① hcdn錛宑dn鎶鏈榪欎簺閮芥湁浠涔堢敤錛
CDN鐨勫叏縐版槸Content Delivery Network錛屽嵆鍐呭瑰垎鍙戠綉緇溿備紶緇烠DN鏄閫氳繃鍦ㄧ綉緇滃悇澶勬斁緗鑺傜偣鏈嶅姟鍣ㄦ墍鏋勬垚鐨勫湪鐜版湁鐨勪簰鑱旂綉鍩虹涔嬩笂鐨勪竴灞傛櫤鑳借櫄鎷熺綉緇滐紝CDN緋葷粺鑳藉熷疄鏃跺湴鏍規嵁緗戠粶嫻侀噺鍜屽悇鑺傜偣鐨勮繛鎺ャ佽礋杞界姸鍐典互鍙婂埌鐢ㄦ埛鐨勮窛紱誨拰鍝嶅簲鏃墮棿絳夌患鍚堜俊鎮灝嗙敤鎴風殑璇鋒眰閲嶆柊瀵煎悜紱葷敤鎴鋒渶榪戠殑鏈嶅姟鑺傜偣涓娿備絾瀹為檯鐨勪嬌鐢ㄤ腑鎴戜滑鍙戠幇錛屾寚鏁板瀷澧為暱鐨勭敤鎴鋒暟鎹闇奼備護鐜版湁CDN鏋舵瀯瀹屽叏鏃犳硶鎷涙灦銆
鐜版湁鐨凜DN緋葷粺浣撶郴鏋舵瀯涓婏紝浣跨敤鍏鍏盜P緗戠粶錛屽唴瀹逛粠涓涓婧愮珯錛岀粡榪囧嚑灞侰DN鑺傜偣錛屽埌緇堢瀹㈡埛銆傚湪姣忎釜鏁版嵁鑺傜偣涓婏紝鏁版嵁閮介渶瑕佷紶杈撲竴閬嶏紝涓轟簡涓嶅悓瀹㈡埛鐨勯渶奼傦紝鍚屾牱鐨勬暟鎹錛岄渶瑕佸湪澶氫釜鑺傜偣闂撮噸澶嶄紶杈撱傚熀浜庣幇鏈塈P緗戠粶鍩虹璁炬柦鏋勫緩錛孋DN鐨勬晥鐜囧拰鍏鍏盜P緗戠粶鍩虹璁炬柦甯﹀藉崰鐢ㄧ▼搴﹀嬬粓鏄涓嶅彲璋冨拰鐨勭煕鐩俱侰DN緋葷粺榪愯屼腑瀵規湇鍔″櫒涓杞璋冨害鐨勯渶奼傚拰IP緗戠粶甯﹀鐨勯渶奼傦紝闅忕粓絝瀹㈡埛鏁伴噺鐨勫為暱銆侀渶瑕佷紶杈撶殑鏁版嵁閲忕殑澧為暱錛岄兘浼氶渶瑕佷笉鏂澧為暱銆傝孋DN緋葷粺涓浼犺緭鐨勬暟鎹錛岀粡甯告槸鍚屾牱鐨勬暟鎹錛岀粰涓嶅悓鐨勮妭鐐癸紝榪欏圭幇鏈夊熀紜璁炬柦涓鐨勫疂璐電殑鍙屽悜IP緗戠粶鐨勫甫瀹戒篃鏄鏋佸ぇ鐨勬氮璐廣 涓轟簡瑙ｅ喅榪欎釜闂棰橈紝涓夊嘲鍏夌數緇忚繃闀挎湡鐮旂┒錛屾彁鍑轟簡HCDN鐨勬柟寮忋傚熀鏈鎬濊礬鏄錛氬彲浠ユ妸緗戠粶涓澶ч儴鍒嗗叡鎬у唴瀹圭殑璁塊棶鏀懼湪緗戠粶鐨勬渶杈圭紭錛岃孋DN鐨勫唴瀹規洿鏂幫紝鍙浠ヤ笉鐢ㄩ氳繃鏍稿績IP鏈夌嚎緗戠粶錛岀粫榪囨墍鏈夌摱棰堣妭鐐癸紝鍒╃敤楂樻墖鍑虹殑騫挎挱緗戠粶錛堝崼鏄熶俊閬撶殑鎵囧嚭姣斿彲浠ヨ秼浜庢棤絀鳳級榪涜屾洿鏂般傚傛灉澶ц寖鍥村簲鐢℉CDN鏋舵瀯錛屽彲浠ユ妸浜掕仈緗戜笂80%浠ヤ笂鐨勬祦閲忛檺鍒跺湪杈冨皬鐨勫矓鍩熺綉鍐呬氦浜掞紝浠庤屾彁楂樹簡鍘熷弻鍚慖P緗戠粶瀵逛釜鎬у寲鏁版嵁浼犺緭涓氬姟鐨勬敮鎸佽兘鍔涳紙瑙嗛戠數璇濄佺洃鎺х瓑錛夛紱涓夊嘲鍏夌數鎻愬嚭鐨凥CDN鏋舵瀯鍙浠ユ樉钁楁彁楂樼粓絝瀹㈡埛瀵筕OD鐐規挱鍜岀洿鎾鑺傜洰鐨勪綋楠岋紝鍚屾椂鍦ㄥ惛鏀朵簡澶ч噺鐨勫叡鎬ф暟鎹嫻侀噺鍚庯紝瀵規暣涓浜掕仈緗戠粶閮芥槸鏈夌泭鐨勩 