Hillstone AX-Series Application Delivery Controller Instruction Manual

AX120S-IN/ AX220S-IN
AX320S-IN/ AX520S-INC
AX1200S-IN/ AX2000-IN
AX2000S-IN/ AX2200S-IN
AX3200S-IN/ AX4060-IN
AX4060S-IN/ AX6060-INAX6060S-IN/ vADC
Hillstone AX-Series:
Application Delivery Controller (ADC)

Contents hide

1 AX-Series Application Delivery Controller

2 Product Highlights

3 Features

4 Specifications

5 Specifications: Virtual Appliance

6 Module Options

7 Documents / Resources

7.1 References

AX-Series Application Delivery Controller

Hillstone AX Series Application Delivery Controllers (ADCs) are the next generation of enterprise- class application delivery optimization products. The Hillstone ADC supports a full range of load balancing functions, including link load balancing (LLB), server load balancing (SLB) and global server load balancing (GSLB). In addition, the AX Series supports health checks for applications, servers and links, first-level network attack protection, SSL offload, application and data acceleration via caching, and more. The Hillstone ADC can greatly improve the availability and scalability of core applications and business platforms, and effectively improve the operational efficiency of enterprise data centers. Together with Hillstone security products such as next- generation firewalls, the Hillstone ADC can provide end-to-end application delivery and security capabilities for your applications and business operations.
Hillstone’s ADC fully supports IPv6, high-performance clustering and carrier-grade high availability.
It is widely used in server load balancing; traffic distribution and business continuity across multiple data centers; link optimization across multiple ISPs; CDN traffic management; and other application optimization and acceleration scenarios. The Hillstone ADC provides industry-leading solutions for government, finance, network operators, education, healthcare and other sectors.

Product Highlights

High-performance Server Load Balancing
Hillstone’s AX Series provides server load balancing with high- capacity concurrent and new session processing capabilities. It intelligently adjusts traffic distribution based upon the health status of server nodes, and automatically completes switching to ensure the best user experience as well as application high availability. Hillstone’s ADC utilizes Layer 4 to Layer 7 load balancing algorithms and load balancing based on domain names. Intelligent application identification based on characteristics, behavior and other information allows fine-tuning of performance and throughput to support employee productivity. It also supports application-layer content switching and rewrite to improve the availability of both servers and applications.
Intelligent, Efficient and Dynamic Link Load Balancing
Hillstone’s AX Series ADC offers enterprise-class link load balancing technology. It features an innovative adaptive link selection control algorithm that can detect link connectivity, bandwidth utilization, delay, packet loss and jitter in real time, and adjust the traffic forwarding rules based upon the actual link quality and performance. Using an intelligent closed loop, the best route can be selected in real time so that problems such as unbalanced link utilization, single point of failure, poor cross-ISP access, wastage of link resources, and other performance problems are eliminated. The Hillstone ADC supports multiple link load balancing modes such as ECMP, ISP routing, dynamic link switching, and application routing to ensure optimal link access and support employee productivity.
High-performance SSL Offload for Secured Applications
Finance, healthcare, e-commerce and other applications are commonly secured via SSL encryption, which adds workload to servers that can impact performance and limit scalability. Hillstone’s ADC supports SSL hardware acceleration technology that provides industry-leading 2048- bit SSL processing performance. By offloading SSL traffic to the Hillstone ADC’s dedicated SSL processing resources, the server workload is significantly reduced resulting in improved server performance and scalability.
Full-featured IPv6
In addition to IPv6 support, the Hillstone ADC supports IPv6 application layer transformation technology to help IPv4 websites and networks seamlessly upgrade to or interoperate with IPv6. Through intelligent link processing technology, the addressing problem can be solved efficiently. The Hillstone ADC standard configuration comes with a 1T hard drive and supports log storage for the IPv6 application layer transformation.
End-to-end Security Protection
Together with Hillstone Networks’ next-generation firewalls, Cloud Edge, Cloud Hive and other security products, the Hillstone ADC can provide end-to-end security protection capabilities from network access to data centers.
SSL Traffic Orchestration
Hillstone’s AX Series ADC provides SSL traffic orchestration function including SSL visualization, service chaining, and security device pooling, avoiding redundant encryption/ decryption to maximize security devices’ performance. With this feature set, users can easily configure SSL traffic service chains tailored to their specific business and traffic requirements. SSL traffic orchestration enables seamless scalability and enhances network elasticity, allowing organizations to adapt effortlessly to evolving demands, and effectively addressing security blind spots and mitigating single points of failure.

