ʻAʻole hiki ke noʻonoʻo ʻia ka pūnaewele o kēia wā me ka ʻole o ka ʻike media: aneane loaʻa i kēlā me kēia kupuna wahine he atamai, aia nā mea a pau ma nā ʻupena pūnaewele, a ʻo ka manawa hoʻomaha o ka mālama ʻana he kumu kūʻai no nā ʻoihana. Eia ka moʻolelo o ka hui e pili ana i kona hoʻonohonoho ʻana i ka lawe ʻana i nā kiʻi me ka hoʻohana ʻana i kahi hāmeʻa hāmeʻa, he aha nā pilikia hana i loaʻa iā ia i ke kaʻina hana, he aha ke kumu o ia mau pilikia, a pehea i hoʻoponopono ʻia ai kēia mau pilikia me ka hoʻohana ʻana i kahi polokalamu polokalamu e pili ana iā Nginx, ʻoiai e hōʻoiaʻiʻo ana i ka hoʻomanawanui hewa ma nā pae āpau (). Mahalo mākou i nā mea kākau o ka moʻolelo o Oleg ʻO Efimova lāua ʻo Alexandra Dymova, nāna i haʻi i ko lākou ʻike ma ka ʻaha kūkā .
— E hoʻomaka kākou me kahi hoʻolauna liʻiliʻi e pili ana i ka mālama ʻana a me ka hūnā i nā kiʻi. Loaʻa iā mākou kahi papa kahi e mālama ai mākou iā lākou, a me kahi papa kahi e hūnā ai mākou i nā kiʻi. I ka manawa like, inā makemake mākou e hoʻokō i kahi helu hoʻopunipuni kiʻekiʻe a hoʻemi i ka ukana ma ka waiho ʻana, he mea nui iā mākou ke kiʻi ʻia kēlā me kēia kiʻi o ka mea hoʻohana hoʻokahi ma kahi kikowaena caching. A i ʻole, pono mākou e hoʻokomo i nā disks e like me ka nui o nā kikowaena. ʻO kā mākou helu hoʻopunipuni ma kahi o 99%, ʻo ia hoʻi, ke hoʻemi nei mākou i ka ukana ma kā mākou waihona i nā manawa 100, a no ka hana ʻana i kēia, 10 mau makahiki i hala, i ka wā i kūkulu ʻia ai kēia mau mea, loaʻa iā mākou he 50 mau kikowaena. No laila, no ka lawelawe ʻana i kēia mau kiʻi, pono mākou i 50 mau kikowaena waho i lawelawe ʻia e kēia mau kikowaena.
Ma keʻano maʻamau, ua kū koke ka nīnau: inā e iho kekahi o kā mākou mau kikowaena a lilo ʻole, he aha ka hapa o ke kaʻa e nalowale ai mākou? Ua nānā mākou i nā mea ma ka mākeke a ua hoʻoholo mākou e kūʻai i kahi ʻāpana lako i mea e hoʻoponopono ai i nā pilikia āpau. Ua hāʻule ka koho i ka hopena o ka hui F5-network (ʻo ia, ma ke ala, i kūʻai aku nei iā NGINX, Inc): BIG-IP Local Traffic Manager.
