Skip Links

Network World

Brad Reese

Cisco ACE vs. F5 LTM

By Brad Reese on Tue, 02/12/08 - 2:26am.
Newsletter Signup

Cisco Application Control Engine (ACE) - introduction and comparison with F5

Application delivery networking vendor F5 has published:

Application Delivery Controller Performance Report

A comprehensive performance evaluation of the:

Cisco ACE (Application Control Engine Module) 8-Gbps
Citrix NetScaler Enterprise Edition 12000
F5 8800 BIG-IP LTM

Greg FerroInterestingly, Greg Ferro - CCIE No. 6920 Routing and Switching, author of the Etherealmind Blog published:

Cisco Application Control Engine (ACE) - introduction and comparison with F5

Which explains why Greg is considering the deployment of both the F5 LTM and the Cisco ACE in his network.

Cisco ACE Introduction

The ACE comes in two formats, either a standalone 1RU appliance, or as a Cat6500 module.

The appliance seems to have a faster development cycle and gets the new features early, but the module has more performance in every aspect.

And what amazing performance it is, this thing can perform load balancing at up 16 Gigabits per second, which is about four times more than the F5 8800 (note some conditions apply in the current versions of code, due to ASIC inputs at 8 Gigabits per second but expected to be resolved in future code releases), and at a price about two thirds of an F5 8800.

Note: I accept raw speed is not the only measure of performance see more later.

But not many people are going to need a load balancer at that sort of performance, and the ACE module is a key part of the Cisco SONA strategy.

To this end the ACE module can have up to 250 virtual instances, more than 340000 sustained TCP connection, 15000 SSL TPS.

So this thing has high performance across the board.

Greg continues his comparison analysis with power reduction, functional comparison, virtualisation, management and futures.

Finally, Greg concludes that for large data centres, you will most likely use F5 LTM where you need it for a specific feature or task, but you would choose to have an ACE module for most load balancing tasks.


Read Greg's blog entry in its entirety


Furthermore, you may also have interest in the Miercom Lab Test Report:

F5 8400 BIG-IP v9.2.3 vs. Cisco 6500 Application Control Engine Module v A.1.3

as well as more

Cisco vs. Competitor Lab Tests

Video Overview of the Cisco ACE Module

Do you agree with the F5 LTM vs. Cisco ACE comparison analysis of Greg Ferro?

Contact Brad Reese
http://www.BradReese.Com

If you are making choices

0

If you are making choices today, you might also consider that F5 has announced the Viprion, which offers similar performance to the Cisco ACE, and by using up to 4 F5 blades you can dynamically scale performance. This looks to be a worthy contender and the multiprocessor technology looks like a good choice.

While I don't have pricing information, the idea for some dotcoms-style businesses who have peaky performance profiles, that you can just add another card to get more performance is a nice idea.

I also have become fond of the powershell and iRules editor interface for the F5, this makes it easy to use and delegate work to others.

But the ACE module uses a lot less power (this remains one of the biggest problems we face), has virtualization and is cheaper than the F5.

I still think you need both. ACE for heavy lifting, and F5 for features.

http://etherealmind.com

ACE vs. F5

0

Good review and discussion, and albeit this post is late, I would make a stronger case for bringing F5 into a new client's large web site management network than I would Cisco's products. I've worked with load balancers since the early days of F5's that couldn't do VLSM and Cisco Local Directors and since tested and evaluated subsequent vendors and generations.

I have had far more unpleasant experiences with Cisco's platforms and they had prior done a poor job of rolling out stable and competitive performing platforms (CSM, ArrowPoint, CSS115xx). They were notoriously buggy and I have it from reliable sources that their Cisco ACE Load Balancer is along the same path with many stability problems and feature problems that warrant some eyebrow raising skepticism. Some problems include resource memory problems, reboots required several times a month, high availability and synchronization easily broken, configurations are complex to manage and loss of connectivity when configurations are large and syncing.

My point is - I believe it improper to recommend such a new Load Balancing platform of Cisco's given their track record of releasing buggy new products. Based on their past record, I would wait at least a good year or two and the code versions have it several iterations before recommending a Cisco Load Balancer. I would at the least not recommend them to the general public until putting through trials in my own labs because reports of which platform is "bigger and badder" in terms of performance and capacity really do nothing for Network Admins who have to support them on a daily basis.

I would like to agree but....

0

Since I wrote this post I have been working on both F5 and Cisco ACE load balancers solidly. While I can't fault the F5, I am much more excited by the ACE and its potential.

