F5-GTM廣域網(wǎng)流量管理與優(yōu)化方案

BIG-IPGlobalTrafficManager

廣域網(wǎng)流量管理與優(yōu)化方案應(yīng)用全球部署以后的挑戰(zhàn)異地容災(zāi)、故障切換客戶感受：易于使用、最佳訪問(wèn)效果應(yīng)用的協(xié)同多數(shù)據(jù)中心資源的充分利用擴(kuò)展性可管理性容災(zāi)方案：宕機(jī)的代價(jià)是沉重的“47%ofthebusinessescitedthatdisasterrecoverywasaprimetargetforITSpending”–NetworkComputingSurvivor’sGuideto2006survey

33%ofbusinessesdidnothaveDisasterRecoveryplansinplace16%ofbusinesseslostbetween$100-$500K/day26%ofbusinessesdon’tknowhowmuchtheylostSource:AT&TandIAEMreport傳統(tǒng)的應(yīng)用容災(zāi)方案的切換機(jī)制手動(dòng)修改客戶端訪問(wèn)目的地址手動(dòng)修改DNS解析記錄方式應(yīng)用層重定向都是需要人工介入?。?！指望人工進(jìn)行容災(zāi)切換是靠不住的$$$$ErrorProneSlowtoImplementCostlyLaborIntensive網(wǎng)絡(luò)管理員“Microsoft'swebsiteswereofflineforupto23hours-themostdramaticsnafutodateontheInternet-becauseofDNSequipmentmisconfigurationaffectingmorethan72millionusers.”“Wescrewedup.Thisistheworstdayofmyprofessionallife“

–NetworkAdministratoratMicrosoft錯(cuò)誤修改DNS記錄的后果是極其嚴(yán)重的客戶感受易于使用最快響應(yīng)速度UNIXWINSInternalDNSServers跨ISP訪問(wèn)：南北電信互訪問(wèn)題測(cè)試項(xiàng)目網(wǎng)通北京ADSL用戶訪問(wèn)12月2日凌晨1時(shí)廣東電信用戶訪問(wèn)，寬帶用戶，帶寬未知，12月2日16:30網(wǎng)通北京ADSL用戶訪問(wèn)，12月2日16:00上海ADSL寬帶用戶訪問(wèn)，12月2日20:00DNSResult202.xxx.xxx.209219.xxx.xxx.11202.xxx.xxx.209219.xxx.xxx.11網(wǎng)通電信網(wǎng)通電信網(wǎng)通電信網(wǎng)通電信Numberofhits:726947652471935RequestsperSecond71.270.870.780.320.58SocketConnects737057753482036TotalBytesSent(inKB)14.1913.470.9614.9613.6112.233.877.03BytesSentRate(inKB/s)00.060.12TotalBytesRecv(inKB)4148.244001.90256.584388.543019.942703.2621.7339.83BytesRecvRate(inKB/s)69.1266.684.2873.1250.3245.050.360.66多應(yīng)用在多數(shù)據(jù)中心中的協(xié)同問(wèn)題ClinicalrecordsdowninDallasdatacenter!ClinicalRecordServicesEmployeeInformationServicesPersonalInformationServicesServiceOrientedArchitecture特性：應(yīng)用智能、可管理性與高性能SOAApplicationManagementZoneRunner?-EliminateDNSErrorsBIG-IPGlobalTrafficManager(GTM)AdvancedapplicationandcomponentmonitoringiRules-FlexibilitytodefinedistributionpoliciesIPv6AAAArecordsupportLeadingDNSperformance(40KRes/s)TMOS極大提升全球交付應(yīng)用的可用性與可靠性主要功能與優(yōu)勢(shì)支持應(yīng)用在多個(gè)數(shù)據(jù)中心間進(jìn)行透明交付確保全球業(yè)務(wù)的連續(xù)性和應(yīng)用的可用性靈活的負(fù)載均衡算法，能夠根據(jù)任何一項(xiàng)業(yè)務(wù)政策（包括地理信息、負(fù)載情況、網(wǎng)絡(luò)就近性等），并通過(guò)為直接用戶交付全球流量控制，來(lái)增強(qiáng)靈活性。引導(dǎo)用戶進(jìn)入全球最佳站點(diǎn)，能夠顯著改進(jìn)性能并提高客戶的體驗(yàn)。集中管理與監(jiān)控，實(shí)現(xiàn)從單一地點(diǎn)提供全面的應(yīng)用和數(shù)據(jù)中心狀態(tài)信息，降低管理開(kāi)銷通過(guò)充分利用備份數(shù)據(jù)中心，以提高全球網(wǎng)絡(luò)的效率、可擴(kuò)展性以及投資回報(bào)。能夠?qū)崿F(xiàn)復(fù)雜任務(wù)的自動(dòng)化流程，從而降低維護(hù)和管理開(kāi)銷。廣州數(shù)據(jù)中心上海數(shù)據(jù)中心User查詢LocalDNSF5BIG-IPGTM--廣域網(wǎng)流量管理與優(yōu)化方案BIG-IPServerfarmWebmaster北京數(shù)據(jù)中心RouterBIG-IPInternetInternetGTMGTM基本工作機(jī)制GTMisaWideArealoadbalancerusingDNSastheTrafficManagementmechanism.BINDisversion9.3.1BINDzonefileUIisnowZoneRunnerWideIPrecordsarewrittentotheappropriatezonefilesGTMgetsBIG-IPstylemonitorsandpools.Big3d’sareusedtocommunicateavailabilitybetweenGTMandBIG-IPsystems.Big3d’scommunicateviaiQueryoverSSL,andutilizegziptocompressmessagingBig3dshimdaemonfacilitatescommunicationbetween9.x(big3d)and4.x3-DNS.GTM決策過(guò)程