Features

Server Load Balancing

L4 and L7 server load balancing

HTTP content switching based on URL, HTTP header, cookie, source/ destination IP, destination port, SSL/ TLS protocol and X509 certificate
HTTP content rewriting, including external link rewriting

Redirection for HTTP requests
Supports Kubernetes

Supports IPv6
Supports HTTP2.0

Supports WebSocket protocol
Supports fast HTTP mode

Supports ISO 8353 compatible message-based load balancing
Supports RADIUS load balancing

Supports MySQL load balancing with read/write splitting
Supports node-based load balancing

Supports HTTP Strict-Transport-Security (HSTS)
Supports network mapping for visibility of relation between virtual servers , service pool, service pool members, and application servers

Supports TCP template
HTTPS virtual server supports HTTP redirection

TOA supports format customization for source address insertion and extraction
Support resetting the enabled functions when servers are down

Virtual IP route advertisement over dynamic routing
MySQL content switching based on source/ destination IP, destination port, database name, database account, and matching string

Supports clustering up to 32 devices
Supports SMTP/POP3/IMAP mail server, perform mail load balancing in three different modes: Plaintext, SSL, STARTTLS

Supports connection number and connection rate limitation per virtual server/source IP
Supports multiple certificates on a virtual server

Supports verification of certificate chain integrity
TCP Option extension supports IP version extraction and passthrough

Supports displaying context correlation of L7 VS session

Server Health Checks

Predefined and custom health checks for ICMP, TCP, TCP-Echo, TCP-Half- Open, UDP, HTTP, HTTPS, HTTP2, SMTP, POP3, IMAP, DNS, FTP, SSL, Radius-Authentication, Radius-Accounting, Websocket, WebsocketSSL, SNMP-DCA, SNMP-DCA-Base, SIP-UDP, SIP-TCP, Passive- HTTP, Passive-TCP, MYSQL, MSSQL, Oracle, OceanBase, LDAP, WMI, TiDB, TDSQL- MySQL, Gauss-MySQL, and Third-Party
HTTPS health check supports specifying TLS version, cipher suite and mutual authentication
HTTP2 health check supports correlating to SSL template for HTTP2 ciphertext detection
Supports server resource health check
Supports passive health check
Supports display and statistics of health check history
Health check logs can be delivered through SMTP and SMS

Server Session Persistence

Source/ destination IP based and TOA based session persistence
Supports session persistence for URL hash, HTTP/HTTPS, SMTP, POP3, HTTP header hash, session ID, request method, HTTP version, SIP CALL-ID, RDP, and Radius
Supports session persistence for cookie including cookie hash, cookie insertion, cookie rewriting, and encrypted cookies
Supports synchronization of session persistence table in a cluster
Supports Set-cookie encryption and decryption
Supports export of session persistence table

Application Acceleration

HTTP caching (jpg, doc, ppt, xls, html, css, js, pdf, swf, mp3, avi, flv, mp4)
TCP connection multiplexing
Supports TCP acceleration

HTTP compression (doc, ppt, xls, html, css, js)

SSL Inspection

Software SSL offload; supported versions include SSLv2, SSLv3, TLS 1.0, TLS1.1, TLS1.2, TLS1.3

SSL hardware acceleration
Predefined or customized encryption algorithms with priorities
SSL connection multiplexing

Supports SSL proxy
Works in conjunction with BDS, NIPS and WAF to identify encrypted traffic
Supports mirroring decrypted SSL traffic

SSL Traffic Orchestration

Supports SSL orchestration for inbound traffic
Supports decryption, interception and orchestration of TLS1.0, TLS1.1, and TLS1.2 traffic

Supports interception and orchestration of non-SSL traffic
Supports bypassing or dropping the in-progress traffic when security devices in the service chain fail
Supports traffic distribution to security devices

Supports health check on security devices in the service chain
Supports traffic orchestration information log
Supports statistics and display of traffic processed by security devices in the service chain, including new traffic, concurrent traffic, throughput, etc.

