Iwebhu yanamhlanje iphantse ibe yinto engathandekiyo ngaphandle komxholo wemidiya: phantse wonke umakhulu une-smartphone, wonke umntu ukwinethiwekhi zentlalo, kwaye ixesha lokuphumla lenkonzo lixabisa kakhulu kwiinkampani. Ukunika ingqalelo yakho, ushicilelo lwebali lenkampani malunga nendlela aququzelele ngayo ukuhanjiswa kweefoto usebenzisa isisombululo se-hardware, zeziphi iingxaki zokusebenza adibana nazo kwinkqubo, yintoni eyabangela, kunye nendlela ezi ngxaki zisonjululwe ngayo ngokusebenzisa isisombululo sesoftware esekelwe kwi-Nginx, ngelixa eqinisekisa ukunyamezela impazamo kuwo onke amanqanaba.). Siyabulela ababhali bebali uOleg U-Efimova no-Alexandra Dymova, ababelana ngamava abo kwinkomfa .
Masiqale ngentshayelelo encinci malunga nendlela esigcina kunye ne-cache iifoto. Sinomaleko apho sizigcina khona, kunye noluhlu apho sigcina khona iifoto. Ngexesha elifanayo, ukuba sifuna ukufezekisa iqhinga elikhulu kunye nokunciphisa umthwalo kwisitoreji, kubalulekile kuthi ukuba ifoto nganye yomsebenzisi ngamnye ilele kumncedisi omnye we-caching. Kungenjalo, bekuya kufuneka sifake amaxesha amaninzi kangangoko iidiski njengoko sinamaseva amaninzi. Izinga lethu lokubetha lijikeleze i-99%, oko kukuthi, sinciphisa umthwalo kwisitoreji sethu ngamaxesha angama-100, kwaye ukwenzela ukuba senze oku, kwiminyaka eyi-10 edlulileyo, xa konke oku kwakhiwa, sasinamaseva angama-50. Ngokufanelekileyo, ukuze sikwazi ukunika ezi foto, besidinga, enyanisweni, imimandla yangaphandle engama-50 esetyenziswa ngaba seva.
Ngokwendalo, kwavela umbuzo ngokukhawuleza: ukuba enye yeeseva zethu iyehla kwaye ayifumaneki, yeyiphi inxalenye yetrafikhi esiphulukana nayo? Sajonga into eyayisemarikeni saza sagqiba kwelokuba sithenge intsimbi ukuze icombulule zonke iingxaki zethu. Ukhetho lwawela kwisisombululo senkampani ye-F5-network (leyo, ngendlela, yathenga i-NGINX, Inc kungekudala): UMphathi we-BIG-IP weNgingqi weTrafikhi.
Yintoni eyenziwa leli qhekeza lentsimbi (i-LTM): yi-router yentsimbi eyenza i-iron redundancy yamazibuko ayo angaphandle kwaye ikuvumela ukuba uhambe ngeendlela zokuhamba ngokusekwe kwi-topology yenethiwekhi, kwezinye izicwangciso, kwaye ihlola impilo. Kwakubalulekile kuthi ukuba le nxalenye yentsimbi inokucwangciswa. Ngokufanelekileyo, sinokuchaza ingqiqo yendlela iifoto zomsebenzisi othile ezibuyiswe ngayo kwi-cache ethile. Ingaba ijongeka kanjani? Kukho isiqwenga se-hardware esijonga i-Intanethi yesizinda esinye, i-ip enye, yenza i-ssl ikhuphe, yahlula izicelo ze-http, ikhetha inombolo ye-cache kwi-IRule, apho iya khona, kwaye ivumela i-traffic ukuya apho. Kwangaxeshanye, ijonga impilo, kwaye kwimeko yokungafumaneki komatshini, senze ukuba itrafikhi iye kwiseva enye yogcino ngelo xesha. Ngokombono woqwalaselo, kukho, ngokuqinisekileyo, amanye ama-nuances, kodwa ngokubanzi yonke into ilula: simisela imephu, inani elithile lihambelana ne-IP yethu kwinethiwekhi, sithi siya kuphulaphula kumachweba 80. kwaye 443, sithi ukuba umncedisi akafumaneki, ngoko ke kufuneka uyeke itrafikhi iye kwi-backup, kulo mzekelo, i-35, kwaye sichaza iqela lengqiqo ukuba olu lwakhiwo lufanele luqhawulwe njani. Ingxaki kuphela yayikukuba ulwimi ekucwangciswe ngalo isiqwenga sentsimbi lulwimi lweTcl. Ukuba nabani na ukhumbula oku konke ... olu lwimi lubhala-kuphela kunolwimi olulungele inkqubo:
Sifumene ntoni? Sinenxalenye yehardware eqinisekisa ukufumaneka okuphezulu kweziseko zophuhliso zethu, iindlela zonke zetrafikhi yethu, ibonelela ngokuhlolwa kwempilo kunye nokusebenza nje. Ngaphezu koko, ibisebenza ixesha elide: kule minyaka ili-10 idlulileyo, akukho zikhalazo malunga nayo. Ekuqaleni kuka-2018, sasisele sinikezela malunga neefoto ze-80k ngomzuzwana. Le ndawo ijikeleze i-80 gigabits yetrafikhi ukusuka kumaziko ethu omabini edatha.
