Alteon配置樣例

1、Slide 1Slide 1Alteon Version 27.0 Hand-On TrainingNameTitle 2011Hand-On Lab AgendaLayer 4 LBBasic L4Client NAT (Proxy IP)Source IP PersistencyLayer 7 LB URLUser-AgentHostHost + Regular ExpressionOther HTTP HeaderLayer 7 Content ModificationX-Forwarded-For InsertionCookie InsertionError Code Modifica

2、tionServer CloakingPagename ReplacementPagetype ReplacementHost ReplacementPath InsertionAccelerationCompressionHTTP MultiplexingSSL Offload & AccelerationOne-Arm SLBRedundancyVRRPVRRP + Tracking (“IF” Interface)VRRP + Tracking (Real Server)Basic SLB + Server Outbound NATFilter + PIP“Invert” Fil

3、ter + PIP“ProxyIP” in FiltervADC RedundancyVRRP + Session MirroringGSLBBasic L4 LB8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network TopologyBasic L4 LB Config/cfg/l2/stg 1/off/cfg/l

4、3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server enAlteon Config

5、Dump “/cfg/dump” Main# /cfg/dscript start Alteon Application Switch 4408 4 /* DO NOT EDIT THIS LINE!/* Configuration dump taken 15:57:42 Fri Jan 21, 2011/* Configuration last applied at 15:40:01 Fri Jan 21, 2011/* Configuration last save at 15:57:36 Fri Jan 21, 2011/* Version 27.0.0, Base MAC addres

6、s 00:03:b2:50:f9:80/cfg/l2/stg 1/off/cfg/l3/if 1 ena ipver v4 addr mask broad 55/cfg/slb on/cfg/slb/adv direct ena/cfg/slb/real 1 ena ipver v4 rip 01-/cfg/slb/real 2 ena ipver v4 rip 02/cfg/slb/group 1 ipver v4 add 1 add 2/cfg/slb/port 1 client ena/cfg/

7、slb/port 2 server ena/cfg/slb/virt 1 ena ipver v4 vip 00/cfg/slb/virt 1/service 80 http group 1/script end /* DO NOT EDIT THIS LINE!Sever & Service Up Message/i/slb/group 1/i/slb/vir 1/i/slb/sess/dump/stat/slb/vir 1Client NAT : Proxy IP8client01(real server 1)02(r

8、eal server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network TopologyPhy. Port 1 :- Client NAT IP : 2321Source IP : 8Source IP : 23Proxy IP Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/

9、on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/pip/type port/cfg/slb/pip/add 23 1/cfg/slb/port

10、1/proxy enLayer 4 LB : Source IP Persistency8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network TopologySource IP Persistency Config/c/l2/stg 1/off/c/l3/if 1/addr /mask 255.25

11、5.255.0/en/c/slb/on/c/slb/adv/direct en/c/slb/r 1/rip 01/en/c/slb/r 2/rip 02/en/c/slb/gr 1/add 1/add 2/c/slb/vir 1/vip 00/en/c/slb/vir 1/service 80/gr 1/c/slb/port 1/client en/c/slb/port 2/server en/c/slb/group 1/metric phashL7 LB : URL8client01(real server 1)

12、02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology100/index1.htm00/index2.htmindex1.htm2index2.htm2URL LB Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb

13、/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/layer7/slb/ren 2 index1.htm/cfg/slb/layer7/slb/ren 3 in

14、dex2.htm/* /cfg/slb/layer7/slb/addstr index1.htm/* /cfg/slb/layer7/slb/addstr index2.htm/cfg/slb/real 1/layer7/addlb 2/cfg/slb/real 2/layer7/addlb 3/cfg/slb/virt 1/service 80/dbind en/cfg/slb/virt 1/service 80/http/httpslb urlslbHTTP URL/ Header SLB“/stat/slb/layer7/str” & “/stat/slb/virt 1”“/st

15、at/slb/layer7/str” & “/stat/slb/virt 1”L7 LB : User-Agent8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology1001200002http:/10.1

16、.1.100User-Agent LB Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1

17、/client en/cfg/slb/port 2/server en/cfg/slb/layer7/slb/ren 2 Firefox/cfg/slb/layer7/slb/ren 3 MSIE/cfg/slb/real 1/layer7/addlb 2/cfg/slb/real 2/layer7/addlb 3/cfg/slb/virt 1/service 80/dbind en/cfg/slb/virt 1/service 80/http/httpslb browserL7 LB : Host8client01(real server 1)

