LucciTech ADC V6.2version is fromV5.1upgrade.

V5.2versionLucciTech ADCAll series:

üsupportN 1Cluster:N 1Parallel Cluster Support,As the number of cluster machines increases,performance increases linearly.suchN 10namely11highest-end devices,the performance of each unit is30Gseven-layer throughput,the cluster is300Gseven-layer throughput;

üsupportCavium NitroxIII:V5.2versionCavium Nitrox PXseriesSSL ASICacceleration chip.fromV5.2Start,supportCavium NitroxIII, SSLacceleration and offload32G.
(official data please see:http://www.cavium.com/processor_security_nitrox-III.html).

This document is used to understandV5.2version of the hardware changes, new features, resolvedBugand known issues.

Hardware Changes

Cavium NitroxIII

V5.2version was used beforeCavium Nitrox PXthisSSL ASICchip maximum support9000 TPS(1024bitandMD5).inV5.2Version,increasedCavium NitroxIII.of course.V5.2also supportsCavium Nitrox PX.

the difference is,Cavium Nitrox PXthe highest support2.5GbpsSSLacceleration and unloading,andCavium NitroxIIIsupport32GbpsSSLacceleration and unloading.performance varies greatly.

If you use an industrial computer,then it is recommended to go directlyCaviumProcurementNitroxIIIaccelerator card,The accelerator card using standardPCI-ESecond Generation Interface(supportx4,x8,x16),can directly connect the accelerator card to the industrial control computerPCI-EInterface.

dueCavium Nitrox IIIa total5model,Please refer to the performance of each model before purchasing.

New Features

performance related

üincreasedThreadQuantity,SSLconcurrent connections can increase linearly with memory growth;

üoptimized.IRQ BalancingC604machines.,can dramatically improve performance

Other Functions

üsupportN 1Cluster

üsupportSNMP v3.0

üinHAmode,increased the number of users from sharedIPSendSNMP Trap

üAdopts New Real-Time Statistics Framework,can more accurately count the statistics of virtual nodes

üSyslogsupports multiple hosts

üSingle Sign-On SupportNTLM

üSingle sign-on supports dual arguments,namelyRadius LDAP

üSSLBridge supports multiple sourcesIPAddress Resolution

üsingle sign-on provides a customizabletimeoutOptions

ücontent policy

üHealth Check,POSTfield

üthe global loadIPaddress database update2015year07year

üWAF's policy library updated2015year8month7Day

repairedBug

üfixes the license server option for single sign-on

üfixed memory leak for nested virtual nodes

üfixed the problem that the global load part parameter could not be set

üfixed simultaneous settings managementIPand management gateway causing the management interface to be inaccessible

üfixedSMTP

üfixed.X_FORWARDED_FOR

üfixed aIPv6Health Check Issues

üfixed a global load inHAmode

üfixed a session persistence issue for a virtual child node

üremoved port following for virtual child node

üfixed some casesSSLConnectiontimeout

üfixed aDNSHealth Check

üfixed.HTTPtransmission,the problem caused when the length of the data message reaches the maximum value

üfixed.IPv6network environmentHA

üfixed.C604under the machine,When using212nuclearCPUflow exceeds20Gbps,Deadlock problems occur in some cases

üfixed.HAmode,in certain situations,heartbeat cannot be monitored

üfixed.WAFis mistaken for the shielding mode