LoadMaster™ 4000 Data Sheet

• Application Delivery Optimization

• Server Load Balancing
• TLS (SSL) Offload

Active / Hot Standby

Optimized Performance for High

Transaction Web Infrastructure

Delivering 8 Gbps L7 throughput and 3000 SSL

transactions per second (TPS), the
LoadMaster™ 4000 offers the capacity and
Web & Operations & Exchange, Lync VDI & Virtual features to support high volume web
Application Management & Sharepoint App Delivery
infrastructure environments. High
performance load balancing and content
FEATURE BENEFIT switching combined with web application
High Performance L4/7 Server Load Ensures each user gets the best application firewall protection, intrusion prevention and
Balancing experience possible. endpoint authentication ensures that

Active/Hot-Standby, with Stateful
Failover
Server and application health
checking
IP and L7 persistence
Layer 7 content switching
TLS (SSL) offload
Compression and caching of content
Intrusion Prevention Systems (IPS)
LoadMaster Clustering
Removes load balancer as a single point of failure
Guarantees user requests will be only be directed to
available severs and available applications
Maintain connections with the user’s specific server
even if their IP address changes during session
Optimize server traffic according to content type
Optimizes server performance and user experience
for encrypted application content
Reduces internal network latency and optimizes
bandwidth for best possible client experience
Thwarts application threats in both non-encrypted
and encrypted traffic streams
Scale-out application delivery by aggregating the
capacity of multiple LoadMaster instances
internet-facing services and sites are not only
highly available but also secure. Traffic may
be securely distributed across on premise
and public cloud environments via integrated
IPsec VPN capabilities.
The LoadMaster™ 4000 is an essential
enabler for resilient delivery of a wide range
of application workloads in medium and large
scale environments with integration with
VMware vRealize Orchestrator and Microsoft
System Center.
Combining the latest advancements in Layer 4
to Layer 7 application delivery technology,
LoadMaster™ is the Application Delivery
Controller (ADC) of choice for providing high
availability services in cloud, web and
application infrastructures.

© 2016 KEMP Technologies, all rights reserved. KEMP®, KEMP Technologies®, LoadMaster®, and the K logo are trademarks of KEMP Technologies, Inc. V2.3 Sept 2016
 LoadMaster™ 4000
Standard
• Server Load Balancing (SLB) for
TCP/UDP based protocols
• TLS (SSL) Offload
• Layer 7 Content Switching
• Advanced application transparent
caching for HTTP/HTTPS
• Optimized compression of static and
dynamic HTTP/HTTPS Content
• SNORT-rule compatible Layer 7
intrusion prevention system (IPS)
• Up to 500 Virtual and 1000 Real Servers
• IPv6 support for addressing and
features
• IPv6 - IPv4 bidirectional conversion
• NAT-based forwarding
• Support for Direct Server Return (DSR)
configurations
• Session reconnection for Microsoft
remote desktop services (RDS)
• Configurable S-NAT support
• VLAN Trunking (802.1Q)
• Link interface bonding (802.3ad)
• HTTP/2 Layer 7 Proxy
Edge Security Pack
• Microsoft TMG replacement
• Pre-Authentication & SSO
• Multi-Domain authentication
• X.509 client certificate authentication
• Custom login forms
• Two factor authentication
Performance
• Max L4 Throughput Up To 8.0 Gbps
• Max L7 Throughput Up To 8.2 Gbps
• 165,000 L7 (http) requests per second
• 250,000 L7 concurrent connections
• 15,200,000 L4 concurrent connections
• TLS (SSL) Acceleration
o 2K Keys up to 3000 TPS
o 1K keys up to 6000 TPS
• TCP/IP Multiplexing
© 2016 KEMP Technologies, all rights reserved. KEMP®, KEMP Technologies®, LoadMaster®, and the K logo are trademarks of KEMP Technologies, Inc.
Data Sheet
TLS (SSL) Scheduling and Balancing Methods
• Configurable TLS (1.0, 1.1, 1.2) and SSL • Round Robin
(2.0, 3.0) • Weighted Round Robin
• Support for EV (Extended Validation) • Least Connection
certificates • Weighted Least Connection
• Server Name Identification (SNI) • Agent-based Adaptive
support • Chained Failover (Fixed Weighting)
• Support for up to 256 TLS (SSL) • Source-IP Hash
certificates • Layer 7 Content Switching
• Automated TLS (SSL) certificate chaining • Global Server Load Balancing (GSLB)
• TLS (SSL) Certificate Signing Request • AD Group based traffic steering
(CSR) generation
• STARTTLS offload for mail protocols
Session Persistence
(POP3, SMTP, IMAP) • Source IP (L4)
• FIPS 140-2 Level 1 mode • TLS (SSL) SessionID (L4)
• HTTP/HTTPS Browser-session (L7)
Health Checking & High Availability • HTTP/HTTPS WebClient-session (L7)
• Aggregated health checks • RDP Login ID (L7)
• ICMP health checking • Port Following for mixed HTTP/HTTPS
• Layer 7 checking against any target sessions
server port
• Active/Hot Standby configurations for
High Availability
Security
• Stateful Failover • Web Application Firewall (WAF)
• Scale-out Clustering • SNORT-Rule Compatible L 7 Intrusion
Prevention System (IPS)
• Permit /Deny Access Control Lists
Administration
• IP address filtering
• Change Auditing
• DDoS mitigation, including L7 rate
• Flexible administration options
based attacks
o Web User Interface (WUI)
• IPSec VPN to Azure, AWS and vCloud Air
o SSH
public clouds
o Console
• Authenticated NTP
o RESTful, JAVA and PowerShell APIs
o VMware vRealize Orchestrator Hardware Platform
• Context based help (WUI) • Intel Xeon Quad Core Processor
• Real time display of performance and • 2 X 1GbE Auto-negotiating, Full Duplex
availability Eth. Ports
• Application templates • 2 X 10G (SFP+) Ports
• Remote syslogd support • 8 GB RAM
• Automated configuration backup • Local admin via serial and VGA/USB
• Selective restore of configuration • Dimension (1U): 434mm (W) x 394.3mm
• Connection draining for managed (D) x 42.4mm (H)
outages • Weight: 17.76lbs (7.9kg)
• Comprehensive logging and reporting • 250W power supply
• SNMP support * Specifications are subject to change without prior
• Diagnostic shell with in-line tcpdump notice.
V2.3 Sept 2016