Datasheet

THUNDER ADC
Next-generation Application Delivery Controller

Supported Platforms_____________ A10 Networks® Thunder® ADC product line of high-performance, next-generation
application delivery controllers enable customers’ applications to be highly available,
accelerated and secure. Thunder ADC is our premium ADC product line, delivering up
to 220 Gbps of throughput in a single appliance or 1.7 Tbps of throughput in a cluster,
Thunder ADC the broadest range of form factors (physical, virtual, Bare Metal, and hybrid), and with
physical appliance expanded system resources designed to support future feature needs.

APP
The A10 Thunder ADC product line is built upon A10’s Advanced Core Operating System
(ACOS®) platform, with our Symmetric Scalable Multi-Core Processing (SSMP) software
Thunder HVA architecture that delivers high performance and a range of deployment options for
hybrid virtual appliance dedicated, hosted or cloud data centers.
• Application availability for customer satisfaction: Enable your Web and key
APP infrastructure servers to scale seamlessly to meet customer demand and ensure
business continuity to maximize revenue and user satisfaction.
vThunder • Application acceleration for efficient operations: Provide fast and responsive
virtual appliance
service to your customers for competitive advantage and reduced infrastructure
010110101
101010110 requirements for both application delivery and critical services, driving down
CAPEX and OPEX.
Thunder ADC
bare metal • Security for compliance and risk reduction: Protect against advanced and
emerging attacks for uninterrupted operations, brand protection, and revenue
loss while meeting required regulatory compliance obligations for Payment Card
aGalaxy Industry Data Security Standard (PCI DSS) and other regulations.
centralized management A10 Thunder ADC delivers critical services in the most efficient hardware and software
models. With its data center-efficient design and compact form factor, Thunder ADC
minimizes your rack space, power consumption, and cooling costs.

While the Thunder ADC platform provides a rich set of application and security
services out-of-the-box, it also supports open and standards-based programmability,
Overview_________________________ which allows developers to rapidly integrate custom and off-the-shelf services with
Thunder ADC. The A10 Harmony™ architecture combines open programmability, policy
A10 Thunder Series is a family of
enforcement, and telemetry to deliver the next generation of application networking.
hardware and software appliances
ready to match any deployment need.
Each Thunder Series form factor is
powered by ACOS software, which
brings a unique combination of shared
memory accuracy and efficiency,
64-bit scalability and advanced flow
processing.

1
Features and Benefits include SSL offload (including offload of demanding 2048- and
4096-bit key operations ECDHE, and Perfect Forward Secrecy),
Whether you are an enterprise, service provider or Web giant,
HTTP compression, support for SPDY, TCP reuse, and RAM
A10 Thunder ADC offers key benefits to make your data center
caching. Deliver a faster experience for your customers and
applications available, accelerated and secure.
reduced CAPEX and OPEX as your infrastructure scales efficiently
Application Availability without wasted compute cycles.

Highly available applications and data centers: Advanced server Virtualization for ADC and SLB consolidation: Choose the best
load balancing (SLB) and global server load balancing (GSLB) option for your network to enable multi-tenancy. Maximize density
ensure maximum uptime by detecting local and remote outages. with our Application Delivery Partitions (ADP), allowing you to
Acting on advanced health checks, A10 Thunder ADC directs configure up to 1,023 virtual ADCs on a single Thunder ADC
connections to active servers and data centers in a way that is appliance that support Layer 3 virtualization. Rapidly deploy pure
transparent to the end user. software vThunder appliances or Hybrid Virtual Appliances (HVA) to
provide strong isolation and complete resource isolation as required.
Next-generation cloud data center evolution: Equip your network
for the next phase in network evolution with Infrastructure-as-a- Full control and deep packet inspection (DPI) capabilities to solve
Service (IaaS) capabilities. Benefit from integration of software complex problems: aFleX® TCL scripting provides granular traffic
defined networks (SDNs) with overlay networking (VXLAN and transformation capabilities to adjust traffic as needed for your
NVGRE), cloud orchestration systems (OpenStack, Microsoft applications. Additionally, advanced ADC capabilities enable the
SCVMM, Cisco ACI, and more), network functions virtualization most common requirements to be met with specific preconfigured
(NFV) using vThunder virtual appliances, and enable service templates and capabilities, for example L7 URL switching.
chaining and traffic insertion. Flexible management to optimize IT operations: Multiple
Fast deployment and proven application configuration and management capabilities simplify operation tasks using the
provisioning: Rapidly enable and deploy business critical applications aGalaxy centralized management system to control any A10
with predefined smart templates for popular applications from Thunder device, whether pushing configurations, aFleX rules
Microsoft (Exchange, Skype for Business, SharePoint), Oracle and providing 100 percent coverage, backing up SSL keys and much
many more, to deploy in hours, not days or weeks. more. Our aXAPI® REST-based API gives complete management
control with custom scripting for homegrown management
Application Acceleration operations or integration into third-party management systems.
Application acceleration for a better user experience and Also, plug-ins and packages are available to be used with partners’
infrastructure utilization: Offload application infrastructure from management systems such as Microsoft SCVMM and others.
CPU and memory intensive tasks to reduce costs. Techniques

Architecture and Key Components

• DDoS Mitigation
Internet
Internet • WAF
Internet • DAF
• Firewall Load Balancing Data Center Backup • AAM
• DDoS Mitigation
• WAF
• DAF • ADC High Availability
• AAM • SSL Offload
GSLB
A10 Thunder ADC • Traffic Steering • TCP Reuse
IPSec
• aFleX Scripting A10 Thunder ADC • RAM Caching
• Compression
• Firewalls
Advanced Health Checks
• IDS/IPS
• DLP
• Other

Web App DNS Other App

• Firewall Load Balancing Application delivery example for Web, DNS and other services
A10 Thunder ADC

