Indlela ulwakhiwo lwewebhu olubekezeleleka ngayo luphunyezwa kwiqonga leMail.ru Cloud Solutions

Molo, Habr! Ndingu-Artem Karamyshev, intloko yeqela lolawulo lwenkqubo I-Mail.Ru Cloud Solutions (MCS). Sinemveliso ezininzi ezisungulwe kulo nyaka uphelileyo. Besifuna ukuqinisekisa ukuba iinkonzo ze-API zilula, zinyamezela iimpazamo, kwaye zilungele ukukhula ngokukhawuleza kumthwalo wabasebenzisi. Iqonga lethu liphunyeziwe kwi-OpenStack, kwaye ndifuna ukukuxelela ukuba yeyiphi icandelo leengxaki zokunyamezela impazamo ekufuneka sizisombulule ukuze sifumane inkqubo yokunyamezela iimpazamo. Ndicinga ukuba oku kuya kuba nomdla kwabo baphuhlisa iimveliso kwi-OpenStack.

Ukunyamezelwa kweziphoso ngokubanzi kweqonga kubandakanya ukomelela kwamacandelo alo. Ke siya kuhamba ngokuthe ngcembe kuwo onke amanqanaba apho sichonge umngcipheko kwaye sawuvala.

Inguqulelo yevidiyo yeli bali, owona mthombo wawuyingxelo kwinkomfa ye-Uptime ye-4, eququzelelwe ngu ITSumma, ungabona kwijelo likaYouTube loLuntu lweUptime.

Ukomelela kolwakhiwo olubonakalayo

Inxalenye yoluntu yefu ye-MCS ngoku isekelwe kumaziko amabini edatha ye-Tier III, phakathi kwabo kukho i-fiber yayo emnyama, egcinwe kwinqanaba lomzimba ngeendlela ezahlukeneyo, kunye ne-200 Gbit / s. Inqanaba lesithathu libonelela ngenqanaba elifunekayo lokunyamezela impazamo kwiziseko ezingundoqo.

Ifiber emnyama igcinwe kuwo omabini amanqanaba omzimba kunye nengqiqo. Inkqubo yokugcinwa kwesiteshi yayiphindaphinda, kwavela iingxaki, kwaye sihlala siphucula unxibelelwano phakathi kwamaziko edatha.

Ngokomzekelo, kungekudala, ngelixa usebenza emthonjeni kufuphi nelinye lamaziko edatha, umgcini we-excavator waqhekeza umbhobho, kwaye ngaphakathi kulo mbhobho kwakukho zombini intambo kunye ne-backup optical cable. Ijelo lethu lonxibelelwano olunyamezelayo kunye neziko ledatha liye labonakala lisengozini ngexesha elinye, emthonjeni. Ngokunjalo, siphulukene nenxalenye yeziseko ezingundoqo. Siye safikelela kwizigqibo kwaye sathatha amanyathelo amaninzi, kuquka ukufaka ii-optics ezongezelelweyo kwiqula elisecaleni.

Kumaziko eenkcukacha kukho iingongoma zobukho bababoneleli bonxibelelwano esisasaza kubo izimaphambili zethu nge-BGP. Kwindlela yothungelwano nganye, eyona metric ikhethwayo, evumela ukuba abathengi abahlukeneyo babonelelwe ngowona mgangatho ubalaseleyo wonxibelelwano. Ukuba unxibelelwano ngomboneleli omnye luyehla, sakha ngokutsha indlela yethu ngababoneleli abakhoyo.

Ukuba umboneleli uyasilela, sitshintshela kolandelayo ngokuzenzekelayo. Xa kwenzeka ukungaphumeleli kwelinye lamaziko edatha, sinekopi yesibuko seenkonzo zethu kwiziko ledatha yesibini, ethatha umthwalo wonke.

Ukomelela kweziseko ezingundoqo

Yintoni esiyisebenzisayo kwi-application-level fault tolerance

Inkonzo yethu yakhelwe kwinani lamacandelo e-opensource.