Nangona kunjaloβ¦
Ekuqaleni kwe-2018, sabona umfanekiso ombi kwiitshathi: ixesha lokubuyisela iifoto liye landa ngokucacileyo. Kwaye yayeka ukusifanela. Ingxaki kukuba le ndlela yokuziphatha yayibonakala kuphela kwincopho yezithuthi - kwinkampani yethu obu bubusuku beCawa ukuya ngoMvulo. Kodwa lonke ixesha inkqubo iziphathe njengesiqhelo, akukho zimpawu zokwaphuka.
Noko ke, le ngxaki kwafuneka isonjululwe. Sachonga imiqobo enokubakho saza saqalisa ukuyiphelisa. Okokuqala, ngokuqinisekileyo, sandisa i-uplinks yangaphandle, senza uhlaziyo olupheleleyo lwe-uplinks yangaphakathi, kwaye sifumene zonke iibhotile ezinokuthi zibe khona. Kodwa konke oku akuzange kunikeze umphumo ocacileyo, ingxaki ayizange iphele.
Enye ibhotile enokwenzeka yayiyintsebenzo yee-cache zeefoto ngokwazo. Kwaye sagqiba ekubeni mhlawumbi ingxaki iphezu kwabo. Ewe, siye sandisa ukusebenza-ngokusisiseko, izibuko zenethiwekhi kwii-cache zefoto. Kodwa kwakhona, akuzange kubonwe uphuculo olucacileyo. Ekugqibeleni, sinikele ingqalelo ngokukhawuleza ekusebenzeni kwe-LTM ngokwayo, kwaye apha sabona umfanekiso obuhlungu kwiigrafu: ukulayishwa kwazo zonke ii-CPU kuqala ukuhamba kakuhle, kodwa emva koko kuphumle ngokukhawuleza kwi-shelf. Ngelo xesha, i-LTM iyeka ukuphendula ngokufanelekileyo kwi-health-checks kunye ne-uplinks kwaye iqala ukuyicima ngokungaqhelekanga, okukhokelela ekuthotyweni okukhulu kokusebenza.
Oko kukuthi, sichonge intsusa yengxaki, sachonga umqobo. Kushiyeke ukuba sigqibe ngento esiza kuyenza.
Into yokuqala ecacileyo esinokuyenza kukuba ngandlelβ ithile siphucule i-LTM ngokwayo. Kodwa kukho ama-nuances apha, kuba le ntsimbi yahlukile, awuzukuya kwivenkile ekufutshane kwaye uyithenge. Yikhontrakthi eyahlukileyo, ikhontrakthi yelayisensi eyahlukileyo, kwaye iya kuthatha ixesha elininzi. Inketho yesibini kukuqalisa ukuzicingela, uze nesisombululo sakho kumacandelo akho, ngokukhethekayo usebenzisa inkqubo yomthombo ovulekileyo. Kuhlala kuphela ukugqiba ukuba yintoni kanye esiza kuyikhetha kule nto kwaye lingakanani ixesha esiya kulichitha ekusombululeni le ngxaki, kuba abasebenzisi abazange bafumane iifoto. Ngoko ke, kuyimfuneko ukwenza konke oku ngokukhawuleza, ngokukhawuleza, umntu unokuthi - izolo.
