HyperIP by NetEx Blog

2016 NetExIP-HyperIP Security Enhancement Update

Posted by Marketing

NetEx/IP® and HyperIP® Today

Network Executive Software, Inc. (NESi) brings high performance file transfer technology to the industry-standard IP environment with its NetEx/IP and HyperIP software products.

NetEx/IP is many times faster than TCP over long distances, which makes it the ideal solution for moving massive amounts of mission- or time-critical data across the country or across the globe.  As proven by our long-term users, NetEx/IP has the highest throughput rates over long distances with no degradation of performance because of its efficient bandwidth utilization and mitigation of the effects of packet loss and latency. In fact, NetEx/IP and its predecessor product NetEx/HC (HyperChannel) have provided solutions for moving data for global corporations and US state and government agencies for more than 30 years.

For existing TCP applications, the premier solution is NESi’s low cost HyperIP.  HyperIP transparently implements NetEx/IP in the data path to provide all the NetEx/IP improvements, plus compression of data, on a virtual machine without having to modify existing applications or operating procedures.

The Challenge: Securing the Data

With an increase in hacking and breaches of sensitive databases in recent years, many corporations (especially those in the financial, government, or health sectors) and US government agencies are looking at ways to better protect data transiting between sites and the databases themselves.  Data security is also of utmost importance for those customers utilizing shared/public networks.

NetEx/IP Security Enhancements

NESi recognizes this concern for data protection and is therefore planning to enhance NetEx/IP and HyperIP over the next year with standards-based security technology like Transport Layer Security (TLS) to significantly increase the security of the data being moved across the computer room, the country, or globally.

TLS is a cryptographic protocol that secures data as it is transmitted, focusing on authentication, data integrity, and data confidentiality. With TLS, keys are generated uniquely for each connection and are based on a shared secret negotiated at the start of a session, providing security between two applications using NetEx/IP or HyperIP.  Adding TLS to our NetEx/IP products will also provide improved security for our BFX & PFX utilities, which interface upward to customer applications.

In addition to data security, adaptive block compression of data will also be added to NetEx/IP, thus decreasing WAN bandwidth usage and effectively increasing the application data throughput over the network.

This entry was posted in Hyper IP, HyperIP, Netex, and tagged , , , , , , , , Bookmark the permalink.

HyperIP Series – You Asked About WAN Acceleration of Encrypted Data…

Posted by Marketing

A customer recently asked a question during a webcast, “How does HyperIP accelerate encrypted data?” The answer is, it depends.

In the case where the data was encrypted when it was written to disk, as is required in most financial institutions, encryption poses problems for WAN optimization controllers who need to inspect the data to perform their optimization techniques:

1. Compression and deduplication on the network can no longer be applied to a secured/encrypted packet, so data reduction algorithms are a moot point.

2. Data security is paramount, so movement or transport of that data over the IP network requires the datagram to be intact, not un-encrypted, then re-encrypted putting data security at risk. That now means data pattern caching in disk or memory is no longer applicable.

3. Payloads in the encrypted data block can be quite large requiring a data streaming technology to meet window requirements and aggressive RTO’s to be adhered to.

So how can HyperIP WAN Optimization Virtual Appliance from NetEx accelerate encrypted data?

If the data is encrypted prior to HyperIP compression won’t be possible but HyperIP will still be able mitigate network issues that degrade WAN performance. SSL data payload, certificates, and keys will all passed through HyperIP’s accelerated transport at or near wire speed. No matter the distance or latency, no matter the packet loss on the WAN, no matter the amount of network congestion or out–of-order sequence issues, HyperIP will maximize the throughput of the application.  This allows for complete data security, no modification of the SSL-encrypted block of data jeopardizing the integrity of the payload, transparent to both the application and encryption.

If the traffic is encrypted with a Taclane KG encryptor, HyperIP takes the unencrypted data from the source, optimizes the transport of that data to near wire speed, then compresses the data blocks to reduce traffic on the WAN, then hands that data to an encryption appliance. This is the preferred solution in most Department of Defense implementations, where specific encryption gear is required. This solution allows for complete WAN Acceleration of the block of data before it is encrypted. Global replication and backup of data now leverage HyperIP’s value and complete data security with government approved encryption on the WAN links.

See a success story about HyperIP in a DoD implementation:
http://www.netex.com/index.php/download_file/view/73

Whether you are moving your secured data to a cloud storage provider, your own private cloud facility, a centralized data repository from remote offices, or an in-house DR facility, HyperIP can significantly improve the performance of your applications.

Resources:
Part 2 of The Ultimate Guide to Gaining Control of Your WAN
How to Leverage Cloud Backup Services

This entry was posted in HyperIP, and tagged , , , , , , , Bookmark the permalink.

