Fortinet Coyote Point Equalizer OnDemand
An enterprise-grade virtual ADC when you need it

Equalizer Series Features:

Reliable and robust load balancing and application delivery

At its heart, the Equalizer is a tried-and-true load balancer that can support almost any web-based application. From simple L4 TCP and UDP to advanced L7 HTTP and HTTPS, Coyote Point can provide basic load balancing to precise content switching with L7 Match Rules (AF). Equalizer gathers real-time information about a server’s status using ICMP Probes, TCP Probes, Active Content Verification (ACV) and Server Agents to route traffic based on easily configurable business rules. All Equalizers support persistence using either cookies or IP addresses to reliably maintain server connections for your more advanced applications.

In the event that servers in a server pool are unable to satisfy a client’s request, Responders (AF) can be assigned to L7 Match Rules to redirect users to another URL or display a custom message.

High Availability for 100% application uptime

Mission-critical applications need mission-ready solutions. Coyote Point’s 3-tier approach to application uptime means your applications are up and running with 5-nines reliability. The first tier is a server

or application failure. If a server or application fails or becomes overloaded, Equalizer routes traffic automatically to healthy servers. For the second tier, Equalizer supports failover options to cover you should an Equalizer go down. Finally, the third level provides routing to an alternate data center(s) should your primary data center suffer a catastrophic or planned outage (see the “Disaster recovery with Global Server Load Balancing” section for more information on multiple data center traffic management). Equalizer supports Active/Passive, Active/Active, N+1 or N+M failover configurations. Coyote Point’s

Multi-Active N+M Failover (AF) allows a cluster of active Equalizers to share the workload for a large application data center. Instead of requiring idle spares in standby mode as in other failover methods, Multi-Active N+M Failover puts all the Equalizers to work load balancing and delivering applications. If an Equalizer in the N+M cluster should fail, the others seamlessly pick up the workload until you or your team can get the failed Equalizer back online.

Disaster recovery with Global Server Load Balancing

Envoy Global Server Load Balancing (GSLB) makes your network reliable and available by scaling applications across multiple data centers for disaster recovery or to improve application response times. Administrators can set up rules that direct traffic based on site availability, data center performance and network latency.

Coyote Point offers three options for Envoy. You can choose a software module for Equalizer, a standalone hardware appliance or a standalone virtual appliance. Envoy SAE, the standalone hardware or virtual appliance, offers additional features not available in the Envoy software module. It is designed to accommodate complex network structures including resolution directly to local or host-based application servers. Using SNMP health checking (AF), Envoy SAE fully integrates with ADCs from other manufacturers including F5, Citrix and A10 Networks.

Advanced networking support

Coyote Point’s Equalizers use Network Address Translation (NAT), Source NAT, Outbound NAT and spoofing to effectively and efficiently route traffic between clients and servers. With support for direct server return, Multi-Gateway (AF) and Multi-Netting (AF), Link Aggregation (LACP), IPv6 routing, NTP and tagged VLAN support (AF) for up to 4094 802.1Q VLANs, you get the flexibility you need as your network topology evolves without having to buy new equipment.

Are you ready for the transition to IPv6? Coyote Point can make it easier with 6-in-4 Tunneling (AF) supported on all Equalizers. Through the use of a tunnel broker, you can assign IPv6 addresses to your server clusters making them available to any client on an IPv6 network.

Equalizer provides the ability to configure routing to match network topologies from the simplest to the very complex through Policy-based Routing (AF). You can define routing behavior for each subnet, based on either destination IP address or source IP address of packets traversing Equalizer.

Blazing fast SSL offloading and compression

All Coyote Point Equalizers support SSL offloading to relieve your servers from the computational workload of SSL/TLS session negotiation, encryption and decryption, letting them instead focus on the applications they were meant to serve. Some models come equipped with hardware-based acceleration.

Not all applications were written with SSL in mind and many scale poorly when SSL is enabled. Coyote Point’s SSL offloading eliminates these problems with an easy to deploy acceleration solution. Processing is moved from your servers to Equalizer making applications significantly faster and secure without software or other intrusive changes.

Coyote Point incorporates a dedicated hardware-based Gzip HTTP compression processor into some models for content-rich applications. You can compress server generated data up to 5 times before it’s delivered to a client using any modern web browser saving you bandwidth costs and improving response times to your users.

Automate routine tasks to take control of your applications

Equalizer’s Smart Control framework with Smart Control Automation (AF) manages notifications, logging and corrections to your application environments. Intuitive construction of graphical or CLI-based rule sets let you configure responses to almost any condition including resource management to power up or power down IPMI-compliant servers in response to changes in demand.

Virtual platform support

If you’re looking for a comprehensive set of tools to manage your VMware environment, Coyote Point has you covered. Every Coyote Point Equalizer supports VMware load balancing using VMware’s management API to retrieve real-time virtual server availability and resource utilization from a VMware vCenter console. With Coyote Point’s Smart Control Automation (AF) you get even deeper integration into VMware with the ability to load balance based on VM CPU and VM RAM and spin-up or spin-down VMs in response to demand.