ExaBGP yinkonzo eyenza inani lemisebenzi isebenzisa iprotocol yendlela eguquguqukayo ye BGP. Siyisebenzisa ngokukhutheleyo ukuthengisa iidilesi zethu ze-IP ezimhlophe apho abasebenzisi bafikelela kwi-API.

HAProxy i-balancer yomthwalo ophezulu ekuvumela ukuba uqwalasele imithetho yokulinganisa i-traffic eguquguqukayo kakhulu kumanqanaba ahlukeneyo omzekelo we-OSI. Siyisebenzisela ukulinganisela phambi kwazo zonke iinkonzo: i-database, i-broker imiyalezo, iinkonzo ze-API, iinkonzo zewebhu, iiprojekthi zethu zangaphakathi - yonke into isemva kwe-HAProxy.

Isicelo se-API - isicelo sewebhu esibhalwe kwi-python, apho umsebenzisi ulawula iziseko zakhe kunye nenkonzo yakhe.

Isicelo somsebenzi (emva koku ngumsebenzi nje) - kwiinkonzo ze-OpenStack, le yidaemon yeziseko ezingundoqo ekuvumela ukuba usasaze imiyalelo ye-API kwiziseko ezingundoqo. Ngokomzekelo, ukudalwa kwediski kwenzeka kumsebenzi, kwaye isicelo sokudala senzeke kwi-API yesicelo.

Uyilo oluqhelekileyo lwe-OpenStack yesicelo

Uninzi lweenkonzo eziphuhliselwe i-OpenStack zizama ukulandela iparadigm enye. Inkonzo idla ngokuba namacandelo ama-2: API kunye nabasebenzi (backend executors). Njengomthetho, i-API sisicelo se-WSGI kwi-python, eqaliswe mhlawumbi njengenkqubo ezimeleyo (i-daemon), okanye usebenzisa i-Nginx esele yenziwe okanye iseva yewebhu ye-Apache. I-API iqhuba isicelo somsebenzisi kwaye idlulisa imiyalelo engaphezulu kwisicelo somsebenzi ukuze siqhutywe. Ugqithiso lwenzeka usebenzisa umthengisi womyalezo, ngokuqhelekileyo iRabbitMQ, ezinye azixhaswanga kakuhle. Xa imiyalezo ifika kumthengisi, icutshungulwa ngabasebenzi kwaye, ukuba kuyimfuneko, ibuyisele impendulo.

Le paradigm ibandakanya iingongoma ezizodwa eziqhelekileyo zokungaphumeleli: RabbitMQ kunye nesiseko sedatha. Kodwa iRabbitMQ yodwa ngaphakathi kwenkonzo enye kwaye, ngokwethiyori, inokuba ngumntu ngamnye kwinkonzo nganye. Ngoko ke kwi-MCS siyahlula ezi nkonzo kangangoko sinako; Le ndlela ilungile kuba xa kwenzeka ingozi kwiindawo ezithile ezisengozini, kungekhona yonke inkonzo echithwayo, kodwa inxalenye yayo kuphela.

Inani lezicelo zabasebenzi alinamda, ngoko ke i-API inokukala ngokulula ngokuthe tye emva kwabalinganisi ukwenzela ukwandisa ukusebenza kunye nokunyamezela impazamo.

Ezinye iinkonzo zifuna ulungelelwaniso ngaphakathi kwenkonzo xa imisebenzi elandelelanisiweyo entsonkothileyo isenzeka phakathi kwee-APIs nabasebenzi. Kule meko, isikhungo esisodwa sokulungelelanisa sisetyenzisiweyo, inkqubo ye-cluster efana neRedis, iMemcache, njl, evumela ukuba omnye umsebenzi axelele omnye ukuba lo msebenzi unikezelwe kuye ("nceda ungayithathi"). Sisebenzisa etcd. Njengomthetho, abasebenzi banxibelelana ngenkuthalo kunye nedathabheyisi, babhale kwaye bafunde ulwazi oluvela apho. Sisebenzisa i-mariadb njengendawo yogcino-lwazi, ekwi-multimaster cluster.

