{"id":2255,"date":"2020-03-14T16:58:48","date_gmt":"2020-03-14T08:58:48","guid":{"rendered":"https:\/\/www.charflower.com\/?p=2255"},"modified":"2020-03-14T17:39:58","modified_gmt":"2020-03-14T09:39:58","slug":"%e5%9f%b9%e8%ae%ada10%e5%87%ba%e5%90%91%e6%99%ba%e8%83%bd%e9%80%89%e8%b7%af%e9%93%be%e8%b7%af%e8%b4%9f%e8%bd%bd%e5%9d%87%e8%a1%a1%e5%b7%a5%e4%bd%9c%e6%b5%81%e4%b8%8e%e9%85%8d%e7%bd%ae%e8%8c%83","status":"publish","type":"post","link":"https:\/\/www.charflower.com\/?p=2255","title":{"rendered":"[\u57f9\u8bad]A10\u51fa\u5411\u667a\u80fd\u9009\u8def(\u94fe\u8def\u8d1f\u8f7d\u5747\u8861)\u4e0eSLB\u5de5\u4f5c\u6d41\u4e0e\u914d\u7f6e\u8303\u4f8b"},"content":{"rendered":"\n

\u505a\u4e3aADC\u4ea7\u54c1\u4e09\u5927\u5356\u70b9SLB\/LLB\/GSLB\u7684LLB\u9700\u8981\u52a0\u6df1\u7406\u89e3\u3002\u4ece\u7f51\u7edc\u57fa\u7840\u6210\u957f\u8d77\u6765\u7684SE\uff0c\u53ef\u4ee5\u4e0d\u719f\u6089SLB\uff0c\u4f46\u5bf9LLB\u4e0d\u80fd\u4e0d\u719f\u3002\u4e3a\u65b9\u4fbf\u624b\u673a\u5c4f\u5e55\u6d4f\u89c8\uff0c\u5c06\u539f\u56fe\u6539\u9020\u6210\u7ad6\u7248\u5982\u4e0b\uff1a<\/p>\n\n\n\n

\"\"
\u5355\u7eaf\u7684LLB\u5de5\u4f5c\u6d41<\/figcaption><\/figure>\n\n\n\n
\"\"
LLB+SLB\u7efc\u5408\u5de5\u4f5c\u6d41<\/figcaption><\/figure>\n\n\n\n

\u4e00\u6b21\u94fe\u8def\u8d1f\u8f7d\u5747\u8861\u7684\u8bbf\u95ee\u5904\u7406\u6d41\u7a0b\u5982\u4e0b\uff1a
1) \u5ba2\u6237\u7aef\u8bbf\u95eeInternet \u670d\u52a1\u5668\uff08\u5982LAN\u5ba2\u6237\u7aef172.22.99.10\u8bbf\u95eeWAN\u7f51http:\/\/122.227.231.250\uff09\uff1b <\/p>\n\n\n\n

LLB-11-Active-affinity-def-vMaster[1\/1]#sh running-config | sec nat       \nsystem resource-usage nat-pool-addr-count 2000 \nip nat pool cmc-nat 223.96.100.4 223.96.100.6 netmask \/24 ip-rr \nip nat pool ctc-nat 122.227.231.4 122.227.231.6 netmask \/24 ip-rr \nip nat pool cuc-nat 60.12.220.4 60.12.220.6 netmask \/24 ip-rr \nip nat pool-group cmc-pool \n  member cmc-nat \nip nat pool-group ctc-pool \n  member ctc-nat \nip nat pool-group cuc-pool \n  member cuc-nat \nslb resource-usage nat-pool-addr-count 2000 \nslb template port ctc-snat-temp \n  source-nat ctc-pool \nslb template port cuc-snat-temp \n  source-nat cuc-pool \nslb template port cmc-snat-temp \n  source-nat cmc-pool <\/code><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
2) \u5982\u679cA10 \u8bbe\u5907\u6d41\u91cf\u8fdb\u5165\u7684\u63a5\u53e3\u914d\u7f6e\u6709ip allow-promiscuous-vip\uff0c\u7528\u6237\u8bbf\u95ee\u5c06\u547d\u4e2d\u67d0\u4e2aACL \u5173\u8054\u7684 Wildcard VIP \u6216\u6ca1\u6709\u5173\u8054ACL \u7684\u9ed8\u8ba4Wildcard VIP\u3002
 <\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
3) A10 \u8bbe\u5907\u9996\u5148\u5339\u914d\u4f1a\u8bdd\u8868\uff0c\u82e5\u547d\u4e2d\u4f1a\u8bdd\u8868\uff0c\u6839\u636e\u4f1a\u8bdd\u8868\u8f6c\u53d1\u3002<\/p>\n\n\n\n
4) \u5982\u679c\u6ca1\u6709\u547d\u4e2d\u4f1a\u8bdd\u8868\uff0c\u5148\u5224\u65ad\u7b56\u7565\u4e2d\u662f\u5426\u914d\u7f6e\u6709\u4f1a\u8bdd\u4fdd\u6301\uff0c\u82e5\u6709\u4f1a\u8bdd\u4fdd\u6301\u4e14\u547d\u4e2d\uff0c\u5219\u6839\u636e\u4f1a\u8bdd\u4fdd\u6301\u8868\u9009\u62e9\u4e0b\u4e00\u8df3\uff0c\u521b\u5efa\u4f1a\u8bdd\u5e76\u8f6c\u53d1\u3002<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