Data Center

DMZ security device scaling, offload and acceleration

2
 Thunder ADC supports granular role-based access control, enabling
Security
you to create users and groups and grant read-only or read/write
Enhance your data center security: Our Web Application Firewall privileges for specific partitions or management interfaces. To scale
(WAF) guards Web servers against the critical Open Web Application load balancing capacity, aVCS (virtual chassis system) allows multiple
Security Project (OWASP) top ten threats facing web-based appliances to operate as one, with a single management point for all
application servers, while our DNS application firewall (DAF) appliances in the virtual chassis.
gives advanced protection against domain name system (DNS)
infrastructure exploitation, with granular application rules for query A10 Harmony
behavior and mitigation methods such as rate limiting. With the A10 Harmony architecture, Thunder ADC automates
Enhance, scale and optimize your existing DMZ security policy enforcement, improves visibility, and accelerates service
infrastructure: With our appliances supporting up to 220 Gbps per integration. Thunder ADC customers can take advantage of
device, firewall load balancing (FWLB) enables existing security A10 Harmony architecture to rapidly provision application
products to scale seamlessly. networking services and effectively manage and monitor their
deployments.
Protect against the latest emerging threats: As threats emerge,
the A10 Thunder ADC enables your network to be ready with
effective countermeasures. DDoS protection is standard in all
appliances, and with FPGA FTA-based models, protection can be
enabled for the highest volume attacks against application servers.
The FPGA mitigates common volumetric attacks, while general POLICY
TELEMETRY SECURE & OPEN
ENFORCEMENT
purpose CPUs can be used to mitigate more sophisticated low and
slow and application attacks such as Slowloris and HTTP floods. • Operational Simplicity • Visibility and Control • Open APIs
• Reduce TCO • Health Checks • Autonomous Security
• Automation • Proactive Maintenance • SDN, NFV Integration
Stop data breaches with A10 Threat Intelligence: Cybercriminals • Troubleshooting • Third-party Integration
use automation to execute large-scale attacks and evade corporate
defenses. The A10 Threat Intelligence Service, an optional
subscription for Thunder ADC, provides a near real-time feed of Product Description
malicious IP addresses to identify automated attacks and prevent A10 Thunder ADC Product Line
data loss. Aggregating IP reputation data from over three dozen
A10 Thunder ADC is a family of hardware and software appliances
sources, A10 Threat Intelligence Service enables Thunder ADC to
ready to match any deployment need. Each Thunder ADC form
block inbound or outbound threats before malicious users can steal
factor is powered by ACOS software, which brings a unique
data or disrupt access.
combination of shared memory accuracy and efficiency, 64-bit
Streamline authentication and authorization: With Application scalability and advanced flow processing.
Access Management (AAM), Thunder ADC can authenticate users • Thunder ADC Hardware Appliances: The A10 Thunder
and enforce access policies. With support for a wide array of ADC line of appliances fits all size networks with entry-level
authentication protocols, including OCSP, SAML, RADIUS, LDAP models starting at 5 Gbps and moving up to a 220 Gbps
and Kerberos. Thunder ADC enables customers to centralize high-performance appliance for your most demanding
authentication management and reduce operating costs, while requirements. All models are dual power supply-capable,
leveraging SAML 2.0 and AAM enables Single Sign-On for a feature solid-state drives (SSDs) and use no inaccessible
superior user experience. moving parts for high availability. All models benefit from our
Flexible Traffic Acceleration (FTA) technology, with select
Management
models featuring field programmable gate arrays (FPGAs)
Comprehensive and scalable management: The A10 Thunder for hardware optimized FTA processing; this provides highly
ADC devices feature an array of options to simplify and automate scalable flow distribution and distributed denial of service
management tasks to reduce administration overhead and (DDoS) protection capabilities. Select models include dedicated
ensure complex tasks can be done accurately the first time. To security processors for SSL offload, switching and routing
complement the industry standard CLI Web GUI, our RESTful processors for high-speed network processing, and lights-out
API (aXAPI) can be used to integrate with third party or custom management (LOM) support for out-of-band monitoring and
management consoles, to efficiently operate one or more Thunder management. Each appliance offers the best performance per
ADC appliances. For larger deployments, our optional aGalaxy rack unit and the highest level “80 PLUS™ Platinum” certification
centralized management system ensures routine tasks can be for power supplies to ensure a green solution and reduce power
performed at scale, across multiple physical, virtual or hybrid consumption costs. Coupled with high density 1 GbE, 10 GbE,
Thunder appliances, regardless of physical location. 40 GbE, and 100 GbE port options, Thunder ADC meets the
highest networking bandwidth demands.

3
 • vThunder Virtual Appliances: The vThunder® ADC line of combined flexibility of a virtual appliance and the power
virtual appliances is designed to meet the growing needs of the performance optimized hardware appliances, A10
of organizations requiring a flexible and easy-to-deploy Thunder HVA appliances enable multi-tenancy with multiple
application delivery and server load balancer solution running vThunder virtual appliances running on dedicated, turnkey
within a virtualized infrastructure or public cloud service. Each hardware appliances with a high density of instances that
vThunder instance has a full set of features that can run atop are strongly isolated from each other, each with its own
your choice of commodity hardware and also your choice dedicated ACOS instance and dedicated compute resources.
of leading hypervisor; for example, VMware ESXi, Microsoft The fact that each instance can use dedicated SSL security
Hyper-V, and KVM. vThunder ADC for Amazon Web Services processor technology with Single Root I/O Virtualization (SR-
(AWS) and Microsoft Azure are also available for cloud IOV) to offload and accelerate SSL sessions is a key hardware
deployment, powered by our aCloud® services. advantage. All vThunder ADC instances are included within
• Thunder ADC for Bare Metal: This family of high-performance the HVA appliance.
software appliances provide complete ADC functionality that Additional management options are also available to enhance your
is tied to a dedicated server. With no need for an intervening Thunder ADC infrastructure. A10’s aGalaxy® line of hardware and
hypervisor, the resulting throughput of up to 40 Gbps of Layer software appliances centrally manage all Thunder ADC hardware
7 traffic processing is optimized. As with vThunder, the Bare and software appliances for streamlined operations, resulting in
Metal option eases installations. Large enterprise, service reduced OPEX.
providers and Web hosting operations are ideal environments
that can leverage the flexibility afforded by Bare Metal.
• Thunder Hybrid Virtual Appliances (HVA): Offering you the

