Load Daidaita tare da AWS ELB

Sannu duka! A yau za a fara karatun "AWS don Masu Haɓakawa", dangane da wanda muka gudanar da madaidaicin jigon jigon jigon da aka keɓe ga bita na ELB. Mun kalli nau'ikan ma'auni kuma mun ƙirƙiri lokuta da yawa na EC2 tare da ma'auni. Mun kuma yi nazarin wasu misalan amfani.

Bayan sauraron webinar, Za ku:

• fahimci abin da AWS Load Daidaitawa yake;
• san nau'ikan Ma'aunin Load na Elastic da abubuwan da ke tattare da shi;
• Yi amfani da AWS ELB a cikin aikin ku.

Me yasa kuke buƙatar sanin wannan kwata-kwata?

• da amfani idan kuna shirin ɗaukar jarrabawar takaddun shaida ta AWS;
• wannan hanya ce mai sauƙi don rarraba kaya tsakanin sabobin;
• Wannan hanya ce mai sauƙi don ƙara Lambda zuwa sabis ɗin ku (ALB).

An gudanar da budaddiyar darasi Rishat Teregulov, Injiniyan tsarin a kamfanin talla don haɓaka gidan yanar gizon da tallafi.

Gabatarwar

Abin da ake iya gani mai daidaita ma'aunin roba na roba a cikin zane a ƙasa, wanda ke nuna misali mai sauƙi:

Load Balancer yana karɓar buƙatun kuma yana rarraba su a kowane yanayi. Muna da misali guda ɗaya, akwai ayyukan Lambda kuma akwai ƙungiyar AutoScaling (ƙungiyar sabar).

Nau'in AWS ELB

1. Bari mu dubi manyan nau'ikan:

Classic Load Balancer. Ma'aunin nauyi na farko daga AWS, yana aiki akan duka OSI Layer 4 da Layer 7, suna tallafawa HTTP, HTTPS, TCP da SSL. Yana ba da ma'auni na asali na ma'auni a cikin yawancin lokuta na Amazon EC2 kuma yana aiki a duka buƙatun da matakan haɗin kai. Bari mu buɗe shi (wanda aka haskaka da launin toka):

Ana ɗaukar wannan ma'auni na zamani, don haka ana ba da shawarar yin amfani da shi kawai a wasu lokuta. Misali, don aikace-aikacen da aka gina akan hanyar sadarwa ta EC2-Classic. A ka'ida, babu wanda ke hana mu ƙirƙirar shi:

2. Network Load Balancer. Ya dace da nauyin aiki mai nauyi, yana aiki a OSI Layer 4 (ana iya amfani dashi a cikin EKS da ECS), TCP, UDP da TLS ana tallafawa.

Network Load Balancer yana ba da hanyoyin zirga-zirga zuwa maƙasudai a cikin VPC na Amazon kuma yana da ikon sarrafa miliyoyin buƙatun daƙiƙa guda tare da ƙarancin jinkiri. Bugu da ƙari, an inganta shi don sarrafa tsarin zirga-zirga tare da kwatsam da canza lodi.

3. Application Load Balancer. Yana aiki a Layer 7, yana da goyon bayan Lambda, yana goyan bayan ka'idojin matakin kai da hanya, yana goyan bayan HTTP da HTTPS.
Yana ba da ingantaccen tsarin buƙatun mayar da hankali kan isar da aikace-aikacen da aka gina akan gine-ginen zamani, gami da ƙananan sabis da kwantena. Yana jagorantar zirga-zirga zuwa maƙasudai a cikin Amazon VPC dangane da abun ciki na buƙatar.

Ga masu amfani da yawa, Ma'aunin Load na Aikace-aikacen shine zaɓi na farko don maye gurbin Classic Load Balancer, saboda TCP ba kowa bane kamar HTTP.

Bari mu ƙirƙira shi ma, sakamakon abin da za mu riga mun sami ma'aunin nauyi guda biyu:

Abubuwan Ma'auni na Loading

Abubuwan Ma'auni na Ma'auni na gama gari (na kowa ga duk masu daidaitawa):

• Manufar shiga shiga

- rajistan ayyukan shiga ELB na ku. Don yin saituna, zaku iya zuwa Description kuma zaɓi maɓallin "Edit attributes":

Sa'an nan kuma mu saka S3Bucket - Amazon abu ajiya:

• Tsarin

- ciki ko na waje balancer. Ma'anar ita ce ko LoadBalancer dole ne ya karɓi adiresoshin waje don samun dama daga waje, ko zai iya zama ma'aunin nauyi na ciki;

• Ƙungiyoyin Tsaro

- ikon samun dama ga ma'auni. Ainihin wannan shine babban matakin Tacewar zaɓi.