5) \u82e5\u6ca1\u6709\u914d\u7f6e\u4f1a\u8bdd\u4fdd\u6301\u6216\u6ca1\u6709\u547d\u4e2d\u4f1a\u8bdd\u4fdd\u6301\u8868\uff0c\u5219\u6309\u7167Wildcard \u4e2d\u914d\u7f6e\u7684\u5404\u79cd\u7b56\u7565\u8fdb\u884c\u5904\u7406\uff0c\u5177\u4f53\u8fc7\u7a0b\u5982\u4e0b\uff1a
 a) \u82e5\u914d\u7f6e\u6709aFlex\uff0c\u5148\u5224\u65adaFlex \u4e2d\u662f\u5426\u6709\u9009\u8def\u7b56\u7565\u3002
 b) \u82e5\u6ca1\u6709aFlex\uff0c\u5224\u65adPolicy \u6a21\u677f\u4e2d\u7684\u9009\u8def\u7b56\u7565\uff0c\u4f8b\u5982\u5224\u65ad\u76ee\u7684\u5730\u5740\u6240\u5c5e\u8fd0\u8425\u5546\uff0c\u82e5\u76ee\u7684\u5730\u5740\u5c5e\u4e8e\u7535\u4fe1\uff0c\u8f6c\u53d1\u7ed9\u7535\u4fe1\u7f51\u5173Service-group\uff0c\u82e5\u76ee\u7684\u5730\u5740\u4e3a\u8054\u901a\uff0c\u8f6c\u53d1\u7ed9\u8054\u901a\u7f51\u5173Service-group\uff0c\u82e5\u76ee\u7684\u5730\u5740\u5c5e\u4e8e\u5176\u4ed6\u8fd0\u8425\u5546\uff0c\u4f46\u65e0\u8be5\u8fd0\u8425\u5546\u94fe\u8def\uff0c\u5219\u6839\u636e\u6307\u5b9a\u7684\u4e0b\u4e00\u8df3\u8f6c\u53d1\uff0c\u4f9d\u6b21\u7c7b\u63a8\u2026
 c) \u82e5\u6ca1\u6709\u914d\u7f6epolicy \u6a21\u677f\u6216\u8005\u6ca1\u6709\u547d\u4e2dpolic \u6a21\u677f\u7684\u5177\u4f53\u6761\u76ee\uff0c\u5219\u8f6c\u53d1\u5230\u9ed8\u8ba4\u914d\u7f6e\u4e2d\u7684Servicegroup\u6240\u5305\u542b\u7684\u4e0b\u4e00\u8df3\u7f51\u5173\u3002
<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
6) \u76ee\u7684\u670d\u52a1\u5668\u56de\u5305\u540e\uff0c\u5339\u914d\u4f1a\u8bdd\u8868\uff0c\u6839\u636e\u8fd4\u56de\u8def\u7531\u6216\u539f\u8def\u8fd4\u56de\u7b56\u7565\uff0c\u5c06\u4ece\u8bbe\u5907\u6536\u5230\u8bf7\u6c42\u7684\u7aef\u53e3\u53d1\u56de\u7ed9\u5ba2\u6237\u7aef\u3002<\/p>\n\n\n\n
7) \u540e\u7eed\u4efb\u4f55\u5ba2\u6237\u7aef\u7684\u8bbf\u95ee\u6309\u7167\u4ee5\u4e0a\u7684\u6d41\u7a0b\u5339\u914d\u76f8\u5e94\u7684\u7b56\u7565\u3002<\/p>\n\n\n\n
Done\uff01<\/p>\n\n\n\n
\u914d\u7f6e\u8303\u4f8b\uff1a<\/p>\n\n\n\n
LLB-11-Active-affinity-def-vMaster[1\/1]#sh running-config \n!Current configuration: 3661 bytes      \n!Configuration last updated at 06:42:04 GMT Sat Mar 14 2020\n!Configuration last saved at 08:55:17 GMT Sat Mar 14 2020\n!64-bit Advanced Core OS (ACOS) version 4.1.4-GR1-P2, build 151 (Sep-09-2019,15:47)\n!\nvrrp-a common \n  device-id 1 \n  set-id 1 \n  enable \n!\ndevice-context 1\n  vcs enable \n!\ndevice-context 2\n  vcs enable \n!\nvcs floating-ip 1.1.1.2 255.255.255.0 \n!\nvcs device 1 \n  priority 250 \n  interfaces management \n  interfaces ve 1001 \n  affinity-vrrp-a-vrid 0 \n  enable \n!\nvcs device 2 \n  priority 200 \n  interfaces management \n  interfaces ve 1001 \n  affinity-vrrp-a-vrid 0 \n  enable \n!\n!\nsystem resource-usage nat-pool-addr-count 2000 \n!\nterminal idle-timeout 60 \n!\nclass-list class-cmc \n  223.96.100.0\/24 \n  223.96.110.0\/24 \n  3.3.3.3\/32 \n!\nclass-list class-ctc \n  122.227.231.0\/24 \n  122.227.230.0\/24 \n!       \nclass-list class-cuc \n  60.12.220.0\/24 \n  60.12.221.0\/24 \n!\nip dns primary 122.227.231.250 \n!\nvlan 1\/1001 \n  tagged ethernet 3\n  router-interface ve 1001 \n  name heartBeat \n!\nvlan 1\/2001 \n  untagged ethernet 2\n  router-interface ve 2001 \n!\nvlan 1\/3001 \n  tagged ethernet 1\n  router-interface ve 3001 \n!