A10 Networks Harmony Architecture*

Policy aCloud Services Architecture

Management aGalaxy aXAPI aFleX aCloud (SDN and Cloud Integration)

Software
Solutions ADC CFW v4 v6 CGN SSLi TPS

Platform OS ACOS – Advanced Core Operating System

and Services Optimization &
Acceleration IPv6 | SLB | SSL | GSLB | TCP Opt | NAT Security DDoS | SSL | WAF | AAM | DAF | FW

Dedicated Data Centers Multi-Tenant Data Centers

APP
Form Factors APP 010110101
101010110
APP

Thunder HVA vThunder Thunder ADC vThunder

Thunder Series Virtual Chassis Application Delivery Appliances Perpetual for Pay-as-you-go
Appliances (aVCS) Partitions (ADP) License Bare Metal License

Delivery Dedicated Managed Cloud IaaS

Models Network Hosting

4
Thunder ADC Hardware Appliance Specifications Table
Thunder 840 Thunder 930 Thunder 1030S Thunder 3030S Thunder 3230(S)
Application Throughput (L4/L7) 5 Gbps / 5 Gbps 5 Gbps / 5 Gbps 10 Gbps / 10 Gbps 30 Gbps / 30 Gbps 30 Gbps / 30 Gbps
Layer 4 CPS 200k 200k 450k 750k 1.5 million
Layer 4 HTTP RPS 1 million 1 million 2 million 3 million 7.5 million
Layer 7 CPS (1:1) *1
50k 50k 150k 250k 420k
SSL CPS (1024/2048) 2k / 500 1.9k / 400 25k / 7k 47k / 14k 54k*4 / 52k*4
DDoS Protection (SYN Flood) SYN/Sec 1.7 million 2 million 4 million 7.5 million 55 million
Application Delivery Partitions (ADP) L3V 32 32 32 64 64
Network Interface
1 GE Copper 5 6 6 6 0
1 GE Fiber (SFP) 0 2 2 2 4
1/10 GE Fiber (SFP+) 2 2 2 4 4
40 GE Fiber (QSFP+) 0 0 0 0 0
Management Interface Yes Yes Yes Yes Yes
Lights Out Management No No Yes Yes Yes
Console Port Yes Yes Yes Yes Yes
Solid-state Drive (SSD) Yes Yes Yes Yes Yes
Intel
Processor Communication Intel Xeon 2-core Intel Xeon 4-core Intel Xeon 4-core Intel Xeon 4-core
Processor
Memory (ECC RAM) 8 GB 8 GB 8 GB 16 GB 16 GB
Hardware Acceleration
64-bit Linear Decoupled Architecture Yes Yes Yes Yes Yes
Flexible Traffic Acceleration Software Software Software Software 1 x FTA-4 FPGA
Switching/Routing Software Software Software Software Hybrid*6
SSL Security Processor (‘S’ Models) N/A N/A Single Single Dual
Power Consumption (Typical/Max) *5
57W / 75W 66W / 76W 98W / 108W 131W / 139W 190W / 240W
Heat in BTU/hour (Typical/Max)*5 195 / 256 225 / 259 334 / 369 447 / 474 648 / 819
Performance Per Watt (PPW) *2|*5
2,667 2,632 4,167 5,396 6,250
Single 150W
Single 600W+ Single 600W+ Dual 600W RPS Dual 600W RPS
Power Supply (AC only)
(DC Option Available) 100 - 240 VAC
80 Plus Platinum efficiency, 100 - 240 VAC, 50 – 60 Hz
50-60Hz
Cooling Fan Single Fixed Fan Hot Swap Smart Fans
1.75 in (H), 1.75 in (H), 17.5 in (W),
Dimensions 1.75 in (H), 17.5 in (W), 17.45 in (D)
17.0 (W), 12 in (D) 17.15 in (D)
Rack Units (Mountable) 1U 1U 1U 1U 1U
17.8 lbs 18.0 lbs
Unit Weight 8.8 lbs 20.1 lbs 23 lbs
19.9 lbs (RPS) 20.1 lbs (RPS)
Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%
FCC Class A, UL,
FCC Class A, UL, FCC Class A, UL, FCC Class A, UL,
FCC Class A, UL, CE, TUV, CB, VCCI,
CE, TUV, CB, VCCI, CE, TUV, CB, VCCI, CE, TUV, CB, VCCI,
CE, TUV, CB, VCCI, China CCC, MSIP,
Regulatory Certifications China CCC, MSIP, China CCC, MSIP China CCC, MSIP,
China CCC, BSMI, BSMI, RCM, EAC,
BSMI, RCM, FAC | BSMI, RCM, FAC | BSMI, RCM, NEBS
RCM | RoHS FAC | RoHS, FIPS
RoHS RoHS, FIPS 140-2*3 | RoHS
140-2*3
Standard Warranty 90-day Hardware and Software
*1 Layer 7 connections per second - measures number of new HTTP connections (1 HTTP request per TCP connection, without TCP connection reuse ) within 1 second | *2 Layer 4 CPS per Watt (Max) |
*3 For FIPS 140-2, FIPS models must be purchased | *4 With maximum SSL | *5 With base model. Number varies by SSL model | *6 No dedicated hardware but FTA-4 FPGA handles select switching/routing functions |
^ Certification in process | + Optional RPS available