Link Load Balancing

Supports IP address library and ISP address library with automatic update
Policy routing supports domain name and geographic location routing

Supports configuration of link priority and minimum active links
Supports IPv6

Global Server Load Balancing

DNS server supports A, AAAA, NS, CNAME, PTR, MX, TXT, SRV
DNS server supports recursive forwarding
DNS supports transparent proxy deployment

Supports slave DNS server pool, synchronizing data from master DNS server automatically or manually
Supports DNS-over-HTTPS (DoH)
Inbound Smart DNS

Smart DNS supports IP address library, ISP address library with automatic updates, overloaded link detection and dynamic proximity load balancing
Supports clustering multiple devices
Supports monitoring of virtual server health status

DNS resolution supports white-and-black list and rate limiting control
Resource record types include A, AAAA, CNAME, MX, SRV
Supports configuring root DNS server

Supports DNSSEC
Supports Transaction Signature (TSIG)
DNS cache supports setting Time-to-Live (TTL), clearing, viewing, and tracking hit statistics

System Management

System management via Web UI, Console, Web Console, Telnet and SSH
Restful API supports

Supports Ansible for automated operation and maintenance management
Role-based authorization of administrators, auditors and operators
Access control on the administrator address for remote management

Supports Web UI administrators to bind to trust domain, and certificate authentication for administrators
Configuration for password complexity and minimum length restrictions
Supports SNTP, and synchronization of system time from multiple NTP servers

Supports multiple configuration files and configuration file backup and recovery
Supports hping, tcp dump and curl operation and maintenance tools
Support SLB objects partition for administration with different privileges

Application Identification

Application identification based on application characteristics, behavior and related information
Multi-dimensional application definitions

Thousands of application signatures
Application signature database updated in real-time

Log and Monitoring

Supports a variety of log types, including event logs, network logs, configuration logs, NAT logs, SLB logs, health check logs, etc.
Log storage in both local device and server
Email alarms and log alarms

Real-time WebUI display of system resource utilization and hardware status
Monitoring and graphical display of server load balancing status, including traffic, new connections, concurrent connections (established concurrent connections, client concurrent connections, server concurrent connections), requests per second and CPU
utilization of virtual servers; supports displaying traffic, new connections, concurrent connections, requests per second, and other historical real-time information of each real server in the server pool
Supports displaying historical information of the operational status of virtual servers, server pool members, and real servers

Supports displaying statistical information of hit per second, total hit count , and last hit time for HTTP content switching
Device status monitoring on mobile devices via CloudView
Supports forwarding SLB log, health check binary log to HSA

Supports multi-dimensional statistics and monitoring of HTTP traffic, including URL, client IP, response code, HTTP method, and user agent
Supports reporting with multiple statistics, including business processing status, load balancing data, etc.
Supports DNS traffic visualization based on domain/IP, displaying the top 10 total requests, successful resolutions, and failed resolutions

Supports displaying historical statistical data of DNS traffic for the last hour
Supports displaying top 10 users by traffic, concurrent connections, and session rate
Link Aggregation Control Protocol (LACP) supports passive mode

Supports configuration comparison

Deployment and Network Configuration

Supports DNS proxy

DNS proxy blacklist and whitelist
Deployment via one-arm reverse proxy, routing, transparent, or DSR
Supports static routing, ISP routing, policy routing, and RIP dynamic routing protocol, and supports import of ISP information

HA AP mode, supports synchronization of configuration (auto/manual), session, health checks, PKI synchronization
Policy control
VSYS