\nvlan 1\/3002 \n  tagged ethernet 1\n  router-interface ve 3002 \n!\nvlan 1\/3003 \n  tagged ethernet 1\n  router-interface ve 3003 \n!\nvlan 2\/1001 \n  tagged ethernet 3\n  router-interface ve 1001 \n!\nvlan 2\/2001 \n  untagged ethernet 2\n  router-interface ve 2001 \n!\nvlan 2\/3001 \n  tagged ethernet 1\n  router-interface ve 3001 \n!\nvlan 2\/3002 \n  tagged ethernet 1\n  router-interface ve 3002 \n!\nvlan 2\/3003 \n  tagged ethernet 1\n  router-interface ve 3003 \n!\ndevice-context 1\n  hostname LLB-11 \n!\ndevice-context 2\n  hostname LLB-12 \n!\ndevice-context 1\n  interface management \n    ip address 192.168.0.11 255.255.255.0 \n    ip default-gateway 192.168.0.254 \n!\ndevice-context 2\n  interface management \n    ip address 192.168.0.12 255.255.255.0 \n    ip default-gateway 192.168.0.254 \n!\ninterface ethernet 1\/1 \n  enable \n!\ninterface ethernet 1\/2 \n  enable \n!\ninterface ethernet 1\/3 \n  enable \n!\ninterface ethernet 2\/1 \n  enable \n!\ninterface ethernet 2\/2 \n  enable \n!\ninterface ethernet 2\/3 \n  enable \n!\ninterface ve 1\/1001 \n  name heartBeat \n  ip address 1.1.1.11 255.255.255.0 \n!\ninterface ve 1\/2001 \n  name donwLink \n  ip address 172.22.99.1 255.255.255.0 \n  ip allow-promiscuous-vip \n!       \ninterface ve 1\/3001 \n  name CTC \n  ip address 122.227.231.1 255.255.255.0 \n!\ninterface ve 1\/3002 \n  name CUC \n  ip address 60.12.220.1 255.255.255.0 \n!\ninterface ve 1\/3003 \n  name CMC \n  ip address 223.96.100.1 255.255.255.0 \n!\ninterface ve 2\/1001 \n  name heartBeat \n  ip address 1.1.1.12 255.255.255.0 \n!\ninterface ve 2\/2001 \n  name downLink \n  ip address 172.22.99.2 255.255.255.0 \n!\ninterface ve 2\/3001 \n  name CTC \n  ip address 122.227.231.2 255.255.255.0 \n!\ninterface ve 2\/3002 \n  name CUC \n  ip address 60.12.220.2 255.255.255.0 \n!\ninterface ve 2\/3003 \n  name CMC \n  ip address 223.96.100.2 255.255.255.0 \n!\nvrrp-a vrid 0 \n  floating-ip 122.227.231.82 \n  floating-ip 60.12.220.168 \n  floating-ip 172.22.99.3 \n  device-context 1\n    blade-parameters \n      priority 250 \n      tracking-options \n        trunk 1 priority-cost 60 \n        gateway 172.22.99.254 priority-cost 100 \n  device-context 2\n    blade-parameters \n      priority 200 \n      tracking-options \n        trunk 1 priority-cost 60 \n        gateway 172.22.99.254 priority-cost 100 \n!\nip nat pool cmc-nat 223.96.100.4 223.96.100.6 netmask \/24 ip-rr \n!\nip nat pool ctc-nat 122.227.231.4 122.227.231.6 netmask \/24 ip-rr \n!\nip nat pool cuc-nat 60.12.220.4 60.12.220.6 netmask \/24 ip-rr \n!\nip nat pool-group cmc-pool \n  member cmc-nat \n!\nip nat pool-group ctc-pool \n  member ctc-nat \n!\nip nat pool-group cuc-pool \n  member cuc-nat \n!\ndevice-context 1\n  enable-management service ssh \n    ve 1001\n    ve 2001\n!\ndevice-context 2\n  enable-management service ssh \n    ve 1001\n    ve 2001\n!\ndevice-context 1\n  ip route 0.0.0.0 \/0 60.12.220.254 10 \n  ip route 0.0.0.0 \/0 223.96.100.254 20 \n  ip route 0.0.0.0 \/0 122.227.231.251 \n!\ndevice-context 2\n  ip route 0.0.0.0 \/0 122.227.231.251 \n  ip route 0.0.0.0 \/0 60.12.220.254 10 \n  ip route 0.0.0.0 \/0 223.96.100.254 20 \n!