瀵逛簬鍘熶簰鑱旂綉涓鐨凜DN緋葷粺錛屽悓HCDN緋葷粺涔嬮棿灝嗕細鏄涓涓浜掕ˉ鐨勫叧緋匯傚ぇ閲忓叡鎬х殑鏁版嵁浜ょ粰HCDN鏉ュ仛鍙浠ユ彁楂樻晥鐜囧拰瀹㈡埛浣撻獙錛孋DN寰椾互浠庡ぇ閲忛噸澶嶆暟鎹瑙ｆ斁鍑烘潵鍙浠ユ洿濂藉湴婊¤凍瀹㈡埛闅忔満璇鋒眰鐨勯渶瑕併侶CDN緋葷粺鍙浠ュ崟鐙緇勭綉錛屽彲浠ヤ笌CDN緋葷粺騫惰岀粍緗戙 涓夊嘲鍏夌數鎻愬嚭鐨凥CDN鏋舵瀯閲囩敤鐨勪笅琛屾暟鎹閫氶亾錛屼富瑕佷嬌鐢ㄧ殑鏄騫挎挱鏁版嵁閫氶亾錛屽侱VB-S/S2 錛孉BS-S錛孌VB-C, DVB-T/T2錛孌MT-TH 絳夐氶亾錛堟湭鏉ュ彲鑳芥湁鍏朵粬綾誨瀷鐨勫箍鎾閫氶亾錛夛紝鐩鍓嶅崼鏄熼氶亾鏄鏈鍏鋒т環姣旂殑涓嬭岄氶亾銆備笂琛岄噰鐢ㄧ殑鏄浼犵粺internet閫氶亾,濡侫DSL/EOC/PON/FTTH/2.5G/2.75G/3G/4G絳夈傞氳繃鎵榪扮殑鏂規硶緇勬垚緗戠粶錛屽畬鎴愬唴瀹逛紶杈撶殑宸ヤ綔銆 涓夊嘲鍏夌數鎻愬嚭鐨凥CDN緋葷粺鍒嗕負2綰э紝1.HCDN婧愮緋葷粺 涓2.HCDN 鑺傜偣緋葷粺銆 1錛孒CDN婧愮鐢卞唴瀹規湇鍔″櫒錛岃皟搴︽湇鍔″櫒錛屽箍鎾鍓嶆電郴緇 絳夛細 鐢變簬HCDN鏋舵瀯鐨勭壒鐐癸紝婧愮緋葷粺璧勬簮鍙浠ュ緢闆嗕腑錛屾湁鍒╀簬浜掕仈緗戠殑澶氬獟浣撶洃綆″伐浣溿
鍐呭規湇鍔″櫒瀛樺偍鍐呭癸紝璋冨害鏈嶅姟璋冨害鍐呭逛笌淇￠亾浜х敓1綰EPG銆傚苟鏍規嵁EPG瀹夋帓鍐呭瑰箍鎾銆 2錛孒CDN鑺傜偣鐢變俊鍙鋒帴鏀跺櫒銆佽В璋冦佽皟搴︺佸瓨鍌ㄧ瓑錛堥昏緫錛夋ā鍧楃粍鎴愶細鎺ユ敹瑙ｈ皟閮ㄥ垎錛屽箍鎾鏁版嵁銆
瀛樺偍閮ㄥ垎錛屽皢鎺ユ敹鍒扮殑鏁版嵁緙撳瓨鍒版湰鍦伴潪鏄撳け瀛樺偍鍣錛堢‖鐩橈級 鎴栭珮閫熸槗澶卞瓨鍌ㄥ櫒錛堝唴瀛橈級銆
璋冨害妯″潡鏍規嵁鏈鍦板瓨鍌ㄥ唴瀹癸紝鍒嗘淳鐢ㄦ埛璇鋒眰錛堢敤鎴風敱鏈鍦癏CDN鏈嶅姟錛岃繕鏄痠nternet鏈嶅姟錛夈傛牴鎹鐢ㄦ埛鎻愪氦鐨凟PG闇奼傦紝鐢熸垚EPG璇鋒眰涓庢簮絝鍗忓晢銆
② 鏈嶅姟鍣ㄩ泦緹よ礋杞藉潎琛″尯鍒浠ュ強閫夊瀷
=======================================
F5鍏ㄧО: F5-BIG-IP-GTM 鍏ㄧ悆嫻侀噺綆＄悊鍣.
鏄涓瀹跺彨F5 Networks鐨勫叕鍙稿紑鍙戠殑鍥泘涓冨眰浜ゆ崲鏈,杞紜浠舵崋緇.
鎹璇存渶鍒濈敤BSD緋葷粺,鐜板湪鏄疞INUX;紜浠舵槸Intel鐨凱C鏋舵瀯,鍐嶅姞鍛ㄨ竟鐨勭綉緇滃拰涓撶敤鍔犻熻懼.
褰撶劧瑕佹彁鎻愬敭浠, 閮芥槸鍑犲嶮涓嘡MB鐨勮韓浠.
榪欏疂璐濇槸鐢ㄤ簬瀵規祦閲忓拰鍐呭硅繘琛岀＄悊鍒嗛厤鐨勮懼,涔熷氨鏄璐熻澆鍧囪.
浠庡悕瀛楀氨鑳界湅鍑烘潵:BIG-IP.
澶栭儴鐪嬫潵鏄涓涓狪P,鍐呴儴鍙鍗存槸鍑犲嶮鍙板簲鐢ㄦ湇鍔″櫒.琛ㄧ幇涓轟竴涓鉶氭嫙鐨勫ぇ鏈嶅姟鍣.
鎵浠ユ垜鎵嶈: 濂藉ぇ涓涓狪P.