5
Thunder ADC Hardware Appliance Specifications Table (continued)
Thunder 3430(S) Thunder 4430(S) Thunder 4440(S) Thunder 5330(S)
Application Throughput (L4/L7) 42 Gbps / 42 Gbps 38 Gbps / 38 Gbps 80 Gbps / 80 Gbps 78 Gbps / 78 Gbps
Layer 4 CPS 2.5 million 2.7 million 2.9 million 3.1 million
Layer 4 HTTP RPS 12 million 12 million 15 million 15 million
Layer 7 CPS (1:1) *1
620k 620k 750k 770k
SSL CPS (1024/2048) 77k / 75k
*4 *4
86k / 84k
*4 *4
100k / 95k
*4 *4
98k*4 / 96k*4
DDoS Protection (SYN Flood) SYN/Sec 55 million 55 million 166 million 112 million
Application Delivery Partitions (ADP) L3V 127 127 127 127
Network Interface
1 GE Copper 0 0 0 0
1 GE Fiber (SFP) 4 0 0 0
1/10 GE Fiber (SFP+) 4 16 24 8
40 GE Fiber (QSFP+) 0 4 4 0
Management Interface Yes Yes Yes Yes
Lights Out Management Yes Yes Yes Yes
Console Port Yes Yes Yes Yes
Solid-state Drive (SSD) Yes Yes Yes Yes
Intel Xeon Intel Xeon Intel Xeon Intel Xeon
Processor
6-core 6-core 6-core 10-core
Memory (ECC RAM) 32 GB 32 GB 32 GB 32 GB
Hardware Acceleration
64-bit Linear Decoupled Architecture Yes Yes Yes Yes
Flexible Traffic Acceleration 1 x FTA-4 FPGA 1 x FTA-3 FPGA 2 x FTA-4 FPGA 1 x FTA-4 FPGA
Switching/Routing Hybrid*6 Hardware Hardware Hybrid*6
SSL Security Processor (‘S’ Models) Dual or Quad Dual or Quad Dual or Quad Dual or Quad
Power Consumption (Typical/Max)*5 210W / 260W 266W / 319W 360W / 445W 210W / 260W
Heat in BTU/hour (Typical/Max)*5 717 / 887 908 / 1,088 1,229 / 1,519 717 / 887
Performance Per Watt (PPW)*2|*5 9,615 8,464 6,517 11,923

Power Supply Dual 600W RPS Dual 600W RPS Dual 1100W RPS Dual 600W RPS
(DC Option Available) 80 Plus Platinum efficiency, 100 - 240 VAC, 50 – 60 Hz
Cooling Fan Hot Swap Smart Fans
1.75 in (H), 17.5 in (W), 1.75 in (H), 17 in (W), 1.75 in (H), 17.5 in (W), 1.75 in (H), 17.5 in (W),
Dimensions
17.15 in (D) 24.6 in (D) 30 in (D) 17.15 in (D)
Rack Units (Mountable) 1U 1U 1U 1U
Unit Weight 23 lbs 25.2 lbs 32.5 lbs 23 lbs
Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%
FCC Class A, UL, CE,
FCC Class A, UL, CE, FCC Class A, UL, CE, FCC Class A, UL, CE,
TUV, CB, VCCI, China
TUV, CB, VCCI, China TUV, CB, VCCI, China TUV, CB, VCCI, China
Regulatory Certifications CCC, MSIP, BSMI, RCM,
CCC, MSIP, BSMI, RCM | CCC, MSIP, BSMI, RCM CCC, BSMI, RCM, NEBS
NEBS | RoHS, FIPS
RoHS, FIPS 140-2^|*3 | RoHS | RoHS
140-2^|*3
Standard Warranty 90-day Hardware and Software
*1 Layer 7 connections per second - measures number of new HTTP connections (1 HTTP request per TCP connection, without TCP connection reuse ) within 1 second | *2 Layer 4 CPS per Watt (Max) |
*3 For FIPS 140-2, FIPS models must be purchased | *4 With maximum SSL | *5 With base model. Number varies by SSL model | *6 No dedicated hardware but FTA-4 FPGA handles select switching/routing functions |
^ Certification in process | + Optional RPS available

6
Thunder ADC Hardware Appliance Specifications Table (continued)
Thunder 5430(S)-11 Thunder 5440(S) Thunder 5630(S) Thunder 5840(S)
Application Throughput (L4/L7) 79 Gbps / 78 Gbps 100 Gbps / 100 Gbps 79 Gbps / 78 Gbps 115 Gbps / 113 Gbps
Layer 4 CPS 3.7 million 4 million 6 million 6.2 million
Layer 4 HTTP RPS 20 million 22 million 32.5 million 31 million
Layer 7 CPS (1:1) *1
790k 950k 1.5 million 1.5 million
SSL CPS (1024/2048) 111k / 110k
*4 *4
120k / 115k
*4 *4
180k / 174k
*4 *4
150k*4 / 120k*4
DDoS Protection (SYN Flood) SYN/Sec 112 million 166 million 100 million 166 million
Application Delivery Partitions (ADP) L3V 1,023 1,023 1,023 1,023
Network Interface
1 GE Copper 0 0 0 0
1 GE Fiber (SFP) 0 0 4 0
1/10 GE Fiber (SFP+) 16 24 24 24
40 GE Fiber (QSFP+) 4 4 4 4
Management Interface Yes Yes Yes Yes
Lights Out Management Yes Yes Yes Yes
Console Port Yes Yes Yes Yes
Solid-state Drive (SSD) Yes Yes Yes Yes
Intel Xeon Intel Xeon Intel Xeon Intel Xeon
Processor
10-core 12-core Dual 8-core 18-core
Memory (ECC RAM) 64 GB 64 GB 128 GB 64 GB
Hardware Acceleration
64-bit Linear Decoupled Architecture Yes Yes Yes Yes
Flexible Traffic Acceleration 2 x FTA-3 FPGA 2 x FTA-4 FPGA 4 x FTA-2 FPGA 2x FTA-4 FPGA
Switching/Routing Hardware Hardware Hardware Hardware
2 x Dual, 2 x Quad or
SSL Security Processor (‘S’ Models) Dual or Quad Dual or Quad Dual or Quad
4 x Quad
Hardware Security Module (HSM) N/A N/A Single, Dual or Quad N/A
Power Consumption (Typical/Max)*5 288W / 345W 360W / 445W 780W / 890W 375W / 470W
Heat in BTU/hour (Typical/Max)*5 983 / 1,178 1,229 / 1,519 2,661 / 3,037 1,280 / 1,604
Performance Per Watt (PPW)*2|*5 10,725 8,989 6,742 13,191

