F負(fù)載均衡設(shè)備培訓(xùn)

BIG-IPV9F5NetworksTraining2/1/2005BIG-IPV9F5NetworksTraining11/1/2004Module1-InstallationInternetBIG-IPsClientsServersModule1-OutlineBIG-IPPlatformOverviewInstallation(SetupUtility)ConfigurationUtilitiesandUserAccessInitialBIG-IPSetupConfigutilityIPAddressforManagementinterfaceLicenseSetuputilityRootpasswordIPAddressforVLANsAssigninterfacestoVLANsWebAdminpasswordSSHAccessconfigUtilityInitialIPAddressis45InternetLicenseProcess–AutomatedRunSetuputility

EnterRegistrationKeyPCBIG-IPLicensethebox

GetLicensefromF5

SelectparametersF5LicenseServeractivate.F5.comLicenseProcess–ManualPCBIG-IPF5LicenseServeractivate.F5.comInternetCopyProductDossiertoPCPasteProductDossiertoF5MovePCtoInternetDownloadLicensetoPCUpload&InstallLicensefileRunSetuputilityManuallyLicensetheboxPChttps://activate.F5.comMovePCbackSetupUtilityhttps://ManagementIPAddressSetupUtility–NetworkWebConfigurationutilitySetup/ConfigurationAccessTwomethodsWebInterfacehttps(remote)CommandLinessh(remote)SerialTerminalBIG-IPBackupProcessStorestheconfiguationinasinglefileCanbecopiedtoanothersystemUserAuthenticationProcessBIG-IPAdminUsersModule2––LoadBalancing12345678InternetModule2––OutlineVirtualServers,Members&NodesConfiguringVirtualServers&PoolsVirtualServer&PoolLabLoadBalancingModesConfiguringLoadBalancingLoadBalancingLabsPool-GroupingofMembersInternetClientsRouterBIG-IPControllerServersPoolMembersandNodesInternet:8080:80:4002:80PoolMembersNodesrefertoPoolMembersIPAddressonlyVirtualServerInternet:8080:4002:80VirtualServerBasicmechanismtomanagetrafficIPAddress+Service(Port)CombinationVirtualserversnormallyAssociatedwithoneormoremember7:80VirtualServertoPoolMembersInternet:8080:80:4002:80VirtualServer7:80PoolMembersMapstoVirtualServer-AddressTranslationBIG-IPperformsnetworkaddresstranslationtorealserveraddressessuchthatallmachinesareviewedasoneVirtualServerRealServerAddressNetworkAddressTranslationVirtualServerAddressInternet7:80:8080:80:4002:80NetworkFlow-Packet#1Internet:8080:80:4002:80DNSServer7:80NetworkFlow-Packet#1BIG-IPtranslatesDestAddresstoNodebasedonLoadBalancingInternetPacket#1Src-0:4003Dest––7:80:8080:80:4002:80Packet#1Src––0:4003Dest––:8007:80NetworkFlow––Packet#1ReturnBIG-IPtranslatesSrcAddressbacktoVirtualServerAddressInternetPacket#1-returnDest-0:4003Src––7:80:8080:80:4002:80Packet#1-returnDest––0:4003Src––:8007:80NetworkFlow-Packet#2InternetPacket#2Src-1:4003Dest––7:80:8080:80:4002:80Packet#2Src––1:4003Dest––:400217:80NetworkFlow––Packet#2ReturnInternetPacket#2-returnDest-1:4003Src––7:80:8080:80:4002:80Packet#2-returnDest–1:4003Src––:400217:80NetworkFlow-Packet#3InternetPacket#3Src-5:4003Dest––7:80:8080:80:4002:80Packet#3Src–5:4003Dest––:808057:80NetworkFlow–Packet#3ReturnInternetPacket#3-returnDest-5:4003Src–7:80:8080:80:4002:80Packet#3-returnDest––5:4003Src–:808057ConfiguringPoolsConfiguringVirtualServersScrolldownStatisticsSummaryVirtualServersPoolsNodesLogsLoadBalancingModesRoundRobinRatioLeastConnectionsFastestObservedPredictiveDynamicRatioPriorityGroupActivationFallbackHostStaticDynamicFailureMechanismsRoundRobinClientsRouterBIG-IPControllerServersClientrequestsaredistributedevenly12345678InternetRatioClientsRouterBIG-IPControllerServersAdministratorsetsratiofordistributingClientrequests3:2:1:11234891011Internet571214613FastestClientsRouterBIG-IPControllerServersNextrequestsgotoNodewithfastestresponsetime25Internet10ms10ms10ms17msCurrentResponseTimes1436FastestClientsRouterBIG-IPControllerServersSometimelater,responsetimeschange102104Internet10ms10ms7ms7msCurrentResponseTimes101103LeastConnectionsClientsRouterBIG-IPControllerServers12InternetNextrequestsgoestoNodewithfewestopenconnections459460461470CurrentConnections3456LeastConnectionsClientsRouterBIG-IPControllerServersInternetSometimelater,numberofconnectionschange6163280290111112CurrentConnections62ObservedClientsRouterBIG-IPControllerServersNextrequestsgoestoNodewithcombinationoffewestconnectionsandbestresponse12InternetPredictiveClientsRouterBIG-IPControllerServers12InternetNextrequestsgoestoNodewithcombinationoffewestconnectionsandbestresponseovertimePriorityGroupActivationClientsRouterBIG-IPControllerServers135246InternetPriority1Priority2IfyousetPriorityGroupActivationto2,and3ofthehighestprioritymembersareavailable,thenlowerprioritymemberswillnotbeused.PriorityGroupActivationClientsRouterBIG-IPControllerServers15InternetPriority1Priority2324678IfnumberofmembersfallsbelowPriorityGroupActivation(2),thenthenexthighestprioritymembersareusedalso.FallbackHostClientsRouterBIG-IPControllerServersInternetIfallmembersfail,thenclientissentanhttpredirecttoandalternateserver.PoolMembervs.NodeLoadBalancingby:PoolMemberIPAddress&serviceNodeTotalservicesforoneIPAddressIfusingMemberInternetNexthttprequestsgoestoPoolMemberwithfewesthttpconnectionsCurrentConnectionshttp10710899ftp232512IfhttppoolusesLeastConnections(member)loadbalancingmethod,then……IfusingNode12InternetNexthttprequestsgotoIPAddresswithfewesttotalconnectionsCurrentConnectionshttp10710899ftp2325ConfiguringLoadBalancingRatio&PriorityGroupActivationModule3––MonitorsInternet:80Module3-OutlineMonitorConceptsConfiguringMonitorsAssigningMonitorsNodeandMemberStatusHealthMonitorLabsMonitorConceptsAddressCheckNode–IPAddressServiceCheckIP:portContentCheckIP:portpluscheckdatareturnedInteractiveCheckPathCheckAddressCheckStepsPacketssenttoIPAddressesIfnoresponse,thennotrafficsenttomembersusingthatnodeaddressExample-ICMPInternetICMPServiceCheckStepsOpensTCPconnection(IPAddress:service)ConnectionclosedIfTCPconnectionfails,thennotrafficsenttoassociatedMembersExample–TCPInternet:80:80:80TCPConnectionContentCheckInternet:80:80:80StepsOpensTCPconnection(IPAddress:service)SendsarequestResponsereturnsdataConnectionclosedIfReceiveRulenotfoundindata,thennotrafficsenttoassociatedMembersExample–httphttpGET/InteractiveCheckInternet:80:80:80StepsOpensTCPconnection(IPAddress:service)Interactiveconversationtosimulatereal-worldConnectionclosedIfexpectedresultsdonotoccur,thennotrafficsenttoassociatedMembersExample–SQLrequestconversationPathCheckStepsSendspacketthrough,nottothedeviceCancheckIPAddress,ServiceorContentIfconditionnotmet,thennotrafficsentthroughassociatedmemberLinkCntlISP2ISP1ISP1ConfiguringMonitorsSystemSuppliedMonitors(Templates)AddressChecks(icmp)ServiceChecks(tcp)ContentChecks(http)InteractiveChecks(ftp)Availability:AlltemplatescanbecustomizedSomecanbeAssigned““as-is”SomecanonlybeusedasTemplatesforCustomMonitorsCreatingCustomMonitorsAdditionalMonitorParametersReceiveRuleIfcontentfound,NodemarkedUpReverseReceiveRuleIfcontentfound,NodemarkedDownTransparentIfPathAvailable,NodemarkedUpUsedformonitoringLinksMonitorTimersFrequency(Interval)TimeoutRecommended–5n+1AssigningMonitorsDefaultforallNodesSingleNodeOptionsNodeDefaultNodeSpecificNoneDefaultallMembersofaPoolSinglePoolMemberOptionsInheritfromPoolMemberSpecificNoneAssigningMonitorstoNodesForoneNodeAssigningMonitorstoPoolsForoneMemberMemberandNodeStatusParent-ChildStatusNodeMemberPoolVirtualServerStatusAvailable––GreenCircleOffline–RedDiamondUnknown–BlueSquareModule4–ProfilesInternetVirtualServerProfilesdeterminehowVirtualServertrafficisprocessedonBIG-IPModule4–OutlineProfilesConceptsProfileDependenciesProfileTypesConfiguringProfilesProfileConceptsAProfileis:SingleplacetodefinetrafficbehaviorSSL,compression,persistence…ApplybehaviortomultipleVS’sUserdefinedbuiltfromtemplateDependentonotherprofilesProfileScenario#1––Persistence123123Scenario#2–SSLTerminationDecryptedEncryptedProfileDependenciesSomecan’tbecombinedinVSSomedependentonothersThinkintermsofOSIModelTCPHTTPCookieUDPFTPNetworkDataLinkPhysicalProfileTypesProtocol–connectionorientedService–datatypeorientedPersistence–sessionorientedSSL–encryptionorientedAuthentication––securityorientedProfileConfigurationConceptsCreatedfromDefaultProfilesDefaultscanbemodified,notdeletedCustomandParentrelationshipSavedin/config/profile_base.confVirtualServerDefaultProfilesAllVirtualServershaveatleastoneProfileTCP:forvirtualserversprocessingTCPdataUDP:forvirtualserversprocessingUDPdataFastL4:forvirtualserversthatuseacceleration(PVA)ConfiguringProfilesConfiguringProfilesSpecifyPropertiesThenMaptoVirtualServerModule5-Persistence123123Module5–OutlineSourceAddressPersistenceSourceAddressPersistLabCookiePersistenceInsert,Rewrite,Passive&HashCookiePersistLabSourceAddressPersistenceBasedonClientSourceIPAddressNetmask->AddressRange12312301IfNetmaskis07ConfiguringSourceAddressPersistPointVirtualServertoProfileConfigureProfileCookiePersistenceInsertmodeBIG-IPInsertsacookieintothestreamRewritemodeWebservercreatescookieandBIG-IPControllerchangesitPassivemodeWebservercreatescookieandBIG-IPControllerReadsitHashmodeMapsacookievaluetoaspecificnodeWebservermustgenerateacookieClientServerHTTPrequest(nospecialcookie)TCPhandshakeTCPhandshakeHTTPrequest(nospecialcookie)HTTPreply(nospecialcookie)HTTPreply(withinsertedcookie)pickserverHTTPrequest(withsamecookie)TCPhandshakeTCPhandshakeHTTPrequest(withsamecookie)HTTPreply(nospecialcookie)HTTPreply(updatedcookie)cookie