LVS = linux Virtual Server
鏄淇轟滑涓鍥戒漢,涓涓鍙絝犳枃宓╃殑鍗氬＋鎺ㄥ壋寮鍙戝嚭鏉ョ殑,
浠栫殑web:http://zh.linuxvirtualserver.org/
IBM緗戠珯鐨勮祫鏂:闆嗙兢鐨勫彲鎵╁睍鎬у強鍏跺垎甯冨紡浣撶郴緇撴瀯(4)
鍗氬＋鍏充簬LVS鍜孎5鐨勫規瘮:
鍏充簬鍜孎5鐨勫樊鍒錛屽緢闅句竴鍙ヨ瘽璇存槑鐧斤紝閮芥槸鍋氳礋杞藉潎琛＄殑璁懼囥
F5鉶界劧涔熸槸鍩轟簬BSD緋葷粺淇鏀圭殑(鎹璇存渶鏂扮殑鍩轟簬Linux浜)錛屼絾閲嶈佺殑浜ゆ崲閮ㄥ垎錛屽垯鏄閫氳繃涓撻棬鐨勪氦鎹㈣姱鐗囧疄鐜扮殑(綾諱技鏈変簡涓撻棬鐨勫浘鍍忓勭悊鑺鐗囷紝灝卞彲浠ョ渷鍘誨ぇ閲忕殑CPU瀵瑰浘鍍忓勭悊鐨勮繍綆)錛岃繖鏍蜂粬鐨勬ц兘灝變笉浼氬緢渚濊禆浜庝富鏈虹殑鎿嶄綔緋葷粺鐨勫勭悊鑳藉姏銆
F5涓婅礋杞藉潎琛″ぇ澶氭槸鍩轟簬NAT/SNAT錛屼篃鍙浠ュ疄鐜癙roxy,浣嗙敤鐨勮緝灝戱紝鍋氫負涓涓涓婂競鍏鍙革紝F5鑷鐒跺湪浜у搧鍖栫▼搴︿笂鍋氱殑寰堝ソ錛屾棤璁洪厤緗綆＄悊鏂逛究鎬с佺伒媧繪э紝鎬ц兘鍜岀ǔ瀹氭т笂閮芥瘮杈冨ソ銆
LVS鍦∟AT妯″紡涓嬶紝鍜孎5鐨勫姛鑳藉熀鏈涓婃槸涓鏍風殑錛屼絾姣曠珶LVS鏄綰綺圭殑杞浠訛紝鎬ц兘鏄渚濊禆浜庝富鏈虹殑榪愮畻鑳藉姏鐨勩
鑰屼笖錛孡VS鏄寮婧愮殑欏圭洰錛屼笉搴旇ュ拰涓涓鍟嗕笟浜у搧鏉ユ瘮杈冿紝浜哄墮偅鏄鍗栭挶鐨勶紝鏈夊緢澶氫漢鏉ョ淮鎶ゅ拰寮鍙戱紝鑰孡VS涓鐩存槸絝犲崥澹涔夊姟鏉ョ淮鎶ゅ紑鍙戠殑錛屾兂瑕佹洿濂界殑鍔熻兘錛屽氨闇瑕佹湁鏇村氱殑浜哄弬涓庤繘鏉ユ墠琛屻
璇寸殑鐩稿綋閫忓交浜.
DNS杞璇㈡槸鍋氳礋杞藉潎琛℃渶綆鍗曟湁鏁堢殑瀹炵幇鏂規硶,鍚勬柟闈浠ｄ環閮芥瀬浣.璐уソ渚垮疁閲忓張瓚.
緙虹偣灝辨槸鐢變簬娌℃湁媯嫻嬫満鍒, 涓嶅熷潎琛,瀹歸敊鍙嶅簲鏃墮棿闀.
鍥藉唴闂ㄦ埛鐢ㄨ繖涓鎶鏈鐨勫緢澶,閰嶅悎squid鏈夊緢濂界殑鏁堟灉.
褰撶劧,涓嶅仛璐熻澆鍧囪, 鐩存帴浠庡氫釜ISP鎷夊嚑鏍圭嚎,鍒嗗埆鎻愪緵鏈嶅姟鏄鏈鍘熷嬬殑鏂規硶.
CDN = Content Delivery Network錛屽唴瀹瑰垎鍙戠綉緇溿
緇嗙┒璧鋒潵涓婇潰鐨勯兘鏄痗dn鐨勫疄鐜版柟寮.
鍥藉唴寮鏀劇殑鏈嶅姟寰堝皯(chinacache),鍥藉栧嵈闈炲父嫻佽.
灝辨槸鎻愪緵緙撳瓨鑺傜偣,鎶婄洰鏍囩綉緇滃唴瀹圭殑璁塊棶杞鍖栦負涓磋繎鑺傜偣鐨勮塊棶.
鍝嶅簲閫熷害/瀹夊叏/閫忔槑/鎵╁睍,鐗瑰埆鏄涓鍥借繖縐嶈繕娌¤В鏀懼彴婀懼氨鍗楀寳鍒嗚傜殑緗戠粶鏍煎矓涓,鏇翠負浼熷ぇ.
涓嶈繃涔熸槸璐墊棌鐨勬湇鍔,寤鴻炬垚鏈寰堥珮.
ADSL + DDNS + CDN 涔熺畻鏄鍙︿竴涓寤哄皬絝欑殑閫斿緞浜.
鎶婄┖闂寸殑縐熺敤璐圭敤鎶曡祫鍦ㄦ祦閲忎笂, 鐩存帴鏈夋晥. 涓嶈繃鐢佃垂鍜岀ǔ瀹氭т笂涓嶅逛箰瑙.
