版权说明:本文档由用户提供并上传,收益归属内容提供方,若内容存在侵权,请进行举报或认领
文档简介
Page1RadwareAppDirector
负载均衡器培训
2007-08Page2RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置双机配置典型组网AgendaPage3RadwareAppDirector产品介绍AD-AppDirectorAD100/200/202
8FastEthernetports2FiberSCGBports200Mbpsthroughput
266MHzRISCProcessor256MBRAMPage4AD1000
16FEand5GBICports1000Mbpsthroughput
500MHzRISCProcessor256MBRAMPage5AD3020
12CopperGBEthernetports8GBICports3000Mbpsthroughput
512MBRAMPage6AD6000
8CopperGBEthernetports7GBICports2TenGBport6000Mbpsthroughput
1GBRAMPage7内容RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置1,AppDirector-配置-初始化
2,AppDirector-配置-Network3,AppDirector-配置-Vlan4,AppDirector-配置-Interface5,AppDirector-配置-Route6,AppDirector-配置-Farm7,AppDirector-配置-Server8,AppDirector-配置-L4Policy9,AppDirector-配置-Nat双机配置典型组网Page8终端配置Page9初始化菜单Page10默认配置Page11内容RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置
1,AppDirector-配置-初始化
2,AppDirector-配置-Network3,AppDirector-配置-Vlan4,AppDirector-配置-Interface5,AppDirector-配置-Route6,AppDirector-配置-Farm7,AppDirector-配置-Server8,AppDirector-配置-L4Policy9,AppDirector-配置-Nat双机配置典型组网Page12Web管理登陆默认用户名:radware默认密码:radwarePage13全局界面Page14内容RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置
1,AppDirector-配置-初始化
2,AppDirector-配置-Network
3,AppDirector-配置-Vlan4,AppDirector-配置-Interface5,AppDirector-配置-Route6,AppDirector-配置-Farm7,AppDirector-配置-Server8,AppDirector-配置-L4Policy9,AppDirector-配置-Nat双机配置典型组网Page15VLANConfigurationDevice>VLANtableSteps:AddVLANAddPortstoVLANPage16VLANConfigurationAddorDeletePortstoVLANAddorDeleteVLANPage17VLANParametersTypeProtocolSave!!!10000XPage18VLANParameters
RegularVLAN
IPProtocol:必须分配IP地址。VALN端口之间所有流量经过CPU处理,做负载均衡或交换。
OtherProtocol:无IP地址。传输非IP流量。
SwitchVLAN
SwitchedVLAN
Protocol:无IP地址,不做负载均衡处理。
IPProtocol:必须分配IP地址。目标MAC地址为AppDirectorVLAN的流量经过CPU处理,做负载均衡,其它流量直接基于L2传输。OtherProtocol:无IP地址。传输非IP流量。Page19DeleteVLAN2.Delete1.CheckPage20PortsChooseVALNChoosePortPage21内容RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置
1,AppDirector-配置-初始化
2,AppDirector-配置-Network3,AppDirector-配置-Vlan4,AppDirector-配置-Interface5,AppDirector-配置-Route6,AppDirector-配置-Farm7,AppDirector-配置-Server8,AppDirector-配置-L4Policy9,AppDirector-配置-Nat双机配置典型组网Page22AssignIPAddressPortsorVLANnumber
Router>IPRouter>InterfaceParameters>CreatePage23EditIPAddressClicktoEdit
Router>IPRouter>InterfaceParametersPage24内容RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置
1,AppDirector-配置-初始化
2,AppDirector-配置-Network3,AppDirector-配置-Vlan4,AppDirector-配置-Interface5,AppDirector-配置-Route6,AppDirector-配置-Farm7,AppDirector-配置-Server8,AppDirector-配置-L4Policy9,AppDirector-配置-Nat双机配置典型组网Page25AddRouteDefaultGateway:Dest.Address>NetworkMask>
Router>RoutingTable>CreatePage26EditRoutingTable
Router>RoutingTableClicktoEditPage27内容RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置
1,AppDirector-配置-初始化
