As a key core product supporting the booming development of the Internet and Industrial Internet businesses, application delivery equipment is given extremely high requirements in terms of technological advancement, independent innovation capabilities, security and reliability.
As ICT infrastructure fully embraces the trend of information technology innovation, DPtech has taken the lead in breaking through the "bottleneck" problem of key technologies and successfully developed domestically produced, independent and controllable high-end application delivery products. It has been officially recognized as "the first major technical equipment in China" and is the undisputed No. 1 brand in domestic high-end application delivery. It is also the preferred brand for users in the wave of F5 replacement.
In the field of application delivery, DPtech has always insisted on focusing on in-depth product research and development with innovation, and has accumulated solid successful experience in various industries. Under the increasingly urgent demand for F5 replacement, DPtech has created a more mature, all-round, full-cycle replacement solution that is more suitable for users, ensuring a smooth transition while achieving excellence in performance, security, and user experience. It has now been widely used in key infrastructure fields such as ISP, finance, energy and power, helping customers to transform into information-based innovation, especially in the financial field, with the largest market share.
DPtech's replacement solution is based on "solving users' worries about replacement". From the early stage of product selection, middle stage cutover and replacement, to the later stage of operation and maintenance, it provides users with full protection throughout the entire process and helps users replace without worries!
Early stage product selection
Product Features
User requirement: It is necessary to consider whether the application delivery vendor's functions are met in all aspects, as well as the comprehensive delivery capabilities of the solution. Among them, the LTM server application delivery device has the largest existing F5 inventory.
DPtech's solution: The continuous iteration and optimization of product functions are based on the actual operation and maintenance requirements of many users and the continuous technical accumulation in core business scenarios. Based on the experience of using more than 10,000 devices in the China market and 15 years of accumulated technology , DPtech's ADX products have been continuously refined in functional details and have fully met the usage requirements of users.
Taking the server application delivery scenario as an example, the comparison with F5 is as follows:
(In addition to the above table, it also includes equipment high availability module, network configuration module, third-party platform docking module, operation and maintenance troubleshooting module, etc., totaling more than 100 functions)
Product Performance
User requirement: There will be concerns about the performance of China application delivery products, and the subsequent deployment in database cluster scenarios that are sensitive to processing latency and high-frequency reading and writing.
DPtech's solution: DPtech's localized ADX box device currently has an L4 throughput of more than 300G and an L4 new construction capacity of more than 260W CPS. In order to break through the CPU performance bottleneck, it independently designed the DPU (Data Processing Unit data center-level computing processor) hardware solution, which uses FPGA chips to improve the overall performance of the device. The average forwarding delay of the device is smaller than F5 device, and it still maintains a high level of microseconds in an CPU utilization of 80% environment. Compared with mainstream international application delivery manufacturers, it has obvious advantages.
Product Form
User requirement: The existing network is running F5 BIG-IP rack-mounted devices and VIPRION Chassis devices at the same time. The product form before and after replacement needs to remain consistent.
DPtech's solution: DPtech is the only application delivery manufacturer in the industry that has deployed the application of domestic plug-in card chassis on a large scale. All core components such as business boards, interface boards, main control, fans, power supplies, etc. are fully redundant and domestic. Multiple business boards are virtualized into one business board through cloud board technology, and business diversion and load sharing are achieved between multiple boards through internal
high-speed channels.
Middle stage cutover replacement
Device Configuration Translation
User requirement: The existing F5 LTM network involves many businesses and irules. How to solve the problem of configuration translation?
DPtech's solution: The first priority of configuration translation is "stability" rather than speed. DPtech provides "tool + manual" configuration translation services. First, the basic module is automatically translated through the configuration translation tool, and then the professional R&D and maintenance team of DPtech will manually proofread each item. After completing the 1:1 configuration translation, the R&D laboratory will conduct business function verification and stability testing item by item.
Parallel Operation, Smooth Transition
User requirement: Do you have the ability to gradually migrate the business on F5 devices to domestic application delivery devices for grayscale release?