鍏跺疄CDN涓嶅彧鏄鍋氱綉絝欐湇鍔＄殑, 姣斿傚湪闊╁浗,澶氭暟鐨凜ND嫻侀噺閮芥槸琚緗戠粶娓告垙鍗犵敤浜.
璇曟兂,濡傛灉鑳藉ぇ鑼冨洿閾哄紑CDN鑺傜偣, 閭ｈ繕鏈夊繀瑕佷竴涓娓告垙鍒嗛偅涔堝氬尯,鍗犵敤閭ｄ箞澶氭湇鍔″櫒涔?
緇撹烘槸榪樻湁蹇呰 鉶界劧紜瀹炶塊棶榪炴帴鍜屽搷搴旈熷害瀵圭幇鍦ㄧ殑緗戠粶娓告垙鏈夊緢澶у獎鍝,浣嗗紑鍙戠摱棰堟洿鍦ㄤ簬璁＄畻鑳藉姏鍜屾暟鎹瀛樺偍璁塊棶.
鍙堜竴涓璇曟兂, 鎶奀DN鍜孭2P緇撳悎, 涓婄綉鐨勪釜浜篜C鍙瑕佹彁渚汣DN鏈嶅姟, 灝卞彲浠ユ瘡鏈堣幏鐨剎x緹庨噾鐨勪劍閲.鐢辮祫璁鍜屽簲鐢ㄦ彁渚涘晢涔板崟.
鎬庝箞鐪嬭繖閮芥槸涓鑹鎬у彂灞曠殑浜т笟閾, 灝卞儚google鏄庡勾瑕佹帹鍑哄厤璐規墜鏈,璁╁箍鍛婂晢涔板崟涓鏍.
涓嶈繃鍞涓涓嶉珮鍏寸殑灝卞簲璇ユ槸ISP浠浜,鐜板湪bt榪欐牱鐨勫叡浜閮借灝佹潃.
闄ら潪榪欎釜涓氬姟琚浠栦滑鑷宸卞瀯鏂,涓嶇劧涔熸槸鍍靛案鐨勪笅鍦.
鐢ㄦ埛涔熶笉鏄鐧懼埄鏃犲崇殑, 鏁版嵁瀹夊叏鍜岃祫璁鍙婃椂鏈夋寫鎴.
GV浠涔熶笉鏄鐪嬫垙鐨,鐜板湪榪樻湁緗戠珯鍙浠ュ皝,鍐欎釜blog閮借100涓囨敞鍐岃祫閲;
濡傛灉涓鍫哠SL鍔犲瘑鐨勬暟鎹鍥涘勬祦紿,紲為緳鏃犻栨棤灝,鎬庝箞灞忚斀榪囨護,鎬庝箞闃插窛鍟妦
鍥炴湜鐪,瓚婄湅瓚婂儚緗戞憳,緔㈡у氨鍐嶆憳孌靛畬鏁寸殑
F5鍔熻兘浠嬬粛:
1.澶氶摼璺鐨勮礋杞藉潎琛″拰鍐椾綑
涓庝簰鑱旂綉緇滅浉鍏崇殑鍏抽敭涓氬姟閮介渶瑕佸畨鎺掑拰閰嶇疆澶氭潯ISP鎺ュ叆閾捐礬浠ヤ繚璇佺綉緇滄湇鍔＄殑璐ㄩ噺錛屾秷闄ゅ崟鐐規晠闅滐紝鍑忓皯鍋滄満鏃墮棿銆傚氭潯ISP鎺ュ叆鐨勬柟妗堝苟涓嶆槸綆鍗曠殑澶氭潯涓嶅悓鐨勫箍鍩熺綉緇滅殑璺鐢遍棶棰橈紝鍥犱負涓嶅悓鐨処SP鏈変笉鍚岃嚜娌誨煙錛屾墍浠ュ繀欏昏冭檻鍒頒袱縐嶆儏鍐典笅濡備綍瀹炵幇澶氭潯閾捐礬鐨勮礋杞藉潎琛★細
more..
less..