Power Supply Dual 600W RPS Dual 1100W RPS 2+2 1100W RPS Dual 1100W RPS
(DC Option Available) 80 Plus Platinum efficiency, 100 - 240 VAC, 50 – 60 Hz
Cooling Fan Hot Swap Smart Fans
1.75 in (H), 17 in (W), 1.75 in (H), 17.5 in (W), 5.3 in (H), 16.9 in (W), 1.75 in (H), 17.5 in (W),
Dimensions
24.6 in (D) 30 in (D) 28 in (D) 30 in (D)
Rack Units (Mountable) 1U 1U 3U 1U
Unit Weight 25.6 lbs 32.5 lbs 72 lbs / 76.5 lbs *4
32.5 lbs
Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%
FCC Class A, UL, CE, FCC Class A, UL, CE, FCC Class A, UL, CE,
FCC Class A, UL, CE,
TUV, CB, VCCI, China TUV, CB, VCCI, China TUV, CB, VCCI, MSIP^,
Regulatory Certifications TUV, CB, VCCI, China
CCC, MSIP, BSMI, RCM CCC, BSMI, RCM | RoHS, EAC, FAC | RoHS, FIPS
CCC, BSMI, RCM | RoHS
| RoHS FIPS 140-2^|*3 140-2^|*3
Standard Warranty 90-day Hardware and Software
*1 Layer 7 connections per second - measures number of new HTTP connections (1 HTTP request per TCP connection, without TCP connection reuse ) within 1 second | *2 Layer 4 CPS per Watt (Max) |
*3 For FIPS 140-2, FIPS models must be purchased | *4 With maximum SSL | *5 With base model. Number varies by SSL model | *6 No dedicated hardware but FTA-4 FPGA handles select switching/routing functions |
^ Certification in process | + Optional RPS available

7
Thunder ADC Hardware Appliance Specifications Table (continued)
Thunder 6430(S) Thunder 6440(S) Thunder 6630(S) Thunder 7440(S)
Application Throughput (L4/L7) 150 Gbps / 145 Gbps 160 Gbps / 150 Gbps 150 Gbps / 145 Gbps 220 Gbps / 200 Gbps
Layer 4 CPS 5.3 million 5.5 million 7.1 million 10.5 million
Layer 4 HTTP RPS 31 million 31 million 38 million 44 million
Layer 7 CPS (1:1) *1
1.35 million 1.4 million 1.6 million 2.8 million
SSL CPS (1024/2048) 134k / 130k
*4 *4
150k / 120k
*4 *4
190k / 174k
*4 *4
TBD
DDoS Protection (SYN Flood) SYN/Sec 223 million 332 million 223 million 332 million
Application Delivery Partitions (ADP) L3V 1,023 1,023 1,023 1,023
Network Interface
1 GE Copper 0 0 0 0
1 GE Fiber (SFP) 0 0 0 0
1/10 GE Fiber (SFP+) 16 48 12 48
40 GE Fiber (QSFP+) 4 4 0 4
100 GE Fiber (CXP) 0 0 4 0
Management Interface Yes Yes Yes Yes
Lights Out Management Yes Yes Yes Yes
Console Port Yes Yes Yes Yes
Solid-state Drive (SSD) Yes Yes Yes Yes
Intel Xeon Intel Xeon Intel Xeon Intel Xeon
Processor
Dual 8-core Dual 8-core Dual 12-core Dual 18-core
Memory (ECC RAM) 128 GB 128 GB 128 GB 128 GB
Hardware Acceleration
64-bit Linear Decoupled Architecture Yes Yes Yes Yes
Flexible Traffic Acceleration 4 x FTA-3 FPGA 3 x FTA-4 FPGA 4 x FTA-3 FPGA 3 x FTA-4 FPGA
Switching/Routing Hardware Hardware Hardware Hardware
2 x Dual, 2 x Quad or 4
SSL Security Processor (‘S’ Models) Quad 2 x Dual 2 x Dual
x Quad
Hardware Security Module (HSM) N/A N/A N/A N/A
Power Consumption (Typical/Max)*5 590W / 680W 480W / 550W 995W / 1,150W 690W / 820W
Heat in BTU/hour (Typical/Max)*5 2,013 / 2,320 1,638 / 1,877 3,395 / 3,924 2,355 / 2,798
Performance Per Watt (PPW)*2|*5 7,794 10,000 6,174 12,805

Power Supply Dual 1100W RPS Dual 1100W RPS 2+2 1100W RPS Dual 1100W RPS
(DC Option Available) 80 Plus Platinum efficiency, 100 - 240 VAC, 50 – 60 Hz
Cooling Fan Hot Swap Smart Fans
1.75 in (H), 17.5 in (W), 1.75 in (H), 17.5 in (W), 5.3 in (H), 16.9 in (W), 1.75 in (H), 17.5 in (W),
Dimensions
30 in (D) 30 in (D) 28 in (D) 30 in (D)
Rack Units (Mountable) 1U 1U 3U 1U
Unit Weight 39 lbs 36 lbs 74.5 lbs / 78 lbs*4 36 lbs
Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%
FCC Class A, UL, CE,
FCC Class A, UL^, CE, FCC Class A, UL, CE, FCC Class A, UL^, CE,
TUV, CB, VCCI, China
TUV^, CB^, VCCI, China TUV, CB, VCCI, MSIP^, TUV^, CB^, VCCI, China
Regulatory Certifications CCC, MSIP, BSMI, RCM,
CCC^, BSMI^, RCM | EAC, FAC | RoHS, FIPS CCC^, MSIP, BSMI^, RCM
EAC, FAC, NEBS | RoHS,
RoHS 140-2^|*3 | RoHS, FIPS 140-2^|*3
FIPS 140-2*3
Standard Warranty 90-day Hardware and Software
*1 Layer 7 connections per second - measures number of new HTTP connections (1 HTTP request per TCP connection, without TCP connection reuse ) within 1 second | *2 Layer 4 CPS per Watt (Max) |
*3 For FIPS 140-2, FIPS models must be purchased | *4 With maximum SSL | *5 With base model. Number varies by SSL model | *6 No dedicated hardware but FTA-4 FPGA handles select switching/routing functions |
^ Certification in process | + Optional RPS available |