\nslb resource-usage client-ssl-template-count 8192 \nslb resource-usage conn-reuse-template-count 4096 \nslb resource-usage fast-tcp-template-count 4096 \nslb resource-usage fast-udp-template-count 4096 \nslb resource-usage http-template-count 4096 \nslb resource-usage nat-pool-addr-count 2000 \nslb resource-usage persist-cookie-template-count 4096 \nslb resource-usage persist-srcip-template-count 4096 \nslb resource-usage proxy-template-count 4096 \nslb resource-usage real-port-count 16384 \nslb resource-usage real-server-count 8192 \nslb resource-usage server-ssl-template-count 8192 \nslb resource-usage service-group-count 8192 \nslb resource-usage stream-template-count 4096 \nslb resource-usage virtual-port-count 8192 \nslb resource-usage virtual-server-count 4096 \nslb resource-usage health-monitor-count 1024 \n!\nhealth monitor check-ctc-baidu \n  method external program ext-ping arguments \"ve3001 www.baidu.com\" \n!\nhealth monitor check-cuc-baidu \n  method external program ext-ping arguments \"ve3002 60.12.220.249\" \n!\nhealth monitor check-cmc-baidu \n  method external program ext-ping arguments \"ve3003 223.96.100.249\" \n!\nhealth monitor check-ctc-taobao \n  method external program ext-ping arguments \"ve3001 www.taobao.com\" \n!\nhealth monitor check-cuc-taobao \n  method external program ext-ping arguments \"ve3002 60.12.220.249\" \n!\nhealth monitor check-cmc-taobao \n  method external program ext-ping arguments \"ve3003 223.96.100.249\" \n!\nhealth monitor check-ctc \n  method compound sub check-ctc-baidu sub check-ctc-taobao or\n!\nhealth monitor check-cuc \n  method compound sub check-cuc-baidu sub check-cuc-taobao or\n!\nhealth monitor check-cmc \n  method compound sub check-cmc-baidu sub check-cmc-taobao or\n!\nslb template port ctc-snat-temp \n  source-nat ctc-pool \n!\nslb template port cuc-snat-temp \n  source-nat cuc-pool \n!       \nslb template port cmc-snat-temp \n  source-nat cmc-pool \n!\nslb server gw-cmc 223.96.100.250 \n  health-check check-cmc \n  port 0 tcp \n    template port cmc-snat-temp \n    health-check-disable \n  port 0 udp \n    template port cmc-snat-temp \n    health-check-disable \n  port 10 tcp \n!\nslb server gw-ctc 122.227.231.251 \n  health-check check-ctc \n  port 0 tcp \n    template port ctc-snat-temp \n    health-check-disable \n  port 0 udp \n    template port ctc-snat-temp \n    health-check-disable \n!\nslb server gw-cuc 60.12.220.250 \n  health-check check-cuc \n  port 0 tcp \n    template port cuc-snat-temp \n    health-check-disable \n  port 0 udp \n    template port cuc-snat-temp \n    health-check-disable \n!\nslb service-group gw-all-tcp tcp \n  method src-ip-hash \n  health-check-disable \n  member gw-cmc 0 \n  member gw-ctc 0 \n  member gw-cuc 0 \n!\nslb service-group gw-all-udp udp \n  method src-ip-hash \n  health-check-disable \n  member gw-cmc 0 \n  member gw-ctc 0 \n  member gw-cuc 0 \n!       \nslb service-group gw-cmc-tcp tcp \n  health-check-disable \n  member gw-cmc 0 \n    priority 15 \n  member gw-ctc 0 \n    priority 10 \n  member gw-cuc 0 \n    priority 5 \n!\nslb service-group gw-cmc-udp udp \n  health-check-disable \n  member gw-cmc 0 \n    priority 15 \n  member gw-ctc 0 \n    priority 10 \n  member gw-cuc 0 \n    priority 5 \n!