KEMP LM-2200 Product Specifications

Standard

• Server Load Balancing (SLB) for TCP/UDP based protocols
• SSL Acceleration/Offload
• Layer 7 Content Switching
• Advanced, App-Transparent Caching Engine for HTTP/HTTPS protocols
• Optimized Compression for Static HTTP/HTTPS Content
• Layer 7 Intrusion Prevention System (IPS), SNORT-Rule Compatible
• Up to 256 Virtual and 1000 Real Servers
• NAT-based forwarding
• Support for Direct Server Return (DSR) configurations
• Support for MS Terminal Services with Session Reconnection Built-in
• Configurable S-NAT support
• VLAN Trunking (802.1Q)
• Link Interface Bonding (Modes supported: 802.3ad, Link Failover)

Performance

• Max Balancer L4 Throughput Up To 950Mbps
• Max Balancer L7 Throughput Up To 920Mbps
• Max Interface Throughput 4 X 949.2Mbps
• 25,000 L7 (http) requests per second
• 50,000 L7 concurrent connections
• 1,000,000 L4 concurrent connections
• SSL Acceleration Up to 200 TPS

SSL Acceleration features and Performance

• SSL Acceleration/Offload with support for 2048bit RSA Keys
• Support for EV (Extended Validation) Certificates
• PCI-DSS ready SSL Implementation
• Support for up to 256 SSL Certificates
• Support for Third Party Certificates
• Automated SSL Certificate Chaining
• SSL Certificate Signing Request (CSR) Generation

Health Checking and High Availability

• ICMP health checking of server farm machines
• Layer 7 checking for DNS, FTP, HTTP, IMAP, NNTP, POP3, SMTP,WTS (RDP), TELNET
• Automatic reconfiguration for defective real server machines
• Active/Hot Standby configurations for High Availability
• Stateful Failover

Administration

• Fully configurable using Web User Interface (WUI)
• Secure, SSH and HTTPS (WUI) remote access for administration
• Easy start and maintenance using wizards
• WUI-based Help Assistant
• Virtual Service Configurations can be edited and tuned on-the-fly
• Real time performance and availability displays
• Graceful Administrative removal of Real Servers
• Console port for local administration
• Remote syslogd support
• Selective restore of LoadMaster and Virtual Service data
• Support for Connection Draining
• Download software updates for LoadMaster firmware
• WUI Log Reporting with Tabbed Browser Support
• SNMP support for event traps & performance metrics
• Diagnostic shell with in-line tcpdump

Scheduling and Balancing Methods

• Round Robin
• Weighted Round Robin
• Least Connection
• Weighted Least Connection
• Agent-based Adaptive
• Chained Failover (Fixed Weighting)
• Layer 7 Content Switching

L4/L7 Sticky (Persistence) Connection persistency based on

• Connection persistency based on
• - Source IP address
• - SSL Session ID
• - RDP Login ID for MS Terminal Services
• - URL
• - Host Header
• - Passive Cookie
• - Active Cookie (Insert)
• - Cookie Hash
• - Cookie Hash Source
• - Query Hash
• Port following for persistency options

Security Functionality

• Layer 7 Intrusion Prevention System (IPS),
• SNORT-Rule Compatible
• Black List (Access Control List system)
• IP address filtering
• Firewall filtering (everything forbidden except VS’s)
• DDoS mitigation

Hardware Platform

• Intel Processor
• 4 X GbE Auto-negotiating, Full Duplex Eth. Ports
• Bootable DOM (No Hard Disks)
• 1 GB RAM
• Local admin via console/VGA and USB
• Dimensions: 426 x 419 x 44 mm. (1U)
• Weight ~ 13.23 lbs (6kg)
• 180W ATX power supply
• Certifications: CE/FCC Class A, UL Listed, RoHS Compliant

Specifications are subject to change without prior notice