2,AppDirector-配置-Network3,AppDirector-配置-Vlan4,AppDirector-配置-Interface5,AppDirector-配置-Route6,AppDirector-配置-Farm7,AppDirector-配置-Server8,AppDirector-配置-L4Policy9,AppDirector-配置-Nat双机配置典型组网Page28AServerFarmisacollectionofidenticalserversrunningthesameapplication–web,mail,DNS,FTP,etc.AServerFarmisrepresentedbyaVIP–VirtualIPAddressTheAppDirectoronlyloadbalancestrafficthatreachesaFarmTerminology–ServerFarmPage29AppDirectorVIPServerFarmClientsServerFarmBasicsPage30Client=0VIP(00)Client–Server10Server21Server32Client’sRequest
SourceIP=
Destination=VIP–00:80LoadBalancingDecision
AppDirectortoServer
SourceIP=
Destination=0:8080ServertoClient
SourceIP=0
Destination=AppDirectortoClient
SourceIP=VIP–00
Destination=VIPTheVirtualIP-VIPPage31FarmParameters
AppDirector>Farms>FarmTable>CreatePage32FarmParameters
AppDirector>Farms>FarmTable>CreatePage33VIPServer1Server2AppDirectorAppDirectorDispatchMethods
•Cyclic(RoundRobin)•WeightedCyclic(usesRoundRobinbutappliesstaticweightsassignedtoservers)•LeastTraffic(inpackets)•LeastNumberofUsers•NTSNMPParameters•User-ConfigurableSNMPParameters•Hashing•ResponseTimeLoadBalancingPage34AgingTimeandRedundancy
AgingTimeClientTable中的Session保持时间
RedundancyMode
Primary:主用AppDirector
Backup:备用AppDirectorPage35ConnectivityChecksdeterminewhetheraserverinafarmisavailableforclienttrafficEachfarmcanhaveadifferentConnectivityCheckconfigured,butallserversinthatfarmmustbecapableofrespondingthesamewaytotheAppDirectorchecksIfaserverfailstorespondtoconsecutivechecks,theAppDirectorwillremoveitfromthefarmasacandidateforclienttrafficTheAppDirectorwillcontinuetoperformcheckstothefailedserverinordertobringitbackintothefarmwhenitrecoversConnectivityChecksPage36Server1Server2AppDirectorConnectivityChecks:PingTCPorUDPPortHTTPPagePageContentRadiusRTSPPingPingAppDirectorConnectivityChecks
Page37Server1Server2AppDirectorCode200PageFoundPage.htm?Page.htm?Code404PageNotFoundHTTPPageCheck
Page38FarmAddressClientAddressServerAddressSourcePortDestinationPortServerPortAttachedTime2010628080234110618080332410792121643EnsuresClient-to-ServerPersistenceClientTableSessionmodePage39Server1Server2Server3FarmClientServerSrcPortVIPAS1XXXXVIPBS3YYYYVIPCS2ZZZZRegularSessionModePage40Server1Server2Server3FarmClientServerSrcPortVIPAS1XXXXVIPAS1XXXYVIPAS1XXXZSourcePort=XXXXSourcePort=XXXYSourcePort=XXXZEntryPerSessionModePage41Server1Server2Server3FarmClientServerSrcPortVIPAS1XXXXVIPAS3XXXYVIPAS2XXXZSourcePort=XXXXSourcePort=XXXYSourcePort=XXXZServerPerSessionModePage42内容RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置
1,AppDirector-配置-初始化
2,AppDirector-配置-Network3,AppDirector-配置-Vlan4,AppDirector-配置-Interface5,AppDirector-配置-Route6,AppDirector-配置-Farm7,AppDirector-配置-Server8,AppDirector-配置-L4Policy9,AppDirector-配置-Nat双机配置典型组网Page43ServerMaintenance
AppDirector>Servers>ApplicationServers>Table>CreatePage44ServerMaintenance
AppDirector>Servers>ApplicationServers>Table>CreatePage45AppDirectorhasseveralsettingswhichallowadministratorstocontroltraffictoeachserverinafarm:AdminStatus(Enable,Disable,Shutdown)WeightsOperationalMode(ActiveorBackup)ConnectionLimitsServerMaintenance
Page46ServerWeightsallowadministratorstotakeintoaccountequipmentthathasgreater(orlesser)capacitythanotherserversinthesamefarm.AppDirectorWeight=1Weight=1Weight=5ServerManagement-Weights
