David Gehringer Director, Product Marketing

1. David GehringerDirector, Product Marketing Tuning Production Systems

2. IT Applications Drive Business • Applications increase revenue or decrease costs • Applications effectiveness can be measured by: • Invoices / hour • Pageviews / day • Records updated / day • Completed transactions / hour • Response time • Etc..

3. IT wasted $500B in 2001 “Gartner Says 20 Percent of Corporate IT Budgets Wasted Globally in 2001 on Inefficient Information Communication Technology Spending” • Typical areas of misspend include: • 'over specified' hardware • over specified network infrastructure • unnecessary customization of software packages • poor central control of software licensing • projects that never see the light of day (especially true during the e-business hype) Production Tuning Can Prevent This Waste

4. Top Production Problems • Systems are very complex • “Millions of moving parts” • Can’t separate problems between infrastructure and app(s) • Intermittent & non-reproducible problems can be chronic • No way to ensure security under peak load conditions • Changes, changes, changes…..

5. New Application Roll Out? We cross our fingers AND toes. 12% It meets all tested and expected response time measurements; users are happy. 14% Our IT department is overwhelmed with calls. 15% We hear, “it worked fine in testing.” 34% We just add bandwidth to get rid of the problem.9% Our company loses revenue, time and credibility. 7% Our tools did not identify what was wrong. 9% Source: Gartner 2002

6. Amazing Statistics • 98% of the environments have critical problems • Sites only scale to 15% of design capacity • Performance can often be increased by 400%+ • Security and production performance are related (Based on 2,000 ActiveTune engagements)

7. Bottlenecks identified in all areas ofWeb application infrastructure • Infrastructure • Network • Computing H/W • Security • Application • Database • Application Server • Web Server 40% Infrastructure 60% Application Systems contain multiple bottlenecks in both: application and infrastructure areas Data gathered from over 2,000 tuning sessions (September 2001)

8. Why Applications Don’t Scale inProduction • QA is a scaled down version of production • Does not have production infrastructure in testing • Firewalls, Load balancers, cache servers, etc.. • The internet and its infrastructure is absent • Switches, routers, gateways, Bandwidth, ISP peering, etc.. • Security systems are not represented • Hardware, software, encryption, ect.. The testing / QA lab is not the production system!!

9. Firewall WEB NetworkDevices Production systems are incredibly complex Production systems include multiple end users for CRM, ERP, B2B, B2C, Intranet, Internet

10. HF Enterprise Application Testing & Performance Monitoring Monitoring 24 x 7 in Production Systems Application Testing in Lab Test Planning Requirements Iterative Testing Dev. Functional & Regression Testing Load & Stress Testing

11. Initial Application Release onto Production Infrastructure Requires Tuning & Optimizing • Baseline performance on real production system • Maximize utilization of existing investments • Application • Infrastructure • Security Application From Testing or Staging environments

12. Chasing intermittent performance problems Increasing Users/Traffic Launch HF System andapplicationupgrades Newarchitectures Ongoing Discrete Events In ProductionRequire Tuning & Optimizing

13. What Business Problems does Performance Optimization Solve? • Reduced costs • Reduction in hardware and software purchase • Redeployment of resources to other projects • Revenue Protection • Increased reliability • Higher end user experience • 3rd party validation • Ensuring that the system and partners can scale • Check security infrastructure resilience to load

14. The Answer is: • Production Tuning: • We utilize experts, industry standard tools, proven processes to systematically tune each tier and component of the production system to maximize utilization of the system and improve performance.

15. Ok, but how do you do it?

16. Application Infrastructure Tuning Joins All Areas Security Hosting Equip. Routers ISP Peering Switches ISP Bandwidth Load balancers Gateways Web Servers Cache Servers LAN / WAN Application Servers Databases Middleware Back Office Client servers Legacy system 3rd Party Credit Cards service .NET, SUN 1 services Firewalls IDS Systems DDOS system

17. The Tuning Process 3 Security System 2 Application(s) 1 Infrastructure & Network

18. Security System 3 Application(s) 2 The Tuning ProcessDrilling Down from the Global to the Specific Entire System Response time unacceptable 1 Infrastructure & Network Problem Resolution Increase server connections Component Testing: App, Web, DB, FW, etc.. Problem Isolation Application Server doesn’t scale

19. Database Server Web Servers Firewall Tuning Requires Targeting Tiers & DeliveringLoad From An End-user Perspective • Tuning targets system one tier at a time • Creates a baseline of performance Business Processes ISP ISP ISP Router Router Load Balancer Application Server “Tier specific” sessions Net2 Mgmt Net1 Mgmt Firewall Mgmt Load Mgmt System Mgmt Network Mgmt DB Mgmt Storage Mgmt

20. Key Tuning Procedures Infrastructure Application Security Load Balancer scheme & strategy Check Bandwidth Border router and network validation Caching algorithm optimization ISP capacity, SLA, and connection validation Check Scalability Server connection capacity, release, and renew Business process optimization Database process & search validation Page construction check Security operation under heavy traffic DDOS system operation check Vulnerability Scan Firewall: connection DMZ, throughput validations Confirm IDS operation

21. Production Tuning Advantages • Maximize Infrastructure & Software Utilization • Maintains Optimal Performance • Save Time • Protect Revenue • Security Performance Check • Validate 3rd parties scale • Establish Monitoring Benchmarks • Base-lining system capacity • Fail-over testing

22. Tuning Enterprise Applications • Tuning can be leveraged for: • B2B, B2C, CRM, ERP package apps, etc… • Internet based applications • Intranet, WAN, LAN applications • Mercury Interactive has validated and proven this approach with our ActiveTune service

23. Questions