\nslb service-group gw-ctc-tcp tcp \n  health-check-disable \n  member gw-cmc 0 \n    priority 10 \n  member gw-ctc 0 \n    priority 15 \n  member gw-cuc 0 \n    priority 5 \n!\nslb service-group gw-ctc-udp udp \n  health-check-disable \n  member gw-cmc 0 \n    priority 10 \n  member gw-ctc 0 \n    priority 15 \n  member gw-cuc 0 \n    priority 5 \n!\nslb service-group gw-cuc-tcp tcp \n  health-check-disable \n  member gw-cmc 0 \n    priority 5 \n  member gw-ctc 0 \n    priority 10 \n  member gw-cuc 0 \n    priority 15 \n!       \nslb service-group gw-cuc-udp udp \n  health-check-disable \n  member gw-cmc 0 \n    priority 5 \n  member gw-ctc 0 \n    priority 10 \n  member gw-cuc 0 \n    priority 15 \n!\nslb template persist destination-ip p-dip \n!\nslb template tcp temp-tcp-60s \n  idle-timeout 60 \n  reset-fwd \n  reset-rev \n!\nslb template udp temp-udp-60s \n  idle-timeout 60 \n!\nslb virtual-server llb-out 0.0.0.0 \n  port 0 others \n    clientip-sticky-nat \n    aflex llb-out-udp \n    template persist destination-ip p-dip \n    template udp temp-udp-60s \n    no-dest-nat \n  port 0 tcp \n    clientip-sticky-nat \n    aflex llb-out-tcp \n    template persist destination-ip p-dip \n    template tcp temp-tcp-60s \n    no-dest-nat \n  port 0 udp \n    clientip-sticky-nat \n    aflex llb-out-udp \n    template persist destination-ip p-dip \n    template udp temp-udp-60s \n    no-dest-nat \n!\nsflow setting local-collection \n!\nsflow collector ip 127.0.0.1 6343 \n!\n!\nend     \n!Current config commit point for partition 0 is 0 & config mode is classical-mode\nLLB-11-Active-affinity-def-vMaster[1\/1]#  <\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
\u505a\u4e3aADC\u4ea7\u54c1\u4e09\u5927\u5356\u70b9SLB\/LLB\/GSLB\u7684LLB\u9700\u8981\u52a0\u6df1\u7406\u89e3\u3002\u4ece\u7f51\u7edc\u57fa\u7840\u6210\u957f\u8d77\u6765\u7684SE\uff0c\u53ef\u4ee5\u4e0d\u719f\u6089SLB… \u7ee7\u7eed\u9605\u8bfb[\u57f9\u8bad]A10\u51fa\u5411\u667a\u80fd\u9009\u8def(\u94fe\u8def\u8d1f\u8f7d\u5747\u8861)\u4e0eSLB\u5de5\u4f5c\u6d41\u4e0e\u914d\u7f6e\u8303\u4f8b<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":2257,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[28],"tags":[33],"_links":{"self":[{"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/posts\/2255"}],"collection":[{"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.charflower.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2255"}],"version-history":[{"count":3,"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/posts\/2255\/revisions"}],"predecessor-version":[{"id":2265,"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/posts\/2255\/revisions\/2265"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.charflower.com\/index.php?rest_route=\/wp\/v2\/media\/2257"}],"wp:attachment":[{"href":"https:\/\/www.charflower.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2255"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.charflower.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2255"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.charflower.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2255"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}