Page47ActiveandBackupServersettingsallowadministratorstohaveserversinafarmthatwon’tbeusedunlessallotherserversbecomeunavailable.AppDirectorActive1Active2BackupServerManagement–OperationalModePage48ServerManagement–OperationalModeSpecificBackupServerscanalsobebroughtonlineifaparticularActiveServerfails.AppDirectorActive1Active2Backup1Backup2Page49GracefulShutdownofServers–existingusersconnectedtoasingleserverareallowedtotime-outnaturally.Allowsforplannedmaintenanceortroubleshootingofservers.CurrentUsersConnectedtoServer#3RadwareTrap–NomoreusersonServer#3Server#3cannowbetakendownwithoutdisconnectinganyusersServerManagement-Shutdown
Page50ServerManagement–WarmUpGracefulRamp-up–AllowsforgradualincreaseintraffictoserverovertimeRadwareServer1UsersServer2UsersServer3UsersPage51内容RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置
1,AppDirector-配置-初始化
2,AppDirector-配置-Network3,AppDirector-配置-Vlan4,AppDirector-配置-Interface5,AppDirector-配置-Route6,AppDirector-配置-Farm7,AppDirector-配置-Server8,AppDirector-配置-L4Policy9,AppDirector-配置-Nat双机配置典型组网Page52L4PoliciesLayer4Policies–farmselectionbasedonnetworklevelparametersFarm–agroupofserversthatprovideaserviceLayer7Policies–farmselectionbasedonapplicationlevelparametersVirtualIPaddressPage53ClassificationcriteriaVirtualIP:VIPusedforclassificationofincomingtrafficL4Protocol:TCP/UDP/ICMP/Other/AnyL4Port:TCPorUDPdestportClientAddressRangeFrom/ToActionconfigurationFarmNameL7PolicyNameApplication:Defineshowtotreattheclassifiedpackets,forexample:port8081isHTTP,port444isSSL,etcRedundancyStatus:ActiveorBackupSomeLayer4PolicyParametersPage54TheAppDirectorloadbalancestrafficbetweenfarmsbasedonseveralcriteria:FTPWWWDNSLayer4InformationLayer7InformationEnglishSpanishFrenchL4PolicyPage55FTPWWWDNSVIPDestinationIP=VIPDestinationport=53DestinationIP=SelectedserverDestinationport=53DestinationIP=VIPDestinationport=21DestinationIP=SelectedserverDestinationport=21Layer4PolicyPage56AppDirectorloadbalancestrafficbasedonlayer7informationusingthefollowingmethods:URLsHTTPheaderinformationFiletypeBrowserTypeCookie(staticordynamic)RegularExpressionwithintheHTTPHeaderLayer7PolicyPage57GBBVIPDestinationIP=VIPDestinationURL=DestinationIP=SelectedserverDestinationIP=VIPDestinationURL=DestinationIP=SelectedserverLayer7–URLPolicyPage58HTTPHeaderFields:Layer7LoadBalancingPage59Layer7Policies(AppDirector8.0andlater)allowforcombinationsofdecision-makingfactorswhenconfiguringaSuperFarmURL+HeaderInformationURL+FiletypeEtc.Layer7PoliciesPage60(English)SuperFarm00(Spanish)(English)(Spanish)(Spanish)(English)(English)(Spanish)URL–Accept-Language:es*URL–Accept-Language:es*URL–Accept-Language:en*URL–Accept-Language:en*Layer7Policies
