Cisco Systems, Inc.
All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.
Page 2 of 3
Cisco Web NS Software
With the industry’s most comprehensive URL- and cookie-based
switching, Cisco Web NS software lets network managers tailor
customer or content-specific service agreements, offer premium
services for preferred customers, and deploy content delivery services
for streaming audio and video, distance learning, and Internet audio
and video broadcasting. Support for “sticky” connections based on IP
address, secure socket layer (SSL) session ID, and cookies ensures
reliability and security for e-commerce transactions.
The unique Cisco content replication technology enables dynamic
expansion of site capacity in response to sudden “flash crowds” for
“hot” content, or seasonal peaks in traffic that can overwhelm servers.
Local, Global, and Application Load-Balancing
Cisco CSS 11000 series switches learn where specific content
resides, either locally or remotely, and dynamically select the best
Web server or cache for specific content requests—ending
frustrating error messages such as “Server Not Found.” In a
distributed Web site, Cisco CSS 11000 series switches perform
comprehensive resource verification before routing user requests,
ensuring they are directed to the location that has the best response
time and the least load for the requested content. Local server
selection is based on server load and application response time, as
well as traditional least connections and round-robin algorithms.
Global server load balancing is based on Domain Name System
(DNS) and proximity by source IP address. Any application that
uses standard Transmission Control Protocol (TCP) or User
Datagram Protocol (UDP) protocols can also be load-balanced
including firewalls, mail, news, chat, and lightweight directory
access protocol (LDAP).
Site and System Security
Cisco CSS 11000 series switches ensure high levels of security
without compromising site performance, providing wire-speed,
per-flow filtering of content requests. Security policies can be
implemented based on any combination of source address, destination
address, protocol, type, or content URL. Intelligent flow inspection
prevents common denial of service attacks such as SYN floods,
ping floods, and “smurfs.” Wire-speed network address translation
protects server IP addresses.
For backend system security, Cisco CSS 11000 series switches
intelligently direct traffic across multiple routers, SSL encryption
hardware, and firewall security servers. Firewall load balancing
eliminates system downtime that results when an overloaded
security server fails or shuts down, closing off the connection to the
network, and disrupting e-commerce purchases or other mission-
critical transactions.
Advanced System Management
System management capabilities include a powerful command line
interface (CLI), a graphical user interface (GUI), and support for
Simple Network Management Protocol (SNMP), remote
monitoring (RMON), and log files. Effective management tools
reduce the ongoing cost of operating a business-critical Web site.
Cisco CSS 11150 Benefits
• Provides high-speed Web content delivery by selecting the
best site and server based on full URL, cookie, and resource
availability information
• Offers site-level security with wire-speed denial-of-service (DoS)
prevention; firewall load-balancing provides scalable security for
back-end data-bases and applications
• Delivers up to 400 percent improvement in Web cache efficiency
for transparent, proxy, and reverse proxy configurations
• Provides 12 or 16 full-duplex fast Ethernet ports or 12 fast
Ethernet plus 2 gigabit Ethernet ports
• Supports all TCP- and UDP-based Web protocols, wire-speed
network address translation (NAT), and integrated IP routing
• Optimizes both content requests and delivery for HTTP, passive
File Transfer Protocol (FTP), and streaming media protocols
• Enables advanced service level agreements (SLAs), and a variety
of new fee-based services
