DATASHEET

Virtual Traffic Manager

Highlights■ Provides an application delivery andload balancing solution purpose-built forhigh performance Network Functions
Virtualization (NFV).
■ Uniquely customizable, with comprehensive

RESTful APIs for service management, andTrafficScript, a powerful data plane scripting
technology.
■ Unmatched scale and performance, able

Key features■ Intelligent load balancing.

As application environments become more complex,■ Application acceleration.

more distributed, and more virtualized, enterprises■ Dynamic content caching.

need a broader set of tools to solve performance■ SSL and compression offload.

problems for their web-based services.

■ Kubernetes Ingress Controller

Ivanti Virtual Traffic Manager is a software-based■ Service-level monitoring.

application delivery controller (ADC) designed to■ Global load-balancing.

deliver a faster, high-performance user experience,■ Bandwidth management.

with more reliable access to public websites andto scale up with the latest generation of■ Cloud bursting and balancing.

multi-core CPUs, and scale out with N+M■ Service automation using REST API.

clustering for reliability and throughput.

■ NFV Appliance for Application Delivery.

ivanti.com

Take control of your applications

enterprise applications, whether they run in a public
cloud, private cloud or virtualized environment, while
maximizing the efficiency and capacity of web andapplication servers.

Deliver fast, secure, and available
applications

How Ivanti Virtual Traffic Manager works

Web traffic is rarely constant: it has peaks and valleys

processes application traffic with full payload inspectionthat can make it difficult to plan for future businessand streaming. As requests are received, a range of

growth. The Ivanti Virtual Traffic Manager is a unique,optimization techniques ensures that requests are

high-performance software solution that’s mobile,

presented in the most appropriate manner to the web

flexible and scalable. It allows cost-effective scale

and application servers. Responses from the application

capacity and the ability to move between hardware

can be compressed, cached, and returned to the client atand deployment platforms as required. It also reduces

optimum speed, while freeing up resources on the server.

the strain placed on application infrastructure with

Built-in TrafficScript software controls how individual

network-level buffering, protocol optimizations andrequests are optimized, routed, and transformed. Traffic

application-specific measures such as dynamic

management rules may also be created using Javacompression and caching. The result is reduced

extensions.

latency, increased capacity, improved availability, andoptimized service levels for each end user.

Accelerate, optimize, and secure yourapplications■ Accelerate and enhance applications, leading

to improved customer satisfaction and higher
productivity.
■ Reduce costs with flexible capacity management,

and scale applications up or down to meetchanging traffic demands.
■ Take advantage of cost benefits of using cloudtechnologies, while retaining the performance andsecurity.
■ Protect applications against external threats andnetwork attacks and resolve application problems
and vulnerabilities.
■ Roll out new applications and services up to 10x

faster than traditional ADC solutions.

The Ivanti Virtual Traffic Manager inspects and

The Ivanti Virtual Traffic Manager includes a web-based
administration interface that provides powerful real-timeand analysis and history for traffic across Ivanti Virtual
Traffic Manager clusters. Alternatively, REST, SOAP and
SNMP interfaces can be used to integrate the solution
into remote management and event monitoring
frameworks for automation of ADC deployment,
configuration and integration with customer
self-service portals.

Reliable support options
Ivanti Essential Support■ Provides 24×7 access to Ivanti Technical Support

expertise, reducing time to resolution.
■ Provides unmatched expertise in data center

networking to optimize network performance.
■ Simplifies management through online technicalsupport tools.