Supports AWS, Azure, Huawei Cloud and Alibaba Cloud (manual deployment only)
Supports LMS centralized authorization
Supports VMware / KVM / Xen / Hyper-V virtualization deployment

QoS
Session limiting
Supports anti-DDoS

Supports centralized management
Supports programmable script a Rules
Supports SNMP

Specifications

	SG-6000-AX120S-IN	SG-6000-AX220S-IN	SG-6000-AX320S-IN	SG-6000-AX520S-IN
L4 Throughput	3 Gbps	16 Gbps	18 Gbps	35 Gbps
L4 Connections/s	40,000	110,000	110,000	270,000
L7 HTTP Throughput	1.5 Gbps	5 Gbps	7 Gbps	10 Gbps
L7 HTTP Requests/s (RPS)	80,000	200,000	200,000	540,000
Concurrent Connections	1 Million	1 Million	3 Million	10 Million
RSA 2K SSL (CPS) (1)	200/700	600/2,200	600/2,200	1,700/6,000
RSA 2K SSL (TPS) (2)	3,500	13,000	13,500	40,000
RSA 2K SSL Throughput (3)	0.4 Gbps	1.4 Gbps	1.5 Gbps	3.5 Gbps
SSL Acceleration Technology	Hardware	Hardware	Hardware	Hardware
DNS (QPS)	19,000	39,000	40,000	95,000
Storage	480 GB SSD	480 GB SSD	480 GB SSD	960 GB SSD
Memory	4 GB	4 GB	8 GB	16 GB
Management Ports	2 × USB Ports, 1 × MGT Port, 1 × Console Port	2 × USB Ports, 1 × MGT Port, 1 × Console Port	2 × USB Ports, 1 × MGT Port,1 × HA, 1 × Console Port	2 × USB Ports, 1 × MGT Port,1 × HA, 1 × Console Port
GE Ports	8 (includes 1 pair bypass)	8 (includes 1 pair bypass)	16 (includes 2 pairs bypass)	16 (includes 2 pairs bypass)
GE Ports(SFP)	N/A	8	8	8
10GE(SFP+)	N/A	2	2	2, up to 6 with expansion module
40GE Ports(QSFP+)	N/A	N/A	N/A	0, up to 2 with expansion module
Available Slots for Expansion Modules	N/A	N/A	N/A	1
Expansion Module Option	N/A	N/A	N/A	IOC-A-4SFP+-IN IOC-A-2QSFP+-IN IOC-A-2MM-BE-IN IOC-A-2SM-BE-IN
Power Supply	Single/ Dual AC, 100-240V	Single/ Dual AC, 100-240V	Single/ Dual AC, 100-240V	Dual AC, 100-240V, redundant hot-swappable
Frequency	50/60 Hz	50/60 Hz	50/60 Hz	50/60 Hz
Average Power	50W	50W	100W	100W
Height	1U	1U	1U	1U
Dimension (W×D×H)	Single/ Dual AC, 100-240V	17.2 x 17.2 x 1.7 in (436 x 437 x 44mm)	17.2 x 17.2 x 1.7 in (436 x 437 x 44mm)	17.2 x 17.2 x 1.7 in (436 x 437 x 44mm)
Net Weight	8.6 lb (3.9 kg)	9 lb (4.1 kg)	13.2 lb (6 kg)	15 lb (6.8 kg)
Gross Weight	14.3 lb (6.5 kg)	17 lb (7.7 kg)	20.7 lb (9.4 kg)	26 lb (11.8 kg)
Operating Temperature	32-104 °F (0-40 °C)	32-104 °F (0-40 °C)	32-104 °F (0-40 °C)	32-104 °F (0-40 °C)
Storage Temperature	-40-158 °F (-40-70 °C)	-40-158 °F (-40-70 °C)	-40-158 °F (-40-70 °C)	-40-158 °F (-40-70 °C)
Allowed Relative Humidity	10-95%, non-condensing	5-85%, non-condensing	10-95%, non-condensing	10-95%, non-condensing

