A10负载平衡设备.PPT

* * SSD = Solid-state drive * * HTTP Health Monitor Respond content check Check content text GET / Check content keyword Yahoo!? HTTP Failover Redirect Fast redirect， when all Server “DOWN” HTTP Header Security Respond Sensitive information Hidden Sensitive information aFlex Content Rewrite This rule looks at the user agent header of search engine crawlers and sends them to a slower pool so they dont impact regular user experience. when HTTP_REQUEST { ?switch -glob [string tolower [HTTP::header User-Agent]] { ???*scooter* - ???*slurp* - ???*msnbot* - ???*fast-* - ???*teoma* - ???*googlebot* { ?????pool crawler_pool ???} ?} } aFlex Content Rewrite Replace HTTP Content, “http:”to “https” when HTTP_RESPONSE { if { [HTTP::status] equals 200} { if { [HTTP::header Content-Type] contains text/html } { HTTP::collect } } } when HTTP_RESPONSE_DATA { set len [HTTP::payload length] set payload [HTTP::payload] regsub -all http: $payload https: newdata HTTP::payload replace 0 $len $newdata HTTP::release } Thank You AX 1000 - Lite Performance L4 Connection Per Second (CPS): 80,000 L7 CPS (1 req): 30,000 L7 CPS (10 req): 60,000 L4 Throughput: 2.4Gbps L7 Throughput: 2Gbps Server Support Max Real Server: 512 Max Real Server Port: 1024 Max Virtual Server: 256 Max Virtual Server Port: 256 Maximum Number of Sessions: 1,000,000 * * 全中文化繁體操作GUI介面(全球市面上唯一，F5 Cisco亦有L7之相關設備) * 一、Server (Web/Mail)Server一多 二、ass不知道是好的還是壞的(DDOS阻擋)很大量的DDOS阻擋1千六百萬每秒 三、TCP優化(一萬個User ass我的Server)做一次(自設比例)100:1/10000:1 效能好，可以決定扔多少給後面的Server 四、 SSL Offload(網路銀行SSLS(憑證)Server處理SSL加解密 User連到網路銀行，先解SSL 和Server做標準Http(SSL內建) 五、直對封包做SLB(針對L7內容/關建字) 六、Server會做回應，Ram Cache固定的檔案(開yahoo減少後面的loading) 七、壓縮(http封包)遊戲/賭博 節省頻寬租賃的錢(on-line-game) 八、加速開網頁的速度變快/頻寬降低/總機(A10當警衛)降低Server數量(一定會需要早晚) * * * * * * * * Architecture walk through: 1-10 Gb copper S+R ASIC for up to Layer 3 processing FTA – FPGA for flexibility, each flow is independently processed