Virtual Traffic Manager | DATASHEET

2

Bring new services to market faster
ADCs are an important part of the modern application
platform. They provide key functionality such as
security, centralized authentication, rate shaping
and queuing, and content modification to support
applications. They also support operations such as
the gradual introduction of new servers, session
upgrades between application generations, and A/B
testing. Their monitoring and debugging capabilities
also help deliver reliable applications with predictableperformance.
The Ivanti Virtual Traffic Manager includes
TrafficScript scripting software, which provides
fine-grained control over how traffic is managed.
TrafficScript is designed with application developers
in mind, making it far more efficient and easier to use
than traditional network or event-based solutions. The
Ivanti Virtual Traffic Manager also provides graphicalanalysis and management tools to give control overFigure 1. The advanced capabilities in the Ivanti Virtual Traffic Manager can be enhanced using
TrafficScript or Java extensions.

the complete ADC infrastructure.

Virtual Traffic Manager | DATASHEET

3

Feature summary

Advanced Edition features

Session persistence

Ivanti vADC is available in two key feature tiers, theLoad balancing

Ensures all requests from a client go to the same

Advanced Edition and Enterprise Edition.

The Ivanti Virtual Traffic Manager can use a wide

Advanced Edition:
Includes the most common load balancing capabilities,
including SSL/TLS offload, session persistence,service level monitoring, simple TrafficScript Rule
Builder, and support for IPv6 and HTTP/2; andincludes capabilities such as Global Load Balancing,Route Health Injection, and customization using Ivanti’s
powerful TrafficScript scripting language and Javaextensions.

variety of algorithms and techniques and balanceload based on different criteria (e.g., can send moreserver, enabling application data to persist throughout
a session without using cookies (e.g., an e-commerce
shopping basket).

requests to higher spec machines). Servers can be

Health monitoringdrained for easy maintenance and uninterrupted

Monitor the health and correct operation of servers

service. The client never has to see a server fail.

HTTP/2 support
Faster web pages with support for HTTP/2
connections. HTTP/2 is a significant enhancement
to the HTTP/1.1 standard: Traffic Manager canwith built-in and custom checks. Detect failures ofservers and errors in applications, and route traffic
away from these servers so that the performanceof the application is not compromised, and the user
experience is maintained.

Enterprise Edition:

automatically negotiate an HTTP/2 connection with

Simple TrafficScript RuleBuilder

Adds premium Layer 7 services such as Web Content

the client web browser, which may improve web

Define rules to control applications with the

Optimization (WCO), Web Application Firewall (WAF)

page load time with techniques such as connection

and FIPS compliance.

sharing, page request multiplexing and header
compression. For even more advanced HTMLand web content optimization, the optional Ivanti
Web Accelerator add-on module is available tographical user interface to create traffic rules andpolicies. Click and choose from drop-down menus tocreate simple conditions and actions.

create custom optimization profiles for individual

SSL/TLS offload

applications.

Off-loading SSL/TLS key exchanges and decryption

Content routing
Use the Ivanti Virtual Traffic Manager to apply
business policies to each request for custom routing
decisions, applying HTTP pool selection routing
based on L7 attributes such as URL and hostname.
Figure 2. Powerful application management and visibility
tools give users full control over the ADC environment.

TrafficScript Rule Builder, using an easy-to-use

Content inspection allows rapid web changes suchto the Traffic Manager frees up the back-end servers
to use their full resources for generating content
and responding to user requests. Decryption on theIvanti Virtual Traffic Manager allows for deep packet
inspection. Content can be re-encrypted for secure
forwarding of requests to the back-end infrastructure.

as the insertion of marketing tags, branding changes,
and dynamic watermarking, procedures that may bedifficult to achieve by modifying the application itself.
Virtual Traffic Manager | DATASHEET4HTTP compression

HTTP caching

Service level monitoring

The Ivanti Virtual Traffic Manager can compress

The Ivanti Virtual Traffic Manager can store copies

The Ivanti Virtual Traffic Manager monitors thecontent returned to the client rather than have thatof frequently-requested data on the Traffic Manager

performance of a service or application and can issue

workload undertaken by the back-end servers.

rather than the back-end servers, freeing them up

an alert if it falls below a pre-determined level, such as

Compression of content can result in bandwidth being

to deliver newly requested content. This can reducegoing out of scope of an SLA.

used more efficiently. Offloading this workload fromthe need for additional servers as traffic grows andthe back-end servers can enable it to serve requests

speed up the response to end user requests.

faster.