He aha ka hana a kēia ʻāpana paʻa (LTM): he mea hao hao e hoʻonui ai i ka hao o kona mau awa waho a hiki iā ʻoe ke ala i nā kaʻa e pili ana i ka topology pūnaewele, ma kekahi mau hoʻonohonoho, a hana i nā loiloi olakino. He mea nui iā mākou ka hiki ke hoʻolālā ʻia kēia ʻāpana. No laila, hiki iā mākou ke wehewehe i ke ʻano o ka lawelawe ʻia ʻana o nā kiʻi o kahi mea hoʻohana mai kahi huna huna. He aha kona ʻano? Aia kekahi ʻāpana lako e nānā ana i ka Pūnaewele ma hoʻokahi kikowaena, hoʻokahi IP, hana ssl offload, hoʻopau i nā noi http, koho i kahi helu huna mai IRule, kahi e hele ai, a hoʻokuʻu i ke kaʻa i laila. I ka manawa like, hana ia i nā loiloi olakino, a inā ʻaʻole i loaʻa kekahi mīkini, i kēlā manawa ua hana mākou i mea e hele ai ke kaʻa i hoʻokahi server backup. Mai kahi manaʻo hoʻonohonoho, aia kekahi mau nuances, akā ma ka laulā he mea maʻalahi nā mea āpau: hoʻopaʻa inoa mākou i kahi kāleka, ka leka o kahi helu i kā mākou IP ma ka pūnaewele, ʻōlelo mākou e hoʻolohe mākou i nā awa 80 a me 443, ke ʻōlelo nei mākou inā ʻaʻole i loaʻa ke kikowaena, a laila pono ʻoe e hoʻouna i ke kaʻa i ka mea hoʻihoʻi, i kēia hihia ʻo ka 35th, a wehewehe mākou i kahi puʻupuʻu o ka manaʻo pehea e hoʻokaʻawale ʻia ai kēia hale hana. ʻO ka pilikia wale nō, ʻo ka ʻōlelo i hoʻolālā ʻia ai ka ʻenehana ʻo Tcl. Inā hoʻomanaʻo kekahi i kēia... ʻoi aku ka nui o kēia ʻōlelo ma mua o ka ʻōlelo maʻalahi no ka hoʻonohonoho ʻana:
He aha kā mākou i loaʻa? Ua loaʻa iā mākou kahi ʻāpana lako e hōʻoiaʻiʻo i ka loaʻa kiʻekiʻe o kā mākou ʻoihana, nā alahele a pau o kā mākou kaʻa, hāʻawi i nā pono olakino a me nā hana pono. Eia kekahi, hana ia no ka manawa lōʻihi: i nā makahiki he 10 i hala iho nei ʻaʻohe hoʻopiʻi e pili ana iā ia. Ma ka hoʻomaka ʻana o 2018, ua hoʻouna mua mākou ma kahi o 80k mau kiʻi i kēlā me kēia kekona. Aia kēia ma kahi o 80 gigabits o ke kaʻa mai nā kikowaena ʻikepili ʻelua.
Eia naʻe…
I ka hoʻomaka ʻana o 2018, ʻike mākou i kahi kiʻi ʻino ma nā pakuhi: ʻo ka manawa i lawe ʻia no ka hoʻouna ʻana i nā kiʻi ua hoʻonui nui ʻia. A ʻaʻole i kūpono iā mākou. ʻO ka pilikia, ʻike ʻia kēia ʻano i ka wā kiʻekiʻe o ke kaʻa - no kā mākou hui ʻo ia ka pō mai ka Lāpule a i ka Pōʻakahi. Akā ʻo ke koena o ka manawa ua hana ka ʻōnaehana e like me ka mea maʻamau, ʻaʻohe hōʻailona o ka hāʻule.
Eia naʻe, pono e hoʻoponopono ʻia ka pilikia. Ua ʻike mākou i nā bottlenecks a hoʻomaka mākou e hoʻopau iā lākou. ʻO ka mea mua, ʻoiaʻiʻo, ua hoʻonui mākou i nā uplinks waho, hana i kahi loiloi piha o nā uplinks kūloko, a loaʻa nā bottlenecks āpau. Akā ʻaʻole i hāʻawi kēia mau mea i kahi hopena maopopo, ʻaʻole i nalowale ka pilikia.
ʻO kekahi bottleneck ʻē aʻe ʻo ia ka hana ʻana o nā pahu kiʻi iā lākou iho. A ua hoʻoholo mākou aia paha ka pilikia iā lākou. ʻAe, ua hoʻonui mākou i ka hana - ka nui o nā awa pūnaewele ma nā kiʻi kiʻi. Akā, ʻaʻole i ʻike hou ʻia ka holomua. I ka hopena, ua nānā pono mākou i ka hana o ka LTM pono'ī, a eia mākou i ʻike ai i kahi kiʻi kaumaha ma nā kiʻi: hoʻomaka ka haʻahaʻa ma nā CPU āpau e hele mālie, akā hiki koke mai i kahi pā. I ka manawa like, ho'ōki ʻo LTM i ka pane pono ʻana i nā loiloi olakino a me nā uplinks a hoʻomaka i ka hoʻohuli ʻole ʻana iā lākou, e alakaʻi ana i ka hōʻino koʻikoʻi.
