Deep Dive：應(yīng)用交付網(wǎng)絡(luò)架構(gòu)設(shè)計(jì)

?APSARA云棲大會(huì)?APSARA云棲大會(huì)傳統(tǒng)型負(fù)載均衡TCPIUDP/HTTP/HTTPSCLBECSECSECSECS應(yīng)用廣泛但性能與功能相對(duì)較弱應(yīng)用型負(fù)載均衡ALBVPCHTTP/HTTPS/QUICALBECSECSECSECS面向云原生的新一代應(yīng)用型負(fù)載均衡網(wǎng)絡(luò)型負(fù)載均衡NLBVPCTCP/UDP/TCPSSLNLBECSECSECSECS面向萬物互聯(lián)的新一代網(wǎng)絡(luò)型負(fù)載均衡APSARA云棲大會(huì)?性能單實(shí)例QPS可彈性至100W串、HTTP請(qǐng)求方法、cookie和sourcelp定響應(yīng)、寫入/刪除Header、QPS限速、流量鏡像?網(wǎng)絡(luò)：IPV4/IPV6雙棧、BGP多線????面向TCP/TCPSSL/UDP單實(shí)例并發(fā)連接可彈性至1億全端口轉(zhuǎn)發(fā)IPV4/IPV6雙棧、BGP多線性能功能NLBALBALB/NLB應(yīng)用層防護(hù)：應(yīng)用層防護(hù)：網(wǎng)絡(luò)層防護(hù)：傳輸層防護(hù)網(wǎng)絡(luò)層防護(hù)：NLBALBAPSARA云棲大會(huì)客戶自有域名客戶自有域名cname解析可用區(qū)BEIPVIP可用區(qū)AEIPVIP可用區(qū)CEIPVIPALB/NLB可用區(qū)B可用區(qū)B?ALB當(dāng)前的彈性機(jī)制可用區(qū)B?NLB的彈性機(jī)制?ALB未來的彈性機(jī)制可用區(qū)A可用區(qū)A可用區(qū)C可用區(qū)CAPSARA云棲大會(huì)WAFWAFEIP*NCLB*N可用區(qū)BCLB可用區(qū)A量分發(fā)"等職能?？捎脜^(qū)A可用區(qū)A可用區(qū)B可用區(qū)BCLBEIPEIPVIP可用區(qū)C可用區(qū)A縱向：層級(jí)精簡(jiǎn)，僅依托ALB/NLB，便可實(shí)現(xiàn)各項(xiàng)職能。橫向：實(shí)例精簡(jiǎn)，便可兼具承載力及冗余性。?負(fù)載均衡網(wǎng)元、應(yīng)用云服務(wù)器均實(shí)現(xiàn)"多可用區(qū)多?覆蓋應(yīng)用層、傳輸層、網(wǎng)絡(luò)層的立體化防護(hù)?負(fù)載均衡提供豐富的4/7層轉(zhuǎn)發(fā)規(guī)則?精簡(jiǎn)的架構(gòu)"張弛有度"?公網(wǎng)BGP多線帶寬可用區(qū)B可用區(qū)A可用區(qū)BALB(WAF增強(qiáng)版)*1NLB*1VIP可用區(qū)VIP可用區(qū)ABAPSARA云棲大會(huì)基于ALB/NLB的"Iptarget"特性，構(gòu)建跨地域/混合云的應(yīng)用交付網(wǎng)絡(luò)<<>EIPVPC轉(zhuǎn)發(fā)路由器TRVPC轉(zhuǎn)發(fā)路由器TR跨地域連接跨地域連接轉(zhuǎn)發(fā)路由器TR成都北京云企業(yè)網(wǎng)CENVPCVPCEIPEIP<<>EIPVPC轉(zhuǎn)發(fā)路由器?應(yīng)用交付網(wǎng)絡(luò)的"云上與云下共享"器VBR證書變更無需Reload進(jìn)程?？刂婆c轉(zhuǎn)發(fā)分離規(guī)避共用容器所引發(fā)的安全漏洞風(fēng)險(xiǎn)。APSARA云棲大會(huì)云原生應(yīng)用交付網(wǎng)絡(luò)設(shè)計(jì)借助ALBIngress，將容器集群外部流量路由到集群內(nèi)部的Service，實(shí)現(xiàn)七層負(fù)載均衡功能。ALBIngressController，負(fù)責(zé)監(jiān)聽APIServer中AlbConfig/Ingress/Service等資源的變化，動(dòng)態(tài)地安裝ALBIngressController授權(quán)ALBIngressController(可選)創(chuàng)建AlbConfig和IngressClass創(chuàng)建Ingress/Service/Deployment等K8S資源ALBIngressACK管理員：配置Ingress等K8S資源ALB控制