18、02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology1http:/http:/22http:/http:/Hostname LB Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip

19、01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/layer7/slb/ren 2 3 1/layer7/addlb 2/cfg/slb/real 2/layer7/addlb 3/cfg/slb/virt 1/service 80/dbind en/cfg/slb

20、/virt 1/service 80/http/httpslb hostLayer 7 LB : Host + Regular Expression8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology100/index1.htm00/inde

21、x2.htmindex1.htm2index2.htm2Host + Regular Expression Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1

22、/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/layer7/slb/ren 2 3 1/layer7/addlb 2/cfg/slb/real 2/layer7/addlb 3/cfg/slb/virt 1/service 80/dbind en/cfg/slb/virt 1/service 80/http/httpslb hostL7 LB : Other HTTP Header8client01(real server 1)02(re

23、al server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology100120000200(Language : zh-HK)(Language : en-us)Other HTTP Header LB Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /m

24、ask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/layer7/slb/ren 2 en-us/cfg/

25、slb/layer7/slb/ren 3 zh-HK/cfg/slb/real 1/layer7/addlb 2/cfg/slb/real 2/layer7/addlb 3/cfg/slb/virt 1/service 80/dbind en/cfg/slb/virt 1/service 80/http/httpslb others Accept-LanguageLayer 7 Modification : X-Forwarded-For Insertion8client01(real server 1)02(real server 2)Phy.

26、 Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network TopologyX-Forwarded-For Insertion Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 0

27、2/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/virt 1/service 80/http/xforward enL7 Modification : Cookie Insertion8client01(real server 1)02(real server 2)Phy. Port

28、 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology100Set-Cookie: AlteonP=f4ecbbdaf4ecbbdbbaeehabf22Set-Cookie:AlteonP=f4ecbbdaf4ecbbd8baeebabcCookie Insertion Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cf

29、g/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/virt 1/service 80/dbind en/cfg/slb/virt 1/service

30、80 http/pbind cookie insertL7 Modification : Error Code Modification8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network TopologyReturn Code : 200Return Code : 20112Error Code Modifica

31、tion Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/

32、slb/port 2/server en/cfg/slb/layer7/slb/ren 2 en-us/cfg/slb/layer7/slb/ren 3 zh-HK/cfg/slb/real 1/layer7/addlb 2/cfg/slb/real 2/layer7/addlb 3/cfg/slb/virt 1/service 80/dbind en/cfg/slb/virt 1/service 80/http/httpslb others Accept-Language/cfg/slb/virt 1/service 80 http/http/errcode ena match_code=2

33、00 nonredirect_code=201 nonredirect_reason=Alteon-ModifyOriginalAlteon ModifiedL7 Modification : Server Cloaking8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network TopologyServer : Sa

34、mber 4.3Server : Web Server12Server Cloaking Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service

35、80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/layer7/slb/ren 2 en-us/cfg/slb/layer7/slb/ren 3 zh-HK/cfg/slb/real 1/layer7/addlb 2/cfg/slb/real 2/layer7/addlb 3/cfg/slb/virt 1/service 80/dbind en/cfg/slb/virt 1/service 80/http/httpslb others Accept-Language/cfg/slb/virt 1/servi

36、ce 80 http/http/errcode ena match_code=200 nonredirect_code=201 nonredirect_reason=Alteon-Modify“/cfg/slb/virt 1/ser 80/http/cloaksrv enOriginalAlteon ModifiedLayer 7 Modification : Pagename Replacement (request)8client01(real server 1)02(real server 2)Phy. Port 1(client port

37、)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology2100/index1.htm00/index2.htmPagename Replacement Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01

38、/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/layer7/httpmod 1/ena/cfg/slb/layer7/httpmod 1/rule 1 url/ena/cfg/slb/layer7/httpmod 1/rule 1 url/directn req/c

39、fg/slb/layer7/httpmod 1/rule 1 url/match/pagename index1/cfg/slb/layer7/httpmod 1/rule 1 url/action/pagename index2/cfg/slb/virt 1/service 80 http/http/httpmod 1Layer 7 Modification : Pagetype Replacement (request)8client01(real server 1)02(real server 2)Phy. Port 1(client po

40、rt)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology2100/index1.html00/index1.htmPagetype Replacement/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/

41、cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/layer7/httpmod 1/ena/cfg/slb/layer7/httpmod 1/rule 1 url/ena/cfg/slb/layer7/httpmod 1/rule 1 url/directn req/cfg/s