Event handling and action system

Autoscaling

TrafficScript
TrafficScript is a sophisticated programming language
integrated within the core of Traffic Manager that

Ensure reliable application service delivery byenables high performance and highly-configurable

Configure appropriate responses for key infrastructure

automatically managing traffic changes in real time,

control of traffic management policies. TrafficScript

events, including email and SNMP alerts, syslog

distributing traffic among a pool of virtual servers.

rules can control all aspects of how traffic is managed

logging and custom user supplied scripts.

It can orchestrate the provisioning and rightsizing

and can choose when and where to apply request rateof applications, helping to migrate traffic acrossshaping, bandwidth shaping, routing, compression,

multiple virtual and cloud platforms.

and caching to prioritize the most valuable users andService protection
The Ivanti Virtual Traffic Manager can enforce an IP
allow/deny list and limit the number of connections toBandwidth management

deliver the best possible levels of service.

XML parsing

a service. It can also enforce rules on HTTP content

You can limit the total bandwidth (kbits/ sec) a set(e.g., enforce RFC compliance) and help protect

of connections can use, which can be used to stop

It can also help parse complex XML data using XPathagainst malicious attacks such as Denial of Service.

a popular site or application taking up so muchin order to make informed routing decisions based

bandwidth that other sites or applications becomeon embedded content. Also includes supports for theunavailable. This can enable service providers to

offload and acceleration of the translation between

enforce access limits based on criteria such as

XML variants via XSL Transformations (XSLT).

Activity graphs
The Ivanti Virtual Traffic Manager measures
performance and load and gives a graphicalrepresentation of the results, which can identify
bottlenecks and identify where and when high loading

account type or location.

Rate shaping

Java extensions
Java extensions can be used to re-use existing code

occurs, which can be useful for identifying future

The Ivanti Virtual Traffic Manager can restrict thelibraries to implement business policies. You can

upgrade needs.

number of requests (per min or sec) to a service,

write rules in any language that can target the JVM,

from either all or a set of clients. This can stop a

including Java, Python, Ruby, and many others. You

small group of intensive users (including spiders)

can use third party libraries and invoke business rules

hogging a service, leading to a poor user experienceagainst specific transactions.

for all users.

Virtual Traffic Manager | DATASHEET

5Multi-site capable

Route health injection

per FIPS 140-2 implementation guidance section g.5

Deploy services across multiple sites with location-

Route health injection (RHI) helps to maintain service

guidelines, to support deployments that require FIPS

specific configuration and simplify the management ofavailability and low-latency networking by providing

140-2 level 1 compliance.

services from multiple datacenter locations.

rapid service redirection to alternate service hosts.

Architectural features

Advanced session persistenceEnterprise Edition features

Ensures all requests from a client go to the same

Web accelerator express

common architectural benefits:

Simple content optimization to accelerate

Scalability

server, enabling application data to persist throughout
a session without using cookies (e.g., an e-commerce
shopping basket). In addition to session persistence
based on IP addressing, advanced persistencemechanisms can be leveraged via TrafficScript,
including Named Node and Universal Persistence
techniques.

Global load balancing
Improve service availability by automatically failingover to an alternative data center or cloud deployment
in the event of a catastrophic failure. Improve service
performance by performance-sensitive load balancing
and location-based traffic routing.

Kubernetes Ingress Controller
Specialized load balancer for applications deployedin Kubernetes environment. Reduces application
traffic routing complexity for nodes inside Kubernetes
cluster environments. Handles SSL authentication

the delivery of most web pages, requiring no
configuration or tuning.