• Subnets

- subnets a cikin VPC ɗin ku (kuma, saboda haka, yankin samuwa). An ƙayyadadden hanyoyin sadarwa a lokacin halitta. Idan VPCs sun iyakance ta yanki, to Subnets suna iyakance ta wuraren samuwa. Lokacin ƙirƙirar Ma'auni na Load, yana da kyau a ƙirƙira shi a cikin aƙalla subnets guda biyu (taimaka idan matsaloli sun taso tare da Yankin Kasancewa ɗaya);

• Masu sauraro

- ka'idodin daidaitawa. Kamar yadda aka ambata a baya, don Classic Load Balancer yana iya zama HTTP, HTTPS, TCP da SSL, don Ma'aunin Load na Yanar Gizo - TCP, UDP da TLS, don Ma'aunin Load na Aikace-aikacen - HTTP da HTTPS.

Misali don Ma'aunin Load na Classic:

Amma a cikin Ma'aunin Load na Aikace-aikacen muna ganin ɗan ƙaramin maɓalli daban-daban kuma gabaɗaya dabaru daban-daban:

Abubuwan Load Balancer v2 (ALB da NLB)

Yanzu bari mu dubi sigar 2 ma'auni na aikace-aikacen Load Balancer da Ma'aunin Load na hanyar sadarwa. Wadannan ma'auni suna da nasu fasalin fasalin. Misali, irin wannan ra'ayi kamar Ƙungiyoyin Target sun bayyana - misalai (da ayyuka). Godiya ga wannan bangaren, muna da damar tantance ko wanene daga cikin Ƙungiyoyin Target ɗin da muke son jagorantar zirga-zirga zuwa gare su.

A cikin sauƙi, a cikin Ƙungiyoyin Target muna ƙididdige wuraren da zirga-zirgar zai zo. Idan a cikin ma'aunin Load ɗin Classic ɗin nan da nan zaku haɗa ƙarfi zuwa ma'aunin nauyi, sannan a cikin Ma'aunin Load ɗin Aikace-aikacen ku fara:

• ƙirƙirar Ma'auni Load;
• ƙirƙirar ƙungiyar Target;
• kai tsaye ta hanyar tashar jiragen ruwa da ake buƙata ko dokokin Load Balancer zuwa Ƙungiyoyin Target da ake buƙata;
• a cikin Ƙungiyoyin Target kuna ba da misalai.

Wannan dabaru na aiki na iya zama kamar ya fi rikitarwa, amma a zahiri ya fi dacewa.

Bangare na gaba shine Dokokin masu sauraro (ka'idojin zirga-zirga). Wannan ya shafi Ma'auni Load na Aikace-aikacen kawai. Idan a cikin Network Load Balancer kawai kuna ƙirƙirar mai sauraro, kuma yana aika zirga-zirga zuwa takamaiman ƙungiyar Target, sannan a cikin Ma'aunin Load Balancer komai. more fun da kuma dace.

Yanzu bari mu faɗi kaɗan game da sashi na gaba - Na roba IP (adiresoshin na NLB). Idan Dokokin Mai Sauraro ka'idojin tafiyar da aiki sun shafi Ma'aunin Load na Aikace-aikacen kawai, to, Elastic IP kawai ya shafi Ma'aunin Load na hanyar sadarwa.