Specifications

	SG-6000-AX1200S-IN	SG-6000-AX2000-IN	SG-6000-AX2000S-IN	SG-6000-AX2200S-IN	SG-6000-AX3200S-IN
L4 Throughput	70 Gbps	85 Gbps	85 Gbps	85 Gbps	95 Gbps
L4 Connections/s	700,000	1 Million	1 Million	1 Million	1.2 Million
L7 HTTP Throughput	20 Gbps	40 Gbps	40 Gbps	40 Gbps	50 Gbps
L7 HTTP Requests/s (RPS)	1.4 Million	2 Million	2 Million	2 Million	2.4 Million
Concurrent Connections	20 Million	40 Million	40 Million	40 Million	40 Million
RSA 2K SSL (CPS) (1)	4,200/16,500	5,000	25,000	7,500/25,000	9,500/33,000
RSA 2K SSL (TPS) (2)	100,000	120,000	140,000	150,000	215,000
RSA 2K SSL Throughput (3)	7 Gbps	5.5 Gbps	6 Gbps	10 Gbps	12 Gbps
SSL Acceleration Technology	Hardware	Software	Hardware	Hardware	Hardware
DNS (QPS)	240,000	350,000	350,000	420,000	460,000
Storage	960 GB SSD	1TB HDD	1TB HDD	960 GB SSD	960 GB SSD
Memory	32 GB	64 GB	64 GB	64 GB	64 GB
Management Ports	2 × USB Ports, 1 × MGT Port,2 × HA, 1 × Console Port	2 × USB Ports, 1 × MGT Port,1 × HA, 1 × Console Port	2 × USB Ports, 1 × MGT Port,1 × HA, 1 × Console Port	2 × USB Ports, 1 × MGT Port,1 × HA, 1 × Console Port	2 × USB Ports, 1 × MGT Port,1 × HA, 1 × Console Port
GE Ports	8 (includes 2 pairs bypass)	2 (includes 2 MGT ports), up to 34 ports with expansion modules	2 (includes 2 MGT ports), up to 34 ports with expansion modules	8 (includes 4 pairs bypass)	8 (includes 4 pairs bypass)
GE Ports(SFP)	16	0, up to 32 with expansion module	0, up to 32 with expansion module	0
10GE(SFP+)	6, up to 10 with expansion module	0, up to 16 with expansion module	0, up to 16 with expansion module	16, up to 20 with expansion module	16, up to 20 with expansion module
40GE Ports(QSFP+)	0, up to 2 with expansion module	0, up to 8 with expansion module	0, up to 8 with expansion module	2, up to 4 with expansion module	2, up to 4 with expansion module
