负载均衡开源解决方案

Layer4-7Layer4-7SwitchScheduleBasicallyHardware/GUI/CLI(Configuremethod)/HA(ConfigSync)Loadbalancerelatedvirtualserver/node/pool/poolmemberMonitorsSorryserverMaintenanceModeLoadbalancemethodPersistenceSNAT/RNATServerProtectionACL/ContentSwitchGSLBPerformanceWearehereBasicallyLBrelatedPersistenceSNAT/RNATServerProtectionACL/CSGSLBHardware/GUI/CLI/HAHAProxyHotReconfigurationmv/etc/haproxy/config/etc/haproxy/config.oldmv/var/run/haproxy.pid/var/run/haproxy.pid.oldmv/etc/haproxy/config.new/etc/haproxy/configkill-TTOU$(cat/var/run/haproxy.pid.old)ifhaproxy-p/var/run/haproxy.pid-f/etc/haproxy/config;thenecho"Newinstancesuccessfullyloaded,stoppingpreviousone."kill-USR1$(cat/var/run/haproxy.pid.old)rm-f/var/run/haproxy.pid.oldexit1elseecho"Newinstancefailedtostart,resumingpreviousone."kill-TTIN$(cat/var/run/haproxy.pid.old)rm-f/var/run/haproxy.pidmv/var/run/haproxy.pid.old/var/run/haproxy.pidmv/etc/haproxy/config/etc/haproxy/config.newmv/etc/haproxy/config.old/etc/haproxy/configexit0fi保存之前状态停止老的监听成功，清理老的连接和pid失败，恢复老的配置WearehereBasicallyLBrelatedPersistenceSNAT/RNATServerProtectionACL/CSGSLBConceptsvirtualserver

:80pool(name=cgi_boxes)member(server=:80)member(server=:80)member(server=:80)pool(name=asp_boxes)member(server=:80)member(server=:80)member(server=:80)VIP

virtualserver

:443pool(name=ssl_boxes)member(server=:443)member(server=:443)member(server=:443)VIP

Load

BalancingIntelligent

TrafficControl

(lookatURL,clientIPaddr.,etc.)Port-based

TrafficDirectionIPAddr.-based

TrafficDirectionIncomingrequestMonitorAvailabilityrequirementSNAT/NATPriority-basedmemberactivationACTIONofservice

downSlowRampTimePool/pool

member

statistics大家有疑问的，可以询问和交流可以互相讨论下，但要小声点MonitorsMonitor类型自定义monitorHAProxyMonitor

listenwebfarm:80modehttpbalanceroundrobincookieSERVERIDinsertindirect

optionhttpchkHEAD/index.htmlHTTP/1.0serverwebA1:80cookieAcheckserverwebB2:80cookieBcheckport81inter2000serverwebC3:80cookieCcheckserverwebD4:80cookieDcheckHAProxySorryServerlistenwebfarm:80modehttpbalanceroundrobincookieSERVERIDinsertindirectoptionhttpchkHEAD/index.htmlHTTP/1.0serverwebA1:80cookieAcheckserverwebB2:80cookieBcheckport81inter2000serverwebC3:80cookieCcheckserverwebD4:80cookieDcheckserverbkpA5:80cookieAcheckbackupserverbkpB6:80cookieBcheckbackupHAProxyMaintenanceModeUpdating...503ServiceUnavailableNoserverisavailabletohandlethisrequest.Loadbalancingalgorithm

RoundRobinWrr(Ratio(member),Ratio(Node))DynamicRatio：根据对服务器性能的观察来动态设置weight，观察点包括连接数、响应时间等。Fastest(node)&Fastest(application):服务器/应用的最快响应时间LC(Member)&LC(node)Observed(member)&Observed(node)Predictive(member)&Predictive(node)SourceURLHASHURLParamWearehereBasicallyLBrelatedPersistenceSNAT/RNATServerProtectionACL/CSGSLBPersistenceClientServerAGET/URI1HTTP/1.1