Ekubeni umsebenzi wawuvakala ngathi "yenza into ngokukhawuleza kwaye usebenzise i-hardware esinayo", into yokuqala esiyicingayo yayikukususa abanye awona matshini anamandla ngaphambili, beka iNginx apho, esazi ngayo ukuba njani. ukusebenza, kwaye uzame ukuphumeza yonke ingqiqo efanayo naleyo ibisenziwa liqhekeza lentsimbi. Oko kukuthi, ngokwenene, sishiye isiqwenga sethu se-hardware, sifake i-4 iiseva ezingaphezulu ekufuneka sizilungise, senze imimandla yangaphandle kubo ngokufanisa kunye nendlela eyayiyi-10 kwiminyaka edlulileyo ... Silahlekelwe kancinci ekufumanekeni ukuba aba matshini bawa. , kodwa, nangona kunjalo, isonjululwe ingxaki yabasebenzisi bethu ekuhlaleni.
Ngokuhambelanayo, ingqiqo ihlala ifana: sifaka i-Nginx, inokwenza i-SSL-offload, sinokuyicwangcisa ngandlela-thile ingqiqo yendlela, ukujonga impilo kwi-configs kunye nokuphindaphinda ingqiqo esasinayo ngaphambili.
Sihlala phantsi ukubhala configs. Ekuqaleni kwakubonakala ngathi yonke into ilula kakhulu, kodwa, ngelishwa, kunzima kakhulu ukufumana iincwadana zomsebenzi ngamnye. Ngoko ke, asikucebisi ukuba uvele u-google "indlela yokuqwalasela i-Nginx kwiifoto": kungcono ukubhekisela kuxwebhu olusemthethweni, oluya kubonisa ukuba zeziphi izicwangciso ezifanele zichukunyiswe. Kodwa kungcono ukhethe iparameter ethile ngokwakho. Ewe, ngoko yonke into ilula: sichaza iiseva esinazo, sichaza izatifikethi ... Kodwa eyona nto inomdla kukuba, ngokwenene, ingqiqo yomzila ngokwayo.
Ekuqaleni, kwakubonakala ngathi sichaza nje indawo yethu, fanisa inombolo yethu ye-cache yesithombe kuyo, sichaza ngezandla zethu okanye ijenereyitha ukuba zingaphi iindawo eziphakamileyo esizifunayo, kumntla ngamnye sibonisa iseva apho i-traffic kufuneka iye khona, kwaye umncedisi ogcinayo - ukuba umncedisi oyintloko akafumaneki:
Kodwa, mhlawumbi, ukuba yonke into ibilula ngolo hlobo, besiya kugoduka singaxeleli nto. Ngelishwa, ngoseto olungagqibekanga lwe-Nginx, oluthe, ngokubanzi, lwenziwa kwiminyaka emininzi yophuhliso kwaye ayilunganga kulo mzekelo ... uqwalaselo lujongeka ngolu hlobo: kwimeko apho umncedisi ongentla unemposiso yesicelo okanye ixesha lokuphuma, iNginx ihlala ihleli. utshintsha itrafikhi ukuya kwelandelayo. Kwangaxeshanye, emva kokungaphumeleli kokuqala, iseva iya kuvalwa phakathi kwemizuzwana eyi-10, zombini ngempazamo nangexesha lokuphuma - oku akunako nokuba kuqwalaselwe nangayiphi na indlela. Oko kukuthi, ukuba sisusa okanye siseta kwakhona inketho yexesha lokuphuma kwisikhokelo esinyukayo, ngoko, nangona i-Nginx ayiyi kuqhubekisa esi sicelo kwaye iphendule ngempazamo engeyiyo-ntle, umncedisi uya kucima.
Ukunqanda oku, senze izinto ezimbini:
a) banqanda i-Nginx ekwenzeni oku ngesandla-kwaye ngelishwa, ekuphela kwendlela yokwenza oku kukuseta ngokulula ukoyisakala kwezicwangciso.
b) sikhumbule ukuba kwezinye iiprojekthi sisebenzisa imodyuli ekuvumela ukuba wenze uhlolo lwempilo yangasemva - ngokufanelekileyo, siye senza uhlolo lwempilo rhoqo ukuze sibe nexesha elincinane lokuphumla kwimeko yengozi.
