Deliver applications at line rate, everywhere

Classical, consistent hash, Maglev, SED, and TR7's proprietary two-stage Fastest+ engine. Picked per vService, hot-swapped.

Bandwidth is measured at the vService client-facing boundary as combined RX and TX. Pre-vService blocks and application-server pass-through do not count — license the tier you actually need.

9 ways to keep a user on the same backend across requests — from source-IP to SAM, TR7's configurable cookie engine.

Two-stage live signal — among the lowest-response-time candidates, pick the one with the emptiest queue.

Carry client traffic to backends without mirroring every connection — fewer handshakes, lower latency.

Complete missing HttpOnly, Secure and SameSite flags at the response layer — no application changes required.

Manage preflight and response CORS headers from a single rule, without touching application code.

Change the config, keep live connections — not every rule update should require a maintenance window.

Manage HTTP→HTTPS transitions, domain migrations, path moves and error redirects without touching application code.

Mask IP for log privacy, reconstruct the correct client IP across proxy chains.

Move beyond L3/L4 — carry HTTP context into your flow records.

Turn JSON body fields and JWT content into first-class signals for every traffic decision.

Pull Prometheus metrics from TR7 without deploying a separate exporter — dashboards ready out of the box.

Apply per-vService, per-user or shared bandwidth limits and distribute traffic capacity in a controlled way at the application layer.

Mask, replace or inject HTML into response content — without changing a line of backend code.

Change the path, not the backend — the client keeps its URL while a new architecture runs inside.

Write rules visually, get compiled traffic behavior — manage request and response flow without scripting.

One expression language — traffic, health, logging, GTM, security and access decisions in the same model.

See production traffic request by request — turn observation directly into rule actions.

30+ breakdown dimensions, three formats (PDF / XLSX / HTML), up to 10 years of on-device history — no separate management server.

vService profiles, 5 frequency presets, multi-recipient email, cluster-aware single-send — same engine for ad-hoc and scheduled.

Hide cookie values from the client — protect session integrity without touching backend code.

Run two nodes as a single logical ADC — VIP failover, state replication and controlled maintenance in one cluster model.

Manage VIPs not just as IP addresses — but with interface type, VLAN, cluster role and transition method.

Move beyond headers — make body content part of the traffic and security decision.

Move TLS beyond file-based configuration — turn it into a per-service security profile, certificate lifecycle and post-quantum readiness layer.

Lift the client certificate out of connection control and turn it into an identity object that drives traffic decisions.

Insert TR7 ADC into the traffic path without touching backend IP addresses, gateways or routes.

Connect services without merging networks — manage overlapping IP plans and tenant isolation with a single vService model.

Go beyond 200 OK — validate backends at protocol, session and content level.

Serve frequent responses without a backend round-trip — reduce latency and free capacity.

Every tenant in its own routing world — overlapping IPs, static + dynamic routing and gateway monitoring from one panel.

No reboot. No maintenance window. Interface changes go live.

ADC, routing and L3/L4 security from a single console.

Certificate renewal stops being a calendar task — TR7 ADC monitors, renews and applies the certificate to the service.

One VIP, one port — unlimited domain separation via SNI and Host header.

The queue lives on the platform, not in your application — and the capacity is found before the event, not during it.

Make DNS and GSLB decisions on your own appliances — zone data and traffic policy never leave your premises.

Set resolver IP aside — make DNS decisions based on the user's real subnet, ASN and location.

When the primary DC goes down, DNS reshapes automatically — no manual intervention needed.

Percentage-based traffic distribution — in the language of DNS.

Take DNS responses beyond static records — let data-centre, application and service health drive every decision.

Authoritative DNS pulled from a hidden master, served from memory at line rate.

The path into failover and the path back are separately policy-controlled.

Decide which data center wins each query — using host, service, and client-side signals together.

Each data center's WAN and LAN access paths are monitored independently — partial reachability is a recognized state, not a binary.

Per-domain DNSSEC with key custody on your own infrastructure — no third-party signing service.

TCP, UDP, DSR and IP tunnel — packet-level L4 load balancing on a single ADC.

Pick the service type and TR7 shows only the right features — backend groups managed in the same model.

Your own root, server CA and device CA — issue, enrol, revoke and track certificates inside TR7.

Not just an IP list — real traffic intelligence across 60+ criteria, AND/OR/NOT groups and Smart Function chains.

Not just one idle value — 9 independent timeout axes in a single named profile, applied per pool to match every traffic type.

Encode backend capacity across 8 axes — connections, rate, session, SSL, buffer and retry in one profile.

Steer every query to the closest data center — geographic proximity as a latency proxy, decided on-device.

35 record types, DNSSEC and AXFR — the GSLB decision engine paired with full DNS operations on one platform.

GTM does more than produce DNS answers — when health state changes it fires external triggers and routes DNS queries to the right forwarder.