Page61Layer7PoliciesTheunderlyinglogicofLayer7Policiesisbasedonthefollowingcomponents:Methods–thesedefinewheretolookinaclient’srequestandwhattolookforbasedonthetype(Header,URL,RegularExpression,etc.)PolicyEntries–thesedefinewhattodowithaclient’srequestthatmatchesoneormorepolicies(i.e.whatfarmtosenditto)Page62Layer7PoliciesDelayedBindingSynSyn/AckAckGetHTTP://OrUserAgent:MozillaOrAccept-Language:esTypicalClient-ServerExchangePage63Layer7PoliciesEnglishSpanishSyn?InitialClientconnectiondoesnotcontainenoughinformationtomakeaLayer7decision.DelayedBindingPage64Layer7PoliciesEnglishSpanishSynSyn/AckAckGetHTTP://Accept-Language:esHTTPHeaderLanguage=SpanishSynSyn/AckAckDelayedBindingPage65PersistenceL3ClientIPbasedpersistencyRegularSessionModeL4ClientIPandportEntryPerSessionServerPerSessionDispatchMethodisHashingL7DelaybindingisneededCookiepersistenceSSLIDHTTPSessionID:StaticIDDynamicIDPage66WEB4WEB4WEB1WEB2WEB3WEB3WEB2WEB1SessionIDPersistencePage67TextMatchSessionIDPersistency
Page68SessionIDPersistencyTableIfusingDynamicSessionIDPersistency,Thistableisenough.Page69StaticSessionIDPersistencyTableIfusingStaticSessionIDPersistency,YouneedsettingbothSessionIDPersistencytableandStaticSessionIDPersistency.SessionIDPersistencytableandStaticSessionIDPersistencyarecombined.AppdwilluseSessionIDPersistencytable’ssettingtochecktheSessionIDvalueinStaticSessionIDPersistency.The‘SessionIDValue’lengthmustbeequalto‘ValueMaxlength’.Forexample,AppDwillcheck‘BF0888’withoffset=10,identifier=JSESSIONIDincookiefield.Page70L4PolicyConfiguration
AppDirector>Layer4FarmSelection>Layer4PolicyTable>CreatePage71L4PolicyConfiguration
AppDirector>Layer4FarmSelection>Layer4PolicyTable>CreatePage72L4PolicyConfigurationSteps
L4PolicyDefineIPAddressSelectProtocolDefinePort(TCP/UDP)DefineL4PolicynameSelectFarm
L7PolicyDefineL7MethodsAppDirector>L7FarmSelection>MethodsDefineL7PoliciesAppDirector>L7FarmSelection>PolicyDefineIPaddressSelectPolicySelectFarmPage73内容RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置
1,AppDirector-配置-初始化
2,AppDirector-配置-Network3,AppDirector-配置-Vlan4,AppDirector-配置-Interface5,AppDirector-配置-Route6,AppDirector-配置-Farm7,AppDirector-配置-Server8,AppDirector-配置-L4Policy
9,AppDirector-配置-Nat双机配置典型组网Page74012VIP–00SourceIP0SourceIP0ServerNATisDisabledPage75012VIP–00SourceIP0SourceIP00ServerNATisEnabledPage76ServerNATConfiguration
AppDirector>NAT>ServerNAT>GlobalParameters>使用Server隶属的FarmIP或SuperfarmIP列表中选择>所有服务器都使用该IP必须EnablePage77Server1Server2Server3ClientIP=VIPSource=Destination=VIPSource=Destination=Server3Server“sees”Client’sActualSourceIPClientNATDisabledPage78ClientNATEnabledServer1Server2Server3ClientIP=VIPSource=Destination=VIPSource=AppDirectorNATIPDestination=Server3Server“sees”anaddressfromAppDirectorNATPage79WebServer1WebServer2AppServer1ClientWebVIPWebFarmAppServer2AppFarmAppVIPClientAccesstoWebServersWeb2isa“client”toAppFarmApp1respondsdirectlytoWeb2?ClientNATUse-ProblemPage80WebServer1WebServer2AppServer1ClientWebVIPWebFarmAppServer2AppFarmAppVIPClientAccesstoWebServersWeb2isa“client”toAppFarmApp1“sees”NATaddressfromAppDirectorNATClientNATUse-Solution
Page81ClientNATConfiguration-Tuning
Services>Tuning>Device>0
检查内存重新启动设备Page82ClientNATConfiguration-Global
AppDirector>NAT>ClientNAT>GlobalParameters定义被NAT的用户范围必须Enable定义NAT后的地址范围Page83ClientNATConfiguration-Intercept
AppDirector>NAT>ClientNAT>InterceptTablePage84ClientNATConfiguration-NAT