Ngelishwa, oku akusiyo yonke into, kuba ngokoqobo iiveki ezimbini zokuqala zesi sikimu zibonise ukuba i-TCP ihlola impilo yinto engathembekanga: kungekhona i-Nginx, okanye i-Nginx kwi-D-state inokuqaliswa kwi-server engaphezulu, kwaye kule meko i-kernel iya kwamkela uxhulumaniso, ukuhlolwa kwezempilo kuya kudlula, kodwa akuyi kusebenza. Ngoko ke, sayitshintsha ngokukhawuleza nge-http yezempilo-itsheki, yenza enye, leyo, ukuba sele inika i-200, ngoko yonke into isebenza kule script. Unokwenza ingqiqo eyongezelelweyo-umzekelo, kwimeko yeeseva ze-caching, khangela ukuba isixokelelwano sefayile sixhonywe ngokuchanekileyo:
Kwaye oko kuya kusifanela, ngaphandle kokuba okwangoku isiphaluka siphindaphinda ngokupheleleyo into eyenziwa yintsimbi. Kodwa sasifuna ukwenza ngcono. Ngaphambili, besinomncedisi omnye ogcinayo, kwaye oku akulunganga kakhulu, kuba ukuba unekhulu leeseva, emva koko xa ezininzi ziwa ngaxeshanye, umncedisi omnye akanakukwazi ukumelana nomthwalo. Ke ngoko, sigqibe kwelokuba sisasaze ugcino phakathi kwazo zonke iiseva: senze enye indawo eyohlukeneyo, sarekhoda zonke iiseva apho kunye neeparamitha ezithile ngokuhambelana nomthwalo abanokuwusebenza, songeze ujongo lwezempilo ebesinalo ngaphambili :
Kuba awukwazi ukuya komnye umsinga onyukayo ngaphakathi komsinga omnye onyukayo, bekuyimfuneko ukuba uqiniseke ukuba ukuba umsinga ophambili, apho sibhale khona i-cache yefoto echanekileyo, eyimfuneko, ayifumaneki, siye sabuyela umva ngempazamo_iphepha, ukusuka apho. siye kwindawo yokugcina umsinga:
Kwaye ngokoqobo ukongeza abancedisi abane, sifumene oku: sitshintshe inxalenye yomthwalo - sisuswe kwi-LTM ukuya kwezi seva, siphumeze ingqiqo efanayo apho usebenzisa i-hardware eqhelekileyo kunye nesofthiwe, ngokukhawuleza ifumene ibhonasi yokuba aba bancedisi banokulinganiswa, kuba banoku faka nje kangangoko ufuna. Ewe, eyona nto imbi kukuba siphulukene nokufumaneka okuphezulu kubasebenzisi bangaphandle. Kodwa ngelo xesha kwafuneka ndincame oku, kuba kwakuyimfuneko ukusombulula ingxaki ngokukhawuleza. Ngoko, sasusa inxalenye yomthwalo, yayimalunga ne-40% ngelo xesha, i-LTM yaba ngcono, kwaye ngokoqobo iiveki ezimbini emva kokuba ingxaki iqalile, saqala ukunika kungekhona izicelo ze-45k ngesekhondi, kodwa i-55k. Enyanisweni, sikhule nge-20% - oku ngokucacileyo i-traffic esingazange siyinike umsebenzisi. Kwaye emva koko, baqala ukucinga malunga nendlela yokusombulula ingxaki eseleyo - ukuqinisekisa ukufumaneka okuphezulu kwangaphandle.
Sakhe sanqumama ngelo xesha sasixoxa ngesisombululo esiya kusisebenzisa kule nto. Kwakukho izindululo zokuqinisekisa ukuthembeka kusetyenziswa i-DNS, ngoncedo lwezinye izikripthi ezizibhalayo, iiprothokholi zomzila oguquguqukayo ... kwakukho iinketho ezininzi, kodwa sele kucacile ukuba ukubuyiswa okuthembekileyo kweefoto, kufuneka uqalise enye ingqimba. iyakubeka iliso oku. Aba matshini sibabiza ngokuba ngabalawuli beefoto. Isoftware ebesithembele kuyo ibiyiKeelifelived:
Ukuqala, yintoni i-Keepitalived equlathe yona. Eyokuqala yi-protocol ye-VRRP, eyaziwa ngokubanzi kwi-networkers, ebekwe kwisixhobo sothungelwano esinika ukunyamezela impazamo kwidilesi ye-IP yangaphandle apho abathengi baxhuma khona. Inxalenye yesibini yi-IPVS, iseva ye-IP ye-virtual, ukulinganisela phakathi kwee-routers zeefoto kunye nokubonelela ukunyamezela impazamo kule nqanaba. Kwaye okwesithathu kukujonga impilo.