I am now using the ACE 2.1.0 (3.0.2) code, released in April which added the features that I was missing.

Secondly, it has been quite stable. As someone who has been seriously bitten by Cisco code previously, I was hesitant to make a complete endorsement without several happy months to report.

Note that I have deployed the Application Network Manager to give me a very useful GUI to manage all my ACE units in one place. Given that I am running several modules, with more than a dozen virtual instances its a big help in keeping the configurations straight. Some folks are not happy with the CLI, and ANM sorts that out.

One area I have been very happy with, is the advanced debugging that the ACE CLI has. It is much more effective in resolving configuration problems than the F5. I can 'touch' a lot more and get results quicker.

But mostly, the F5 doesn't virtualize and this causes me great pain in having to create nasty hacks all over the network to get the data to go 'through' the F5. Inevitably, these hacks always bite me back, so I tend to use the F5 less and less.

On the other hand, iRules is so easy to use and with a lovely interface. Now, if only ACE had something like that I would be really impressed.

http://etherealmind.com

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
Welcome, visitor. Register Log in
Advertisement:
About Brad Reese on Cisco

Brad Reese cofounded BradReese.Com Cisco Refurbished which offers one year warranties on Cisco Refurbished and Cisco Repair.

Contact Brad Reese

Archives
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
January 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
January 2007
Categories
A government official in possession of a large corporate stockholding while that corporation is subject to administrative rulings by that same government official
After contacting Cisco
Agito adds that its enterprise fixed mobile convergence (eFMC) platform enables low-cost in-building voice coverage
Agito introduced Agito for BlackBerry
Agito's BlackBerry smart phone functionality for Cisco VoIP
Agito's RIM BlackBerry support announcement
Americas Vice President and General Manager of HP ProCurve - Karl Soderlund
An assortment of communications companies
Andreessen plans to watch what companies Cisco acquires
Andreessen sees as the next market transition
As a matter of Cisco policy
Back in April the CCIE Security track changed
Black Hat attack on Cisco's network admission control (NAC)
Boas also led an educational session at the Gartner Security Summit
Boas shares his insight on the most prevalent threats to the enterprise network
Bragging about Cisco's ability to catch market transitions
Brings enterprise VoIP over WiFi for dual-mode BlackBerry smartphones
But neither felt it as bad as Cisco did
Can Cisco VARs profitably match HP ProCurve pricing on a deal-by-deal basis?
Careers
Chairman and CEO of Cisco China - Jim Sherriff
Cisco
Cisco CEO John Chambers has never been shy
Cisco Chief Technology Officer Padmasree Warrior
Cisco NAC design flaws that the folks at Black Hat so alarmingly described
Cisco VARs no longer have enough margin left to profitably match HP ProCurve pricing
Cisco customer a discount
Cisco has held this share position since CY02
Cisco has produced a new CCIE count
Cisco is celebrating its 25th anniversary this year
Cisco is the revenue-leading vendor overall with 38% of total network security appliances and software in 1Q09 (down 2.8 points from 4Q08)
Cisco might do very well with the Flip
Cisco offer price-matching discounts to existing customers in order to equal ProCurve prices
Cisco only counts your CCIE number once
Cisco released its new worldwide CCIE count
Cisco's executive biographies web page
Cisco's loss of market share has in itself become the networking industry's newest market transition
Compromised the Cisco agent installed on the end system
Confirmation testimony before the U.S. Senate noteworthy
Customer-proven best practices of network access control (NAC)
Data Center
Didn’t RIM already support voice over WiFi?
Doesn’t RIM’s Ascendent acquisition give them this?
Douglas Gourlay - Vice President of Cisco Data Center Solutions
Douglas Gourlay is as sharp as a tack and one of the most impressive people I've ever had the honor of collaborating with on Cisco stories
Dual CCIE #18532 Routing and Switching/Security - George Morton
Dual-mode BlackBerry smartphones
Enables BlackBerry to be integrated into corporate PBXs and Unified Communications systems
Enterasys NAC is agent-less assessment based on a network scan
Enterasys security expert Dennis Boas
Enterasys uses multiple criteria beyond end system health assessment to assign and limit access granted to an end system
Enterprise concerns about the financial and management aspects of NAC
Enterprises that have standardized on the BlackBerry platform
Exactly what's causing everybody to quack?
Famous networking industry journalist
Flexible options with Enterasys NAC
Flip video below of Chambers' doing his quacks