鍐呴儴鐨勫簲鐢ㄧ郴緇熷拰緗戠粶宸ヤ綔絝欏湪璁塊棶浜掕仈緗戠粶鐨勬湇鍔″拰緗戠珯鏃跺備綍鑳藉熷湪澶氭潯涓嶅悓鐨勯摼璺涓鍔ㄦ佸垎閰嶅拰璐熻澆鍧囪錛岃繖涔熻縐頒負OUTBOUND嫻侀噺鐨勮礋杞藉潎琛°
浜掕仈緗戠粶鐨勫栭儴鐢ㄦ埛濡備綍鍦ㄥ栭儴璁塊棶鍐呴儴鐨勭綉絝欏拰搴旂敤緋葷粺鏃朵篃鑳藉熷姩鎬佺殑鍦ㄥ氭潯閾捐礬涓婂鉤琛″垎閰嶏紝騫跺湪涓鏉￠摼璺涓鏂鐨勬椂鍊欒兘澶熸櫤鑳藉湴鑷鍔ㄥ垏鎹㈠埌鍙﹀栦竴鏉￠摼璺鍒拌揪鏈嶅姟鍣ㄥ拰搴旂敤緋葷粺錛岃繖涔熻縐頒綔涓篒NBOUND嫻侀噺鐨勮礋杞藉潎琛°
F5 鐨凚IG-IP LC鍙浠ユ櫤鑳界殑瑙ｅ喅浠ヤ笂涓や釜闂棰橈細
瀵逛簬OUTBOUND嫻侀噺錛孊IG-IP LC鎺ユ敹鍒版祦閲忎互鍚庯紝鍙浠ユ櫤鑳界殑灝哋UTBOUND嫻侀噺鍒嗛厤鍒頒笉鍚岀殑INTERNET鎺ュ彛錛屽苟鍋氭簮鍦板潃鐨凬AT錛屽彲浠ユ寚瀹氭煇涓鍚堟硶IP鍦板潃榪涜屾簮鍦板潃鐨 NAT錛屼篃鍙浠ョ敤BIG-IP LC鐨勬帴鍙ｅ湴鍧鑷鍔ㄦ槧灝勶紝淇濊瘉鏁版嵁鍖呰繑鍥炴椂鑳藉熸ｇ『鎺ユ敹銆
瀵逛簬INBOUND嫻侀噺錛孊IG-IP LC鍒嗗埆緇戝畾涓や釜ISP 鏈嶅姟鍟嗙殑鍏緗戝湴鍧錛岃В鏋愭潵鑷涓や釜ISP鏈嶅姟鍟嗙殑DNS瑙ｆ瀽璇鋒眰銆侭IG-IP LC涓嶄粎鍙浠ユ牴鎹鏈嶅姟鍣ㄧ殑鍋ュ悍鐘跺喌鍜屽搷搴旈熷害鍥炲簲LDNS鐩稿簲鐨処P鍦板潃錛岃繕鍙浠ラ氳繃涓ゆ潯閾捐礬鍒嗗埆涓嶭DNS寤虹珛榪炴帴錛屾牴鎹甊TT鏃墮棿鍒ゆ柇閾捐礬鐨勫ソ鍧忥紝騫朵笖緇煎悎浠ヤ笂涓や釜鍙傛暟鍥炲簲LDNS鐩稿簲鐨処P鍦板潃銆
2.闃茬伀澧欒礋杞藉潎琛
鑰冭檻鍒扮粷澶у氭暟鐨勯槻鐏澧欏彧鑳借揪鍒扮嚎閫熺殑30%鍚炲悙鑳藉姏錛屾晠瑕佷嬌緋葷粺杈懼埌璁捐¤佹眰鐨勭嚎閫熷勭悊鑳藉姏錛屽繀欏繪坊鍔犲氬彴闃茬伀澧欙紝浠ユ弧瓚崇郴緇熻佹眰銆傜劧鑰岋紝闃茬伀澧欏繀欏昏佹眰鏁版嵁鍚岃繘鍚屽嚭錛屽惁鍒欒繛鎺ュ皢琚鎷掔粷銆傚備綍瑙ｅ喅闃茬伀澧欑殑璐熻澆鍧囪闂棰橈紝鏄鍏崇郴鍒版暣涓緋葷粺鐨勭ǔ瀹氭х殑鍏抽敭闂棰樸
F5鐨勯槻鐏澧欒礋杞藉潎琛℃柟妗堬紝鑳藉熶負鐢ㄦ埛鎻愪緵寮傛瀯闃茬伀澧欑殑璐熻澆鍧囪涓庢晠闅滆嚜鍔ㄦ帓闄よ兘鍔涖傚吀鍨嬬殑鎻愰珮闃茬伀澧欏勭悊鑳藉姏鐨勬柟娉曟槸閲囩敤鈥滈槻鐏澧欎笁鏄庢不鈥濈殑鏂規硶錛屼互瀹炵幇閫忔槑璁懼囩殑鎸佺畫鎬с傝繖鍙婊¤凍鏌愪簺瑕佹眰瀹㈡埛涓烘垚鍔熷畨鍏ㄥ畬鎴愪氦鏄撳繀欏婚氳繃鍚屼竴闃茬伀澧欑殑搴旂敤紼嬪簭鐨勮佹眰錛屼篃鑳藉熺淮鎶ゅ師鏉ョ殑緗戠粶瀹夊叏闅旂葷殑瑕佹眰銆侳5鏍囧噯闃茬伀澧欒В鍐蟲柟妗堝傚浘鎵紺猴細
闃茬伀澧欒礋杞藉潎琛¤繛鎺ョず鎰忓浘
3.鏈嶅姟鍣ㄨ礋杞藉潎琛
瀵逛簬鎵鏈夌殑瀵瑰栨彁渚涙湇鍔＄殑鏈嶅姟鍣錛屽潎鍙浠ュ湪BIG-IP涓婇厤緗甐irtual Server瀹炵幇璐熻澆鍧囪錛屽悓鏃禕IG-IP鍙鎸佺畫媯鏌ユ湇鍔″櫒鐨勫仴搴風姸鎬侊紝涓鏃﹀彂鐜版晠闅滄湇鍔″櫒錛屽垯灝嗗叾浠庤礋杞藉潎琛＄粍涓鎽橀櫎銆