HTTPrequest(nocookie)TCPhandshakeTCPhandshakeGET/URI1HTTP/1.1

HTTPrequest(nocookie)HTTP/1.1200OK

HTTPreply(nocookie)HTTP/1.1200OKHTTPreply(withinsertedcookie)pick

serverGET/URI2HTTP/1.1

HTTPrequest(withsamecookie)TCPhandshakeTCPhandshakeGET/URI2HTTP/1.1

HTTPrequest(withsamecookie)HTTP/1.1200OK

HTTPreply(nocookie)HTTP/1.1200OK

HTTPreply(updatedcookie)cookie

specifies

serverFirstHitSecondHitSet-Cookie:SERVERID=ACookie:SERVERID=ACookiepersistence1.1HTTPCookieInsert1.2HTTPCookieRewrite1.3HTTPCookiePassive1.4CookieHashDestinationAddressaffinitypersistenceHashpersistenceMSRDPpersistenceSIPpersistence(sessionInitiationprotocol)SouceaddressaffnitypersistenceSSLpersistenceUniversalpersistenceinsertrewriteprefixlistenwebfarm:80modehttpbalanceroundrobincookieSERVERIDinsertindirectoptionhttpchkHEAD/index.htmlHTTP/1.0serverwebA1:80cookieAcheckserverwebB2:80cookieBcheckserverwebC3:80cookieCcheckserverwebD4:80cookieDcheckSNAT&RNATExternalvlanInternalvlanVIP:77MAPPEDIP:eth0:eth1:SNATRNATbackendprivate#Connecttotheserversusingour00sourceaddresssource00backendtransparent_ssl1#ConnecttotheSSLfarmfromtheclient'ssourceaddress

source00usesrcclientipserverrailsA1:80source01checkserverrailsB2:80minconn4maxconn12checkserverrailsC3:80minconn4maxconn12checkWearehereBasicallyLBrelatedPersistenceSNAT/RNATServerProtectionACL/CSGSLBServerProtectionAttack(SYNFlood)ConnectionLimitTimeoutSurgeQueueSlowStartlistenappfarm:80modehttpmaxconn10000optionhttpcloseoptionabortoncloseoptionforwardforbalanceroundrobinserverrailsA1:80minconn4maxconn12checkserverrailsB2:80minconn4maxconn12checkserverrailsC3:80minconn4maxconn12checkcontimeout60000weightmaxconnTimeoutClientproxyserverWearehereBasicallyLBrelatedPersistenceSNAT/RNATServerProtectionACL/CSGSLBHAProxyACLreq_lenwait_endreq_ssl_verLayer4andbelowLayer4Contentmethodreq_verpath_*url_*hdr_*Layer7ContentHTTP_1.1METH_GET…Pre-definedACLsrc/dstsrc_port/dst_portdst_connnbsrv(backend)aclmissing_clhdr_cnt(Content-length)eq0blockifHTTP_URL_STAR!METH_OPTIONS||METH_POSTmissing_clblockifMETH_GETHTTP_CONTENTblockunlessMETH_GETorMETH_POSTorMETH_OPTIONSToselectadifferentbackendforrequeststostaticcontentsonthe"www"siteandtoeveryrequestonthe"img","video","download"and"ftp"hosts:aclurl_staticpath_beg/static/images/img/cssaclurl_staticpath_end.gif.png.jpg.css.jsaclhost_wwwhdr_beg(host)-iwwwaclhost_statichdr_beg(host)-iimg.video.download.ftp.#nowusebackend"static"forallstatic-onlyhosts,andforstaticurls#ofhost"www".Usebackend"www"fortherest.use_backendstaticifhost_staticorhost_wwwurl_staticuse_backendwwwifhost_wwwContentSwitch(UIE/iRule/ACL)frontendpublicreqisetbe^Host:\imgstatic#TheURIwilluseaspecifickeywordsoonreqisetbe^[^\]*\/(img|css)/staticreqisetbe^[^\]*\/admin/statsstatsdefault_backenddynamic#Thestaticbackendbackendfor'Host:img',/imgand/css.backendstatic…backenddynamic…backendstats…if(http_uriends_with“.gif”){usepoolimage_servers}elseif(http_uristarts_with“/foo”){usepoolfoo_servers}elseif(http_cookie(“XYZ-Type”)==“direct”){usepoolcookie_servers}elseif(findstr(http_uri,“?type=”,6,“&”)==“cgi”){usepoolcgi_servers}else{usepoolweb_servers}aclurl_staticpath_beg/static/images/img/cssaclurl_staticpath_end.gif.png.jpg.css.jsaclhost_wwwhdr_beg(host)-iwwwaclhost_statichdr_beg(host)-iimg.video.download.ftp.

use_backendstaticifhost_staticorhost_wwwurl_staticuse_backendwwwifhost_wwwWearehereBasicallyLBrelatedPersistenceSNAT/RNATServerProtectionACL/CSGSLBGSLB如何实现CDN和站点容灾？！IllustratedPerformanceKeep-AliveCompressionIn-memoryCacheServerOffloadTCPBufferingLogging

listenproxy-outmodehttpoptionhttplogoptionlogasaplogglobalservercache1:3128#logthenameofthevirtualservercapturerequestheaderHostlen20#logtheamountofdatauploadedduringaPOSTcapturerequestheaderContent-Lengthlen10#logthebeginningofthereferrercapturerequestheaderRefererlen20#servername(usefulforoutgoingproxiesonly)captureresponseheaderServerlen20#loggingth