F5-GTM廣域網(wǎng)流量管理與優(yōu)化方案

BIG-IPGlobalTrafficManager

廣域網(wǎng)流量管理與優(yōu)化方案應(yīng)用全球部署以后的挑戰(zhàn)異地容災(zāi)、故障切換客戶感受：易于使用、最佳訪問效果應(yīng)用的協(xié)同多數(shù)據(jù)中心資源的充分利用擴(kuò)展性可管理性容災(zāi)方案：宕機(jī)的代價是沉重的“47%ofthebusinessescitedthatdisasterrecoverywasaprimetargetforITSpending”–NetworkComputingSurvivor’sGuideto2006survey

33%ofbusinessesdidnothaveDisasterRecoveryplansinplace16%ofbusinesseslostbetween$100-$500K/day26%ofbusinessesdon’tknowhowmuchtheylostSource:AT&TandIAEMreport傳統(tǒng)的應(yīng)用容災(zāi)方案的切換機(jī)制手動修改客戶端訪問目的地址手動修改DNS解析記錄方式應(yīng)用層重定向都是需要人工介入?。?！指望人工進(jìn)行容災(zāi)切換是靠不住的$$$$ErrorProneSlowtoImplementCostlyLaborIntensive網(wǎng)絡(luò)管理員“Microsoft'swebsiteswereofflineforupto23hours-themostdramaticsnafutodateontheInternet-becauseofDNSequipmentmisconfigurationaffectingmorethan72millionusers.”“Wescrewedup.Thisistheworstdayofmyprofessionallife“

–NetworkAdministratoratMicrosoft錯誤修改DNS記錄的后果是極其嚴(yán)重的客戶感受易于使用最快響應(yīng)速度UNIXWINSInternalDNSServers跨ISP訪問：南北電信互訪問題測試項目網(wǎng)通北京ADSL用戶訪問12月2日凌晨1時廣東電信用戶訪問，寬帶用戶，帶寬未知，12月2日16:30網(wǎng)通北京ADSL用戶訪問，12月2日16:00上海ADSL寬帶用戶訪問，12月2日20:00DNSResult202.xxx.xxx.209219.xxx.xxx.11202.xxx.xxx.209219.xxx.xxx.11網(wǎng)通電信網(wǎng)通電信網(wǎng)通電信網(wǎng)通電信Numberofhits:726947652471935RequestsperSecond71.270.870.780.320.58SocketConnects737057753482036TotalBytesSent(inKB)14.1913.470.9614.9613.6112.233.877.03BytesSentRate(inKB/s)00.060.12TotalBytesRecv(inKB)4148.244001.90256.584388.543019.942703.2621.7339.83BytesRecvRate(inKB/s)69.1266.684.2873.1250.3245.050.360.66多應(yīng)用在多數(shù)據(jù)中心中的協(xié)同問題ClinicalrecordsdowninDallasdatacenter!ClinicalRecordServicesEmployeeInformationServicesPersonalInformationServicesServiceOrientedArchitecture特性：應(yīng)用智能、可管理性與高性能SOAApplicationManagementZoneRunner?-EliminateDNSErrorsBIG-IPGlobalTrafficManager(GTM)AdvancedapplicationandcomponentmonitoringiRules-FlexibilitytodefinedistributionpoliciesIPv6AAAArecordsupportLeadingDNSperformance(40KRes/s)TMOS極大提升全球交付應(yīng)用的可用性與可靠性主要功能與優(yōu)勢支持應(yīng)用在多個數(shù)據(jù)中心間進(jìn)行透明交付確保全球業(yè)務(wù)的連續(xù)性和應(yīng)用的可用性靈活的負(fù)載均衡算法，能夠根據(jù)任何一項業(yè)務(wù)政策（包括地理信息、負(fù)載情況、網(wǎng)絡(luò)就近性等），并通過為直接用戶交付全球流量控制，來增強(qiáng)靈活性。引導(dǎo)用戶進(jìn)入全球最佳站點，能夠顯著改進(jìn)性能并提高客戶的體驗。集中管理與監(jiān)控，實現(xiàn)從單一地點提供全面的應(yīng)用和數(shù)據(jù)中心狀態(tài)信息，降低管理開銷通過充分利用備份數(shù)據(jù)中心，以提高全球網(wǎng)絡(luò)的效率、可擴(kuò)展性以及投資回報。能夠?qū)崿F(xiàn)復(fù)雜任務(wù)的自動化流程，從而降低維護(hù)和管理開銷。廣州數(shù)據(jù)中心上海數(shù)據(jù)中心User查詢LocalDNSF5BIG-IPGTM--廣域網(wǎng)流量管理與優(yōu)化方案BIG-IPServerfarmWebmaster北京數(shù)據(jù)中心RouterBIG-IPInternetInternetGTMGTM基本工作機(jī)制GTMisaWideArealoadbalancerusingDNSastheTrafficManagementmechanism.BINDisversion9.3.1BINDzonefileUIisnowZoneRunnerWideIPrecordsarewrittentotheappropriatezonefilesGTMgetsBIG-IPstylemonitorsandpools.Big3d’sareusedtocommunicateavailabilitybetweenGTMandBIG-IPsystems.Big3d’scommunicateviaiQueryoverSSL,andutilizegziptocompressmessagingBig3dshimdaemonfacilitatescommunicationbetween9.x(big3d)and4.x3-DNS.GTM決策過程