Masiqale ngenxalenye yokuqala: I-VRRP - ingaba ibonakala njani? Kukho i-IP ethile enenyani, enongeniso kwi-dns badoocdn.com, apho abathengi baqhagamshela khona. Ngexesha elithile, sinedilesi ye-IP kwiseva enye. Iipakethi ezigciniweyo zihamba phakathi kweeseva zisebenzisa i-protocol ye-VRRP, kwaye ukuba inkosi iyanyamalala kwi-radar - umncedisi uqalise ngokutsha okanye enye into, ngoko umncedisi wokulondoloza uphakamisa ngokuzenzekelayo le dilesi ye-IP - akukho zenzo zezandla ezifunekayo. Inkosi kunye ne-backups ziyahluka, eyona nto iphambili: okukhona iphezulu, kokukhona kunokwenzeka ukuba umatshini uya kuba yinkosi. Inzuzo enkulu kakhulu kukuba awudingi ukuqwalasela iidilesi ze-IP kumncedisi ngokwawo, kwanele ukuzichaza kuqwalaselo, kwaye ukuba iidilesi ze-IP zidinga imigaqo ethile yesiko, oku kuchazwa ngokuthe ngqo kwi-config, kunye i-syntax efanayo njengoko ichazwe kwiphakheji ye-VRRP. Awuyi kudibana nazo naziphi na izinto ezingaqhelekanga.
Ikhangeleka njani xa isenziwa? Kwenzeka ntoni ukuba enye yeeseva iyahla? Nje ukuba inkosi inyamalale, i-backup yethu iyayeka ukufumana unyuso kwaye ngokuzenzekelayo iba yinkosi. Emva kwexesha elithile, salungisa i-master, i-rebooted, iphakamisa i-Keepitalived - izibhengezo ezinokubaluleka okuphezulu kunokuba i-backup ifike, kwaye i-backup ijika ngokuzenzekelayo, isuse iidilesi ze-IP ngokwayo, akukho zenzo zezandla ezifunekayo.
Ngaloo ndlela, siye saqinisekisa ukunyamezela impazamo kwidilesi ye-IP yangaphandle. Inxalenye elandelayo kukulinganisa ngandlela thile i-traffic ukusuka kwidilesi ye-IP yangaphandle ukuya kwiirutha zeefoto esele ziyiphelisile. Ngeeprotocol zokulinganisa, yonke into icacile ngokwaneleyo. Oku mhlawumbi yi-robin elula, okanye izinto ezintsonkothileyo ngakumbi, i-wrr, uluhlu loqhagamshelwano njalo njalo. Oku kuchazwe ngokusisiseko kumaxwebhu, akukho nto ikhethekileyo ngayo. Kodwa indlela yokuhambisa ... Apha siza kuhlala ngokubanzi - kutheni sikhethe enye yazo. Ezi zi-NAT, i-Direct Routing kunye ne-TUN. Inyani kukuba sibeke ngokukhawuleza ukubuyiswa kwe-gigabits ye-100 yezithuthi ezivela kwiindawo. Oku ukuba uyayiqonda, ufuna amakhadi egigabit ali-10, akunjalo? Amakhadi e-gigabit ayi-10 kwiseva enye - oku sele kudlule, ubuncinci, ingcamango yethu "yezixhobo eziqhelekileyo". Kwaye ke sakhumbula ukuba asinikeli nje itrafikhi, sinika iifoto.
