2023-LoadMaster BuyersGuide
2023-LoadMaster BuyersGuide
Buyer’s Guide to
Load Balancing
Solutions
Overview
Digital transformation means that businesses are relying on their IT networks and
applications more to connect with their employees and customers. These businesses
need to optimize the Application Experience [AX] through application availability,
agility, and performance.
Load balancing technology is a key piece of the IT architecture to create the ideal AX
topology Load balancers ensure that applications are always available through robust
application pooling and advanced health checking. Finally, load balancers improve
application performance with acceleration including encryption/decryption, and
content offload technologies that reduce server loads.
Load balancing is a technology that intersects the world of traditional IT networking with
modern application development. As such, it can be hard to navigate the requirements
and expectations for load balancing technology for any given business’ application.
Remote working and the need to support 24x7 access to business critical applications
and data has been the key topic for most IT teams in 2020. ZK Research has shown that
half of all organizations receive insufficient notification and assistance with mission-critical
application issues causing unnecessary downtime. Moving forward, the lessons learned
about downtime, application lock out and security threats along with slashed budgets
have heightened the need for a load balancing solution that is secure, quick to deploy,
easy to manage and at a value point that fits future IT budgets.
Infrastructure
Where you put the application and how the infrastructure is supported can influence the
type of load balancer that you require.
• Available as a hardware appliance for private data centers
• Available as software for virtual hypervisor environments
• VMWare
• KVM
• Xen
• Hyper-V
• Other
• Available as a bare metal image
• Available in the public cloud marketplace
• AWS
• Azure
• Other
• Integration with container orchestration such as Kubernetes or Ansible
Session Persistence
Sometimes the connections need to be maintained to a specific server because of local
content associated with the session. It is also possible that different applications need
access to the same local session specific information. Session persistence solves this
problem. Different parameters can be used to maintain session persistence.
• Client IP address
• TLS (SSL) SessionID
• Web/HTTP cookie and/or session ID
• Port Following for multiple applications (i.e., webstore and checkout sites)
Encryption Features
When applications use encryption, they are usually relying on SSL, now known as TLS.
The more current versions are more secure with better and more reliable encryption
methods. The current version of TLS is 1.3. Some applications require older version
support for compatibility reasons. Certificates are used to manage the encryption keys
and are generally unique for each application instance. Load balancers can manage
the certificates and encryption to offload the heavy performance requirements from
the application servers.
• Configurable TLS (1.0, 1.1, 1.2, 1.3) and SSL (2.0, 3.0)
• Support for RSA and elliptical curve encryption (ECC) algorithm standards
• OCSP certificate validation
• Server Name Identification (SNI) support
• Support for up to 1,000 TLS (SSL) certificates
• Automated TLS (SSL) certificate chaining
• Certificate Signing Request (CSR) generation
• STARTTLS mail protocols (POP3, SMTP, IMAP)
• FIPS 140-2 encryption certification
Security
Inherently, the load balancer provides application and network security. As a reverse proxy,
it only allows connections to specific IP addresses on designated TCP/ UDP ports similar
to a traditional network firewall. Other security capabilities can enhance the application
and IT infrastructure security profile. The load balancer can also provide enhanced
application authentication for more robust application security.
• Permit/Deny extended Access Control Lists (ACL)
• IPsec tunnel support
• Attack protection for SYN flood and other layer 4 and layer 7 attacks
• Microsoft TMG replacement
• Application pre-authentication
• Multi-Domain authentication & single sign on (SSO)
• Custom login forms
• Two factor authentication (2FA)
• SAML, Active Directory, RADIUS & LDAP authentication
Creating a clear understanding of the features required will allow you to pick the right
solution that won’t under perform or offer additional non-useful features to maintain.
First, you need to determine the method that you will consume and pay for the load
balancing services. There are multiple ways to obtain the solution you need.
Perpetual license
First, there is the traditional ‘Perpetual License’. This is a license to purchase the solution
outright, whether it is a piece of hardware or an instance of load balancing software.
The license is usually based on the maximum network throughput the product can
support. The perpetual license does not include support services nor software updates.
The support services can also include access to additional functionality.
Subscription service
Second, one may consider a subscription service. The business gets access to the
product and support for a payment on a regular schedule, usually on an annual basis.
The subscription provides full access to the solution and features without the initial
upfront payment required with the purchase of a perpetual license.
For example, a company my acquire a 100Gbps pool and they can then distribute that into
individual instances as long as the total capacity stays within 100Gbps. Capacity can be
distributed and recovered as long as the pool license is valid. This is usually paid annually
and includes support services.
Metered licensing
Finally, metered licensing is an innovative model.Metered licensing offers a license
capacity similar to polled licensing, but the individual instances of the load balancer
that are deployed only go against the capacity for the actual amount of application
traffic being load balanced by the system.
A business can acquire a 10Gbps metered license that allows them to load balance up
to 10Gbps across any number if load balancing instances. Metered licensing includes
support services and is usually billed monthly based on the past month’s consumption.
As you can see, there is a difference in how one pays for these options. Some will
be associated with CapEx spending while others will be OpEx. It is important to find
the model that is best for your environment and for the payment model for your
overall business.
Looking at the top load balancing vendors; here is a price/feature comparison for a sample
of their offerings.
Throughput (Gbps) 15 10 5 3 3 3
SSL TPS (2K Keys) 12,000 4,300 8,000 4,000 N/A 500
This buyers guide provides the basics to allow you start the selection and acquisition
journey. To validate your choices, you need to compare your choices with those from third
party and customer review sites such as Gartner Peer Insights that offer insights on the
ADC/load balancer market. Look for customers and projects that have a similar goal and/or
are in the same business vertical as yourself.
The selection of any technology is not an easy process. It is essential that you ensure that
the chosen solution meets the needs of your business and project. This needs to be done
with an understanding that the cost, complexity, and support of the technology does not
become a barrier to the effective use of the solution. We hope this buyer’s guide helps
your journey to selecting the optimal load balancing solution to optimize the AX for your
application(s) and IT organization.