HyperIP Series – Works Great with IBM Tivoli Storage Manager (TSM)…

Posted by Marketing

Enterprise Remote Backup has become more of a reality than a perception with the advent of enterprise-class backup apps like Tivoli Storage Manager (TSM).  Building a central information archive using TSM Client to Server backups and restores can now be done over the WAN with the HyperIP WAN Optimization Virtual Appliance.  Case studies, such as this one, Triangle-Ireland, talk about reducing backup and recovery windows between 50%-90% over the existing WAN. Significant flexibility with software because HyperIP scales its virtual footprint from 1Mbs-800Mbs in the same virtual appliance.  This allows for a typical hub & spoke architecture from numerous remote sites back to a data center or offsite public or private cloud storage provider.  Whether there are 10 remote sites or 400, HyperIP scales to meet with the RTO’s of every site, cluster, or server, virtualized or not.

Tivoli Storage Manager Client or Server software has network tuning parameters and on-board compression as noted in: TSM Performance Tuning Guide.  TSM can offload TCP tuning and data compression to HyperIP to recover those precious cycles on their resident servers.  HyperIP has the ability to take over session management of the IP data stream and implement software-based, adaptive, block-level compression with no impact on the TSM servers.

For Best Practices for Deploying Tivoli Storage Manager over HyperIP, check out our documentation link: Best Practices for HyperIP Deployment.

Don’t just deploy Enterprise Remote Backup, but HyperIP it.
HyperIP is proud to be “Ready for IBM Tivoli” certified.

This entry was posted in HyperIP, and tagged , , , , , , , , Bookmark the permalink.

HyperIP Series – You Asked About Enabling Centralized Remote Backup

Posted by Marketing

A successful remote backup and recovery process depends on the right backup applications, the right management of those apps, and the network to support it. How can HyperIP WAN optimization virtual appliance enable this? Let’s look at a typical remote backup solution consisting of remote servers, residing in a branch, and a central repository of data for the backups, residing in a data center. These servers, virtualized in most cases, require remote backups to occur in a given backup window for each server. These backups are slave to the size of the WAN bandwidth to/from the branch. To reduce the backup windows or at worst, meet them, the WAN overhead has to be eliminated.

Typically, TCP overhead limits actual application throughput over these WAN links. The table below shows anticipated application throughput with HyperIP. Compare this to what you get now and the value proposition of HyperIP becomes evident.

HyperIP mitigates the effects of packet loss, latency, and out of order packets to more effectively drive near wire speed of the WAN link (~95%). Then, if needed, block-level compression, a feature of HyperIP, is applied to further reduce the amount of data traveling over the WAN link, dramatically increasing application throughput. This effectively turns the WAN into LAN-like performance from the backup client to the backup server destination.

Sounds interesting? Want to try HyperIP with your backup application? Go to our website at www.netex.com and click on the big orange download box. This will get you started on the right track. Our SE Team at NetEx will be glad to help size your bandwidth requirements for remote backup.Feel free to CONTACT US.

This entry was posted in HyperIP, and tagged , , , , , , , , Bookmark the permalink.

HyperIP Series – You asked about Backup…

Posted by DaveHuhne

Backing up your data to a remote site is a business necessity. The method or design of your backup solution will be dependent on your requirements and whose system you own. Things like backup window, WAN, de-dupe, distance and incrementals all come into play when making purchase decisions for a backup solution. So why do I need a WAN Accelerator? My storage backup system de-dupes and compresses the data before sending it to its remote DR site. If I install a WAN Accelerator will it provide any additional value? Will data be further reduced after dedup and how much will my application throughput increase?

These are great questions but first you will have to determine if there is a bottleneck in your network. My backups don’t complete on time, why? My backup application throughput is low, why? I can only backup certain servers per night or my backup fills the window and I have new servers arriving as we speak. I can’t keep up so what should I do to solve the issue?

I can buy more bandwidth, increase the buffers in my switches, make the TCP windows bigger. Some of these remedies are expensive, take time or maybe I can’t make changes to the network? A plausible alternative is to test a WAN Accelerator.

HyperIP WAN Optimization virtual appliance helps alleviate many network issues that cause poor application performance and throughput over WANs. The software doesn’t care that your backup system data has been prior de-duped and/or compressed. The software uses an adaptive compression algorithm and will attempt to further reduce deduped data if at all possible. Compression is only one feature of the software that improves application performance. TCP transfers will also be affected by any number of network issues including congestion, jitter, latency, and packet loss. A minimal amount of packet loss can reduce effective throughput by half. Any resulting retransmits will further consume your bandwidth into making you believe your WAN utilization is high when in fact you are really only moving a fraction of the real data. HyperIP shields TCP applications from network issues allowing the maximize throughput.

So back to the question “What data reduction will I get with HyperIP”? The answer is HyperIP will manage the network so that the maximum throughput will be achieved as long as the application can deliver the required data to fill the pipe. As an example we have customers whose backup windows have gone from 24+ hours down to single digits. A recent Veeam customer reduced their backup window from 15 hours to 3 hours with HyperIP. CLICK HERE to see the Veeam / HyperIP success story.

Obviously every backup environment is different but downloading and testing HyperIP for yourself is quick and easy and could save you a lot of time.

This entry was posted in HyperIP, and tagged , , , , , , , , , , Bookmark the permalink.

Subscribe to our Blog

With RSS feeds, you don't have to visit our site everyday to keep up to date. Simply subscribe to our blog via RSS or Email and our posts will come to you!

Subscribe
via RSS

Search Blog Posts

Search

Subject

Visit our Website visit arrow