BIG-IP鍒╃敤鉶氭嫙IP鍦板潃(VIP鐢盜P鍦板潃鍜孴CP/UDP搴旂敤鐨勭鍙ｇ粍鎴愶紝瀹冩槸涓涓鍦板潃)鏉ヤ負鐢ㄦ埛鐨勪竴涓鎴栧氫釜鐩鏍囨湇鍔″櫒(縐頒負鑺傜偣錛氱洰鏍囨湇鍔″櫒鐨処P鍦板潃鍜孴CP/UDP搴旂敤鐨勭鍙ｇ粍鎴愶紝瀹冨彲浠ユ槸internet鐨勭佺綉鍦板潃)鎻愪緵鏈嶅姟銆傚洜姝わ紝瀹冭兘澶熶負澶ч噺鐨勫熀浜嶵CP/IP鐨勭綉緇滃簲鐢ㄦ彁渚涙湇鍔″櫒璐熻澆鍧囪鏈嶅姟銆傛牴鎹鏈嶅姟綾誨瀷涓嶅悓鍒嗗埆瀹氫箟鏈嶅姟鍣ㄧ兢緇勶紝鍙浠ユ牴鎹涓嶅悓鏈嶅姟絝鍙ｅ皢嫻侀噺瀵煎悜鍒扮浉搴旂殑鏈嶅姟鍣ㄣ侭IG-IP榪炵畫鍦板圭洰鏍囨湇鍔″櫒榪涜孡4鍒 L7鍚堢悊鎬ф鏌ワ紝褰撶敤鎴烽氳繃VIP璇鋒眰鐩鏍囨湇鍔″櫒鏈嶅姟鏃訛紝BIG-IP鏍規愮洰鏍囨湇鍔″櫒涔嬮棿鎬ц兘鍜岀綉緇滃仴搴鋒儏鍐碉紝閫夋嫨鎬ц兘鏈浣崇殑鏈嶅姟鍣ㄥ搷搴旂敤鎴風殑璇鋒眰銆傚傛灉鑳藉熷厖鍒嗗埄鐢ㄦ墍鏈夌殑鏈嶅姟鍣ㄨ祫婧愶紝灝嗘墍鏈夋祦閲忓潎琛＄殑鍒嗛厤鍒板悇涓鏈嶅姟鍣錛屾垜浠灝卞彲浠ユ湁鏁堝湴閬垮厤鈥滀笉騫寵鈥濈幇璞＄殑鍙戠敓銆
鍒╃敤UIE+iRules鍙浠ュ皢TCP/UDP鏁版嵁鍖呮墦寮錛屽苟鎼滅儲鍏朵腑鐨勭壒寰佹暟鎹錛屼箣鍚庢牴鎹鎼滅儲鍒扮殑鐗瑰緛鏁版嵁浣滅浉搴旂殑瑙勫垯澶勭悊銆傚洜姝ゅ彲浠ユ牴鎹鐢ㄦ埛璁塊棶鍐呭圭殑涓嶅悓灝嗘祦閲忓煎悜鍒扮浉搴旂殑鏈嶅姟鍣錛屼緥濡傦細鏍規嵁鐢ㄦ埛璁塊棶璇鋒眰鐨刄RL灝嗘祦閲忓煎悜鍒扮浉搴旂殑鏈嶅姟鍣ㄣ
4.緋葷粺楂樺彲鐢ㄦ
緋葷粺楂樺彲鐢ㄦт富瑕佸彲浠ヤ粠浠ヤ笅鍑犱釜鏂歸潰鑰冭檻錛
4.1.璁懼囪嚜韜鐨勯珮鍙鐢ㄦэ細F5 BIG-IP涓撻棬浼樺寲鐨勪綋緋葷粨鏋勫拰鍗撹秺鐨勫勭悊鑳藉姏淇濊瘉99.999%鐨勬ｅ父榪愯屾椂闂達紝鍦ㄥ弻鏈哄啑浣欐ā寮忎笅宸ヤ綔鏃跺彲浠ュ疄鐜版縐掔駭鍒囨崲錛屼繚璇佺郴緇熺ǔ瀹氳繍琛岋紝鍙﹀栬繕鏈夊啑浣欑數婧愭ā鍧楀彲閫夈傚湪閲囩敤鍙屾満澶囦喚鏂瑰紡鏃訛紝澶囨満鍒囨崲鏃墮棿鏈蹇浼氬湪200ms涔嬪唴榪涜屽垏鎹銆侭IG-IP 浜у搧鏄涓氱晫鍞涓鐨勫彲浠ヨ揪鍒版縐掔駭鍒囨崲鐨勪駭鍝, 鑰屼笖璁捐℃瀬涓哄悎鐞嗭紝鎵鏈変細璇濋氳繃Active 鐨凚IG-IP 鐨勫悓鏃訛紝浼氭妸浼氳瘽淇℃伅閫氳繃鍚屾ユ暟鎹綰垮悓姝ュ埌Backup鐨凚IG-IP錛屼繚璇佸湪Backup BIG-IP鍐呬篃鏈夋墍鏈夌殑鐢ㄦ埛璁塊棶浼氳瘽淇℃伅;鍙﹀栨瘡鍙拌懼囦腑鐨剋atchdog鑺鐗囬氳繃蹇冭煩綰跨洃鎺у規柟璁懼囩殑鐢甸戱紝褰揂ctive BIG-IP鏁呴殰鏃訛紝watchdog浼氶栧厛鍙戠幇錛屽苟閫氱煡Backup BIG-IP鎺ョShared IP錛孷IP絳夛紝瀹屾垚鍒囨崲榪囩▼錛屽洜涓築ackup BIG-IP涓鏈変簨鍏堝悓姝ュソ鐨勪細璇濅俊鎮錛屾墍浠ュ彲浠ヤ繚璇佽塊棶鐨勭晠閫氭棤闃匯