Coyote Point’s OnDemand product line-up offers virtual versions of Equalizer and Envoy SAE for load balancing and GSLB. You get to choose either hardware or virtual appliances for 100% flexibility to fit your needs. All our virtual products are available for a free 30-day trial to let you test them in your environment before you buy.

Features to keep your applications safe and secure

Equalizer intelligently controls your SSL traffic with advanced features like SSL Certificate Revocation Lists (AF), Global Object SSL Certificate Storage (AF), outbound HTTP to HTTPS URL rewriting and Cipher Suite Control.

Guaranteed application support

From basic static websites to enterprise Microsoft® Exchange installations, Coyote Point’s Equalizer can support virtually any internet-based application. Easy to follow deployment guides are available for the top Microsoft® applications including Exchange, SharePoint® and Outlook Web Access.

Included Global Server Load Balancing (GSLB)

All Equalizer load balancers and application delivery controllers include Coyote Point’s Envoy Global Server Load Balancing. Using DNS-based resolution, Envoy routes multiple data center traffic based on network latency, server health, traffic volumes or with custom business rules.

Flexible management and comprehensive reporting

Do you prefer a command line or an intuitive graphical user interface? Either way Coyote Point provides the tools you need to easily manage your Equalizer. The context sensitive CLI provides complete control of every aspect of your Equalizer, not just a subset of functions like some other manufacturers. Even if you’re a CLI-jockey, you’ll appreciate the thought-through layout and features of our graphical user interface for most tasks from setting up server pools to running sophisticated traffic reports. If you’d rather manage your Equalizer from another device or application, Coyote Point’s REST API gives you the flexibility you need.

Equalizer’s Role-based management (AF) gives you the flexibility to establish multiple users and groups allowing it to be managed by one or more data center personnel. As the administrator, you can assign read, write, create and delete permissions to individual users or groups to give as little or as much control over your Equalizer to fit the needs of your organization.

Equalizer GUI Welcome Screen

Sample of a TCP Cluster Configuration Summary Screen

Equalizer Series Comparison:

	E250GX	E370LX	E470LX	E670LX	E970LX	OnDemand
Performance
Maximum Throughput	1.2 Gbps	4.8 Gbps	8.0 Gbps	10.0 Gbps	13.0 Gbps	1.0 Gbps
L7 TPS	31,500	170,000	190,000	220,000	300,000	50,000
SSL
SSL TPS (2048)	90	2,500	18,000	20,000	22,000	1,800
Type	Software	Software	Hardware	Hardware	Hardware	Software
Compression
Type	N/a	N/a	N/a	Hardware	Hardware	N/a
Server Pools
Server Pools	256	256	256	256	256	256
Servers per Server Pool	512	512	512	512	512	512
Load Balancing
Protocols	L4 TCP/UDP, L7 HTTP/HTTPS
L7 Match Rules	Yes	Yes	Yes	Yes	Yes	Yes
Envoy GSLB	Included	Included	Included	Included	Included	Included
Smart Control Automation	Included	Included	Included	Included	Included	Included
Networking
Untagged/Tagged (802.1Q) VLANs	2/4094	6/4094	8/4094	10/4094	10/4094	Varies/4094
Direct Server Return	Yes	Yes	Yes	Yes	Yes	Yes
Outbound NAT	Yes	Yes	Yes	Yes	Yes	Yes
Policy Based Routing	Yes	Yes	Yes	Yes	Yes	Yes
IPv6 Tunneling	Yes	Yes	Yes	Yes	Yes	Yes
Link Aggregation (LACP)	Yes	Yes	Yes	Yes	Yes	Yes
Multi-netting	Yes	Yes	Yes	Yes	Yes	Yes
Multi-gateway	Yes	Yes	Yes	Yes	Yes	Yes
High Availability
Failover		Active/Passive, Active/Active, Active N+1 and Multi-Active N+M
Responders	Yes	Yes	Yes	Yes	Yes	Yes
Hardware
CPU	Single core	Dual core	Dual core	6 core	8 core	N/a
Memory	512 MB	2 GB	2 GB	4 GB	4 GB	N/a
Hard Drive	512 MB CF	120 GB SSD	120 GB SSD	120 GB SSD	120 GB SSD	N/a
Gigabit Ethernet (RJ45 Cu)	2	6	8	8	8	N/a
Gigabit Fiber SFP + (10 GB)	0	0	0	2	2	N/a
Power	110 VAC/29W	120 VAC/84W	120 VAC/123W	120 VAC/140W	120 VAC/306W	N/a
	220 VAC/40W	220 VAC/90W	220 VAC/130W	220 VAC/145W	220 VAC/310W
	50/60 Hz	50/60 Hz	50/60 Hz	50/60 Hz	50/60 Hz
Dimensions (WxHxD)	17.25x1.75x10.5”	17.25x1.75x12”	17.25x1.75x18.25”	17.25x1.75x18.25”	17.25x1.75x21”	N/a
	438x45x267 mm	438x45x305 mm	438x45x464 mm	438x45x464 mm	438x45x534 mm
Weight	7 lbs. (3.2 kg)	11 lbs (5 kg)	15.5 lbs (7 kg)	15.5 lbs (7 kg)	18 lbs (8.2 kg)	N/a
Operating Temperature	40-105 F, 5-40 C					N/a
Operating Rel. Humidity	5-90%, non-condensing					N/a
Warranty	1 year
Support Included	90 days FortiCare Enhanced 8x5
Certifications	FCC, CE, RoHS					N/a
Additional Certifications	N/a	UL/cUL, VCCI,	UL/cUL, VCCI,	UL/cUL, VCCI,	UL/cUL, VCCI,	N/a