Web accelerator
Advanced Web Content Optimization (WCO)
technologies, to accelerate page load times up
to 4x for HTML applications, including Microsoft
SharePoint, content management systems and cloud
applications. WCO profiles can be customized foreach application.

and vertically very easily, across IT environments anddifferent forms of infrastructure, ensuring that it canalways scale up to match and support demand for an
application or a service.

Clustering
The Ivanti Virtual Traffic Manager has unmatched scale
and performance and can scale up with the latest
generation of multi-core CPUs and scale out with N+M
clustering for reliability and throughput.

A scalable Layer-7 web application firewall (WAF) to

RESTful control API

apply business rules to your online traffic, inspectand block attacks such as SQL injection and crosssite scripting (XSS), and help achieve compliancewith PCI-DSS and HIPAA and other regulatory
demands.

Enterprise authentication

workloads for Kubernetes environments. Improved

Support for authentication services such as SAML

Kubernetes clusters.

The Ivanti Virtual Traffic Manager can scale horizontally

Web application firewall

and termination for application traffic and reduces
security posture for applications hosted in

In addition, all Ivanti vADC models have the following

SP, OAuth 2.0 and Kerberos Constrained Delegation.

FIPS
Embedded FIPS 140-2 level 1 cryptographic module

Allows the Ivanti Virtual Traffic Manager to be configured
and controlled by a third-party application and simplifies
administration of large/ complex configurations. The
control API enables configuration changes to be
automated (e.g., in response to an event).

Maximizing investments
To help optimize technology investments, Ivanti andits partners offer complete solutions that include
professional services, technical support, and education.
For more information, contact an Ivanti sales partner orvisit ivanti.com.
Virtual Traffic Manager | DATASHEET

6

Ivanti Virtual Traffic Manager specifications
Model

Ivanti VTM bandwidth options

Throughout

50 Mbps 400 Mbps 1 Gbps 3 Gbps 5 Gbps

SSL/TLS TPL

Uncapped

Functionality

Advanced or Enterprise

Deployment model

Software, Virtual Appliance, Bare Metal image or BYOL on cloud platforms

License style

Perpetual or subscription

10 Gbps

20 Gbps

40 Gbps

80 Gbps

Virtual Traffic Manager | DATASHEET

7

Ivanti Virtual Traffic Manager functionality matrix
Functionality

Advanced Edition

Enterprise Edition

Community Edition 10 Mbps limit

Ivanti vTM

Y

Y

Y

Ivanti Services Director

Y

Y

Load balancing

Y

Y

Y

HTTP/2 support

Y

Y

Y

Content routing

Y

Y

Y

Health monitoring

Y

Y

Y

Simple TrafficScript Rule Builder

Y

Y

Y

SSL/TLS offload

Y

Y

Y

HTTP compression

Y

Y

Y

Event and action system

Y

Y

Y

Service protection

Y

Y

Y

Activity graphs

Y

Y

Y

HTTP caching

Y

Y

Y

AutoscaleYYYXML parsing

Y

Y

Y

Bandwidth management

Y

YY
Virtual Traffic Manager | DATASHEET

8

Functionality

Advanced Edition

Enterprise Edition

Community Edition 10 Mbps limit

Rate shaping

Y

Y

Y

Service level monitoring

Y

Y

Y

Traffic script

Y

Y

Y

Java extensions

Y

Y

Y

Multi site manager

Y

Y

Y

Global load balancing

Y

Y

Y

Route health injection

Y

Y

Y

Kubernetes Ingress Controller

Y

Y

Y

Web accelerator

YY

Web accelerator expressYY

Web application firewall

Y

Y

Enterprise authentication

YY

Ivanti Virtual Traffic Manager Licenses
License Type

Purpose

Performance

SupportDuration

Cost

Community Edition

Production

10 Mbps – Up to 4 cluster nodes

No support plan

Perpetual

No CostProduction license

Production

As licensed

Support and updates

Perpetual or subscription

Per device

Virtual Traffic Manager | DATASHEET

9Community Edition
Licensing feature

Description

Functional capabilities

Ivanti Virtual Traffic Manager, full functionality, limited to 4 cluster nodes

Licensed performance

10 Mbps limited throughout

Deployment

Multiple servers or virtual machines

Validity

Perpetual

SupportNo support is available for the Community Edition

Resources and documentation are available via the Ivanti Community

Production licenses
Licensing feature

Description

Functional capabilities

As licensed

Licensed performance

From 50 Mbps throughput to 80Gbps for perpetual licenses, more possible using Ivanti Services Director