42、lb/layer7/httpmod 1/rule 1 url/match/pagetype html/cfg/slb/layer7/httpmod 1/rule 1 url/action/pagetype htm/cfg/slb/virt 1/service 80 http/http/httpmod 1Layer 7 Modification : Host Replacement (request)8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port

43、2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology21http:/http:/Host Replacement/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2

44、/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/layer7/httpmod 1/ena/cfg/slb/layer7/httpmod 1/rule 1 url/ena/cfg/slb/layer7/httpmod 1/rule 1 url/directn req/cfg/slb/layer7/httpmod 1/rule 1 url/match/host eq 1/rule 1 url/ac

45、tion/host replace 1/service 80 http/http/httpmod 1Layer 7 Modification : Host Replacement (return & body)8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology12Host Replace

46、ment (return & body)/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/c

47、lient en/cfg/slb/port 2/server en/cfg/slb/layer7/httpmod 1/ena/cfg/slb/layer7/httpmod 1/rule 1 url/ena/cfg/slb/layer7/httpmod 1/rule 1 url/directn resp /cfg/slb/layer7/httpmod 1/rule 1 url/body include/cfg/slb/layer7/httpmod 1/rule 1 url/match/host eq 1/rule 1 url/action/host replace 1/service 80 ht

48、tp/http/httpmod 1Layer 7 Modification : Path Insertion (request)8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology21http:/ Insertion Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr

49、 /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/layer7/httpmod 1

50、/ena/cfg/slb/layer7/httpmod 1/rule 1 url/ena/cfg/slb/layer7/httpmod 1/rule 1 url/directn req/cfg/slb/layer7/httpmod 1/rule 1 url/match/path eq dir1/cfg/slb/layer7/httpmod 1/rule 1 url/action/path insert internal/ before/cfg/slb/virt 1/service 80 http/http/httpmod 1Acceleration : Compression8

51、client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology12File Size = 1MBFile Size = 7KB(after compression)Compression Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /

52、en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/accel/compress/on/cfg/slb/accel/compress/comp

53、pol 1/minsize 1024/cfg/slb/accel/compress/comppol 1/ena/cfg/slb/virt 1/service 80 http/http/comppol 1Acceleration : HTTP Multiplexing8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Networ

54、k Topology21Many Sessions Are Generatedi.e. many SYN packetsOne or very few Sessions Are At Server Sidei.e. 1 or several SYN packets onyHTTP Multiplexing Config/cfg/l2/stg 1/off/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/

55、real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server en/cfg/slb/pip/type port/cfg/slb/pip/add 23 1/cfg/slb/port 1/proxy en/cfg/slb/virt 1/service 80 http/http/connmgt ena 20Accel

56、eration : SSL Offload & Acceleration8client01(real server 1)02(real server 2)Phy. Port 1(client port)Phy. Port 2(server port)IF 1 : (Vlan 1)VIP : 00Physical Network Topology21SSL Traffic (443 port)HTTP Traffic (80 port)Step 1 : Basic Config/cfg/l2/stg 1/of

57、f/cfg/l3/if 1/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/cfg/slb/real 2/rip 02/en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client en/cfg/slb/port 2/server enStep 2

58、: Generate Test Certificate/cfg/slb/ssl/certs/srvrcert 1/generate/cfg/slb/ssl/on/cfg/slb/ssl/sslpol 1/en/cfg/slb/virt 1/service 443 https/group 1/cfg/slb/virt 1/service 443 https/rport 80/cfg/slb/virt 1/service 443 https/ssl/srvrcert 1/cfg/slb/virt 1/service 443 https/ssl/sslpol 1Step 3 : SSL Config

59、urationOne Arm SLB8client01GW : (real server 1)02GW:(real server 2)Phy. Port 1(client port, server port)IF 1 : (Vlan 1)VIP : 00One Arm TopologyIF 2 : (Vlan 1)submac enOne Arm L4 SLB/cfg/l2/stg 1/off/cfg/l3/if 1/addr 10.1.

60、1.1/mask /en/cfg/l3/if 2/addr /mask /en/cfg/slb/on/cfg/slb/adv/direct en/cfg/slb/real 1/rip 01/en/submac en/cfg/slb/real 2/rip 02/en/submac en/cfg/slb/group 1/add 1/add 2/cfg/slb/virt 1/vip 00/en/cfg/slb/virt 1/service 80/group 1/cfg/slb/port 1/client