4.2.閾捐礬鍐椾綑錛欱IG-IP鍙浠ユ嫻嬫瘡鏉￠摼璺鐨勮繍琛岀姸鎬佸拰鍙鐢ㄦэ紝鍋氬埌閾捐礬鍜孖SP鏁呴殰鐨勫疄鏃舵嫻嬨備竴鏃﹀嚭鐜版晠闅滐紝嫻侀噺灝嗚閫忔槑鍔ㄦ佺殑寮曞艱嚦鍏跺畠鍙鐢ㄩ摼璺銆傞氳繃鐩戞帶鍜岀＄悊鍑哄叆鏁版嵁涓蹇冪殑鍙屽悜嫻侀噺錛屽唴閮ㄥ拰澶栭儴鐢ㄦ埛鍧囧彲淇濇寔緗戠粶鐨勫叏鏃惰繛鎺ャ
4.3.鏈嶅姟鍣ㄥ啑浣欙紝澶氬彴鏈嶅姟鍣ㄥ悓鏃舵彁渚涙湇鍔★紝褰撴煇涓鍙版湇鍔″櫒鏁呴殰涓嶈兘鎻愪緵鏈嶅姟鏃訛紝鐢ㄦ埛鐨勮塊棶涓嶄細涓鏂銆侭IG-IP鍙浠ュ湪OSI涓冨眰妯″瀷涓鐨勪笉鍚屽眰闈涓婂規湇鍔″櫒榪涜屽仴搴鋒鏌ワ紝瀹炴椂鐩戞祴鏈嶅姟鍣ㄥ仴搴風姸鍐碉紝濡傛灉鏌愬彴鏈嶅姟鍣ㄥ嚭鐜版晠闅滐紝BIG-IP紜瀹氬畠鏃犳硶鎻愪緵鏈嶅姟鍚庯紝灝變細灝嗗叾鍦ㄦ湇鍔￠槦鍒椾腑娓呴櫎錛屼繚璇佺敤鎴鋒ｅ父鐨勮塊棶搴旂敤錛岀『淇濆洖搴斿唴瀹圭殑姝ｇ『鎬с
5.楂樺害鐨勫畨鍏ㄦ
BIG-IP閲囩敤闃茬伀澧欑殑璁捐″師鐞嗭紝鏄緙虹渷鎷掔粷璁懼囷紝瀹冨彲浠ヤ負浠諱綍絝欑偣澧炲姞棰濆栫殑瀹夊叏淇濇姢錛岄槻寰℃櫘閫氱綉緇滄敾鍑匯傚彲浠ラ氳繃鏀鎸佸懡浠よ岀殑SSH鎴栨敮鎸佹祻瑙堝櫒綆＄悊鐨凷SL鏂逛究銆佸畨鍏ㄧ殑榪涜岃繙紼嬬＄悊錛屾彁楂樿懼囪嚜韜鐨勫畨鍏ㄦ;鑳藉熸媶闄ょ┖闂茶繛鎺ラ槻姝㈡嫆緇濇湇鍔℃敾鍑;鑳藉熸墽琛屾簮璺鐢辮窡韙闃叉IP嬈洪獥;鎷掔粷娌℃湁ACK 緙撳啿紜璁ょ殑SYN闃叉SYN鏀誨嚮;鎷掔粷teartop鍜宭and鏀誨嚮;淇濇姢鑷宸卞拰鏈嶅姟鍣ㄥ厤鍙桰CMP鏀誨嚮;涓嶈繍琛孲MTP銆丗TP銆乀ELNET鎴栧叾瀹冩槗鍙楁敾鍑葷殑鍚庡彴紼嬪簭銆
BIG-IP鐨凞ynamic Reaping鐗規у彲浠ラ珮鏁堝垹闄ゅ悇綾葷綉緇淒oS鏀誨嚮涓鐨勭┖闂茶繛鎺ワ紝榪欏彲浠ヤ繚鎶BIG-IP涓嶄細鍥犳祦閲忚繃澶氳岀槴鐥銆侭IG-IP鍙浠ラ殢鐫鏀誨嚮閲忕殑澧炲姞鑰屽姞蹇榪炴帴鍒囨柇閫熺巼錛屼粠鑰屾彁渚涗竴縐嶅叿鏈夋瀬寮洪傚簲鑳藉姏銆佽兘澶熼槻寰℃渶澶ф敾鍑婚噺鐨勮В鍐蟲柟妗堛
BIG-IP鐨凞elay Binding鎶鏈鍙浠ヤ負閮ㄧ講鍦˙IG-IP鍚庨潰鐨勬湇鍔″櫒鎻愪緵鍏ㄩ潰鍦癝YN Flood淇濇姢銆傛ゆ椂錛孊IG-IP璁懼囦綔涓哄畨鍏ㄤ唬鐞嗘潵鏈夋晥淇濇姢鏁翠釜緗戠粶銆
BIG-IP鍙浠ュ拰鍏跺畠瀹夊叏璁懼囬厤鍚堬紝鏋勫緩鍔ㄦ佸畨鍏ㄩ槻寰′綋緋匯侭IG-IP鍙浠ユ牴鎹鐢ㄦ埛鍗曚綅鏃墮棿鍐呯殑榪炴帴鏁扮敓鎴愭帶鍒惰塊棶鍒楄〃錛屽皢璇ュ垪琛ㄥ姞杞藉埌鍏跺畠瀹夊叏璁懼囦笂錛屾湁鏁堟帶鍒舵敾鍑繪祦閲忋
6.SSL鍔犻
鍦ㄦ瘡鍙癇IG-IP涓婏紝閮藉叿鏈塖SL紜浠跺姞閫熻姱鐗囷紝騫朵笖鑷甯100涓猅PS鐨凩icense錛岀敤鎴峰彲浠ヤ笉閫氳繃鍗曠嫭浠樿垂錛屽氨鍙浠ユ嫢鏈100涓猅PS鐨 SSL 鍔犻熷姛鑳斤紝鑺傜害浜嗙敤鎴風殑鎶曡祫銆傚湪灝嗘潵緋葷粺鎵╁睍鏃訛紝鍙浠ョ畝鍗曠殑閫氳繃License鍗囩駭鐨勬柟寮忥紝鑾峰緱鏇撮珮鐨凷SL鍔犻熸ц兘銆