ʻO ia hoʻi, ua ʻike mākou i ke kumu o ka pilikia, ʻike i ka bottleneck. Ke waiho nei i ka hoʻoholo i kā mākou e hana ai.
ʻO ka mea mua a maopopo loa hiki iā mākou ke hana, ʻo ia ke hoʻololi hou i ka LTM ponoʻī. Akā aia kekahi mau nuances ma aneʻi, no ka mea, ʻokoʻa loa kēia hāmeʻa, ʻaʻole ʻoe e hele i ka hale kūʻai kokoke loa a kūʻai. He ʻaelike ʻokoʻa kēia, he ʻaelike laikini ʻokoʻa, a e lōʻihi ka manawa. ʻO ka lua o ka koho ʻana e hoʻomaka i ka noʻonoʻo ʻana iā ʻoe iho, e hele mai me kāu hoʻonā ponoʻī me ka hoʻohana ʻana i kāu mau mea ponoʻī, ʻoi aku ka maikaʻi o ka hoʻohana ʻana i kahi polokalamu wehe. ʻO nā mea a pau e hoʻoholo ai i ka mea a mākou e koho ai no kēia a me ka nui o ka manawa a mākou e hoʻopau ai i kēia pilikia, no ka mea ʻaʻole i lawa nā kiʻi i nā mea hoʻohana. No laila, pono mākou e hana i kēia mau mea me ka wikiwiki loa, e ʻōlelo paha kekahi i nehinei.
Ma muli o ke kani ʻana o ka hana "hana i kahi mea me ka hikiwawe a me ka hoʻohana ʻana i ka hāmeʻa i loaʻa iā mākou," ʻo ka mea mua a mākou i manaʻo ai ʻo ka wehe wale ʻana i kekahi mau mīkini ikaika ʻole mai ka mua, kau iā Nginx ma laila, a mākou e ʻike ai pehea e hana ai. hana a ho'āʻo e hoʻokō i nā loina like a pau i hana ʻia e ka lako. ʻO ia, ʻoiaʻiʻo, haʻalele mākou i kā mākou lako, hoʻokomo i 4 mau kikowaena hou aʻe a mākou e hoʻonohonoho ai, hana i nā kāʻei waho no lākou, e like me ke ʻano o 10 mau makahiki i hala ... Ua nalowale mākou i ka loaʻa inā hāʻule kēia mau mīkini, akā. ʻoi aku ka liʻiliʻi, ua hoʻoponopono lākou i ka pilikia o kā mākou mea hoʻohana ma ka ʻāina.
No laila, hoʻomau ka loiloi: hoʻokomo mākou iā Nginx, hiki iā ia ke hana i ka SSL-offload, hiki iā mākou ke hoʻonohonoho i ka logic routing, nānā i ke olakino i nā configs a hoʻololi wale i ka loiloi i loaʻa iā mākou ma mua.
E noho kāua e kākau i nā configs. I ka wā mua, ua maʻalahi nā mea a pau, akā naʻe, paʻakikī loa ka loaʻa ʻana o nā manual no kēlā me kēia hana. No laila, ʻaʻole mākou e ʻōlelo i ka googling "pehea e hoʻonohonoho ai iā Nginx no nā kiʻi": ʻoi aku ka maikaʻi o ka nānā ʻana i ka palapala mana, e hōʻike ana i nā hoʻonohonoho pono e hoʻopā ʻia. Akā ʻoi aku ka maikaʻi o ke koho ʻana i ka ʻāpana kikoʻī iā ʻoe iho. ʻAe, maʻalahi nā mea a pau: wehewehe mākou i nā kikowaena i loaʻa iā mākou, wehewehe mākou i nā palapala hōʻoia ... Akā ʻo ka mea hoihoi loa, ʻo ia, ʻo ka logic routing pono'ī.