8
Thunder SPE Hardware Appliance Specifications Table
Thunder 4435(S) SPE Thunder 5435(S) SPE Thunder 6435(S) SPE Thunder 6635(S) SPE
Application Throughput (L4/L7) 38 Gbps / 38 Gbps 78 Gbps / 77 Gbps 153 Gbps / 150 Gbps 150 Gbps / 145 Gbps
Layer 4 CPS 3.1 million 3.7 million 7.1 million 7.1 million
Layer 4 HTTP RPS 12 million 20 million 38 million 38 million
Layer 7 CPS (1:1) *1
660k 790k 1.6 million 1.6 million
SSL CPS (1024/2048) *2
120k / 65k 120k / 65k 170k / 135k 190k / 174k
DDoS Protection (SYN Flood) SYN/Sec 55 million 112 million 223 million 223 million
Application Delivery Partitions (ADP) L3V 1,023 1,023 1,023 1,023
Network Interface
1 GE Copper 0 0 0 0
1 GE Fiber (SFP) 0 0 0 0
1/10 GE Fiber (SFP+) 16 16 16 12
40 GE Fiber (QSFP+) 0 4 4 0
100 GE Fiber (CXP) 0 0 0 4
Management Interface Yes Yes Yes Yes
Lights Out Management Yes Yes Yes Yes
Console Port Yes Yes Yes Yes
Solid-state Drive (SSD) Yes Yes Yes Yes
Processor (Intel Xeon) 10-core 10-core Dual 12-core Dual 12-core
Memory (ECC RAM) 64 GB 64 GB 128 GB 128 GB
Hardware Acceleration
64-bit Linear Decoupled Architecture Yes Yes Yes Yes
Flexible Traffic Acceleration 1 x FTA-3+ FPGA 2 x FTA-3+ FPGA 4 x FTA-3+ FPGA 4 x FTA-3+ FPGA
Security & Policy Engine Hardware Hardware Hardware Hardware
Switching/Routing Hardware Hardware Hardware Hardware
2 x Dual, 2 x Quad or
SSL Security Processor (‘S’ Models) Dual Dual Quad
4 x Quad
Power Consumption (Typical/Max)*3 350W / 420W 400W / 480W 620W / 710W 995W / 1,150W
Heat in BTU/hr (Typical/Max) *3
1,195 / 1,433 1,365 / 1,638 2,116 / 2,423 3,395 / 3,924
Performance Per Watt (PPW) *4
7,381 7,708 10,000 6,174

Power Supply Dual 1100W RPS Dual 1100W RPS Dual 1100W RPS 2+2 1100W RPS
(DC Option Available) 80 Plus Platinum efficiency, 100 - 240 VAC, 50 – 60 Hz
Cooling Fan Hot Swap Smart Fans
1.75 in (H), 17.5 in (W), 1.75 in (H), 17.5 in (W), 1.75 in (H), 17.5 in (W), 5.3 in (H), 16.9 in (W),
Dimensions
30 in (D) 30 in (D) 30 in (D) 28 in (D)
Rack Units (Mountable) 1U 1U 1U 3U
Unit Weight 34.5 lbs 35.5 lbs 39 lbs 74.5 lbs / 78 lbs*2
Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%
FCC Class A, UL, CE, FCC Class A, UL, CE, FCC Class A, UL, CE,
TUV, CB, VCCI, China TUV, CB, VCCI, China TUV, CB, VCCI, China FCC Class A, UL, CE,
Regulatory Certifications CCC, MSIP, BSMI, RCM, CCC, BSMI, RCM, EAC, CCC, BSMI, RCM, EAC, TUV, CB, VCCI, EAC, FAC
EAC, NEBS | RoHS, FIPS NEBS | RoHS, FIPS NEBS | RoHS, FIPS | RoHS
140-2‡ 140-2‡ 140-2‡
Standard Warranty 90-day Hardware and Software

*1 Layer 7 connections per second - measures number of new HTTP connections (1 HTTP request per TCP connection, without TCP connection reuse) within 1 second | *2 With maximum SSL |
*3 With base model. Number varies by SSL model | *4 Layer 4 CPS per Watt (Max) | ‡ Certification in process and FIPS model must be purchased

9
Thunder HVA Products Specifications Table
Thunder 3030S HVA Thunder 3530S HVA
Throughput* 35 Gbps 100 Gbps
vThunder Virtual Appliances Instances
8 40
(Included)
Network Interface
1 GE Copper 6 4
1 GE Fiber (SFP) 2 2
1/10 GE Fiber (SFP+) 4 12
Management Interface Yes Yes
Lights Out Management Yes Yes
Console Port Yes Yes
Solid-state Drive (SSD) Yes Yes
Processor (Intel Xeon) 4-core Dual 10-core
Memory (ECC RAM) 32 GB 128 GB
Hardware Acceleration
64-bit Linear Decoupled Architecture Yes Yes
Flexible Traffic Acceleration Software Software
Switching/Routing Software Software
SSL Security Processor (SR-IOV Enabled) Single Quad
Power Consumption (Typical/Max) 131W / 139W 380W / 476W
Heat in BTU/hr (Typical/Max) 447 / 474 1,297 / 1,624
Dual 600W RPS Dual 750W RPS
Power Supply
(DC Option Available) 80 Plus Platinum efficiency, 80 Plus Gold efficiency,
100 - 240 VAC, 50 – 60 Hz 100 - 240 VAC, 50 – 60 Hz
Cooling Fan Hot Swap Smart Fans Hot Swap Smart Fans
Dimensions 1.75 in (H), 17.5 in (W), 17.45 in (D) 1.75 in (H), 17.25 in (W), 22.8 in (D)
Rack Units (Mountable) 1U 1U
Unit Weight 20.1 lbs 29.6 lbs
Operating Ranges Temperature 0° - 40° C | Humidity 5% - 95%
Regulatory Certifications FCC Class A‡, UL‡, CE‡, TUV‡, CB‡, VCCI‡, China CCC‡, BSMI‡, RCM‡, EAC‡, FAC‡
Standard Warranty 90-day Hardware and Software
* Performance varies by number of virtual machines running and hardware resources assigned | ‡ Certification in process