Available Slots for Expansion Modules	1	4	4	1	1
Expansion Module Option	IOC-AX-4SFP+-IN IOC-AX-2QSFP+-IN IOC-AX-2MM-BE-IN IOC-AX-2SM-BE-IN	IOC-AX-4GE-B-H-IN, IOC-AX-4SFP-H-IN, IOC-AX-8GE-B-H-IN, IOC-AX-8SFP-H-IN, IOC-AX-4GE4SFP-H-IN, IOC-AX-2SFP+-H-IN, IOC-AX-4SFP+-H-IN, IOC-AX-2QSFP+-H-IN	IOC-AX-4GE-B-H-IN, IOC-AX-4SFP-H-IN, IOC-AX-8GE-B-H-IN, IOC-AX-8SFP-H-IN, IOC-AX-4GE4SFP-H-IN, IOC-AX-2SFP+-H-IN, IOC-AX-4SFP+-H-IN, IOC-AX-2QSFP+-H-IN	IOC-A-4SFP+-IN IOC-A-2QSFP+-IN IOC-A-2MM-BE-IN IOC-A-2SM-BE-IN	IOC-A-4SFP+-IN IOC-A-2QSFP+-IN IOC-A-2MM-BE-IN IOC-A-2SM-BE-IN
Power Supply	Dual AC, 100-240V, redundant hot-swappable	Dual AC, 100-240V, redundant hot-swappable	Dual AC, 100-240V, redundant hot-swappable	Dual AC, 100-240V, redundant hot-swappable	Dual AC, 100-240V, redundant hot-swappable
Frequency	50/60 Hz	50/60 Hz	50/60 Hz	50/60 Hz	50/60 Hz
Average Power	289W	550W	550W	382W	382W
Height	1U	2U	2U	1U	1U
Dimension (W×D×H)	17.2 x 17.2 x 1.7 in (436 x 437 x 44mm)	21.7 x 17.3 x 3.5 in (550 x 440 x 88mm)	21.7 x 17.3 x 3.5 in (550 x 440 x 88mm)	17.2 x 17.2 x 1.7 in (436 x 437 x 44mm)	17.2 x 17.2 x 1.7 in (436 x 437 x 44mm)
Net Weight	22.5 lb (10.2 kg)	50.7 lb (23 kg)	52.9 lb (24 kg)	22.5 lb (10.2 kg)	22.5 lb (10.2 kg)
Gross Weight	32.6 lb (14.8 kg)	61.7 lb (28 kg)	63.9 lb (29 kg)	32.6 lb (14.8 kg)	32.6 lb (14.8 kg)
Operating Temperature	32-104 °F (0-40 °C)	32-104 °F (0-40 °C)	32-104 °F (0-40 °C)	32-104 °F (0-40 °C)	32-104 °F (0-40 °C)
Storage Temperature	-40-158 °F (-40-70 °C)	-40-158 °F (-40-70 °C)	-40-158 °F (-40-70 °C)	-40-158 °F (-40-70 °C)	-40-158 °F (-40-70 °C)
Allowed Relative Humidity	10-95%, non-condensing	5-90%, non-condensing	5-90%, non- condensing	10-95%, non-condensing	10-95%, non-condensing

