F5培训教材课件

F5培训教材2024/4/16F5培训教材BIG-IPV9

LocalTrafficManagerF5NetworksTraining7/20/2007F5培训教材IntroductiontoF5ApplicationDeliveryNetworkingEnsuresnetworkapplicationsare:Secure,FastandAvailableF5Products:BIG-IPLocalTrafficManagerBIG-IPLinkControllerBIG-IPGlobalTrafficManagerFirePassBIG-IPApplicationSecurityManagerWanJet/WebAcceleratorF5培训教材BIG-IPLocalTrafficManagerInternetLoadBalanceServersMonitorServerStatusF5培训教材BIG-IPGlobalTrafficManager(3-DNS)InternetLoadBalanceDNSrequestsLetssay=oneofMonitorServerStatus228300GTM=?22=?00=?22F5培训教材ISP#1ISP#2BIG-IPLinkControllerInternetLoadBalanceServersLBInboundLinksLBOutboundLinks3TypesofLoadBalancingF5培训教材BIG-IPEnterpriseManagerLTMGTMCentralizedversionandbackupmanagementCentralizedviewofSSLcertificatesDeviceInventoryandControlSupportforupto300devices

F5培训教材FirePassFirepassFileServersWebServerstelnettoHostsE-mailServersTermServices/CitrixDesktopSSLVPNPDACellphoneAuthenticationAuthorizationOrFullSSLVPNRemoteAccessthruBrowserAuthorizationbyGroupF5培训教材BIG-IPApplicationSecurityManager(TrafficShield)ApplicationLayerFirewallBlocksKnown&UnknownWebAttacksReverseProxyApplicationCloakingScrubsOutgoingContent7:80Internet5F5培训教材WanJetRemoteOfficeMainOfficeOptimizetheWAN

LAN-likeresultsAccelerateapplicationsConfigurablesite-to-siteencryptionusingSSLF5培训教材WebAcceleratorCustomerWebServerAcceleratesallwebapplicationsFasterend-userresponsetimesExtendsservercapacityReducessystemloadReducesnetworkbandwidthneedsTransparenttoapplications&usersF5培训教材CourseOutline–Day1InstallationLoadBalancingMonitorsProfilesF5培训教材Module1-InstallationInternetBIG-IPLTMsClientsServersF5培训教材Module1-OutlineBIG-IPPlatformOverviewInstallation(SetupUtility)ConfigurationUtilitiesandUserAccessF5培训教材BIG-IPHardwarePlatformsServerApplianceApplicationSwitchForCurrentinfo->

F5培训教材ApplicationSwitch–3400ProcessorboardSwitchboardProcessorSSLcardBASCCPASIC2SwitchchipsDEFCF&HDCF5培训教材SwitchPlatforms6800/64001500PlatformDifferences8800(2U)DualDualCoreCPU,4GRam,ASIC101210/100/1G&4Gbgports6800/6400(2U)DualCPU,2GRam,ASIC21610/100/1G&4Gbgports3400(1U)SingleCPU,1GRam,ASIC2810/100/1G&2Gbgports1500(1U)SingleCPU,768MRam410/100/1G&2GbgportsIntegratedSSLAccelerationLCDpanelcontrolinterfaceForcurrentinfo->F5培训教材PriceFunction/Performance2x2.4GHzOpteron1610/100/1000+4SFPLayer4ASIC(PVA2)160GBHD+512CFSSL@20KTPS/2GbBulkFIPSSSLoptionHWCompressionoptionASM/WAoption4GbpsTrafficBIG-IP68002x2.80GHzOpteron1610/100/1000+4SFP160GBHD+512CFLayer4ASIC(PVA2)HWCompressionoptionASM/WAoptionSSL@15KTPS/2GbBulk2GbpsTrafficBIG-IP64002x2.6GHzOpteron1210/100/1000or12SFPLayer4ASIC(PVA10)160GBHD+512CFSSL@33KTPS/3GbBulkHWCompressionoptionASM/WAoption6-10GbpsTrafficBIG-IP84002x2.6GHzDualCoreOpteron1210/100/1000or12SFPLayer4ASIC(PVA10)160GBHD+512CFSSL@48KTPS/6GbBulkHWCompressionoptionASM/WAoption7-10GbpsTraffic(7GL7,6GSSL&Compress)BIG-IP88001.8GHzCore2Duo410/100/1000+2SFP160GBHD