vThunder ADC Specifications Table

vThunder ADC
VMware ESXi 4.1 or higher
Supported Hypervisors KVM QEMU 1.0 and higher
Microsoft Hyper-V on Windows Server 2008 R2 or higher
Licenses (Throughput) Lab 200 Mbps 1 Gbps 4 Gbps 8 Gbps 10 Gbps 20 Gbps

VMware ESXi • • • • •
KVM (SR-IOV) • • • • • • •
KVM • • • • •
Microsoft Hyper-V • • • • •+
Hardware Requirements See installation guide
Standard Warranty 90-day Software
+ 8 Gbps license not recommended for Microsoft Hyper-V

10
vThunder ADC for Cloud Specifications Table
vThunder for AWS vThunder for Azure
• vThunder for AWS Pre-installed License: up to • vThunder for Azure Pre-installed License: up to
500 Mbps 500 Mbps
Throughput
• vThunder for AWS BYOL (Bring Your Own License) • vThunder for Azure BYOL (Bring Your Own License)
Editions: up to 1 Gbps Editions: up to 500 Mbps
Image Format Amazon AMI Microsoft VHD
vThunder for AWS Pre-installed License: vThunder for Azure Pre-installed License:
• 10 Mbps • 10 Mbps
• 50 Mbps • 50 Mbps
• 100 Mbps • 100 Mbps
• 200 Mbps • 200 Mbps
Licenses (Throughput) • 500 Mbps • 500 Mbps

vThunder for AWS BYOL Editions: vThunder for Azure BYOL Editions:
• Lab/Developer • Lab/Developer
• 200 Mbps • 200 Mbps
• 1 Gbps • 500 Mbps

Thunder ADC for Bare Metal Specifications Table

Thunder ADC for Bare Metal

Throughput Up to 40 Gbps

Minimum Hardware Requirement

• Intel x86-based CPUs with minimum of 4 cores and 16 to 24 GB RAM/core
• 80 GB of available HDD capacity
• ACOS supports a wide range of Intel chip sets and the following Intel drivers: e1000e, igb, ixgbe, and i40e
System Requirements
Maximum CPU core support
• 10 Gbps (4 cores), 20 Gbps (8 cores) and 40 Gbps (14 cores)
Operating System
• ACOS 4.1 and higher
Cisco UCS, Dell PowerEdge, Ericsson Hyperscale Datacenter System (HDS), HPE ProLiant and more.
Reference Platforms
See installation guide for other reference platforms and details.

Licenses (Throughput) 10 Gbps, 20 Gbps and 40 Gbps

Standard Warranty 90-day Software

11
 Thunder 840 Thunder 930 Thunder 1030S

Thunder 3030S Thunder 3230(S) Thunder 3430(S)

Thunder 4430(S) Thunder 4440(S) Thunder 5330(S)

Thunder 5430(S)-11 Thunder 5440(S)

Thunder 5630(S)

Thunder 5840(S) Thunder 6430(S) Thunder 6440(S)

Thunder 7440(S)
Thunder 6630(S)

