f5模拟器ltm入门先进数通信息技术

1、F5 LTM入门北京先进数通信息技术有限公司七月 22BIG-IP Local Traffic ManagerInternet负载均衡判断服务器健康状态Module 1 安装InternetBIG-IPsClientsServersModule 1 LTM介绍访问方式安装初始化面板分布(例)mgmteth0usbconsolefailover访问方式初始IP:45Internet激活license Automated 输入Registration KeyPCBIG-IPLicense 对话框F5 License Serve

2、r 激活license Manual PCBIG-IPF5 License Server Internet把dossier复制到手提上,接入internet,到 输入dossier,获取licensePCSetup Utility IP AddressWeb Configuration utilityF5配置原则一、规范命名二、不修改默认配置三、应用分离Module2-基础网络配置Module2-基础网络配置Module2-基础网络配置Module2-基础网络配置Module2-基础网络配置Module2-基础网络配置安装-LabsSetup Utility:Root password roo

3、tXInternal VLAN 172.16.X.31 Shared IP 172.16.X.33External VLAN 10.10.X.31 Shared IP 10.10.X.33Web Admin pw adminX Configure SSH - * All AddrTest SSH Access:Web Config utility:https:/ - View Network InternetExternal 10.10.X.31 Shared 10.10.X.33Internal 172.16.X.31 Shared 172.16.X.33Admin 192.168.X.31

4、Module 3负载均衡基础介绍12345678InternetModule 3 基础概念Virtual serverirulepoolmonitorprofiledatagrouphttpftpsslcookiememberLoad balancehttpftpUIEmssqlPool Members and NodesInternet:8080:80:4002:80Pool MembersNodes refer to Pool Members IP Address onlyVirtual ServerInternet:8080:4002:80Virtual Server用于引导流量通常IP

5、 Address + Service通常关联iRule或pool7:80Virtual Server to Pool MembersInternet:8080:80:4002:80Virtual Server7:80Pool MembersMaps toVirtual Server - Address Translation通过对目标地址转换的方式,实现负载均衡,外部用户看起来就象一台性能强大的服务器Real Server AddressNetwork Address TranslationVirtual Server AddressInternet7:80:8080:80:4002:80Ne

6、twork Flow - Packet #1resolves to BIG-IP Virtual Server Address 7:80 Internet:8080:80:4002:80 DNS Server7:80Network Flow - Packet #1BIG-IP translates Dest Address to Node based on Load BalancingInternetPacket # 1 Src - 0:4003Dest 7:80:8080:80:4002:80Packet # 1 Src 0:4003Dest :8007:80Network Flow Pac

7、ket #1 Return BIG-IP translates Src Address back to Virtual Server AddressInternetPacket # 1 - return Dest - 0:4003Src 7:80:8080:80:4002:80Packet # 1 - return Dest 0:4003Src :8007:80Network Flow - Packet #2InternetPacket # 2 Src - 1:4003Dest 7:80:8080:80:4002:80Packet # 2 Src 1:4003Dest :400217:80Ne

8、twork Flow Packet #2 Return InternetPacket # 2 - return Dest - 1:4003Src 7:80:8080:80:4002:80Packet # 2 - return Dest 1:4003Src :400217:80Network Flow - Packet #3InternetPacket # 3 Src - 5:4003Dest 7:80:8080:80:4002:80Packet # 3 Src 5:4003Dest :808057:80Network Flow Packet #3 Return InternetPacket #

9、 3 - return Dest - 5:4003Src 7:80:8080:80:4002:80Packet # 3 - return Dest 5:4003Src :808057Configuring PoolsConfiguring Virtual ServersScroll downStatisticsSummaryVirtual Servers PoolsNodesLogsVirtual Servers & Pools LabPool:http_poolMembers - - 3:80Virtual Server:VS_Web - 10.10.X.100:80Test:Connect

10、 to VS & Refresh bigtop and StatisticsPool:https_poolMembers - 3:443Virtual Server:VS_Web_SSL - 10.10.X.100:443Check BIG-IP Log:YInternet:Y:YVirtual Server 10.10.X.100:YLoad Balancing ModesRound RobinRatioLeast ConnectionsFastestObservedPredictiveDynamic RatioPriority Group ActivationFallback HostSt

11、aticDynamicFailure MechanismsRound RobinClientsRouterBIG-IP ControllerServersClient requests are distributed evenly12345678InternetRatioClientsRouterBIG-IP ControllerServersAdministrator sets ratio for distributing Client requests 3:2:1:11234891011Internet571214613FastestClientsRouterBIG-IP Controll

12、erServersNext requests go to Node with fastest response time25Internet10ms10ms10ms17msCurrent Response Times1436FastestClientsRouterBIG-IP ControllerServersSome time later, response times change102104Internet10ms10ms7ms7msCurrent Response Times101103Least ConnectionsClientsRouterBIG-IP ControllerSer

13、vers12InternetNext requests goes to Node with fewest open connections459460461470Current Connections3456Least ConnectionsClientsRouterBIG-IP ControllerServersInternetSome time later, number of connections change6163280290111112Current Connections62ObservedClientsRouterBIG-IP ControllerServersNext re

14、quests goes to Node with combination of fewest connections and best response12InternetPredictiveClientsRouterBIG-IP ControllerServers12InternetNext requests goes to Node with combination of fewest connections and best response over timePriority Group ActivationClientsRouterBIG-IP ControllerServers13

15、5246InternetPriority 1Priority 2If you set Priority Group Activation to 2, and 3 of the highest priority members are available, then lower priority members will not be used.Priority Group ActivationClientsRouterBIG-IP ControllerServers15InternetPriority 1Priority 2324678If number of members falls be

16、low Priority Group Activation (2), then the next highest priority members are used also.Fallback HostClientsRouterBIG-IP ControllerServersInternetIf all members fail, then client is sent an http redirect to and alternate server.Pool Member vs. NodeLoad Balancing by:Pool Member IP Address :serviceNod

17、eTotal services for one IP AddressIf using MemberInternetNext http requests goes to Pool Member with fewest http connectionsCurrent Connectionshttp10710899ftp232512If http pool uses Least Connections (member) load balancing method, thenIf using Node12InternetNext http requests go to IP Address with

18、fewest total connectionsCurrent Connectionshttp10710899ftp2325Configuring Load BalancingRatio & Priority Group ActivationLoad Balancing LabsTest http_pool round robinhttp_pool ratio (member):80 r1 p1:80 r2 p1:80 r3 p1Priority Group Activation:80 r1 p1:80 r2 p2:80 r3 p2Ratio Node Address (Optional) r

19、atio = 5 Node Threshold (Optional):80 r1 p1:80 r1 p2:80 r1 p2Connect limit = 5InternetModule 4 MonitorsInternet:80均衡分流的前提是服务器可用健康检查 根据地址检查Node IP Address 根据端口检查IP : port 根据内容检查(ECV)IP : port 内容返还 交互式应用程序(EAV)IP : port 通过交互根据结果判断根据地址检查Steps发送数据包,根据是否有回包判断Example - ICMPInternetICMP根据端口检查Steps打开TCP 连接

20、(IP Address : service)关闭连接Example TCP Internet:80:80:80TCP Connection根据返还内容检查Internet:80:80:80Steps打开TCP 连接(IP Address : service)发送请求Response returns data关闭连接Example http http GET /扩展应用程序检查Internet:80:80:80Steps打开TCP连接(IP Address : service)通过多次交互获取数据关闭连接 Example SQL requestconversation配置Monitors系统提供Monitors 模板Address Checks (icmp)Service Chec