F5-GTM廣域網流量管理與優(yōu)化方案

BIG-IPGlobalTrafficManager

廣域網流量管理與優(yōu)化方案應用全球部署以后的挑戰(zhàn)異地容災、故障切換客戶感受：易于使用、最佳訪問效果應用的協(xié)同多數據中心資源的充分利用擴展性可管理性容災方案：宕機的代價是沉重的“47%ofthebusinessescitedthatdisasterrecoverywasaprimetargetforITSpending”–NetworkComputingSurvivor’sGuideto2006survey

33%ofbusinessesdidnothaveDisasterRecoveryplansinplace16%ofbusinesseslostbetween$100-$500K/day26%ofbusinessesdon’tknowhowmuchtheylostSource:AT&TandIAEMreport傳統(tǒng)的應用容災方案的切換機制手動修改客戶端訪問目的地址手動修改DNS解析記錄方式應用層重定向都是需要人工介入?。?！指望人工進行容災切換是靠不住的$$$$ErrorProneSlowtoImplementCostlyLaborIntensive網絡管理員“Microsoft'swebsiteswereofflineforupto23hours-themostdramaticsnafutodateontheInternet-becauseofDNSequipmentmisconfigurationaffectingmorethan72millionusers.”“Wescrewedup.Thisistheworstdayofmyprofessionallife“

–NetworkAdministratoratMicrosoft錯誤修改DNS記錄的后果是極其嚴重的客戶感受易于使用最快響應速度UNIXWINSInternalDNSServers跨ISP訪問：南北電信互訪問題測試項目網通北京ADSL用戶訪問12月2日凌晨1時廣東電信用戶訪問，寬帶用戶，帶寬未知，12月2日16:30網通北京ADSL用戶訪問，12月2日16:00上海ADSL寬帶用戶訪問，12月2日20:00DNSResult202.xxx.xxx.209219.xxx.xxx.11202.xxx.xxx.209219.xxx.xxx.11網通電信網通電信網通電信網通電信Numberofhits:726947652471935RequestsperSecond71.270.870.780.320.58SocketConnects737057753482036TotalBytesSent(inKB)14.1913.470.9614.9613.6112.233.877.03BytesSentRate(inKB/s)00.060.12TotalBytesRecv(inKB)4148.244001.90256.584388.543019.942703.2621.7339.83BytesRecvRate(inKB/s)69.1266.684.2873.1250.3245.050.360.66多應用在多數據中心中的協(xié)同問題ClinicalrecordsdowninDallasdatacenter!ClinicalRecordServicesEmployeeInformationServicesPersonalInformationServicesServiceOrientedArchitecture特性：應用智能、可管理性與高性能SOAApplicationManagementZoneRunner?-EliminateDNSErrorsBIG-IPGlobalTrafficManager(GTM)AdvancedapplicationandcomponentmonitoringiRules-FlexibilitytodefinedistributionpoliciesIPv6AAAArecordsupportLeadingDNSperformance(40KRes/s)TMOS極大提升全球交付應用的可用性與可靠性主要功能與優(yōu)勢支持應用在多個數據中心間進行透明交付確保全球業(yè)務的連續(xù)性和應用的可用性靈活的負載均衡算法，能夠根據任何一項業(yè)務政策（包括地理信息、負載情況、網絡就近性等），并通過為直接用戶交付全球流量控制，來增強靈活性。引導用戶進入全球最佳站點，能夠顯著改進性能并提高客戶的體驗。集中管理與監(jiān)控，實現從單一地點提供全面的應用和數據中心狀態(tài)信息，降低管理開銷通過充分利用備份數據中心，以提高全球網絡的效率、可擴展性以及投資回報。能夠實現復雜任務的自動化流程，從而降低維護和管理開銷。廣州數據中心上海數據中心User查詢LocalDNSF5BIG-IPGTM--廣域網流量管理與優(yōu)化方案BIG-IPServerfarmWebmaster北京數據中心RouterBIG-IPInternetInternetGTMGTM基本工作機制GTMisaWideArealoadbalancerusingDNSastheTrafficManagementmechanism.BINDisversion9.3.1BINDzonefileUIisnowZoneRunnerWideIPrecordsarewrittentotheappropriatezonefilesGTMgetsBIG-IPstylemonitorsandpools.Big3d’sareusedtocommunicateavailabilitybetweenGTMandBIG-IPsystems.Big3d’scommunicateviaiQueryoverSSL,andutilizegziptocompressmessagingBig3dshimdaemonfacilitatescommunicationbetween9.x(big3d)and4.x3-DNS.GTM決策過程