DPtech's solution: Whether it is the F5 LTM server load scenario or the F5 GTM global load scenario, DPtech provides the overall idea of "from local to overall, from parallel to replacement", the details are as follows:
LTM partial migration plan ①: DPtech/F5 parallel, migrate some F5 VIP addresses to the newly added DPtech devices, F5/DP interface IP is different.
When the VS and LB interface IPs are in different network segments:
Operation steps during the cutover period: The core switch adjusts the VIP route that needs to be migrated, and the next hop is to the DP LB interface IP.
DPtech and F5 parallel capabilities: Only part of the services can be migrated for trial operation, and more detailed routing rules may need to be written, and forwarded to DP LB through the longest mask matching rule.
When the VS and LB interface IPs are in the same network segment:
Operations during the cutover period: disable F5 VIP, enable DP VIP, send free ARP to refresh the switch ARP table.
DPtech and F5 parallel capabilities: You can migrate only part of the business for trial operation, disable some F5 VIPs, and enable some DP VIPs.
Overall advantages
Fast cutover efficiency: service cutover can be switched instantly.
Business verification in advance: You can verify and test the business by adding a new VIP, and adjust it to the same as F5 after verification.
Flexible rollback: You can roll back by simply adjusting the core routing/VIP status.
Note: Since the F5 interface is not shut down, you need to pay attention to the return packets of the SNAT address on the switch.
In addition to the above solutions, DPtech ADX products also have other scenario solutions:
LTM partial migration solution ②: DPtech/F5 parallel, add some business VIP addresses to DPtech devices, F5/DP interface IP is different
LTM full migration solution: All VIP addresses of F5 devices need to be migrated to the newly added DPtech devices at one time, and DP devices continue to use the F5 interface IP
LTM dynamic routing scenario: DPtech/F5 parallel, some services that can be migrated are based on the DP resource pool as the main and F5 as the backup, and the rest of the services are based on F5 as the main and DP as the backup
GTM partial migration plan: F5 GTM and DPtech GSLB are deployed in both centers at the same time, and different DNS listening addresses are configured
Later Operation and Maintenance Use
Packet Processing Result Analysis
User requirement: When troubleshooting, how can I check whether the data packets are forwarded successfully after passing through LB?
DPtech's solution: DPtech's ADX device supports the Packet-monitor command under the CLI command line. It can accurately match and filter the messages entering the device based on the source/destination IP address, source/destination port, transmission protocol, interface, VLAN and other information, print and track the processing results of each business module inside the device (VLAN tag, session matching, hit application, routing, NAT, outbound interface).
Complete Business Flow Capture
User requirement: Application delivery devices involve many policies. How can we fully view the request and response status of the message?
DPtech's solution: DPtech's ADX product supports online packet capture on GUI. It can capture packets from the client to the LB and from the LB to the server based on the source/destination IP, physical port, protocol and port, packet capture duration, number of packets, etc. It can also associate sessions, that is, it can capture packets from the client to the LB and from the LB to the server based on the complete business flow.
Take the client 192.168.117.1 accessing the virtual service 192.168.117.100, and the load SNATing to 192.168.137.10 accessing the real service 192.168.137.20 as an example:
Success Stories
As to now, DPtech ADX application delivery equipment has been successfully implemented in various industries:
ISP industry: DPtech's ADX products serve ISPs such as China Mobile, China Telecom, China Unicom, and China Broadnet. The cumulative number of devices purchased exceeds 3,000, and a single device is configured with nearly 3,000 virtual service policies in complex business scenarios.
Financial industry: DPtech's ADX products serve leading financial users such as Industrial and Commercial Bank of China, Agricultural Bank of China, Bank of China, Bank of Communications, China Guangfa Bank, China Zheshang Bank, China Merchants Bank, Industrial Bank, and Shanghai Pudong Development Bank, with a total of over 2,000 devices purchased.
Energy industry: DPtech's ADX products serve users of the State Grid and China Southern Power Grid, with a total of over 1,500 devices purchased.
In the future, DPtech will continue to work hard, stay true to its original aspiration, uphold the spirit of innovation-driven development, maintain its leading technological strength, and create a more reliable and higher-quality smart network for users.
Subscription account
Service account
WeiBo