Deployment

On single system, bound to IP or MAC address

Validity

Perpetual or subscription

SupportSoftware updates and technical support

Production licenses may be used for any purposes, but only on a single system. All licenses are subject to the Ivanti Secure End-User License Agreement.

Virtual Traffic Manager | DATASHEET

10

Additional notes
Licensing feature

Production license keys

Evaluation license keys

Description
Production license keys may be used for any purposes, but only on a single system. Production license keys may be obtained from your Ivanti partner. All types oflicense keys are subject to the Ivanti End User License Agreement for Ivanti Virtual Traffic Manager, which can be found at https://www.ivanti.com.
Evaluation license keys may be used to process production traffic during the limited evaluation period. 30-day evaluation licenses are available on request from yourIvanti sales representative.
If a Traffic Manager instance does not have a valid license key, then it will run as a “Community Edition.” This enables all of the functionality of Ivanti Traffic Manager but
imposes a performance limit of 10 Mbps throughput, and a cluster limit of four nodes.

Community edition

Ivanti Traffic Manager software and virtual appliances can be used without a license key (running as the ‘Community Edition”) so that they can be used in test anddevelopment environments to facilitate the creation and testing of production services. The community Edition may be used in a production environment, up to thepermitted performance limit. There is no charge for using the Community Edition, and Ivanti does not provide technical support.

Perpetual licenses

Subscription licenses

Perpetual licenses provide a perpetual (non-expiring) license key that may be used on one server. Support and software upgrades are not included with a perpetual
license, and require payment of an annual support fee.
Subscription licenses allow you to use the software for a period of time (the “term”) and oblige you to pay a periodic subscription fee (monthly) for that term.
Subscription licenses include support and maintenance.
Production licenses include a performance rating which specifies the maximum capacity of the software. The performance rating applies to outgoing bandwidth.
Bandwidth capacity is applied to outgoing traffic only, after content compression, and is applied per instance of Ivanti Virtual Traffic Manager. It limits the speed atwhich the Ivanti Virtual Traffic Manager reads data from the backend server nodes. If the capacity limit is reached, then outgoing traffic may be delayed momentarily.

Performance bands

Connections are serviced in a fair manner.
Connections will not be dropped unless outbound traffic greatly exceeds the bandwidth capacity for a sustained period of time, when no data can be transmitted
before the client or server timeouts expire. The host hardware must be adequately specified in order to deliver the desired performance.
Client software (web browsers) and server software (e.g. web or application servers) both impose timeouts for connections. If a connection is idle for longer than the

When are requests discarded or timed out?

timeout period, it is closed. Under heavy, sustained load, responses are processed in a fair manner and partial responses are delivered to ensure that all connections
are serviced equally. This means that connections are rarely idle for long periods of time when there is data waiting to be written, so connections are very unlikely to beclosed down prematurely due to the bandwidth shaping.

Virtual Traffic Manager | DATASHEET

11

Licensing feature

Description
Evaluation licenses do not restrict performance, and may be used for short periods on production sites to gauge performance requirements. You can determine how muchtraffic an existing service is processing using the historical activity graphs, current data from the activity charts, and data available via SNMP and SOAP.

Which performance band should I choose?