Bari mu ƙirƙiri Ma'auni Load Network:

Kuma kawai a lokacin tsarin ƙirƙirar za mu ga cewa an ba mu dama don zaɓar IP na roba:

Elastic IP yana ba da adireshin IP guda ɗaya wanda za'a iya haɗa shi da lokuta daban-daban na EC2 akan lokaci. Idan misalin EC2 yana da adireshin IP na Elastic kuma wannan misalin ya ƙare ko ya tsaya, nan da nan zaku iya haɗa sabon misalin EC2 tare da adireshin IP na roba. Koyaya, aikace-aikacen ku na yanzu ba zai daina aiki ba, tunda har yanzu aikace-aikacen suna ganin adireshin IP iri ɗaya, koda kuwa ainihin EC2 ya canza.

a nan wani yanayin amfani akan batun dalilin da yasa ake buƙatar IP na roba. Duba, muna ganin adiresoshin IP guda 3, amma ba za su tsaya nan har abada ba:

Amazon yana canza su akan lokaci, watakila kowane 60 seconds (amma a aikace, ba shakka, ƙasa da sau da yawa). Wannan yana nufin cewa adiresoshin IP na iya canzawa. Kuma a cikin yanayin Load Balancer na hanyar sadarwa, zaku iya kawai ɗaure adireshin IP kuma ku nuna shi a cikin dokokinku, manufofinku, da sauransu.

Zana karshe

ELB yana ba da rarraba kai tsaye na zirga-zirgar zirga-zirgar zirga-zirgar ababen hawa a cikin maƙasudai da yawa (kwantena, Amazon EC2, adiresoshin IP, da ayyukan Lambda). ELB yana da ikon rarraba zirga-zirga tare da kaya daban-daban duka a cikin Wuraren Samuwa guda ɗaya da kuma a cikin Yankunan Samun dama. Mai amfani zai iya zaɓar daga nau'ikan ma'auni guda uku waɗanda ke ba da dama mai yawa, autoscaling, da kariya mai kyau. Duk waɗannan suna da mahimmanci don tabbatar da haƙurin kuskuren aikace-aikacenku.

Babban fa'idodi:

• babban samuwa. Yarjejeniyar sabis tana ɗaukar 99,99% samuwa don ma'aunin nauyi. Misali, Yankunan Samun damawa da yawa suna tabbatar da cewa ana sarrafa zirga-zirga ta hanyar abubuwa masu lafiya kawai. A gaskiya ma, zaku iya daidaita nauyin a duk faɗin yankin, sake tura zirga-zirga zuwa maƙasudai masu lafiya a cikin yankuna daban-daban na samuwa;
• aminci. ELB yana aiki tare da Amazon VPC, yana ba da damar tsaro daban-daban - haɗaɗɗen sarrafa takaddun shaida, amincin mai amfani, da ɓoye SSL/TLS. Dukkansu suna ba da tsarin gudanarwa na tsakiya da sassauƙa na saitunan TLS;
• elasticity. ELB na iya ɗaukar canje-canje kwatsam a cikin zirga-zirgar hanyar sadarwa. Kuma zurfin haɗin kai tare da Sikelin atomatik yana ba aikace-aikacen isassun albarkatu idan nauyin ya canza, ba tare da buƙatar sa hannun hannu ba;
• sassauci. Kuna iya amfani da adiresoshin IP don kai buƙatun zuwa maƙasudin aikace-aikacenku. Wannan yana ba da sassauƙa lokacin sarrafa aikace-aikacen manufa, don haka yana ba da ikon ɗaukar aikace-aikacen da yawa akan misali guda. Tun da aikace-aikacen na iya amfani da tashar tashar sadarwa guda ɗaya kuma suna da ƙungiyoyin tsaro daban, ana sauƙaƙe sadarwa tsakanin aikace-aikacen lokacin da muke da, a ce, gine-gine na tushen microservices;
• saka idanu da dubawa. Kuna iya saka idanu akan aikace-aikace a cikin ainihin lokaci ta amfani da fasalin Amazon CloudWatch. Muna magana ne game da awo, rajistan ayyukan, neman sa ido. A cikin sauki kalmomi, za ku iya gano matsaloli da kuma nuna ƙwanƙolin aikin daidai;
• hybrid load daidaitawa. Ƙarfin ƙaddamar da ma'auni tsakanin albarkatun kan-gida da AWS ta yin amfani da ma'auni guda ɗaya yana sauƙaƙa ƙaura ko fadada aikace-aikacen kan layi zuwa gajimare. Hakanan ana sauƙaƙe sarrafa gazawar ta amfani da gajimare.

Idan kuna sha'awar cikakkun bayanai, ga wasu ƙarin hanyoyin haɗin gwiwa masu amfani daga gidan yanar gizon Amazon na hukuma:

1. Daidaita Load Na roba.
2. Ƙarfin Ma'auni na Loastic Load.

source: www.habr.com