Flip video of Cisco CEO John Chambers performing his duck quacks
Further details on why Cisco has lost market share in network security
Gourlay was featured just 7 days earlier in the Cisco Data Center Networks blog story
Gourlay's office is located at Cisco's nearby headquarters in San Jose
HP ProCurve continues to win business and gain market share
HP ProCurve is calling the shots now
HP ProCurve is whacking Cisco in its most vulnerable spot
HP ProCurve pricing on a deal-by-deal
HP ProCurve will take 20% off its list price
Half the smartphones in use in the US today are BlackBerry devices
Hogtied by Cisco's new committee culture
How Cisco was working overtime AGAINST the Buy America provisions of the $7.2B broadband stimulus fund
I can still see those wishing to cash out selling to Cisco
I have worked for a handful of telecommunications companies of varying sizes
I voted for President Obama seeking change
If you trade-in your Cisco equipment
Independent companies operating in Silicon Valley able to out innovate Cisco
Interesting CCIE news from around the world
Is Cisco likely to innovate? No
Its been proven that a government official can be bribed with free dinners
Jeff Wilson - network security analyst at Infonetics Research
Joel Bion - Senior Vice President of Cisco's Product Resiliency Research
Juniper and Check Point are second and third with 10.4% and 9.5% respectively
LANs / WANs
Larry Strickling is confirmed as the new Administrator of the National Telecommunications and Information Administration (NTIA)
Last month Cisco missed the multiple CCIE numbers
Made by Strickling during his March 19
Manny Rivelo - Senior Vice President of Cisco's Development Organization
May 2009 vs. June 2009 Worldwide CCIE Count Comparison
Mobile features integrated into the BlackBerry
My previous government service at the FCC provide me a unique background for the position of Assistant Secretary
My source suggested Gourlay had left Cisco
Network security vendor Enterasys
Not only among the Cisco workforce
Not too many senior executives are around from Cisco's early days
Now it appears the Internet is quacking too
Omitted the years of Cisco service for both John Morgridge and Richard Justice because they are no longer full-time Cisco executives
Only 66% of all applicants who passed were for the CCIE Router and Switch track
Only one CCIE is a member of Cisco's 59 strong senior executive team
Out innovate Cisco simply because they have no desire to be acquired
Pacific Rim CCIE numbers didn't change over the last 39 days
Pejman Roshan - Chief Marketing Officer of enterprise fixed mobile convergence (eFMC) vendor Agito Networks
Ponemon Institute reported
Post a comment to Cisco's blog that contains a link to your duck quacking video
ProCurve wants to make all Cisco customers aware of this offer
ProCurve’s momentum and market share gains
R & S + Security this year as the most popular dual CCIE track
R & S + Service Provider was 49% of the successful attempts for dual CCIE
RIM offers only data services over WiFi on their dual-mode smartphones
Responsible for Cisco's IOS Software
SMB
Security
Security mechanisms are used to validate the integrity and authenticity of the Enterasys agent for all server/agent communications
Security sales will come back for Cisco
Showed that Stickling owned a large Cisco stock position
So we had 251 new CCIEs
Subject of Cisco's senior executive team came up
The CEO of Cisco quacked
The Cisco workforce quacked
The IOS 12.4 track with ISR routers is slowing down the Security CCIE track
The National Telecommunications and Information Administration (NTIA) granted Cisco its coveted Buy American Exception
The average tenure would be of the 61 executives listed on Cisco's Mount Rushmore
The best duck call will win a new Flip Mino HD from John Chambers
The change in the CCIE Security track has had a major impact on new security CCIEs
Tremendous benefits HP ProCurve provides by offering the best value
VoIP / Convergence
We build our culture at Cisco around catching market transitions
We can confirm that Doug Gourlay is no longer with Cisco and we wish him well in his future endeavors
We're also now starting to see the CCIE Wireless track
We've experienced a new low for CCIE Security track
What exactly has Agito Networks announced this week?
What's your take on the implications of the new worldwide Cisco CCIE count?
What's your take on why Douglas Gourlay left Cisco and where do you think he will land?
Which had Gourlay inviting guests to Cisco Live in the following video
Which video quacks you up the most?
While Cisco salivates over 30 to 50 new market adjacencies
Why does Cisco lack pricing flexibility?
Why is cellular-only PBX and UC integration incomplete?
Why the Enterasys NAC solution is doing so well
Why the Enterasys NAC solution is in such high demand
Wireless / Mobile
Without ducking my question
Would you back the technology vision of Marc Andreessen
You too will understand why duck quacking has become such an overnight sensation
On The Web
Twitter