WhenaDNSrequestisreceivedbytheGTMlistener,tmmandgtmdgothroughthefollowingdecisionmakingprocessbeforeanyIPaddressisreturned:TMMcheckstoseeifthereisaWideIPthatmatchestherequestIfthereismatchgtmdhandlestherequest.IfthereisnomatchtherequestispasseddowntoBIND.IfaWideIPmatchestherequest,gtmdchecksit’spersistencetableforapersistencerecord.Ifamatchexiststhengtmdwillgiveouttherecordinthepersistencetable.IfnotthenGTMdetermineswhatpooltosendthetraffictobasedupontheWideIPLBmethod,andtheavailabilityofeachpool.GTMreturnsArecordsonly(AAAAandA6recordsincluded)Oncetherequestreachesthepoollevel,thepoolmustmakeaload-balancingdecisionbaseduponit’sLBconfigurationandtheavailabilityofthepoolmembers.GTMLBMechanismGTM’s采用分層的負載均衡機制AWideIPloadbalancesbetweenitspools.Apoolloadbalancesbetweenpoolmembers.InthecontextofGTMapoolmemberisaVirtualServer.AvirtualserverisasubcomponentofaServerObject.ThusyoumustconfigureTopologyaccordingly:1stpass:pickapool2ndpass:withinapooltoselectapoolmember廣域網訪問流量優(yōu)化歐洲用戶美洲用戶GTM德國DataCenter美國DataCenter=集成的性能結構商業(yè)標準控制全球用戶訪問在多個數據中心之間的流量分配地址位置就近訪問－Topology亞洲用戶新加坡DataCenterTopology舉例來自北美（NorthAmerica）的訪問請求導向到北美的兩個數據中心（NA）來自北美（Europe）的訪問請求導向到北美的兩個數據中心（London）來自其它地方的訪問請求導向到北美的兩個數據中心（Tokyo）Topology舉例(cont.)Fromtopology.inctopology{//6Items//server ldns scoredc."London" continent."Europe" 250pool."nor_am_web"continent."NorthAmerica" 250pool."nor_am_web"/0 25dc."Tokyo" continent."Asia" 250dc."Tokyo" continent."Australia" 250pool."nor_am_web"continent."SouthAmerica" 250}Topologyexample(cont.)FromtheGUI網絡就近性動態(tài)探測GTM支持的負載均衡算法循環(huán)全球可用性LDNS持續(xù)性應用可用性地理分布虛擬服務器容量最少連接Pkt/sec（數據包/每秒）KB/sec（千字節(jié)/每秒）往返時間中繼段（hop）數據包完整率用戶定義服務質量（QoS）動態(tài)比率LDNS循環(huán)比率隨機組合的負載均衡算法TheBelowpoolcontainsaVirtualServeronaBIG-IP,andaVirtualServerfromaGenericHost: pool{ name"bigip_and_host" ttl30 preferredga alternateratio member00:80ratio2 member05:80 }PoolName: bigip_and_hostttl: 30secondsPreferredLB: GlobalAvailabilityAlernateLB: ratioFallbackLB: ReturntoDNS(default)FallbackIP: noneGTMWideIPPersistenceTherearetwotypesofpersistence:StaticPersist:AStaticLBmode.WideIPPersistence:AppliedoneachWideIPobjectasadrop-downconfigurationoption.WideIPpersistenceworksinthefollowingway:firsttimethroughapoolmemberispicked(LB)andputintothepersistencetable(andsync'dtoallotherlisteningGTM's)secondtimethroughifthepersistentpoolmemberisstillavailable(green)thenthatpoolmemberisreturnedandthetimestampupdatedonthepersistenceentry(andwesyncthattoo)ifthepoolmemberisnotavailable(!green)thenthepersistenceentryistossedandanewonecreatedonceLBiscomplete.Iftherearenorequestsforapersistenceentryitisremovedfromthetableoncethatentryhasexpired.PersistencerecordsaresynchronizedbetweenGTMsynchronizationpeersPersistencerecordscanbeviewedintheUI:Navigate:Statistics->GlobalTraffic->PersistenceRecordsStaticPersistLBmethodisdiscussedinapreviousslide.自動容災切換RouterL-DNSBIG-IPGTMBIG-IPLTMCorporateServersSite1(Primary)ClientRouterBIG-IPLTMCorporateServersSite2(Backup)BIG-IPGTMGTM服務器可用性檢查（Monitors）GTMinheritsit’smonitorsfromLTM.AnadministratorcancreatethesamemonitorsthatareavailableinLTMtomonitorGTMobjects.Monitorscanbeappliedon:ServersVirtualServersPools(andpoolmembers)服務器可用性檢查ApplicationDeviceFTP…HTTP…DB.DHTTPS…SiebelAppOracleDB內容/文件檢查