SSL@5KTPS/750MbBulk750bpsTraffic

BIG-IP1600DAGHSBCPUCPUCPUCPUDAGHSBCPUCPUCPUCPUDAGHSBCPUCPUCPUCPUDAGHSBCPUCPUCPUCPUFabricFabricFabricFabricBIG-IP36002.13GHzOpteron810/100/1000+2SFP160GBHD+8GBCFSSL@10KTPS/2GbBulkFIPSSSLoptionASM/WAoption1.5GbpsTrafficF5培训教材LegacyPlatforms51002400SwitchPlatforms5100/5110–2410/100&4G2400–1610/100&2G1000–810/100&1GIntegratedSSLAcceleration520/540ServerAppliance520/540–210/100NICsNoIntegratedSSLMainly3-DNSF5培训教材CurrentBIG-IPLTMSoftwareLevelsPlatformV4.xV9.01600,3600NV9.46800,6400,3400,1500NY5100,2400,1000YY520,540YV9.2F5培训教材InitialBIG-IPLTMSetupConfigutilityIPAddressforManagementinterfaceLicenseSetuputilityRootpasswordIPAddressforVLANsAssigninterfacestoVLANsWebAdminpasswordSSHAccessF5培训教材InterfaceNaming(3400chassis)1.12.110/100/1000Portsnumbered:toptobottom,lefttoright1.12.12.21.21.31.41.51.61.71.8MiniGbgPortsstartat2.1mgmteth0ManagementPortiseth0usbconsolefailoverMgmtURL

Https://45Admin/adminF5培训教材InternetLicenseProcess–AutomatedRunSetuputilityEnterRegistrationKeyPCBIG-IPLicensetheboxGetLicensefromF5SelectparametersF5LicenseServeractivate.F5.comReboot(v9.2)F5培训教材LicenseProcess–ManualPCBIG-IPF5LicenseServeractivate.F5.comInternetCopyProductDossiertoPCPasteProductDossiertoF5MovePCtoInternetDownloadLicensetoPCUpload&InstallLicensefileRunSetuputilityManuallyLicensetheboxPChttps://activate.F5.comMovePCbackReboot(v9.2)F5培训教材SetupUtilityhttps://ManagementIPAddressF5培训教材SetupUtility–NetworkF5培训教材WebConfigurationutilityF5培训教材Setup/ConfigurationAccessTwomethodsWebInterface

https(remote)CommandLinessh(remote)SerialTerminalF5培训教材BIG-IPLTMBackupProcessStoresconfigurationinonefileIfcopiedtoanothersystem,thenre-licenseF5培训教材UserAuthenticationProcessF5培训教材BIG-IPLTMAdminUsersF5培训教材Module2–LoadBalancing12345678InternetF5培训教材Module2–OutlineVirtualServers,Members&NodesConfiguringVirtualServers&PoolsVirtualServer&PoolLabLoadBalancingModesConfiguringLoadBalancingLoadBalancingLabsF5培训教材Pools,MembersandNodesNode=IPaddress:80:80:80PoolMember

=Node+PortPool

=GroupofpoolmembersF5培训教材PoolMembersandNodesInternet:8080:80:4002:80PoolMembersNodesrefertoPoolMembersIPAddressonlyF5培训教材VirtualServerInternet:8080:4002:80VirtualServerIPAddress+Service(Port)Combination“Listens”forandmanagestraffic7:80NormallyAssociatedwithaPoolF5培训教材VirtualServer-AddressTranslationBIG-IPLTMperformsnetworkaddresstranslationtorealserveraddressessuchthatallmachinesareviewedasoneVirtualServerRealServerAddressNetworkAddressTranslationVirtualServerAddressInternet7:80:8080:80:4002:80F5培训教材NetworkFlow-Packet#1resolvestoBIG-IPLTMVirtualServerAddress7:80