I ka wā mua, manaʻo mākou e wehewehe wale ana mākou i ko mākou wahi, e hoʻohālikelike ana i ka helu o kā mākou pahu kiʻi i loko, me ka hoʻohana ʻana i ko mākou mau lima a i ʻole ka mīkini hana e wehewehe ai i ka nui o nā kahawai e pono ai mākou, i kēlā me kēia upstream hōʻike mākou i ke kikowaena kahi e pono ai ke kaʻa. hele, a me kahi kikowaena kākoʻo - inā ʻaʻole i loaʻa ka kikowaena nui:
Akā, inā maʻalahi nā mea a pau, e hoʻi wale mākou i ka home me ka ʻōlelo ʻole. ʻO ka mea pōʻino, me nā hoʻonohonoho Nginx paʻamau, i hana ʻia i nā makahiki he nui o ka hoʻomohala ʻana a ʻaʻole kūpono loa no kēia hihia ... ua like ke ʻano o ka config: inā loaʻa i kahi kikowaena upstream kahi hewa noi a i ʻole ka manawa pau, Nginx mau. hoʻololi i ke kaʻa i ka mea aʻe. Eia kekahi, ma hope o ka hāʻule mua ʻana, i loko o 10 mau kekona e hoʻopau ʻia ke kikowaena, ma ke kuhi hewa a me ka manawa - ʻaʻole hiki ke hoʻonohonoho ʻia i kēlā me kēia ʻano. ʻO ia hoʻi, inā mākou e hoʻoneʻe a hoʻonohonoho hou i ka koho manawa manawa ma ke kuhikuhi i luna, a laila, ʻoiai ʻaʻole e hoʻokō ʻo Nginx i kēia noi a pane aku me kekahi hewa maikaʻi ʻole, e pani ka server.
No ka pale ʻana i kēia, ua hana mākou i ʻelua mau mea:
a) ua pāpā lākou iā Nginx mai ka hana lima ʻana - a ʻo ka mea pōʻino, ʻo ke ala wale nō e hana ai i kēia, ʻo ka hoʻonohonoho wale ʻana i nā hoʻonohonoho max fails.
b) hoʻomanaʻo mākou ma nā papahana ʻē aʻe ke hoʻohana nei mākou i kahi module e hiki ai iā mākou ke hana i nā loiloi olakino - no laila, ua hana pinepine mākou i nā loiloi olakino i mea liʻiliʻi ka manawa hoʻomaha inā loaʻa kahi ulia.
ʻO ka mea pōʻino, ʻaʻole kēia wale nō, no ka mea, ʻo nā pule mua ʻelua o ka hana ʻana o kēia hoʻolālā i hōʻike ʻia ʻo TCP health-check he mea hiki ʻole ke hilinaʻi ʻia: ma ke kikowaena upstream ʻaʻole paha ʻo Nginx, a i ʻole Nginx i D-state, a ma i kēia hihia e ʻae ka kernel i ka pilina, e hala ka nānā olakino, akā ʻaʻole e hana. No laila, ua hoʻololi koke mākou i kēia me ka health-check http, i hana i kahi kikoʻī, a inā e hoʻi mai 200, a laila hana nā mea a pau i kēia palapala. Hiki iā ʻoe ke hana i nā loiloi hou aʻe - no ka laʻana, i ka hihia o nā server cache, e nānā i ka hoʻokomo pono ʻana o ka ʻōnaehana faila:
A kūpono kēia iā mākou, koe wale nō i kēia manawa ua hana hou ke kaapuni i ka mea i hana ʻia e ka mīkini. Akā makemake mākou e hana maikaʻi. Ma mua, ua loaʻa iā mākou hoʻokahi server backup, a ʻaʻole maikaʻi loa kēia, no ka mea inā he haneli kāu mau kikowaena, a laila i ka wā e hāʻule ai kekahi mau mea i ka manawa hoʻokahi, ʻaʻole hiki i kahi kikowaena backup ke hoʻokō i ka ukana. No laila, ua hoʻoholo mākou e kaʻana like i ka hoʻopaʻa ʻana ma nā kikowaena āpau: hana mākou i kahi kaʻawale ʻē aʻe i luna, kākau i nā kikowaena āpau ma laila me kekahi mau ʻāpana e like me ka ukana a lākou e lawelawe ai, hoʻohui i nā loiloi olakino like i loaʻa iā mākou ma mua:
No ka mea hiki ʻole ke hele i kahi ʻē aʻe i uka i loko o kahi uka, pono e hōʻoia inā ʻaʻole i loaʻa ka ʻaoʻao nui i luna, kahi a mākou i hoʻopaʻa pono ai i ke kiʻi pono, pono ʻole, hele mākou ma ka error_page e hāʻule, mai kahi a mākou i hele ai i ka waihona i uka:
A ma ka hoʻohui maoli ʻana i ʻehā mau kikowaena, ʻo ia ka mea i loaʻa iā mākou: ua hoʻololi mākou i kahi hapa o ka ukana - ua wehe mākou iā ia mai LTM i kēia mau kikowaena, hoʻokō i ka loiloi like ma laila, me ka hoʻohana ʻana i nā lako maʻamau a me nā lako polokalamu, a loaʻa koke ka bonus i hiki i kēia mau kikowaena. e hoʻonui ʻia, no ka mea hiki ke hoʻolako ʻia e like me ka mea e pono ai. ʻAe, ʻo ka mea maikaʻi ʻole ua nalowale mākou i ka loaʻa kiʻekiʻe no nā mea hoʻohana o waho. Akā i kēlā manawa pono mākou e mōhai aku i kēia, no ka mea pono e hoʻoponopono koke i ka pilikia. No laila, ua wehe mākou i kahi hapa o ka ukana, aia ma kahi o 40% i kēlā manawa, ua maikaʻi ʻo LTM, a ʻelua mau pule ma hope o ka hoʻomaka ʻana o ka pilikia, hoʻomaka mākou e hoʻouna ʻaʻole 45k noi i kekona, akā 55k. ʻO ka ʻoiaʻiʻo, ua ulu mākou ma 20% - ʻo kēia ka mea i hāʻawi ʻole ʻia i ka mea hoʻohana. A ma hope o kēlā, hoʻomaka lākou e noʻonoʻo pehea e hoʻoponopono ai i ka pilikia i koe - e hōʻoia i ka hiki ke kiʻekiʻe o waho.
Loaʻa iā mākou kahi hoʻomaha, i ka manawa a mākou e kūkākūkā ai i ka hopena e hoʻohana ai mākou no kēia. Aia nā manaʻo e hōʻoia i ka hilinaʻi me ka hoʻohana ʻana i ka DNS, me ka hoʻohana ʻana i kekahi mau palapala i kākau ʻia e ka home, nā protocol routing dynamic ... he nui nā koho, akā ua ʻike mua ʻia no ka hoʻopuka pono ʻana i nā kiʻi, pono ʻoe e hoʻolauna i kahi papa ʻē aʻe e nānā i kēia. . Ua kapa mākou i kēia mau mīkini kiʻi alakaʻi. ʻO ka polokalamu a mākou i hilinaʻi ai ʻo Keepalived:
No ka hoʻomaka ʻana, he aha ka Keepalived? ʻO ka mua, ʻo ia ka VRRP protocol, i ʻike nui ʻia e nā mea hoʻohana pūnaewele, aia ma nā lako pūnaewele e hāʻawi ana i ka hoʻomanawanui hewa i ka IP IP waho kahi e hoʻopili ai nā mea kūʻai aku. ʻO ka ʻāpana ʻelua ʻo IPVS, IP virtual server, no ke kaulike ʻana ma waena o nā mea ala kiʻi a me ka hōʻoia ʻana i ka hoʻomanawanui hewa ma kēia pae. A ʻo ke kolu - nā nānā olakino.
E hoʻomaka kākou me ka hapa mua: VRRP - he aha kona ʻano? Aia kekahi IP virtual, aia kahi komo i loko o ka dns badoocdn.com, kahi e hoʻopili ai nā mea kūʻai aku. I kekahi manawa, loaʻa iā mākou kahi leka uila IP ma kahi kikowaena. Ke holo nei nā ʻeke Keepalived ma waena o nā kikowaena e hoʻohana ana i ka protocol VRRP, a inā nalowale ka haku mai ka radar - ua hoʻomaka hou ke kikowaena a i ʻole kekahi mea ʻē aʻe, a laila e kiʻi koke ka server backup i kēia IP address - ʻaʻohe hana manual. ʻO ka ʻokoʻa ma waena o ka haku a me ke kākoʻo ka mea nui: ʻoi aku ka kiʻekiʻe, ʻoi aku ka nui o ka manawa e lilo ai ka mīkini i haku. ʻO kahi pōmaikaʻi nui loa, ʻaʻole pono ʻoe e hoʻonohonoho i nā leka uila IP ma ka kikowaena ponoʻī, ua lawa ia e wehewehe iā lākou i ka config, a inā pono nā IP address i kekahi mau lula routing maʻamau, wehewehe pololei ʻia kēia i ka config, me ka hoʻohana ʻana i ka like syntax e like me ka mea i wehewehe ʻia ma ka pūʻolo VRRP. ʻAʻole ʻoe e hālāwai me nā mea ʻike ʻole.
