Configuration can be accomplished through a clean Java-based
GUI or a sluggish-but- functional Telnet
command line. The GUI can be password-protected; in this case, SSL
encrypts the login/password exchange. Thereafter, GUI data is exchanged
in the clear, something to keep in mind if you plan to administer
your cache remotely. Upcoming version 1.1 will allow administration
to be enabled/disabled for each interface, specific IPs, and read-only
access, and 2.0 will secure all GUI data with SSL.
The Health tab summarizes the
overall well-being of the device, updated via NTP, DNS, and default
gateway pings once per minute. The GUI is nicely
presented as a single window with left-hand button and panel-tab navigation.
System panels enable configuration of Network Time Protocol, Actions (ping,
shutdown, restart, factory settings, purge cache, password), configuration
file Import/Export, and download/ installation of software Upgrades.We were
pleased to see human-readable configuration files and even happier to find
they can be booted from floppy. Configuration files can also be FTP'ed.
Network panels permit modification of initial
IP Address, DNS, and Gateway/Firewall settings. The WebXL's interfaces
can be multi-homed, and Adapter Options can disable auto-sensing.
Further, TCP Options can extend connection, keep-alive, and idle timeouts,
and DNS cache TTLs can be modified. In some cases, these protocol
knobs can be needed to fine-tune network behavior; it is nice to have
them readily available. While more important for the enterprise market,
the WebXL can be configured to traverse a SOCKS firewallan extra
hop to be avoided unless required by security policy.
Several WebXLs can be clustered for redundancy and load
distribution. Each WebXL is assigned a role (active, standby, offline)
and capacity. Services and IP addresses can be configured to redirect
selected traffic to specified WebXLs. This sounds like a promising
feature; we'd like to see hints on how to best utilize it. We configured
clustering, but with only one WebXL could not test fail-over.