7.緋葷粺綆＄悊
BIG-IP鎻愪緵HTTPS銆丼SH銆乀elnet銆丼NMP絳夊氱嶇＄悊鏂瑰紡錛岀敤鎴峰㈡埛絝鍙闇鎿嶄綔緋葷粺鑷甯︾殑嫻忚堝櫒杞浠跺嵆鍙錛屼笉闇瀹夎呭叾瀹冭蔣浠躲傚彲浠ラ氳繃鏀鎸佸懡浠よ岀殑SSH鎴栨敮鎸佹祻瑙堝櫒綆＄悊鐨凷SL鏂逛究銆佸畨鍏ㄧ殑榪涜岃繙紼嬬＄悊銆傜洿瑙傛槗鐢ㄧ殑Web鍥懼艦鐢ㄦ埛鐣岄潰澶ф湇鍔￠檷浣庝簡澶氬綊灞炲熀紜璁炬柦鐨勫疄鏂芥垚鏈鍜屾棩甯哥淮鎶よ垂鐢ㄣ
BIG-IP鍖呭惈璇﹀敖鐨勫疄鏃舵姤鍛婂拰鍘嗗彶綰褰曟姤鍛婏紝鍙渚涜瘎嫻嬬珯鐐規祦閲忋佺浉鍏矷SP鎬ц兘鍜岄勮″甫瀹借¤垂鍛ㄦ湡銆傜＄悊鍛樺彲浠ラ氳繃鍏ㄩ潰鍦版姤鍛婂姛鑳藉厖鍒嗘帉鎻″甫瀹借祫婧愮殑鍒╃敤鐘跺喌銆
鍙﹀栵紝閫氳繃F5 鐨剗-Control 寮鍙戝寘錛岀洰鍓嶅浗鍐呭凡鏈夊熀浜巌-Control寮鍙戠殑緗戠¤蔣浠秞-control, 鍙浠ュ畾鍒墮拡瀵圭郴緇熸湇鍔＄壒鐐圭殑鐩戞帶緋葷粺,姣斿傛湇鍔＄殑嫻侀噺鎯呭喌銆佸悇縐嶆湇鍔¤繛鎺ユ暟銆佽塊棶鎯呭喌銆佽妭鐐圭殑鍋ュ悍鐘跺喌絳夌瓑錛岃繘琛屽彲瑙嗗寲鏄劇ず銆
鍛婅︽柟寮忓彲浠ユ彁渚泂yslog銆乻nmp trap銆乵ail絳夋柟寮忋
8.鍏跺畠
鍐呭瓨鎵╁厖鑳藉姏錛欶5 BIG-IP 1000浠ヤ笂璁懼囧崟鏈烘渶澶у彲鎵╁厖鍒2G鍐呭瓨錛屾ゆ椂鍙鏀鎸400涓囧苟鍙戝洖璇濄
鍗囩駭鑳藉姏錛欶5 鎵鏈夎懼囧潎鍙閫氳繃杞浠舵柟寮忓崌綰э紝鍦ㄦ湇鍔℃湁鏁堟湡鍐咃紝鍗囩駭杞浠跺寘鐢盕5鍏鍙告彁渚涖侳5 NETWORKS宸茬粡鍙戝竷鍏剁郴緇熺殑鏈鏂扮増鏈珺IG-IP V9.0錛屼富瑕佹湁浠ヤ笅鐗規э細鉶氭嫙 IPV4 / IPV6 搴旂敤銆佸姞閫焀eb搴旂敤楂樿揪3鍊嶃佸噺灝66%鐢氳嚦鏇村氱殑鍩虹鏋舵瀯鎴愭湰銆佺『淇濋珮浼樺厛綰у簲鐢ㄧ殑鎬ц兘銆佺『淇濇洿楂樼駭鍒鐨勫彲鐢ㄦс佸ぇ騫呮彁楂樼綉緇滃拰搴旂敤瀹夊叏鎬с佸己澶х殑鎬ц兘錛岀畝鍗曠殑綆＄悊鏂瑰紡銆佹棤浠ュ尮鏁岀殑鑷閫傚簲鑳藉姏鍜屽歡灞曡兘鍔涘拰紿佺牬鐨勬ц兘琛ㄧ幇鍔涖傚叾寮哄ぇ鐨凥TTP鍘嬬緝鍔熻兘鍙浠ュ皢鐢ㄦ埛涓嬭澆鏃墮棿緙╃煭50%錛岃妭鐪80%鐨勫甫瀹姐
IP鍦板潃榪囨護鍜屽甫瀹芥帶鍒訛細BIG-IP鍙浠ユ牴鎹璁塊棶鎺у埗鍒楄〃瀵規暟鎹鍖呰繘琛岃繃婊わ紝騫朵笖閽堝規煇涓鍏抽敭搴旂敤榪涜屽甫瀹芥帶鍒訛紝紜淇濆叧閿搴旂敤鐨勭ǔ瀹氳繍琛屻
閰嶇疆綆＄悊鍙婄郴緇熸姤鍛婏細F5 BIG-IP鎻愪緵WEB 鐣岄潰閰嶇疆鏂瑰紡鍜屽懡浠よ屾柟寮忚繘琛岄厤緗綆＄悊錛屽苟鍦ㄥ叾涓鎻愪緵浜嗕赴瀵岀殑緋葷粺鎶ュ憡錛屾洿鍙閫氳繃i-Control鑷琛屽紑鍙戝嶆潅鐨勯厤緗鍙婃姤鍛婄敓鎴愩