	SG-6000-AX4060-IN	SG-6000-AX4060S-IN	SG-6000-AX6060-IN	SG-6000-AX6060S-IN
L4 Throughput	130 Gbps	130 Gbps	135 Gbps	135 Gbps
L4 Connections/s	1.5 Million	1.5 Million	17.5 Million	17.5 Million
L7 HTTP Throughput	60 Gbps	60 Gbps	70 Gbps	70 Gbps
L7 HTTP Requests/s (RPS	3 Million	3 Million	3.5 Million	3.5 Million
Concurrent Connections	40 Million	40 Million	60 Million	60 Million
RSA 2K SSL (CPS) (1)	10,000	50,000	13,000	55,000
RSA 2K SSL (TPS)(2)	170,000	190,000	260,000	260,000
RSA 2K SSL Throughput (3)	9.5 Gbps	12 Gbps	13 Gbps	15 Gbps
SSL Acceleration Technology	Software	Hardware	Software	Hardware
DNS (QPS)	500,000	500,000	500,000	500,000
Storage	1TB HDD	1TB HDD	1TB HDD	1TB HDD
Memory	64 GB	64 GB	96 GB	96 GB
Management Ports	2 × USB Ports, 1 × MGT Port,1 × HA, 1 × Console Port	2 × USB Ports, 1 ×MGT Port,1 × HA, 1 × Console Port	2 × USB Ports, 1 ×MGT Port,1 × HA, 1 × Console Port	2 × USB Ports, 1 ×MGT Port,1 × HA, 1 × Console Port
GE Ports	2 (includes 2 MGT ports), up to 34 ports with expansion modules	2 (includes 2 MGT ports), up to 34 ports with expansion modules	2 (includes 2 MGT ports), up to 34 ports with expansion modules	2 (includes 2 MGT ports), up to 34 ports with expansion modules
GE Ports(SFP)	0, up to 32 with expansion module	0, up to 32 with expansion module	0, up to 32 with expansion module	0, up to 32 with expansion module
10GE(SFP+)	0, up to 16 with expansion module	0, up to 16 with expansion module	0, up to 16 with expansion module	0, up to 16 with expansion module
40GE Ports(QSFP+)	0, up to 8 with expansion module	0, up to 8 with expansion module	0, up to 8 with expansion module	0, up to 8 with expansion module
Available Slots for Expansion Modules	4	4	4	4
Expansion Module Option	IOC-AX-4GE-B-H-IN, IOC-AX-4SFP-H-IN, IOC-AX-8GE-B-H-IN, IOC-AX-8SFP-H-IN, IOC-AX-4GE4SFP-H-IN, IOC-AX-2SFP+-H-IN, IOC-AX-4SFP+-H-IN, IOC-AX-2QSFP+-H-IN	IOC-AX-4GE-B-H-IN, IOC-AX-4SFP-H-IN, IOC-AX-8GE-B-H-IN, IOC-AX-8SFP-H-IN, IOC-AX-4GE4SFP-H-IN, IOC-AX2SFP+-H-IN, IOC-AX-4SFP+-H-IN, IOC-AX-2QSFP+-H-IN	IOC-AX-4GE-B-H-IN, IOC-AX-4SFP-H-IN, IOC-AX-8GE-B-H-IN, IOC-AX-8SFP-H-IN, IOC-AX-4GE4SFP-H-IN, IOC-AX-2SFP+-H-IN, IOC-AX-4SFP+-H-IN, IOC-AX-2QSFP+-H-IN	IOC-AX-4GE-B-H-IN, IOC-AX-4SFP-H-IN, IOC-AX-8GE-B-H-IN, IOC-AX-8SFP-H-IN, IOC-AX-4GE4SFP-H-IN, IOC-AX-2SFP+-H-IN, IOC-AX-4SFP+-H-IN, IOC-AX-2QSFP+-H-IN
Power Supply	Dual AC, 100-240V, redundant hot-swappable	Dual AC, 100-240V, redundant hot-swappable	Dual AC, 100-240V, redundant hot-swappable	Dual AC, 100-240V, redundant hot-swappable
Frequency	50/60 Hz	50/60 Hz	50/60 Hz	50/60 Hz
Average Power	550W	550W	550W	550W
Height	2U	2U	2U	2U
Dimension (W×D×H)	21.7 x 17.3 x 3.5 in (550 x 440 x 88mm)	21.7 x 17.3 x 3.5 in (550 x 440 x 88mm)	21.7 x 17.3 x 3.5 in (550 x 440 x 88mm)	21.7 x 17.3 x 3.5 in (550 x 440 x 88mm)
Net Weight	50.7 lb (23 kg)	52.9 lb (24 kg)	50.7 lb (23 kg)	52.9 lb (24 kg)
Gross Weight	61.7 lb (28 kg)	63.9 lb (29 kg)	61.7 lb (28 kg)	63.9 lb (29 kg)
Operating Temperature	32-104 °F (0-40 °C)	32-104 °F (0-40 °C)	32-104 °F (0-40 °C)	32-104 °F (0-40 °C)
Storage Temperature	-40-158 °F (-40-70 °C)	-40-158 °F (-40-70 °C)	-40-158 °F (-40-70 °C)	-40-158 °F (-40-70 °C)
Allowed Relative Humidity	5-90%, non-condensing	5-90%, non-condensing	5-90%, non-condensing	5-90%, non-condensing