Yintoni uphawu? -Umahluko omkhulu phakathi kwetrafikhi engenayo nephumayo. I-traffic engenayo incinci kakhulu, itrafiki ephumayo inkulu kakhulu:
Ukuba ujonga ezi grafu, unokubona ukuba okwangoku malunga ne-200 Mb ngesekhondi ithunyelwa kumlawuli, lo lolona suku luqhelekileyo. Sibuyisela i-4,500 MB ngesekhondi, umlinganiselo umalunga ne-1/22. Sele kucacile ukuba ukuze sinikezele ngokupheleleyo i-traffic ephumayo kwiiseva ezisebenzayo ze-22, enye yanele eyamkela olu xhulumaniso. Apha i-algorithm yendlela ethe ngqo, i-algorithm yokuqhuba, iza kusinceda.
Ingaba ijongeka kanjani? Umlawuli wethu weefoto, ngokwetafile yakhe, udlulisela unxibelelwano kwii-routers zeefoto. Kodwa ii-routers zeefoto zithumela i-traffic reverse ngqo kwi-Intanethi, iyithumele kumxhasi, ayibuyeli emva kumlawuli weefoto, ngoko ke, ngenani elincinci loomatshini, sibonelela ngokunyamezela okupheleleyo kunye nokumpompa zonke iitrafikhi. Kwi-configs, kubonakala ngathi: sicacisa i-algorithm, kwimeko yethu i-rr elula, sinika indlela yokuqondisa ngokuthe ngqo, kwaye emva koko siqala ukudwelisa zonke iiseva zangempela, zingaphi kubo esinazo. Yintoni eya kugqiba le traffic. Kwimeko apho sinesinye okanye ezimbini, iiseva ezininzi zivela apho, imfuno enjalo ivela - songeza nje eli candelo kuqwalaselo kwaye ungakhathazeki kakhulu. Ukusuka kwicala leeseva zangempela, ukusuka kwicala le-photo-router, le ndlela idinga ukucwangciswa okuncinci kakhulu, ichazwe ngokugqibeleleyo kumaxwebhu, kwaye akukho migibe apho.
Eyona nto imnandi kakhulu kukuba isisombululo esinjalo asithethi ukuguqulwa okukhulu kwenethiwekhi yendawo, oku kwakubalulekile kuthi, kwafuneka siyisombulule ngexabiso elincinci. Ukuba ujonga emva koko siza kubona ukuba ikhangeleka njani. Apha sinomncedisi othile wenyani, kwizibuko 443, uphulaphule, wamkela umdibaniso, zonke iiseva ezisebenzayo zidweliswe, kwaye kunokubonwa ukuba uxhulumaniso lu, dibanisa okanye thabatha, luyafana. Ukuba sijonga izibalo kumncedisi ofanayo, sineepakethi ezingenayo, uqhagamshelo olungenayo, kodwa alukho oluphumayo ngokupheleleyo. Uqhagamshelo oluphumayo luya ngqo kumxhasi. Ewe, sikwazile ukungalungelelani. Ngoku, kwenzeka ntoni ukuba enye yeendlela zethu zeefoto ayiphumelelanga? Ngapha koko, intsimbi yintsimbi. Inokungena kwi-kernel panic, inokuphuka, unikezelo lwamandla lunokutshisa. Nantoni na. Yile nto yokuhlolwa kwezempilo. Zinokuba lula njengokujonga ukuba izibuko livuleleke njani nathi, okanye ezinye ezintsonkothileyo, ukuya kuthi ga kwezinye izikripthi ezizibhalayo eziya kuthi zijonge ingqiqo yeshishini.
Simise kwindawo ethile embindini: sinesicelo se-https sendawo ethile, iskripthi sibizwa ukuba siphendula ngempendulo ye-200, sikholelwa ukuba yonke into ilungile ngalo mncedisi, ukuba uyaphila kwaye unokuvulwa ngokulula. .
Ingaba oku, kwakhona, kujongeka njani ekusebenzeni. Cima umncedisi, ovumelekileyo ukugcinwa - ukukhanyisa i-BIOS, umzekelo. Kwiilogi, ngokukhawuleza sinexesha lokuvala, sibona umgca wokuqala, emva koko emva kwemizamo emithathu iphawulwe ngokuthi "ihlulekile", kwaye ikhutshwe ngokulula kuluhlu.
