features.
Cisco Ace Throughput Scalability
0
10
20
30
40
50
60
70
128
512
1500
Packet Size in Bytes
G
igabi
ts
per
s
e
c
ond
1 A CE M o dule
2 A CE M o dules
3 A CE M o dules
4 A CE M o dules
2 A CE M o dules
3 A CE M o dules
4 A CE M o dules
Chart 2: Cisco ACE Scalability test results
Scalability
The scalability test was performed on the Cisco
ACE using Spirent TestCenter. A single Cisco
ACE module achieved a maximum bi-directional
load-balanced throughput of 15.3 Gbps. Cisco
ACE also demonstrated linear scalability by
delivering close to the theoretical limit of 64
Gbps using four ACE modules in a single
Catalyst 6500 chassis. In these tests, Spirent
TestCenter was used to measure the throughput
of up to four Cisco ACE modules that were
incrementally brought online within the Catalyst
6500 chassis. As shown (Chart 2. and Fig. 1)
the maximum throughput increased linearly as
TestCenter was used to measure the throughput
of up to four Cisco ACE modules that were
incrementally brought online within the Catalyst
6500 chassis. As shown (Chart 2. and Fig. 1)
the maximum throughput increased linearly as
Figure 1: Screenshot of four ACE modules with 1500 byte traffic
at 60+ Rx Gbps rate.
at 60+ Rx Gbps rate.