WhenaDNSrequestisreceivedbytheGTMlistener,tmmandgtmdgothroughthefollowingdecisionmakingprocessbeforeanyIPaddressisreturned:TMMcheckstoseeifthereisaWideIPthatmatchestherequestIfthereismatchgtmdhandlestherequest.IfthereisnomatchtherequestispasseddowntoBIND.IfaWideIPmatchestherequest,gtmdchecksit’spersistencetableforapersistencerecord.Ifamatchexiststhengtmdwillgiveouttherecordinthepersistencetable.IfnotthenGTMdetermineswhatpooltosendthetraffictobasedupontheWideIPLBmethod,andtheavailabilityofeachpool.GTMreturnsArecordsonly(AAAAandA6recordsincluded)Oncetherequestreachesthepoollevel,thepoolmustmakeaload-balancingdecisionbaseduponit’sLBconfigurationandtheavailabilityofthepoolmembers.GTMLBMechanismGTM’s采用分層的負(fù)載均衡機(jī)制AWideIPloadbalancesbetweenitspools.Apoolloadbalancesbetweenpoolmembers.InthecontextofGTMapoolmemberisaVirtualServer.AvirtualserverisasubcomponentofaServerObject.ThusyoumustconfigureTopologyaccordingly:1stpass:pickapool2ndpass:withinapooltoselectapoolmember廣域網(wǎng)訪問流量優(yōu)化歐洲用戶美洲用戶GTM德國DataCenter美國DataCenter=集成的性能結(jié)構(gòu)商業(yè)標(biāo)準(zhǔn)控制全球用戶訪問在多個數(shù)據(jù)中心之間的流量分配地址位置就近訪問－Topology亞洲用戶新加坡DataCenterTopology舉例來自北美（NorthAmerica）的訪問請求導(dǎo)向到北美的兩個數(shù)據(jù)中心（NA）來自北美（Europe）的訪問請求導(dǎo)向到北美的兩個數(shù)據(jù)中心（London）來自其它地方的訪問請求導(dǎo)向到北美的兩個數(shù)據(jù)中心（Tokyo）Topology舉例(cont.)Fromtopology.inctopology{//6Items//server ldns scoredc."London" continent."Europe" 250pool."nor_am_web"continent."NorthAmerica" 250pool."nor_am_web"/0 25dc."Tokyo" continent."Asia" 250dc."Tokyo" continent."Australia" 250pool."nor_am_web"continent."SouthAmerica" 250}Topologyexample(cont.)FromtheGUI網(wǎng)絡(luò)就近性動態(tài)探測GTM支持的負(fù)載均衡算法循環(huán)全球可用性LDNS持續(xù)性應(yīng)用可用性地理分布虛擬服務(wù)器容量最少連接Pkt/sec（數(shù)據(jù)包/每秒）KB/sec（千字節(jié)/每秒）往返時間中繼段（hop）數(shù)據(jù)包完整率用戶定義服務(wù)質(zhì)量（QoS）動態(tài)比率LDNS循環(huán)比率隨機(jī)組合的負(fù)載均衡算法TheBelowpoolcontainsaVirtualServeronaBIG-IP,andaVirtualServerfromaGenericHost: pool{ name"bigip_and_host" ttl30 preferredga alternateratio member00:80ratio2 member05:80 }PoolName: bigip_and_hostttl: 30secondsPreferredLB: GlobalAvailabilityAlernateLB: ratioFallbackLB: ReturntoDNS(default)FallbackIP: noneGTMWideIPPersistenceTherearetwotypesofpersistence:StaticPersist:AStaticLBmode.WideIPPersistence:AppliedoneachWideIPobjectasadrop-downconfigurationoption.WideIPpersistenceworksinthefollowingway:firsttimethroughapoolmemberispicked(LB)andputintothepersistencetable(andsync'dtoallotherlisteningGTM's)secondtimethroughifthepersistentpoolmemberisstillavailable(green)thenthatpoolmemberisreturnedandthetimestampupdatedonthepersistenceentry(andwesyncthattoo)ifthepoolmemberisnotavailable(!green)thenthepersistenceentryistossedandanewonecreatedonceLBiscomplete.Iftherearenorequestsforapersistenceentryitisremovedfromthetableoncethatentryhasexpired.PersistencerecordsaresynchronizedbetweenGTMsynchronizationpeersPersistencerecordscanbeviewedintheUI:Navigate:Statistics->GlobalTraffic->PersistenceRecordsStaticPersistLBmethodisdiscussedinapreviousslide.自動容災(zāi)切換RouterL-DNSBIG-IPGTMBIG-IPLTMCorporateServersSite1(Primary)ClientRouterBIG-IPLTMCorporateServersSite2(Backup)BIG-IPGTMGTM服務(wù)器可用性檢查（Monitors）GTMinheritsit’smonitorsfromLTM.AnadministratorcancreatethesamemonitorsthatareavailableinLTMtomonitorGTMobjects.Monitorscanbeappliedon:ServersVirtualServersPools(andpoolmembers)服務(wù)器可用性檢查ApplicationDeviceFTP…HTTP…DB.DHTTPS…SiebelAppOracleDB內(nèi)容/文件檢查