Thunder4435(S) SPE Thunder 5435(S) SPE Thunder 6435(S) SPE

Thunder 3030S HVA Thunder 3530S HVA

Thunder 6635(S) SPE

12
Detailed Feature List* • AAM RADIUS-based audit support
(*Features may vary by appliance) • Single sign-on (SSO) authentication relay
• Authentication for Microsoft SharePoint, Outlook Web Access,
Application Delivery
and other packaged and custom applications
• Comprehensive IPv4/IPv6 Support
• Comprehensive SSL/TLS support
• Advanced Layer 4/Layer 7 Server Load Balancing
-- TLS 1.2 and 4096-bit SSL key support
-- Fast HTTP, Full HTTP Proxy
-- Perfect Forward Secrecy (PFS) with Elliptic Curve Diffie-
-- High-performance, template-based Layer 7 switching with
Hellman Exchange (ECDHE) and other Elliptic Curve
header/URL/domain manipulation
Cryptography (ECC) ciphers
-- Comprehensive Layer 7 application persistence support
-- AES-NI, GCM and ECDHE ciphers
-- FTP, DNS, FIX and more
• IP Anomaly Detection
• Comprehensive load balancing methods
• Connection Rate Limiting/Connection Limiting
-- Round Robin, Least Connections, Weighted RR, Weighted
• Bandwidth Rate Limiting per Source IP
LC, Fastest Response, & more
• Dynamically add IPs to Black-White Lists
• aFleX – deep packet inspection and transformation for
• Forward Proxy
customizable, application-aware switching
-- Managing Internet bound traffic as explicit or transparent
• Advanced Health Monitoring
proxy
-- Comprehensive Protocol Support – ICMP, TCP, UDP, HTTP,
-- Traffic steering and URL filtering based on SNI and web
HTTPS, FTP, RTSP, SMTP, POP3, SNMP, DNS, RADIUS, LDAP,
category
& more
-- User authentication
-- Scriptable health check support using TCL, Python, Perl,
• Support for Simple Certificate Enrollment Protocol (SCEP)
and Bash
• Hardware Security Module (HSM) support
• High Availability – Active-Active, Active-Standby
-- Internal HSM card*
configurations
-- External network HSM (Thales nShield HSM)
• SIP Load Balancing for VoIP
• STARTTLS support for Secure Email & LDAP A10 Threat Intelligence Service**
• Spam Filter Support – high-speed application of very large • Dynamically updated threat intelligence feed
black/white lists A10 URL Classification Service**
• Firewall Load Balancing (FWLB) • Dynamically updated bypass list for trusted websites
• Global Server Load Balancing (GSLB) High Performance, Scalable Platform
• Transparent Cache Switching (TCS) • ACOS (Advanced Core Operating System)
• Next Hop Load Distribution (NHLD) for load balancing -- Multi-core, Multi-CPU support
multiple links -- Linear Application Scaling
• Diameter AAA Load Balancing -- Linux on control plane
• Database Load Balancing • ACOS on data plane
• Internet Content Adaptation Protocol (ICAP) Support
Networking
Application Acceleration • Integrated Layer 2/Layer 3
• HTTP Acceleration and Optimization • Transparent Mode/Gateway Mode
-- HTTP Connection Multiplexing (also called TCP connection • Routing – Static Routes, IS-IS (v4/v6), RIPv2/ng, OSPF v2/v3,
reuse) BGP4+
-- RAM Caching • VLAN (802.1Q)
-- HTTP Compression • Trunking (802.1AX), LACP
• SSL Offload • Access Control Lists (ACLs)
-- SSL Termination, SSL Bridging • Traditional IPv4 NAT/NAPT
-- SSL Proxy • IPv6 NAPT
-- SSL session ID reuse • Jumbo Frame support
• WAN protocol support including Selective Acknowledgment, • Hardware-accelerated VXLAN
Fast Ramp, Client Keep alive, and Window Scaling • NVGRE
• HTTP Pipelining support
IPv6 Migration/IPv4 Preservation
• SPDY protocol support
• Full native IPv6 management and feature support
Security • SLB-PT (Protocol Translation), SLB-64 (IPv4<–>IPv6,
• Web Application Firewall (WAF) IPv6<–>IPv4)
• DNS Application Firewall (DAF) • Carrier Grade NAT (CGN/CGNAT), Large Scale NAT (LSN),
• Next-generation DDoS protection for servers and CGNAT NAT444, NAT44, NAT46
pools -- Integrated DDoS protection for NAT pools
• Application Access Management (AAM)—SAML, Kerberos, • NAT64/DNS64, DS-Lite, 6rd, LW4o6
NTLM, TDS SQL Logon, LDAP, RADIUS, Basic, OCSP stapling, • ALG protocol support for protocols with dynamic ports like
HTML Form- based SIP and FTP

13
Management Carrier-grade Hardware*
• Dedicated management interface (Console, SSH, Telnet, • Advanced hardware architecture
HTTPS) • Hardware-based SYN Cookies
• Web-based Graphical User Interface (GUI) with Language • Hot swap Redundant Power Supplies (AC or DC)
Localization • Smart Fans (hot swap)
• Industry-standard Command Line Interface (CLI) support • Solid-state drive (SSD)
• AppCentric Templates (ACT) for wizard based configuration • High Port Density
and analytics • 40 GE ports
-- SLB deployment • 100 GE ports
-- Microsoft Exchange deployment • Tamper detection
-- Integrated security features • Lights Out Management (LOM/IPMI)
• Granular Role-based Access Control • Thales
• SNMP, Syslog, email alerts, NetFlow v9 and v10 (IPFIX), sFlow • High performance security processor option
• Port mirroring
• REST-style XML API (aXAPI) for all functions Certifications
• Local LDAP, TACACS+, RADIUS support Security and Capability Assurance Certifications*
• Selectable number of CPUs for control processing • Common Criteria EAL 2+
Virtualization • FIPS 140-2 Level 2
• aVCS (Virtual Chassis System) • Joint Interoperability Test Command (JITC)
• vThunder Virtual Appliance for VMware vSphere ESXi, • Network Equipment Building System (NEBS) compliance
Microsoft Hyper-V, KVM (with SR-IOV and Virtio support), *Features and certifications may vary by appliance
Amazon Web Services (AWS) AMI, and Microsoft Azure VHD **Additional paid service
• Multi-tenancy with Application Delivery Partitions (ADP)
-- Partition-based management
-- L3 virtualization
• Hypervisor acceleration and management integration

About A10 Networks

A10 Networks is a leader in application networking, providing a range of high-performance application networking solutions that help organizations
ensure that their data center applications and networks remain highly available, accelerated and secure. Founded in 2004, A10 Networks is based in
San Jose, California, and serves customers globally with offices worldwide. For more information, visit: www.a10networks.com.

Corporate Headquarters Worldwide Offices

A10 Networks, Inc North America Hong Kong To discover how A10 Networks products will
3 West Plumeria Ave. [email protected] [email protected] enhance, accelerate and secure your business,
San Jose, CA 95134 USA Europe Taiwan contact us at a10networks.com/contact or call to
Tel: +1 408 325-8668 [email protected] [email protected] speak with an A10 sales representative.
Fax: +1 408 325-8666 South America Korea
www.a10networks.com [email protected] [email protected]
Japan South Asia
[email protected] [email protected]
Part Number: A10-DS-15100-EN-22 China Australia/New Zealand
Dec 2016 [email protected] [email protected]

©2016 A10 Networks, Inc. All rights reserved. A10 Networks, the A10 Networks logo, ACOS, A10 Harmony, A10 Lightning,
Thunder and SSL Insight are trademarks or registered trademarks of A10 Networks, Inc. in the United States and other
countries. All other trademarks are property of their respective owners. A10 Networks assumes no responsibility for
any inaccuracies in this document. A10 Networks reserves the right to change, modify, transfer, or otherwise revise this
publication without notice. For the full list of trademarks, visit: www.a10networks.com/a10-trademarks. 14