DataCenterIntranetApp:Siebelin紐約

HTTPServer DBServer SiebelApp OracleDB Siebelcontent verification可用性解決方案:

web服務穿過特定區(qū)域、設備，使應用得到一個統(tǒng)一服務檢測的批量可用性好處: 可探測到任意標準的web服務套件的失敗多應用協(xié)同－－DistributedApplicationsdistributedapplication是一個要使用到多個域名（wideip）的應用，這些域名分布在不同的服務器上，由這組服務器協(xié)同工作構成一個完整的應用.DistributedApplications將多個Wideip當作一個對象來進行管理，可以同時Enable或Disable.DistributedApplicationManagementManagemultipleservicesaspartofacollectiveapplicationBenefitsLowercomplexity,easemanagement

ReducedmanagementoverheadCostsavingsfromreducedstaffEliminatecostofdowntime

BIG-IPGlobalTrafficManagerSolution-DataCenterADataCenterBNewCarAppOnestepfailoverManageServiceDependenciesChallengeHundredsofapplicationsManualfailoverisslow,errorproneMulti-stepfailovertoshutdown

eachapplicationserviceNoinstantaneousfailoverDistributedApplicationsExample1:DataCenterDependency當構成DistributedApplication的Wideip中有任何一個，其對應的virtualserver都不同用的話，對這個DistributedApplication來說，這個virtualserver所屬的數據中心就是不可用的。但其它不屬于這個DistributedApplication的訪問請求，仍然可以被分發(fā)到這個數據中心的。Example2:ServerDependency當構成DistributedApplication的Wideip中有任何一個，其對應的virtualserver都不同用的話，對這個DistributedApplication來說，這個virtualserver所屬的服務器就是不可用的。但其它不屬于這個DistributedApplication的訪問請求，仍然可以被分發(fā)到這個服務器上來。ZoneRunner減少DNS配置錯誤EasyDNSmanagementAutopopulationofprotocolsValidation/errorcheckingRollbacktothelasttransactionImportationofzonesAutomaticreverselookupsZoneRunner?OnlyintegratedDNSManagementUtility成功案例-TOM.COMCDNSite沈陽Site西安Site成都Site長沙Site廣州Site杭州Site北京Site教育網Site中國移動100MFE1000MGESwitchRouterF53DNSF5bigip2400Netapp6200Netapp2100成功案例-ChinaCacheChinaCache中國最大的CDN服務提供商Solutionrequirement:Nodedeployment:30-50inChinaCapacityofeachnode:40-1000MBImplementation:DeployBIGIP,3DNS,F5totalCDNsolutionBIG/IPLBforCache3DNSforWANLBSee-ITformanagement

21cnGSLB解決方案SEE-ITWEB/StreamingServer3DNS3DNSBigIP2400CoreSwitch21cn廣州機房GBFECacheServerWEB/StreamingServerBigIP5000BigIP500021cn上海節(jié)點CoreSwitchInternetWEB/StreamingServerBigIP2400CoreSwitch21cn河北節(jié)點Summary:BIG-IPGTMBIG-IPGlobalTrafficManagerApplicationHealthFeaturesCompositemonitorsApplication-specificmonitorsDistributedapplicationmonitoringManagementFeaturesNewandimproveduserinterfaceZoneRunner