WhenaDNSrequestisreceivedbytheGTMlistener,tmmandgtmdgothroughthefollowingdecisionmakingprocessbeforeanyIPaddressisreturned:TMMcheckstoseeifthereisaWideIPthatmatchestherequestIfthereismatchgtmdhandlestherequest.IfthereisnomatchtherequestispasseddowntoBIND.IfaWideIPmatchestherequest,gtmdchecksit’spersistencetableforapersistencerecord.Ifamatchexiststhengtmdwillgiveouttherecordinthepersistencetable.IfnotthenGTMdetermineswhatpooltosendthetraffictobasedupontheWideIPLBmethod,andtheavailabilityofeachpool.GTMreturnsArecordsonly(AAAAandA6recordsincluded)Oncetherequestreachesthepoollevel,thepoolmustmakeaload-balancingdecisionbaseduponit’sLBconfigurationandtheavailabilityofthepoolmembers.GTMLBMechanismGTM’s采用分層的負(fù)載均衡機(jī)制AWideIPloadbalancesbetweenitspools.Apoolloadbalancesbetweenpoolmembers.InthecontextofGTMapoolmemberisaVirtualServer.AvirtualserverisasubcomponentofaServerObject.ThusyoumustconfigureTopologyaccordingly:1stpass:pickapool2ndpass:withinapooltoselectapoolmember廣域網(wǎng)訪問(wèn)流量?jī)?yōu)化歐洲用戶美洲用戶GTM德國(guó)DataCenter美國(guó)DataCenter=集成的性能結(jié)構(gòu)商業(yè)標(biāo)準(zhǔn)控制全球用戶訪問(wèn)在多個(gè)數(shù)據(jù)中心之間的流量分配地址位置就近訪問(wèn)－Topology亞洲用戶新加坡DataCenterTopology舉例來(lái)自北美（NorthAmerica）的訪問(wèn)請(qǐng)求導(dǎo)向到北美的兩個(gè)數(shù)據(jù)中心（NA）來(lái)自北美（Europe）的訪問(wèn)請(qǐng)求導(dǎo)向到北美的兩個(gè)數(shù)據(jù)中心（London）來(lái)自其它地方的訪問(wèn)請(qǐng)求導(dǎo)向到北美的兩個(gè)數(shù)據(jù)中心（Tokyo）Topology舉例(cont.)Fromtopology.inctopology{//6Items//server ldns scoredc."London" continent."Europe" 250pool."nor_am_web"continent."NorthAmerica" 250pool."nor_am_web"/0 25dc."Tokyo" continent."Asia" 250dc."Tokyo" continent."Australia" 250pool."nor_am_web"continent."SouthAmerica" 250}Topologyexample(cont.)FromtheGUI網(wǎng)絡(luò)就近性動(dòng)態(tài)探測(cè)GTM支持的負(fù)載均衡算法循環(huán)全球可用性LDNS持續(xù)性應(yīng)用可用性地理分布虛擬服務(wù)器容量最少連接Pkt/sec（數(shù)據(jù)包/每秒）KB/sec（千字節(jié)/每秒）往返時(shí)間中繼段（hop）數(shù)據(jù)包完整率用戶定義服務(wù)質(zhì)量（QoS）動(dòng)態(tài)比率LDNS循環(huán)比率隨機(jī)組合的負(fù)載均衡算法TheBelowpoolcontainsaVirtualServeronaBIG-IP,andaVirtualServerfromaGenericHost: pool{ name"bigip_and_host" ttl30 preferredga alternateratio member00:80ratio2 member05:80 }PoolName: bigip_and_hostttl: 30secondsPreferredLB: GlobalAvailabilityAlernateLB: ratioFallbackLB: ReturntoDNS(default)FallbackIP: noneGTMWideIPPersistenceTherearetwotypesofpersistence:StaticPersist:AStaticLBmode.WideIPPersistence:AppliedoneachWideIPobjectasadrop-downconfigurationoption.WideIPpersistenceworksinthefollowingway:firsttimethroughapoolmemberispicked(LB)andputintothepersistencetable(andsync'dtoallotherlisteningGTM's)secondtimethroughifthepersistentpoolmemberisstillavailable(green)thenthatpoolmemberisreturnedandthetimestampupdatedonthepersistenceentry(andwesyncthattoo)ifthepoolmemberisnotavailable(!green)thenthepersistenceentryistossedandanewonecreatedonceLBiscomplete.Iftherearenorequestsforapersistenceentryitisremovedfromthetableoncethatentryhasexpired.PersistencerecordsaresynchronizedbetweenGTMsynchronizationpeersPersistencerecordscanbeviewedintheUI:Navigate:Statistics->GlobalTraffic->PersistenceRecordsStaticPersistLBmethodisdiscussedinapreviousslide.自動(dòng)容災(zāi)切換RouterL-DNSBIG-IPGTMBIG-IPLTMCorporateServersSite1(Primary)ClientRouterBIG-IPLTMCorporateServersSite2(Backup)BIG-IPGTMGTM服務(wù)器可用性檢查（Monitors）GTMinheritsit’smonitorsfromLTM.AnadministratorcancreatethesamemonitorsthatareavailableinLTMtomonitorGTMobjects.Monitorscanbeappliedon:ServersVirtualServersPools(andpoolmembers)服務(wù)器可用性檢查ApplicationDeviceFTP…HTTP…DB.DHTTPS…SiebelAppOracleDB內(nèi)容/文件檢查