AppDirector>NAT>ClientNAT>NATTablePage85ClientNATConfiguration–Farm
AppDirector>Farm>AdditionalParametersTablePage86ClientNATConfiguration-Server
AppDirector>Server>ApplicationServerstableFarm内的每台服务器:设置为EnablePage87内容RADWAREAppDirector产品介绍AppDirector初始化安装与基本配置双机配置典型组网Page88Radwaredevicesshouldbeemployedinpairsforfault-toleranceandfail-overTwomethodsavailableforredundancy:Proprietary(usingARP)VRRP(RFC:2338VirtualRouterRedundancyProtocol)RedundancyPage89PairsofAppDirectorscanoperateinActive/ActiveConfigurationRadwareDeviceARadwareDeviceBServerFarmAServerFarmBFarmATrafficFarmBTrafficFarmAandBTrafficRedundancyActive-ActivePage90ProprietaryRedundancyusesARPActiveAppDirectorBackupAppDirectorServerFarmARP?ARP?Redundancy-ProprietaryPage91ProprietaryRedundancyusesARPActiveAppDirectorBackupAppDirectorServerFarmARP?ARP?ARPBroadcast!!NewMACforActiveAppDirectorAddressesARPBroadcast!!NewMACforActiveAppDirectorAddressesRedundancy-ProprietaryPage92AVR(VirtualRouter)islikeavirtualMACaddressOnedeviceisMasterandtheotherisBackupforagivenVRIPaddressesare“associated”withaVR-interfaces,VIPaddresses,etc.IftheMasterdevicestopsadvertisingitspresence,theBackupdevicewillassumecontroloftheVRandtheIPaddressesassociatedwithitRedundancy-VRRPPage93Redundancy-VRRPVirtualRouter(MAC)RedundancyProtocol–VirtualRoutersActiveAppDirectorBackupAppDirectorServerFarmVRID1VRID2MasterBackupVRRPAdvertisementsAssociatedIPs:00AssociatedIPs:Page94Redundancy-VRRPVirtualRouter(MAC)RedundancyProtocol–VirtualRoutersActiveAppDirectorBackupAppDirectorServerFarmVRID1VRID2MasterBackupVRRPAdvertisementsAssociatedIPs:00AssociatedIPs:MasterPage95VRRPConfigurationSteps
VRRPGlobalVRRPVirtualRouteadd(down)AssociateIPtoVRRProuterIDVRRPVirtualRouteSettoUPPage96VRRPConfiguration-Global
AppDirector>Redundancy>GlobalConfigurationVRRP:主/备
Enable:主Disable:备
Page97VRRPConfiguration-VRID
AppDirector>Redundancy>VRRP>VirtualRouter>Create端口:主/备主:255备:<
255
主/备相同主:自身端口IP备:自身端口IPPage98VRRPConfiguration–AssociatedIP
AppDirector>Redundancy>VRRP>AssociatedIP>Create端口:主/备主/备相同主设备端口FarmIPL4PolicyIPVirtualDNSClientNATPage99VRRPConfiguration–VRIDActivity
AppDirector>Redundancy>VRRP>VirtualRouter选择UPPage100内容RADWAREAppDirector产品介绍AppDirector初始化安
温馨提示
- 1. 本站所有资源如无特殊说明,都需要本地电脑安装OFFICE2007和PDF阅读器。图纸软件为CAD,CAXA,PROE,UG,SolidWorks等.压缩文件请下载最新的WinRAR软件解压。
- 2. 本站的文档不包含任何第三方提供的附件图纸等,如果需要附件,请联系上传者。文件的所有权益归上传用户所有。
- 3. 本站RAR压缩包中若带图纸,网页内容里面会有图纸预览,若没有图纸预览就没有图纸。
- 4. 未经权益所有人同意不得将文件中的内容挪作商业或盈利用途。
- 5. 人人文库网仅提供信息存储空间,仅对用户上传内容的表现方式做保护处理,对用户上传分享的文档内容本身不做任何修改或编辑,并不能对任何下载内容负责。
- 6. 下载文件中如有侵权或不适当内容,请与我们联系,我们立即纠正。
- 7. 本站不保证下载资源的准确性、安全性和完整性, 同时也不承担用户因使用这些下载资源对自己和他人造成任何形式的伤害或损失。
最新文档
- 2024年森林资源培育与保护承包合同3篇
- 2024外资企业股权出售与境内投资合作合同范本3篇
- 2024年度医疗器械维修代加工及售后服务协议3篇
- 2024年度地区总代理销售权及品牌使用权合同范本3篇
- 2024年地质勘探服务地质勘察服务合同样本3篇
- 2024年度商业地产土地使用权永久转让与商业运营管理合同3篇
- 2024年太阳能组件安装及智能监控系统合作协议3篇
- 2024年新能源充电设施区域代理合同3篇
- 起草销售合同范例
- 土地搞标居间合同范例
- 2013新译林牛津英语8A-课文翻译
- 抗震支架技术交底
- 教练技术三阶段讲义
- 煤矿安全监控系统设计
- GB/T 1220-2007不锈钢棒
- 个人劳动防护用品的使用和维护
- 2022幼儿园教师年度考核个人总结德能勤绩廉
- 西安航天动力研究所特种阀门介绍10课件
- 报价函 报价单
- 空调(热泵)室内机首检记录表
- JIS G4305-2021 冷轧不锈钢板材、薄板材和带材
评论
0/150
提交评论