CONFIDENTIAL 1

SAP

“Reference architecture for SAP HTTP and SAP GUI Landscapes”

SAPPartnership@f5.com
 CONFIDENTIAL 2

SAP Core Deployment Applications

In a basic SAP Landscape clients make direct connections from SAP GUI or a
web browser to SAP instances.

SAP GUI and Web Clients

SAP Enterprise SAP Composite SAP EIS and

Portal J2EE, WebDynPro ECC Servers
Intranet or WAN
User Send Traffic Business
Server Response Traffic Warehouse
 CONFIDENTIAL 3

SAP with Web Dispatcher

In a software load balanced SAP Landscape, high availability is achieved when SAP clients
connect directly with Web Dispatcher and then are load balanced to the back-end
Portal Servers.

Firewall/connection manager

Configuration:
1.  Manual
2.  Retrieve from SAP SAP GUI and Web Clients
Message Server

Load balancing:
1.  Round-robin (weighted)
2.  Load-based
3.  Use information from SAP SAP
Message Server
DMZ Message Server
High availability: SAP Router
1.  Check individual Web AS
instances
2.  Use information from SAP
Message Server Single Point of Failure

Security:
Web Dispatcher
1.  SSL Termination
2.  SSL Termination and re-
encryption

Persistence:
1.  Source IP
2.  Cookie

SAP Enterprise SAP Composite SAP EIS and

Intranet or WAN
Portal J2EE, WebDynPro ECC Servers
SAP State Information
User Send Traffic Business
Server Response Traffic Warehouse
 CONFIDENTIAL 4

SAP Web Dispatcher with failure

In a software load balanced SAP Landscape, high availability is achieved when SAP clients
connect directly with Web Dispatcher and then are load balanced to the back-end Portal Servers.
Since the updated information of the SAP landscape is achieved by pulling/pushing a multi-tier
landscape you will have large delays in updating the Web Dispatcher with Portal status.

SAP GUI and Web Clients

SAP Web Dispatcher will continue to send traffic
to all servers until SAP Message Server updates
Web Dispatcher.

SAP
DMZ Message Server
SAP Router
1.  Message Server queries SAP Portal TCP50000
2.  Message Server queries SAP Portal TCP50200
3 3.  Message Servers updates Web Dispatcher
Single Point of Failure 4
4.  Web Dispatcher removes Portal Server from LB

Web Dispatcher

1
2

Client traffic will be load balanced to available

Portal Servers using round robin only.

SAP Enterprise SAP Composite SAP EIS and

Intranet or WAN
Portal J2EE, WebDynPro ECC Servers
SAP State Information
User Send Traffic Business
Server Response Traffic Warehouse
 CONFIDENTIAL 5

Web Dispatcher
  Protocols supported
–  HTTP based protocols

  Persistency detection
–  Client IP based
–  SAP Web AS specific (ABAP and J2EE)
–  External Session ID

  Load Balancing
–  Static Round Robin
–  Weighted Round Robin

  Dynamic load balancing

–  Client IP-address based

  Security
–  SSL offload

  Performance
–  Optimized, Lazy HTTP parser
–  HTTP proxy cache in Web Dispatcher
–  File Access for static content
 CONFIDENTIAL 6

Deploying a new system

  SAP - Comparison of LB (Hardware/Software)

Source: SAP
 CONFIDENTIAL 7

SAP Portal with f5 Load Balancing

In a hardware load balanced SAP Landscape, high availability, security, acceleration, health monitoring,
and intelligent session persistence can be achieved. When an SAP client makes a direct connection with
f5’s BIG-IP Local Traffic Manager, they are intelligently load balanced to only available backend services.

1.  Monitoring of Portal servers with real HTTP GET/

2.  JSession or Cookie persistence
3.  SSL Offload
4.  WAN and LAN Optimization
5.  Active/Standby Solution SAP GUI and Web Clients
6.  Traffic Flow Modification
7.  One Connect

DMZ Shared Virtual IP

Session Mirror

BIG-IP Local Traffic Manager checks health

of each Portal Server, and all failed services
will be removed and logged on the Load
Balancer. Web Dispatcher SAP Router
SAP
Message Server

SAP Enterprise SAP Composite SAP EIS and

Intranet or WAN
Portal J2EE, WebDynPro ECC Servers
SAP Health Monitor
User Send Traffic Business
Server Response Traffic Warehouse
 CONFIDENTIAL 8

F5 BIG-IP Local Traffic Manager

  Protocols Profiles supported
–  TCP
–  UDP
–  SIP
–  RTSP
–  Others

  Persistency detection
–  Client IP based
–  Cookie
–  JSession
–  External Session ID
–  iRules

  Load Balancing
–  Round Robin Static /Weighted
–  Ratio
–  Least Connection
–  Observed
–  Predictive
–  Fastest (Application)
–  Dynamic Ratio
–  CPU through SNMP
–  Etc..

  Performance
–  Optimized, WAN & LAN
–  HTTP Full proxy
–  RAMCache

  Security
–  SSL offload and End-To-End SSL
 CONFIDENTIAL 9

F5 and SAP documents

  F5 Website “F5’s SAP solution center”
–  http://www.f5.com/sap

  SAP Website “SAP’s EcoHub”

–  https://ecohub.sdn.sap.com/irj/ecohub/solutions?query=f5