Measurable Performance With Security Enabled
An architecture designed for low latency and high throughput while WAAP inspection, SSL/TLS processing, ADC routing, and DDoS protection all run on the same platform.
On enterprise security and application delivery platforms, performance is often described through ideal tests where features are turned off. In production, SSL, WAAP, DDoS, logging, and health checks all run at the same time.
TR7 combines hardware-accelerated crypto, a non-blocking I/O proxy engine, and a zero-copy packet-processing approach in a single architecture. The goal is to deliver a measurable, reproducible, low-latency performance experience even while the security layers are active.
A performance claim must be measurable.
TR7 datasheet values describe the reference test conditions for the corresponding model. Verification can be performed in your own environment with appropriate test topology, traffic profile, and standard benchmarking tools.
Performance With Clear Reference Conditions Instead of Lab Numbers
A performance value is only meaningful when its conditions are understood. TR7 highlights a verifiable performance approach in the context of model, traffic profile, TLS algorithm, and security policy.
Proof, Not Just a Claim
Performance numbers earn trust when the conditions they were produced under are clear.
TR7's performance architecture rests on three foundations: hardware-accelerated SSL/TLS, a non-blocking I/O proxy engine, and packet-level L4 routing. This structure runs with the same engine, the same interface, and the same operational model from a small branch office to a datacenter.
Performance values can vary depending on the selected model, license capacity, traffic profile, TLS algorithm, packet size, security policy, and test topology. Datasheet values describe the reference test conditions for the corresponding model.
Hardware-Accelerated Encryption
Hardware-accelerated SSL/TLS via AES-NI and AVX-512 instructions. TLS 1.3 single-round handshakes and Zero-RTT session resumption reduce connection latency.
SSL/TLS accelerationMulti-Connection Management
Non-blocking I/O and zero-copy packet processing handle many connections per thread with low side effects. HTTP/2 and HTTP/3 multiplexing achieve near-linear scaling by core count.
Connection multiplexing architecturePacket-Level L4 Routing
Routing decisions stay within the network layer. The Fastest+ multi-metric algorithm evaluates multiple signals simultaneously, such as response time and queue depth; it supports 6 different deployment modes.
Fastest+ routingFourteen different load balancing algorithms and active health monitoring run within the same engine, with no extra license or module.
Low Overhead With the Full Stack Active
An architecture that uses resources efficiently, without forcing an unnecessary choice between security and performance.
The Operational Impact of a Single-Engine Architecture
Versus typical multi-appliance ADC deployments, TR7+s single-engine architecture is built for materially lower resource overhead. The figures below are architecture-based upper-bound estimates ("up to"); actual results vary by workload, configuration, and hardware.
Performance values can vary depending on the model, license capacity, traffic profile, TLS algorithm, packet size, security policy, and test topology. Datasheet numbers describe the reference test conditions for the corresponding model; for production evaluation, benchmarking aligned with the organization's traffic characteristics is recommended.
For capacity planning that fits your model, see the hardware models and licensing guide pages.
A Single Platform Architecture From 50 Mbps to 800 Gbps
From branch office to datacenter, every model runs the same engine, the same interface, and the same feature set. Only the capacity changes.
| Series | Segment | Bandwidth | HTTP req/s | SSL TPS (ECDSA) | Connections |
|---|---|---|---|---|---|
| H700 Series | Branch & SMB | 5 – 40 Gbps | up to 1.8M | up to 48K | 1.8M |
| H7000 Series | Mid-Range | 40 – 100 Gbps | up to 3.5M | up to 90K | 3.5M |
| H7000D Series | Datacenter 1U | 100 – 160 Gbps | up to 4.5M | up to 150K | 300M |
| H17000 Series | Enterprise | 80 – 200 Gbps | up to 7M | up to 270K | 7M |
| H27000 Series | Datacenter | 200 – 800 Gbps | up to 48M | up to 1.2M | 100M+ |
| V7000 Virtual | Cloud & VM | 50 Mbps – 100 Gbps | 200K – 4M | 8K – 160K | Resource-based |
TR7 measures bandwidth based on the user-side total traffic of a vService: requests coming in from the user and responses going back to the user. Backend traffic, in-appliance management traffic, and blocked attacks are not counted toward the license. For details of the hardware models, see the platform/appliances page.
1.2 Million Encrypted Handshakes Per Second
Hardware-accelerated crypto processing — delivered as part of the platform architecture, without requiring extra cards or licenses.
The SSL/TLS engine is built on zero-copy packet processing and AES-NI/AVX-512 instructions. SSL/TLS acceleration is offered as part of the platform's standard capability set, without a separate card or extra module.
Hardware Acceleration
Dedicated crypto processing — 1.2M+ TPS for ECDSA, 80K TPS for RSA-2K. No separate SSL card is required. A built-in CAPTCHA engine for bot challenges; no dependency on an external service.
Modern Cipher Support
Full TLS 1.3 support with Perfect Forward Secrecy (PFS) through ECDHE elliptic-curve key exchange, AES-GCM authenticated encryption running on the AES-NI hardware path, ECDSA certificates alongside RSA, OCSP stapling and post-quantum-ready cipher suites. Built-in 1-RTT connection acceleration.
SSL Offload + Bridging
Offloading encryption from backend servers to the appliance significantly reduces backend CPU load. In bridging mode, both external and internal traffic can be inspected.
Certificate Lifecycle
Automatic deployment, renewal, and revocation through ACME integration. Manual certificate management overhead is removed.
Not performance with security turned off, but performance under conditions close to the production reality.
TR7's performance approach considers not only the best lab scenario but the real production architecture in which SSL, WAAP, ADC, and DDoS layers operate together.
See It Running in Your Own Environment
In a live demo, let's evaluate TR7's performance architecture together with your own traffic profile, expected TLS load, WAAP policies, and capacity targets.
Capability scope, performance figures, license models, and support tiers described on this page may vary depending on the deployment, license package, hardware model, and selected support program. For detailed scope, please review the relevant product, license, and support pages.