specifiesserverFirstHitSecondHitCookieInsertModeClientServerHTTPrequest(nospecialcookie)TCPhandshakeTCPhandshakeHTTPrequest(nospecialcookie)HTTPreply(withblankcookie)HTTPreply(withrewrittencookie)pickserverHTTPrequest(withsamecookie)TCPhandshakeTCPhandshakeHTTPrequest(withsamecookie)HTTPreply(withblankcookie)HTTPreply(withupdatedcookie)cookie

specifiesserverFirstHitSecondHitCookieRewriteModeClientServerHTTPrequest(nospecialcookie)TCPhandshakeTCPhandshakeHTTPrequest(nospecialcookie)HTTPreply(withspecialcookie)HTTPreply(withspecialcookie)pickserverHTTPrequest(withsamecookie)TCPhandshakeTCPhandshakeHTTPrequest(withsamecookie)HTTPreply(withspecialcookie)HTTPreply(withspecialcookie)cookie

specifiesserverFirstHitSecondHitCookiePassiveModeClientServerHTTPrequest(nospecialcookie)TCPhandshakeTCPhandshakeHTTPrequest(nospecialcookie)HTTPreply(withcookie)HTTPreply(withcookie)pickserverHTTPrequest(withsamecookie)TCPhandshakeTCPhandshakeHTTPrequest(withsamecookie)HTTPreply(withcookie)HTTPreply(withcookie)cookiehashspecifies

serverFirstHitSecondHitThirdHitServerTCPhandshakeHTTPrequest(withsamecookie)HTTPreply(withcookie)cookiehashspecifies

serverTCPhandshakeHTTPrequest(withsamecookie)HTTPreply(withcookie)CookieHashModeConfiguringCookiePersistenceThensetCookiePersistprofileCookiePersistrequireshttpprofileMemberStateNodeStateEnableConnectEnableSessionNodeStateResultsCheckedCheckedUPExistingConnections–maintainedNewConnections–acceptedNewSessions–acceptedCheckedUncheckedDisabledExistingConnections–maintainedNewConnections–acceptedforexistingsessionsonlyNewSessions–notcreatedUncheckedCheckedForcedDownExistingConnections–maintainedNewConnections–deniedNewSessions–notcreatedUncheckedUncheckedForcedDownExistingConnections–maintainedNewConnections–deniedNewSessions–notcreated9、靜夜夜四無無鄰，，荒居居舊業(yè)業(yè)貧。。。12月月-2212月月-22Wednesday,December7,202210、雨雨中中黃黃葉葉樹樹，，燈燈下下白白頭頭人人。。。。22:02:3322:02:3322:0212/7/202210:02:33PM11、以我獨沈久久，愧君相見見頻。。12月-2222:02:3322:02Dec-2207-Dec-2212、故人江海別別，幾度隔山山川。。22:02:3322:02:3322:02Wednesday,December7,202213、乍見見翻疑疑夢，，相悲悲各問問年。。。12月月-2212月月-2222:02:3322:02:33December7,202214、他鄉(xiāng)生白白發(fā)，舊國國見青山。。。07十二二月202210:02:33下下午22:02:3312月-2215、比不了得就就不比，得不不到的就不要要。。。十二月2210:02下下午12月-2222:02December7,202216、行動出成果果，工作出財財富。。2022/12/722:02:3322:02:3307December202217、做做前前，，能能夠夠環(huán)環(huán)視視四四周周；；做做時時，，你你只只能能或或者者最最好好沿沿著著以以腳腳為為起起點點的的射射線線向向前前。。。。10:02:33下下午午10:02下下午午22:02:3312月月-229、沒沒有有失失敗敗，，只只有有暫暫時時停停止止成成功功！！。。12月月-2212月月-22Wednesday,December7,202210、很多多事情情努力力了未未必有有結(jié)果果，但但是不不努力力卻什什么改改變也也沒有有。。。22:02:3322:02:3322:0212/7/202210:02:33PM11、成功就是日日復(fù)一日那一一點點小小努努力的積累。。。12月-2222:02:3322:02Dec-2207-Dec-2212、世間成成事，不不求其絕絕對圓滿滿，留一一份不足足，可