Fortinet Inc: Yahoo! JAPAN Deploys Fortinet High-Performance Firewalls for Content Delivery Network Platform

FortiGate-3700D secures traffic-heavy data centers in Kanto and Kansai

Sunnyvale, Calif., September 29, 2014 – Fortinet® (NASDAQ: FTNT) − a global leader in high-performance network security – today announced that Yahoo! JAPAN Corporation (here after Yahoo! JAPAN) has deployed Fortinet’s FortiGate-3700D high-performance data center firewalls for the content delivery network (CDN) platform in Yahoo! JAPAN’s data centers.

With a newly built CDN and servicing infrastructure, Yahoo! JAPAN had to be ready for a growing mobile access coming from smartphones and tablets. They placed cache servers at the Internet ingress and egress points in their data centers in Kanto (Eastern region) and Kansai (Western region), which enables their CDN to efficiently distribute content to users. By distributing user access among multiple cache servers, Yahoo! JAPAN provides fast response times and reducing the system load.

Yahoo! JAPAN had been operating their CDN across both data centers, supporting an aggregated bandwidth of 40Gbps. They also use a portion of the service infrastructure to support other initiatives, such as Yahoo! JAPAN News and Auction. However, Yahoo! JAPAN decided to build a new CDN to cope with the rapid spread of smart devices and the increase in traffic volume and session/connection numbers driven by rich content, such as videos and pictures. In addition to network devices, such as switches and routers that make up the core of the new CDN, a review began in the autumn of 2013 to introduce firewalls.

To handle the growing traffic, they decided to build a high bandwidth network of 200Gbps for the new CDN—five times larger than the previous CDN. Yahoo! JAPAN required a high performance firewall that wouldn’t act as a bottleneck while it protected the network. When selecting their firewall, they looked for a product with a processing capacity of 800K cps (connections per second) without losing traffic logs. Yahoo! JAPAN needed a firewall that could efficiently process the massive connections and manage the logs resulting from large-scale events, such as the Soccer World Cup. They wanted to make the CDN secure by having traffic visibility through logs and analyzing security event logs. In addition, due to the space restrictions within the data center, they required a firewall with a minimal footprint and low energy consumption. After having compared and reviewed firewalls from multiple vendors, they decided on Fortinet’s FortiGate-3700D high-performance firewall.

Fortinet’s FortiGate-3700D has multiple Gigabit high-speed interfaces. There are four 40Gb Ethernet ports, and 28 10Gb Ethernet ports. The unit can provide up to 160Gbps firewall throughput and can process 200K cps without losing traffic logs. It uses the latest purpose-built FortiASIC NP6 Processor that offers performance parity between IPv4 and IPv6 traffic.

To achieve the required 800K cps, Yahoo! JAPAN built a CDN system with four sets of eight units of the FortiGate-3700D in both the Kanto and Kansai data centers. This configuration made possible high-speed throughput and connection processing by allocating 80Gbps both uplink and downlink with the core switch.

“FortiGate-3700D performs exactly as we expected,” said Shinji Yoshinaga, Manager, Network Security, Infrastructure Engineering Department, Site Operations Division, Yahoo! JAPAN Corporation. “It is a highly cost-effective product that allows us to be ready for IPv6. I am looking forward to Fortinet’s future product lineup of high-performance data center firewalls enabling 100Gbps.”

“We are honored that Yahoo! JAPAN selected Fortinet to secure their CDNs,” said Norio Kubota, country manager for Fortinet Japan. “Such a prominent brand as Yahoo! JAPAN cannot suffer any degradation of their operations. With our high-performance firewalls, we ensure that they get the best level of defense against the Internet threats they’re facing every day and at the same time, security does not become a bottleneck.”

Yahoo! JAPAN data center network topology
Yahoo! JAPAN data center network topology