DataCenterIntranetApp:Siebelin紐約

HTTPServer DBServer SiebelApp OracleDB Siebelcontent verification可用性解決方案:

web服務(wù)穿過(guò)特定區(qū)域、設(shè)備，使應(yīng)用得到一個(gè)統(tǒng)一服務(wù)檢測(cè)的批量可用性好處: 可探測(cè)到任意標(biāo)準(zhǔn)的web服務(wù)套件的失敗多應(yīng)用協(xié)同－－DistributedApplicationsdistributedapplication是一個(gè)要使用到多個(gè)域名（wideip）的應(yīng)用，這些域名分布在不同的服務(wù)器上，由這組服務(wù)器協(xié)同工作構(gòu)成一個(gè)完整的應(yīng)用.DistributedApplications將多個(gè)Wideip當(dāng)作一個(gè)對(duì)象來(lái)進(jìn)行管理，可以同時(shí)Enable或Disable.DistributedApplicationManagementManagemultipleservicesaspartofacollectiveapplicationBenefitsLowercomplexity,easemanagement

ReducedmanagementoverheadCostsavingsfromreducedstaffEliminatecostofdowntime

BIG-IPGlobalTrafficManagerSolution-DataCenterADataCenterBNewCarAppOnestepfailoverManageServiceDependenciesChallengeHundredsofapplicationsManualfailoverisslow,errorproneMulti-stepfailovertoshutdown

eachapplicationserviceNoinstantaneousfailoverDistributedApplicationsExample1:DataCenterDependency當(dāng)構(gòu)成DistributedApplication的Wideip中有任何一個(gè)，其對(duì)應(yīng)的virtualserver都不同用的話，對(duì)這個(gè)DistributedApplication來(lái)說(shuō)，這個(gè)virtualserver所屬的數(shù)據(jù)中心就是不可用的。但其它不屬于這個(gè)DistributedApplication的訪問(wèn)請(qǐng)求，仍然可以被分發(fā)到這個(gè)數(shù)據(jù)中心的。Example2:ServerDependency當(dāng)構(gòu)成DistributedApplication的Wideip中有任何一個(gè)，其對(duì)應(yīng)的virtualserver都不同用的話，對(duì)這個(gè)DistributedApplication來(lái)說(shuō)，這個(gè)virtualserver所屬的服務(wù)器就是不可用的。但其它不屬于這個(gè)DistributedApplication的訪問(wèn)請(qǐng)求，仍然可以被分發(fā)到這個(gè)服務(wù)器上來(lái)。ZoneRunner減少DNS配置錯(cuò)誤EasyDNSmanagementAutopopulationofprotocolsValidation/errorcheckingRollbacktothelasttransactionImportationofzonesAutomaticreverselookupsZoneRunner?OnlyintegratedDNSManagementUtility成功案例-TOM.COMCDNSite沈陽(yáng)Site西安Site成都Site長(zhǎng)沙Site廣州Site杭州Site北京Site教育網(wǎng)Site中國(guó)移動(dòng)100MFE1000MGESwitchRouterF53DNSF5bigip2400Netapp6200Netapp2100成功案例-ChinaCacheChinaCache中國(guó)最大的CDN服務(wù)提供商Solutionrequirement:Nodedeployment:30-50inChinaCapacityofeachnode:40-1000MBImplementation:DeployBIGIP,3DNS,F5totalCDNsolutionBIG/IPLBforCache3DNSforWANLBSee-ITformanagement

21cnGSLB解決方案SEE-ITWEB/StreamingServer3DNS3DNSBigIP2400CoreSwitch21cn廣州機(jī)房GBFECacheServerWEB/StreamingServerBigIP5000BigIP500021cn上海節(jié)點(diǎn)CoreSwitchInternetWEB/StreamingServerBigIP2400CoreSwitch21cn河北節(jié)點(diǎn)Summary:BIG-IPGTMBIG-IPGlobalTrafficManagerApplicationHealthFeaturesCompositemonitorsApplication-specificmonitorsDistributedapplicationmonitoringManagementFeaturesNewandimproveduserinterfaceZoneRunner