DataCenterIntranetApp:Siebelin紐約

HTTPServer DBServer SiebelApp OracleDB Siebelcontent verification可用性解決方案:

web服務(wù)穿過特定區(qū)域、設(shè)備，使應(yīng)用得到一個統(tǒng)一服務(wù)檢測的批量可用性好處: 可探測到任意標(biāo)準(zhǔn)的web服務(wù)套件的失敗多應(yīng)用協(xié)同－－DistributedApplicationsdistributedapplication是一個要使用到多個域名（wideip）的應(yīng)用，這些域名分布在不同的服務(wù)器上，由這組服務(wù)器協(xié)同工作構(gòu)成一個完整的應(yīng)用.DistributedApplications將多個Wideip當(dāng)作一個對象來進(jìn)行管理，可以同時Enable或Disable.DistributedApplicationManagementManagemultipleservicesaspartofacollectiveapplicationBenefitsLowercomplexity,easemanagement

ReducedmanagementoverheadCostsavingsfromreducedstaffEliminatecostofdowntime

BIG-IPGlobalTrafficManagerSolution-DataCenterADataCenterBNewCarAppOnestepfailoverManageServiceDependenciesChallengeHundredsofapplicationsManualfailoverisslow,errorproneMulti-stepfailovertoshutdown

eachapplicationserviceNoinstantaneousfailoverDistributedApplicationsExample1:DataCenterDependency當(dāng)構(gòu)成DistributedApplication的Wideip中有任何一個，其對應(yīng)的virtualserver都不同用的話，對這個DistributedApplication來說，這個virtualserver所屬的數(shù)據(jù)中心就是不可用的。但其它不屬于這個DistributedApplication的訪問請求，仍然可以被分發(fā)到這個數(shù)據(jù)中心的。Example2:ServerDependency當(dāng)構(gòu)成DistributedApplication的Wideip中有任何一個，其對應(yīng)的virtualserver都不同用的話，對這個DistributedApplication來說，這個virtualserver所屬的服務(wù)器就是不可用的。但其它不屬于這個DistributedApplication的訪問請求，仍然可以被分發(fā)到這個服務(wù)器上來。ZoneRunner減少DNS配置錯誤EasyDNSmanagementAutopopulationofprotocolsValidation/errorcheckingRollbacktothelasttransactionImportationofzonesAutomaticreverselookupsZoneRunner?OnlyintegratedDNSManagementUtility成功案例-TOM.COMCDNSite沈陽Site西安Site成都Site長沙Site廣州Site杭州Site北京Site教育網(wǎng)Site中國移動100MFE1000MGESwitchRouterF53DNSF5bigip2400Netapp6200Netapp2100成功案例-ChinaCacheChinaCache中國最大的CDN服務(wù)提供商Solutionrequirement:Nodedeployment:30-50inChinaCapacityofeachnode:40-1000MBImplementation:DeployBIGIP,3DNS,F5totalCDNsolutionBIG/IPLBforCache3DNSforWANLBSee-ITformanagement

21cnGSLB解決方案SEE-ITWEB/StreamingServer3DNS3DNSBigIP2400CoreSwitch21cn廣州機(jī)房GBFECacheServerWEB/StreamingServerBigIP5000BigIP500021cn上海節(jié)點CoreSwitchInternetWEB/StreamingServerBigIP2400CoreSwitch21cn河北節(jié)點Summary:BIG-IPGTMBIG-IPGlobalTrafficManagerApplicationHealthFeaturesCompositemonitorsApplication-specificmonitorsDistributedapplicationmonitoringManagementFeaturesNewandimproveduserinterfaceZoneRunner