Ukuziphatha okwesibini kuyenzeka, xa ngokulula i-VS isetelwe ku-zero, kodwa kwimeko yokubuyisela ifoto, oku akusebenzi kakuhle. Umncedisi uphakama, i-Nginx iqala apho, ngokukhawuleza i-health-checks iyaqonda ukuba uxhulumaniso luhamba, ukuba yonke into ilungile, kwaye umncedisi ubonakala kuluhlu lwethu, kwaye umthwalo ngokukhawuleza uqala ukusetyenziswa kuwo ngokuzenzekelayo. Akukho manyathelo okwenziwa ngesandla afunwayo kumlawuli womsebenzi. Ebusuku, iseva iqale kabusha - isebe lokubeka iliso alisibizi malunga noku ebusuku. Bakwazisa ukuba kwenzeke ntoni, yonke into ilungile.
Ngoko, ngendlela elula, ngoncedo lwenani elincinci labancedisi, saxazulula ingxaki yokunyamezela impazamo yangaphandle.
Kuhlala kusithiwa konke oku, kunjalo, kufuneka kubekwe iliso. Ngokwahlukileyo, kufuneka kuqatshelwe ukuba i-Keepalivede, njengesoftware ebhalwe ixesha elide elidlulileyo, ineendlela ezininzi zokuyibeka esweni, zombini zisebenzisa iitshekhi ngeDBus, SMTP, SNMP, kunye neZabbix eqhelekileyo. Ngaphezu koko, yena ngokwakhe uyayazi indlela yokubhala iileta phantse kuyo yonke into ethimla, kwaye ukunyaniseka, ngaxa lithile sade sacinga ukuyicima, kuba ubhala iileta ezininzi kuyo nayiphi na inguqu yetrafikhi, ukufakwa, kuyo yonke i-IP-shnik kunye njalo . Ewe kunjalo, ukuba zininzi iiseva, ungazikhukulisa ngezi leta. Sisebenzisa iindlela eziqhelekileyo, sibeka iliso kwi-nginx kwii-routers zeefoto, kwaye ukujongwa kwee-hardware akuhambanga. Ngokuqinisekileyo, siya kucebisa izinto ezimbini ezingakumbi: okokuqala, ukuhlolwa kwempilo yangaphandle kunye nokufikeleleka, kuba nokuba yonke into isebenza, ngokwenene, kunokwenzeka ukuba abasebenzisi abafumani iifoto ngenxa yeengxaki kunye nababoneleli bangaphandle okanye into enzima ngakumbi. Kuhlala kufanelekile ukugcina kwindawo ethile kwenye inethiwekhi, e-amazon okanye kwenye indawo, umatshini owahlukileyo onokucofa iiseva zakho ngaphandle, kwaye kufanelekile ukusebenzisa nokuba kubhaqwe okungaqhelekanga, kwabo basebenza kakuhle ekufundeni koomatshini obukhohlisayo, okanye kulula. ukubeka iliso, ubuncinane ukuze kulandelelwe ukuba ngaba izicelo ziwile kabukhali na, okanye ngokuphendululekileyo, zikhulile. Ikwaluncedo.
Ukushwankathela: thina, eneneni, sithathe indawo yesisombululo sentsimbi, esathi ngaxa lithile sayeka ukusifanela, kunye nenkqubo elula eyenza yonke into efanayo, oko kukuthi, ibonelela ngokupheliswa kwetrafikhi yeHTTPS kunye nokuhamba ngobuchule kunye nempilo efunekayo. -ihlola. Siye sandisa uzinzo lwale nkqubo, oko kukuthi, sisenobukho obuphezulu bomgangatho ngamnye, kwaye sifumene ibhonasi ukuba kulula ukuyilinganisa yonke kumaleko ngamnye, kuba le yihardware eqhelekileyo enesoftware eqhelekileyo, oko kukuthi , ngokwenjenjalo, siye sazenza lula ukufumanisa iingxaki ezinokubakho.
Sigqibele ngantoni? Besinengxaki ngeholide zikaJanuwari ka2018. Kwiinyanga ezintandathu zokuqala, ngelixa sibeka esi sikimu ekusebenzeni, sandise kuyo yonke i-traffic traffic, ukuze sisuse zonke izithuthi kwi-LTM, sakhula kuphela kwi-traffic kwiziko ledatha ukusuka kwi-40 gigabits ukuya kwi-60 gigabits, kwaye ngokufanayo. ixesha lonke 2018 unyaka bakwazi ukunika phantse izihlandlo ezithathu iifoto ngaphezulu ngomzuzwana.
umthombo: www.habr.com