Specifications: Virtual Appliance

	SG-6000-AX02-IN	SG-6000-AX04-IN	SG-6000-AX08-IN	SG-6000-AX12-IN
CPU	2 Core	4 Core	8 Core	12 Core
HDD (min., max.)	20 GB, 1 TB	20 GB, 1 TB	20 GB, 1 TB	20 GB, 1 TB
Memory	4 GB	8 GB	16 GB	24 GB
Maximum Interfaces	10	10	10	10
L4 Throughput (KVM SRIOV)	5 Gbps	10 Gbps	20 Gbps	30 Gbps
L4 Throughput (Virtio)	2 Gbps	2 Gbps	2 Gbps	2 Gbps
L7 HTTP Throughput (KVM SRIOV)	4 Gbps	7.5 Gbps	15 Gbps	22 Gbps
L7 HTTP Throughput (Virtio)	2 Gbps	2 Gbps	2 Gbps	2 Gbps
L4 Connections/s	120,000	160,000	400,000	550,000
L7 HTTP Connections/s	60,000	150,000	300,000	450,000
Concurrent Connections	1 Million	3 Million	6 Million	9 Million
ECDHE RSA 2K SSL (CPS) (KVM SRIOV)	700	1,500	4,000	6,500
ECDHE RSA 2K SSL (CPS) (Virtio)	700	700	700	700
ECDHE RSA 2K SSL (TPS) (KVM SRIOV) (2)	10,000	20,000	55,000	85,000
ECDHE RSA 2K SSL (TPS) (Virtio)	9,500	9,500	9,500	9,500
ECDHE RSA 2K SSL Throughput (KVM SRIOV) (3)	900 Mbps	1.5 Gbps	4 Gbps	4.4 Gbps
ECDHE RSA 2K SSL Throughput (Virtio)	800 Mbps	800 Mbps	800 Mbps	800 Mbps

Module Options

Module	IOC-AX-4GE-B-H-IN I	IOC-AX-4SFP-H-IN	IOC-AX-8GE-B-H-IN	IOC-AX-8SFP-H-IN	IOC-AX-4GE4SFP-H-IN	IOC-AX-2SFP+-H-IN
I/O Ports	4 × GE Bypass Ports	4 × SFP Ports	8 × GE Bypass Ports	8 × SFP Ports	4 × GE and 4 × SFP Ports	2 × SFP+ Ports
Dimension	1U (Occupies 1 generic slot)	1U (Occupies 1 generic slot)	1U (Occupies 1 generic slot)	1U (Occupies 1 generic slot)	1U (Occupies 1 generic slot)	1U (Occupies 1 generic slot)
Weight	0.33 lb (0.15 kg)	0.33 lb (0.15 kg)	0.55 lb (0.25 kg)	0.55 lb (0.25 kg)	0.55 lb (0.25 kg)	0.33 lb (0.15 kg)

Module	IOC-AX-4SFP+-H-IN	IOC-AX-2QSFP+-H-IN	IOC-A-4SFP+-IN	IOC-A-2QSFP+-IN	IOC-A-2MM-BE-IN	IOC-A-2SM-BE-IN
I/O Ports	4 × SFP+ Ports	2 x QSFP+ Ports	4 × SFP+, SFP+ module not included	2 × QSFP+	4 × SFP, MM bypass (2 pairs of bypass ports)	4 × SFP, SM bypass (2 pairs of bypass ports)
Dimension	1U (Occupies 1 generic slot)	1U (Occupies 1 generic slot)	1U	1U	1U	1U
Weight	0.44 lb (0.2 kg)	N/A	2.09 lb (0.96 kg)	2.09 lb (0.96 kg)	2.09 lb (0.96 kg)	2.09 lb (0.96 kg)

NOTES:

The data of AX120S-IN/AX220S-IN/AX320-IN/AX520S-IN/AX1200S-IN/AX2200S-IN/AX3200S-IN can be increased to 700/2,200/2,200/6,000/16,500/25,000/33,000 with SSL license;

In the test, Transaction Per TCP Connection uses Maximum Possible;
The RSA key length is 2048Bit, and the encryption suite is AES256-SHA256;

Documents / Resources

Hillstone AX-Series Application Delivery Controller [pdf] Instruction Manual
AX120S-IN, AX220S-IN, AX320S-IN, AX520S-IN, AX1200S-IN, AX2000-IN, AX2000S-IN, AX2200S-IN, AX3200S-IN, AX4060-IN, AX4060S-IN, AX6060-IN, AX6060S-IN, AX-Series Application Delivery Controller, AX-Series, Application Delivery Controller, Delivery Controller, Controller

References

User Manual