Envoy SAE and Envoy OnDemand SAE

Based on Coyote Point’s Envoy GSLB module for Equalizer, Envoy SAE and Envoy OnDemand SAE offer a standalone GSLB appliance to bridge multiple sites for disaster recovery.

• Full SNMP-based interoperability with 3rd party ADC manufacturers
• Direct server resolution
• Up to 10 GeoSites on one Envoy SAE appliance

Envoy SAE/Envoy OnDemand SAE
Performance
DNS Throughput (lookups/second)	10,000
DNS
Record Types	A, AAAA, MX, PTR
Standards	RFC1035, RFC1912,RFC3364, RFC3596
High Availaility
Failover	Active/Passive
Hardware (Envoy SAE Only)
Gigabit Ethernet	2
Power	110 VAC/29W 220 VAC/40W 50/60 Hz
Dimensions	17.25x1.75x10.5” 438x44.4x267 mm
Weight	7lbs. (3.2kg)
Operating Temperature	40-105 F, 5-40 C
Operating Rel. Humidity	5-90%, non-condensing
Warranty	90 days
Support Included	90 days Basic
Certifications	FCC, CE, RoHS.

Equalizer and Envoy SAE OnDemand Information

Equalizer and Envoy SAE OnDemand run as a guest VM under any VMware Hypervisor™ that supports Version 7 virtual machines. They have been tested on the following VMware products:

• VMware ESX 4.1
• VMware ESXi 4.1, 5.0, 5.1
• VMware Fusion 3.1.2, 3.1.3
• VMware Player

Each instance of Equalizer or Envoy SAE OnDemand requires the following hardware resources:

• 1GB RAM (in addition to RAM required for the host platform); supports up to 2 GB
• 1GB free disk space
• 1 VMware supported 10/100/1000Gb Network Adapter; supports up to 16 NICs
• Internet connectivity for license validation

Specifications:

Clusters	Unlimited
Servers per Cluster	512
Applications Supported	All Web/HTTP-based applications (PHP, ASP, Oracle, Apache, etc.), Microsoft Products (SharePoint, Exchange, Link, OWA, etc.), SSL VPN, Database clustering, Email services, Streaming Media
Load Balancing Features/ Algorithms	L4 TCP/UDP SLB, L7 HTTP/HTTPS SLB, Content Switching / Packet Inspection (Match Rules), Responders, Cookie Insertion/Persistence, Custom Header Injection, L4 port range support, User defined custom LB policy, Server connection limits, VLB Basic, VLB Advanced, TCP/HTTP Multiplexing, IPV6 SLB (L7 clusters only)
Envoy GSLB	Included
Global Server LB Features	Latency based Geo LB policy, Geo LB by Site Load, Geo LB by Site Weight, Adaptive Geo LB, MX record support, IPv6 quad A record support
High Availability Features	Active/Active, Subnet control for configuration sync, Subnet control for peer heartbeat, Fast Failover
Fault Tolerance	Full system-level redundancy (requires two Equalizers), Server heartbeat and configuration data exchanges over Ethernet
Security	SSL Certificate Revocation List Support, Global Object SSL Certificate Storage, Implicit Deny on Exterior Elements, Non Root CLI, Configurable Acess Control Lists
Network Features	Single Network, Dual Multi-Network, Direct Server Return, Multi-gateway, Multi-netting, Policy based routing (VLAN access control lists), 802.1q tagged vlan support, Configurable Outbound NAT function, NTP Client and Server option, IPv6 over IPv4 Tunneling
SSL Offloading	Software
HTTP Compression	N/A
Acceleration Features	Software SSL, Enhanced multi-core CPU processing, Outbound http to https URL rewrite, SSL Cipher Suite Control
Health Checking/ Monitors	ACV (Active Content Verification), Server Side Agents, VLB - VMWare API health check, Web UI, Graphical utilization reports for all configuration objects, Configurable L3 probes, Enhanced L4 protocol checks
Management/ Reporting	Context sensitive CLI*, API, Role Based Admin, Email notification, CSV Export, Utilization plotting, Proprietary SNMP MIB , Remote Syslog, Server Pool objects, Drag and Drop, Graphical Dashboard, Enhanced Plotting, i18N messaging with coding, Event Handler
Warranty	90 days
Support	90 days Basic Support

Documentation:

Download the Coyote Point Equalizer Datasheet (.PDF)