Internet:8080:80:4002:80DNSServer7:80F5培训教材NetworkFlow-Packet#1LTMtranslatesDestAddresstoNodebasedonLoadBalancingInternetPacket#1Src-0:4003Dest–7:80:8080:80:4002:80Packet#1Src–0:4003Dest–:8007:80F5培训教材NetworkFlow–Packet#1ReturnLTMtranslatesSrcAddressbacktoVirtualServerAddressInternetPacket#1-returnDest-0:4003Src–7:80:8080:80:4002:80Packet#1-returnDest–0:4003Src–:8007:80F5培训教材NetworkFlow-Packet#2InternetPacket#2Src-1:4003Dest–7:80:8080:80:4002:80Packet#2Src–1:4003Dest–:400217:80F5培训教材NetworkFlow–Packet#2ReturnInternetPacket#2-returnDest-1:4003Src–7:80:8080:80:4002:80Packet#2-returnDest–1:4003Src–:400217:80F5培训教材NetworkFlow-Packet#3InternetPacket#3Src-5:4003Dest–7:80:8080:80:4002:80Packet#3Src–5:4003Dest–:808057:80F5培训教材NetworkFlow–Packet#3ReturnInternetPacket#3-returnDest-5:4003Src–7:80:8080:80:4002:80Packet#3-returnDest–5:4003Src–:808057F5培训教材ConfiguringPoolsF5培训教材ConfiguringVirtualServersScrolldownF5培训教材StatisticsSummaryVirtualServersPoolsNodesF5培训教材LogsF5培训教材LoadBalancingModesRoundRobinRatioLeastConnectionsFastestObservedPredictiveDynamicRatioPriorityGroupActivationFallbackHostStaticDynamicFailureMechanismsF5培训教材RoundRobinClientsRouterBIG-IPLTMControllerServersClientrequestsaredistributedevenly12345678InternetF5培训教材RatioClientsRouterBIG-IPLTMControllerServersAdministratorsetsratiofordistributingClientrequests3:2:1:11234891011Internet571214613F5培训教材LeastConnectionsClientsRouterBIG-IPLTMControllerServers12InternetNextrequestsgoestoNodewithfewestopenconnections459460461470CurrentConnections3456F5培训教材LeastConnectionsClientsRouterBIG-IPLTMControllerServersInternetSometimelater,numberofconnectionschange6163280290111112CurrentConnections62F5培训教材FastestClientsRouterBIG-IPLTMControllerServersNextrequestsgotoNodewithfastestresponsetime25Internet10ms10ms10ms17msCurrentResponseTimes1436F5培训教材FastestClientsRouterBIG-IPLTMControllerServersSometimelater,responsetimeschange102104Internet10ms10ms7ms7msCurrentResponseTimes101103F5培训教材ObservedClientsRouterBIG-IPLTMControllerServersNextrequestsgoestoNodewithcombinationoffewestconnectionsandbestresponse12InternetF5培训教材PredictiveClientsRouterBIG-IPLTMControllerServers12InternetNextrequestsgoestoNodewithcombinationoffewestconnectionsandbestresponseovertimeF5培训教材PriorityGroupActivationClientsRouterBIG-IPLTMControllerServers135246InternetPriority1Priority4IfyousetPriorityGroupActivationto2,and3ofthehighestprioritymembersareavailable,thenlowerprioritymemberswillnotbeused.F5培训教材PriorityGroupActivationClientsRouterBIG-IPLTMControllerServers15InternetPriority1Priority4324678IfnumberofmembersfallsbelowPriorityGroupActivation(2),thenthenexthighestprioritymembersareusedalso.F5培训教材FallbackHostClientsRouterBIG-IPLTMControllerServersInternetIfallmembersfail,thenclientissentanhttpredirecttoandalternateserver.F5培训教材PoolMembervs.NodeLoadBalancingby:PoolMemberIPAddress&serviceNodeTotalservicesforoneIPAddressF5培训教材IfusingMemberInternetNexthttprequestsgoestoPoolMemberwithfewesthttpconnectionsCurrentConnectionshttp10710899ftp232512IfhttppoolusesLeastConnections(member)loadbalancingmethod,then…F5培训教材IfusingNode12InternetNexthttprequestsgotoIPAddresswithfewesttotalconnectionsCurrentConnectionshttp10710899ftp2325F5培训教材ConfiguringLoadBalancingF5培训教材Ratio&PriorityGroupActivationF5培训教材Module3–MonitorsInternet:80F5培训教材Module3-OutlineMonitorConceptsConfiguringMonitorsAssigningMonitorsNodeandMemberStatusHealthMonitorLabsF5培训教材MonitorConceptsAddressCheckNode–IPAddressServiceCheckIP:portContentCheckIP:portpluscheckdatareturnedInteractiveCheckPathCheckF5培训教材AddressCheckStepsPacketssenttoIPAddressesIfnoresponse,thennotrafficsenttomembersusingthatnodeaddressExample-ICMPInternetICMPF5培训教材ServiceCheckStepsOpensTCPconnection(IPAddress:service)ConnectionclosedIfTCPconnectionfails,thennotrafficsenttoassociatedMembersExample–TCPInternet:80:80:80TCPConnectionF5培训教材ContentCheckInternet:80:80:80StepsOpensTCPconnection(IPAddress:service)SendsarequestResponsereturnsdataConnectionclosedIfReceiveRulenotfoundindata,thennotrafficsenttoassociatedMembersExample–httphttpGET/F5培训教材InteractiveCheckInternet:80:80:80StepsOpensTCPconnection(IPAddress:service)Interactiveconversationtosimulatereal-worldConnectionclosedIfexpectedresultsdonotoccur,thennotrafficsenttoassociatedMembersExample–SQLrequestconversationF5培训教材PathCheckStepsSendspacketthrough,nottothedeviceCancheckIPAddress,ServiceorContentIfconditionnotmet,thennotrafficsentthroughassociatedmemberLinkCntlISP2ISP1ISP1F5培训教材ConfiguringMonitorsSystemSuppliedMonitors(Templates)AddressChecks(icmp)ServiceChecks(tcp)ContentChecks(http)InteractiveChecks(ftp)Availability:AlltemplatescanbecustomizedSomecanbeAssigned“as-is”SomecanonlybeusedasTemplatesforCustomMonitorsF5培训教材CreatingCustomMonitorsF5培训教材AdditionalMonitorParametersReceiveRuleIfcontentfound,NodemarkedUpReverseReceiveRuleIfcontentfound,NodemarkedDownTransparentIfPathAvailable,NodemarkedUpUsedformonitoringLinksF5培训教材MonitorTimersFrequency(Interval)TimeoutRecommended–3n+1F5培训教材AssigningMonitorsDefaultforallNodesSingleNodeOptionsNodeDefaultNodeSpecificNoneDefaultallMembersofaPoolSinglePoolMemberOptionsInheritfromPoolMemberSpecificNoneF5培训教材AssigningMonitorstoNodesForoneNodeF5培训教材AssigningMonitorstoPoolsForoneMemberF5培训教材MemberandNodeStat