He aha ke ʻano o kēia ma ka hoʻomaʻamaʻa? He aha ka hopena inā hāʻule kekahi o nā kikowaena? I ka nalo ʻana o ka haku, pau kā mākou waihona i ka loaʻa ʻana o nā hoʻolaha a lilo i haku. Ma hope o kekahi manawa, hoʻoponopono mākou i ka haku, rebooted, hoʻokiʻekiʻe iā Keepalived - hiki mai nā hoʻolaha me kahi mea nui ma mua o ka hoʻihoʻi ʻana, a hoʻohuli koke ka hoʻihoʻi ʻana, wehe i nā IP address, ʻaʻohe hana manual e pono e hana.
No laila, ua hōʻoia mākou i ka hoʻomanawanui hewa o ka helu IP waho. ʻO ka ʻāpana aʻe, ʻo ia ke kaulike ʻana i ke kaʻa mai ka IP address waho i nā mea ala kiʻi e hoʻopau nei. Ua maopopo loa nā mea a pau me nā protocol balancing. He round-robin maʻalahi paha kēia, a i ʻole nā mea paʻakikī iki, wrr, pili papa inoa a pēlā aku. Ua wehewehe nui ʻia kēia ma ka palapala, ʻaʻohe mea kūikawā. Akā ʻo ke ʻano o ka hāʻawi ʻana ... Maanei mākou e nānā pono ai i ke kumu i koho ai mākou i kekahi o lākou. ʻO kēia nā NAT, Direct Routing a me TUN. ʻO ka ʻoiaʻiʻo ua hoʻolālā koke mākou e hoʻopuka i 100 gigabits o ke kaʻa mai nā pūnaewele. Inā koho ʻoe, pono ʻoe i nā kāleka gigabit 10, ʻaʻole? ʻO nā kāleka gigabit 10 i hoʻokahi kikowaena ua ʻoi aku ma mua o ke ʻano o, ma ka liʻiliʻi loa, kā mākou manaʻo o "nā lako maʻamau". A laila hoʻomanaʻo mākou ʻaʻole mākou e hāʻawi wale i kahi kaʻa, hāʻawi mākou i nā kiʻi.
He aha ka mea kūikawā? — ʻO ka ʻokoʻa nui ma waena o nā kaʻa komo a i waho. He liʻiliʻi loa ka hele ʻana mai, he nui loa ka hele ʻana i waho:
Inā ʻoe e nānā i kēia mau pakuhi, hiki iā ʻoe ke ʻike i ka manawa e loaʻa ana i ka luna hoʻokele ma kahi o 200 MB i kekona, he lā maʻamau kēia. Hāʻawi mākou i ka 4,500 MB i kēlā me kēia kekona, ʻo kā mākou ratio ma kahi o 1/22. Ua akaka mua e hoʻolako piha i nā kaʻa i waho i nā kikowaena limahana 22, pono mākou i hoʻokahi wale nō e ʻae i kēia pili. ʻO kēia kahi e hele mai ai ka algorithm routing pololei i kā mākou kōkua.
