LDAP Proxy Solutions - Symlabs

Challenge

Symlabs LDAP proxy significantly enhances the reliability, security and scalability of directory deployments. It is by far the fastest LDAP proxy on the market, and works with any LDAP server and the majority of relational databases. With a full complement of unique features and a built-in scripting language, Symlabs LDAP proxy excels where others fall short - delivering rock solid performance under the most demanding conditions.

Solution

Reliability

Symlabs LDAP Proxy enhances the reliability of existing directory infrastructures by providing failover functionality and health checking. When a directory server goes down or becomes unresponsive, Symlabs LDAP Proxy will reroute traffic accordingly, depending on the configuration. By performing periodic health checks, it knows the state of all directory servers at all times and can quickly reroute traffic when necessary.

Symlabs LDAP Proxy ships with the most complete set of failover algorithms of any other on the market, from a simple failover mechanism up to complex multi-site algorithms with weighted priorities.

Security

Symlabs LDAP Proxy enhances the security of LDAP servers by controlling access, re-encoding requests, and by allowing filtering of traffic based on a comprehensive rule set. A complete access control module provides granular control over any entry, sub-tree or attribute. When it is necessary to expose your LDAP servers to the outside, re-encoding packets will protect against denial-of-service attacks. In addition, filtering requests can protect against undesired traffic or queries that attempt to fetch the entire user population (aka trawling).

Scalability and Performance

Symlabs LDAP Proxy is the best performing, most scalable on the market, as has been documented by numerous benchmarks. Several major wireless carriers use Symlabs LDAP Proxy in extremely demanding deployments involving tens of millions of directory entries and thousands of operations per second.

Load-Balancing

Whenever a high throughput of LDAP read operations is desired, load-balancing can be used to utilize a pool of servers. The actual queries are distributed over multiple servers in the pool, according to one of several algorithms available. Symlabs LDAP Proxy can load-balance by distributing load evenly, or by using a weighted algorithm that distributes load according to pre-defined characteristics.

Routing of Requests

Symlabs' LDAP Proxy can analyze queries and then route those to a server that is best suited to handle a particular request. This is very useful when queries require a special index to be carried out efficiently. It can detect this and route those requests to the servers where that index is defined.

Multi Protocol Support

Another key feature that differentiates it from other LDAP Proxy solutions is its multi protocol support. Apart from LDAP, the following protocols are supported: HTTP, SNMP, SIP, Radius, Diameter and DNS. All of these protocols can be utilized by Symlabs LDAP Proxy acting as a server, client, or both.

About Symlabs

Symlabs focuses on Identity Management. We offer "standards based" software components like the Symlabs Virtual Directory Server, Symlabs LDAP Proxy and the Symlabs Federated Identity Suite. We also offer software support, training and professional services.