The historical activity charts record bandwidth smoothed over 5-minute periods; you should add a margin of 50 to 100 percent for traffic spikes. When you run with aperformance-based license, the Ivanti Virtual Traffic Manager software will log a warning and raise an alert to inform any time that it is necessary to limit the performance.
Traffic is queued, so your end users will experience a momentary slowdown in your service. You can then upgrade to a higher-capacity license if necessary.
Evaluation software may only be used for non-production use:

What is “non-production” use?

■ “Non-production” use includes development, temporary testing, internal training, and proof-of-concept purposes.
■ “Production” use includes any purposes which could be regarded as “business-critical;” public Internet and internal intranet services, services that take live traffic,
permanent replicas of production sites, permanent benchmarking and load testing environments, and any other services that are run on a commercial basis or forcommercial gain.
Perpetual licenses do not expire. Other licenses issued by Ivanti will have an expiration date. Once the expiration date has passed, the software will revert to running asa Community Edition software, with bandwidth limits and other applicable restrictions. Ivanti Virtual Traffic Manager software raises warnings and alerts well in advanceof expiration, and if a license with an expiration date is used in production, customers should configure the Ivanti software to email these warnings to an appropriate

What happens when a license expires?

account.
The zero-cost licenses that Ivanti issues for non-production use can continue to be used at no cost unless Ivanti has terminated the relevant license or developer
program.
Production licenses may be deployed on a single nominated host system only. To this end, they contain either an IP address or a MAC address that identifies the host

What does “bound to IP address/MAC

system, and will only operate on a host with a matching address.

address” mean?
Technical workarounds to deploy the license simultaneously on two or more host systems are in breach of the End-User License Agreement.
Production licenses may be transferred between host machines, operating systems and platforms at no charge. Please request an “IP Address Change” form from yourUpgrading and transferring licenses

Ivanti support contact. Production licenses may be upgraded to increase performance capacity or unlock additional features – license upgrades are seamless and do not
require a software restart.

Virtual Traffic Manager | DATASHEET

12

System requirements
Ivanti Virtual Traffic Manager Software and Virtual Appliances
SoftwareLinux x86_64: Kernel 2.6.32 – 4.4, glibc 2.12+ - For Route Health Injection: ncurses 5 (libncurses.so.5, libtinfo.so.5)

Containers

Docker: 1.13.0 or later recommended
VMware vSphere 6.0, 6.5, 6.7
XenServer 7, 7.1, 7.5, 7.6 Microsoft Hyper-V Server

Virtual appliances
Microsoft Hyper-V under Windows Server
QEMU/KVM (RHEL/CentOS 6.x, 7.x; Ubuntu 14.04, 16.04, 18.04)
Amazon EC2 - as a virtual appliance or native software install Microsoft Azure - as a virtual appliance
Cloud platforms
Google Compute Engine - as a virtual appliance or native software install
Physical appliances

Bare Metal Server - for information on qualified servers, see the Ivanti vTM Hardware Compatibility List at https://www.ivanti.com

Recommended hardware: CPUIntel Xeon / AMD Opteron

Recommended hardware: Minimum memory

2GB (Minimum 2xCPU and 3GB for DPA mode)

Recommended hardware: Minimum disk space

10GB (software) or 16GB (virtual appliance)

Virtual Traffic Manager | DATASHEET

13

About Ivanti
Ivanti makes the Everywhere Workplace possible. In
the Everywhere Workplace, employees use myriad
devices to access IT networks, applications and data
to stay productive as they work from anywhere. The
Ivanti automation platform connects the company’s
industry-leading unified endpoint management, zerotrust security and enterprise service management
solutions, providing a single pane of glass forenterprises to self-heal and self-secure devices, andself-service end users. More than 40,000 customers,
including 78 of the Fortune 100, have chosen Ivanti todiscover, manage, secure and service their IT assets
from cloud to edge, and deliver excellent end user
experiences for employees, wherever and however
they work. For more information, visit ivanti.com

Copyright © 2021, Ivanti. All rights reserved. IVI-2528 09/29 JP

ivanti.com
1 800 982 2130
sales@ivanti.com