He aha kona ʻano? ʻO kā mākou luna kiʻi, e like me kāna papaʻaina, e hoʻouna i nā pilina i nā mea ala kiʻi. Akā, hoʻouna nā mea ala kiʻi kiʻi hoʻihoʻi pololei i ka Pūnaewele, e hoʻouna iā ia i ka mea kūʻai aku, ʻaʻole ia e hoʻi ma o ka luna kiʻi kiʻi, no laila, me ka liʻiliʻi o nā mīkini, hōʻoia mākou i ka hoʻomanawanui hewa a me ka pumping o nā kaʻa a pau. I loko o nā configs e like me kēia: hōʻike mākou i ka algorithm, i kā mākou hihia he rr maʻalahi, hāʻawi i ke ala ala ala pololei a laila hoʻomaka e papa inoa i nā kikowaena maoli a pau, ehia o lākou. ʻO ka mea e hoʻoholo ai i kēia kaʻa. Inā loaʻa iā mākou hoʻokahi a ʻelua paha mau kikowaena ma laila, a i ʻole kekahi mau kikowaena, e kū mai ana kahi pono - hoʻohui mākou i kēia ʻāpana i ka config a mai hopohopo nui. Mai ka ʻaoʻao o nā kikowaena maoli, mai ka ʻaoʻao o ka mea ala kiʻi kiʻi, pono kēia ʻano i ka hoʻonohonoho liʻiliʻi loa, ua wehewehe maikaʻi ʻia i ka palapala, a ʻaʻohe pitfalls ma laila.
ʻO ka mea maikaʻi loa, ʻaʻole ia e hōʻike i kahi hoʻolālā hou o ka pūnaewele kūloko; he mea nui kēia no mākou; pono mākou e hoʻoponopono i kēia me nā kumu liʻiliʻi. Inā ʻoe e nānā , a laila e ʻike kākou i kona ʻano. Eia mākou i kekahi kikowaena virtual, ma ke awa 443, hoʻolohe, ʻae i ka pilina, helu ʻia nā kikowaena hana a pau, a ʻike ʻoe i ka pili, hāʻawi a lawe paha, like. Inā mākou e nānā i nā helu helu ma ka server virtual like, loaʻa iā mākou nā ʻeke komo, nā pilina komo, akā ʻaʻohe mea i waho. Hele pololei nā pilina puka i ka mea kūʻai aku. ʻAe, ua hiki iā mākou ke hoʻokaʻawale. I kēia manawa, he aha ka hopena inā hāʻule kekahi o kā mākou mea ala kiʻi? Ma hope o nā mea a pau, he hao ka hao. Hiki iā ia ke komo i loko o ka hopohopo kernel, hiki ke haki, a pau ka mana. Kekahi mea. ʻO ia ke kumu e pono ai ka nānā olakino. Hiki iā lākou ke maʻalahi e like me ka nānā ʻana i ke ʻano o ka wehe ʻana o ke awa, a i ʻole kekahi mea paʻakikī, a hiki i kekahi mau palapala i kākau ʻia e ka home e nānā i ka loiloi ʻoihana.
Ua kū mākou ma kahi o ka waena: loaʻa iā mākou kahi noi https i kahi kikoʻī, kapa ʻia ka palapala, inā pane ʻo ia me ka pane 200th, manaʻo mākou ua maikaʻi nā mea āpau me kēia kikowaena, ua ola a hiki ke hoʻohuli ʻia. maalahi.
Pehea e nānā hou ai kēia i ka hana? E hoʻopau i ke kikowaena no ka mālama ʻana - e hoʻolohi i ka BIOS, no ka laʻana. I loko o nā lāʻau, loaʻa koke iā mākou kahi manawa manawa, ʻike mākou i ka laina mua, a laila ma hope o ʻekolu mau hoʻāʻo ʻana ua hōʻailona ʻia ʻo ia "ʻaʻole i hāʻule", a wehe wale ʻia mai ka papa inoa.
Hiki ke koho ʻelua ʻano hana, ke hoʻonohonoho wale ʻia ʻo VS i ka zero, akā inā hoʻihoʻi ʻia ke kiʻi, ʻaʻole maikaʻi kēia. Piʻi mai ke kikowaena, hoʻomaka ʻo Nginx ma laila, ʻike koke ka nānā olakino e hana ana ka pilina, maikaʻi nā mea a pau, a ʻike ʻia ke kikowaena i kā mākou papa inoa, a hoʻomaka koke ke kau ʻana iā ia. ʻAʻole koi ʻia nā hana lima mai ka luna hana. Hoʻomaka hou ke kikowaena i ka pō - ʻaʻole kāhea ke keʻena kiaʻi iā mākou e pili ana i kēia i ka pō. Hōʻike lākou iā ʻoe ua hiki mai kēia, maikaʻi nā mea a pau.
No laila, ma kahi ala maʻalahi, me ke kōkua o kahi helu liʻiliʻi o nā kikowaena, ua hoʻoponopono mākou i ka pilikia o ka hoʻomanawanui hewa waho.
ʻO nā mea a pau e ʻōlelo ʻia, ʻo kēia mau mea āpau, ʻoiaʻiʻo, pono e nānā ʻia. Ma kahi kaʻawale, pono e hoʻomaopopo ʻia ʻo Keepalivede, e like me ka polokalamu i kākau ʻia i ka wā i hala aku nei, he mau ala e nānā ai, e hoʻohana ana i nā loiloi ma o DBus, SMTP, SNMP, a me Zabbix maʻamau. Eia kekahi, ua ʻike ʻo ia i ke kākau ʻana i nā leka no nā mea āpau, a me ka ʻoiaʻiʻo, i kekahi manawa ua manaʻo mākou e hoʻohuli iā ia, no ka mea, kākau ʻo ia i nā leka he nui no kēlā me kēia hoʻololi kaʻa, hoʻololi, no kēlā me kēia pili IP, a laila . ʻOiaʻiʻo, inā he nui nā kikowaena, a laila hiki iā ʻoe ke hoʻopiha iā ʻoe iho me kēia mau leka. Nānā mākou i ka nginx ma nā mea hoʻokele kiʻi me ka hoʻohana ʻana i nā ʻano maʻamau, a ʻaʻole i pau ka nānā ʻana i nā lako. E aʻo mākou, ʻoiaʻiʻo, ʻelua mau mea: ʻo ka mea mua, nā loiloi olakino waho a me ka loaʻa ʻana, no ka mea inā hana nā mea āpau, ʻoiaʻiʻo, ʻaʻole loaʻa nā mea hoʻohana i nā kiʻi ma muli o nā pilikia me nā mea hoʻolako waho a i ʻole kekahi mea paʻakikī. Pono mau ka mālama ʻana ma kahi o kahi pūnaewele ʻē aʻe, ma Amazon a i ʻole ma kahi ʻē aʻe, kahi mīkini ʻokoʻa e hiki ke ping i kāu mau kikowaena mai waho, a he mea kūpono hoʻi ka hoʻohana ʻana i ka ʻike anomaly, no ka poʻe i ʻike i ka hana ʻana i ka mīkini paʻakikī, a i ʻole. ka nānā maʻalahi, ma ka liʻiliʻi loa i mea e nānā ai inā ua hāʻule nui nā noi, a i ʻole, ua hoʻonui ʻia. Hiki ke hoohana.
E hōʻuluʻulu mākou: ʻoiaʻiʻo, ua hoʻololi mākou i ka hopena i hoʻopaʻa ʻia i ka hao, i kahi manawa i pau ai ke kūpono iā mākou, me kahi ʻōnaehana maʻalahi e hana like i nā mea a pau, ʻo ia hoʻi, hāʻawi ia i ka hoʻopau ʻana i ka hele ʻana o HTTPS a me ke ala ʻoi aku ka naʻauao me ka nā nānā olakino pono. Ua hoʻonui mākou i ka paʻa o kēia ʻōnaehana, ʻo ia hoʻi, loaʻa iā mākou ka loaʻa kiʻekiʻe no kēlā me kēia papa, a loaʻa iā mākou ka bonus he mea maʻalahi loa ia e hoʻonui i nā mea āpau ma kēlā me kēia papa, no ka mea, ʻo ia ka mīkini maʻamau me nā polokalamu maʻamau, ʻo ia hoʻi. , ua maʻalahi mākou i ka ʻike ʻana i nā pilikia.
He aha kā mākou i hoʻopau ai? Ua pilikia mākou i nā lā hoʻomaha o Ianuali o 2018. I loko o nā mahina ʻeono mua a mākou i hoʻokomo ai i kēia hoʻolālā, ua hoʻonui mākou iā ia i nā kaʻa a pau i mea e wehe ai i nā kaʻa a pau mai LTM, ua ulu wale mākou i ke kaʻa i hoʻokahi kikowaena data mai 40 gigabits a 60 gigabits, a i ka manawa like no ua hiki i ka makahiki 2018 holoʻokoʻa ke hoʻouna aku i ʻekolu mau manawa hou aku i nā kiʻi i kēlā me kēia kekona.
Source: www.habr.com