Le nkonzo yakudala enye icwangciswe ngendlela eyamkelwe ngokubanzi kwi-OpenStack. Inokuthi ithathelwe ingqalelo njengenkqubo evaliweyo, apho iindlela zokulinganisa kunye nokunyamezela iimpazamo zicacile. Ngokomzekelo, kwi-API yokunyamezela impazamo, kwanele ukubeka i-balancer phambi kwabo. Ukwandisa abasebenzi kuphunyezwa ngokwandisa inani labo.

Inqaku elibuthathaka kwiskimu sonke nguRabbitMQ kunye noMariaDB. I-architecture yabo ifanelwe inqaku elahlukileyo Kweli nqaku ndifuna ukugxila kwi-API yokunyamezela impazamo.

Openstack Application Architecture. Ukulinganisa kunye nokunyamezela impazamo yeqonga lelifu

Ukwenza i-HAProxy balancer i-fault-tolerant usebenzisa i-ExaBGP

Ukwenza ii-APIs zethu zihlaziywe, zikhawuleza kwaye zibekezeleleke, sibeka ibhalansi yomthwalo phambi kwabo. Sakhetha i-HAProxy. Ngokombono wam, unazo zonke iimpawu eziyimfuneko kumsebenzi wethu: ukulinganisa kumanqanaba amaninzi e-OSI, ujongano lolawulo, ukuguquguquka kunye nokulinganisa, inani elikhulu leendlela zokulinganisa, inkxaso yeetafile zeseshoni.

Ingxaki yokuqala eyayifuna ukusonjululwa yayikukunyamezela impazamo yesilinganisi ngokwaso. Ukufakela nje i-balancer kwakhona kudala inqaku lokungaphumeleli: i-balancer ikhefu kunye nokuphahlazeka kwenkonzo. Ukuthintela oku kungenzeki, sisebenzise i-HAProxy ngokubambisana ne-ExaBGP.

I-ExaBGP ikuvumela ukuba uphumeze indlela yokujonga imeko yenkonzo. Sisebenzise le ndlela ukujonga ukusebenza kwe-HAProxy kwaye, xa kukho iingxaki, khubaza inkonzo ye-HAProxy esuka kwi-BGP.

ExaBGP+HAProxy iskimu

1. Sifaka isofthiwe efunekayo, i-ExaBGP kunye ne-HAProxy, kwiiseva ezintathu.
2. Senza i-loopback interface kwiseva nganye.
3. Kuzo zontathu iiseva sikwabela idilesi ye-IP efanayo emhlophe kolu jongano.
4. Idilesi ye-IP emhlophe ibhengezwa kwi-Intanethi nge-ExaBGP.

Ukunyamezela impazamo kuphunyezwa ngokubhengeza idilesi ye-IP efanayo kuzo zontathu iiseva. Ukusuka kwindawo yokujonga inethiwekhi, idilesi efanayo iyafikeleleka kwiihops ezintathu ezahlukeneyo ezilandelayo. I-router ibona iindlela ezintathu ezifanayo, ikhetha eyona nto iphambili kubo ngokusekelwe kwi-metric yayo (oku ngokuqhelekileyo kuyindlela efanayo), kwaye i-traffic iya kuphela kwelinye lamaseva.

Kwimeko yeengxaki kunye nokusebenza kwe-HAProxy okanye ukungaphumeleli komncedisi, i-ExaBGP iyayeka ukuvakalisa indlela, kwaye i-traffic itshintshela kwenye iseva.

Ngaloo ndlela, siphumelele ukunyamezela impazamo kwi-balancer.

Ukunyamezela impazamo ye-HAProxy balancers

Iskimu savela singafezekanga: safunda indlela yokugcina i-HAProxy, kodwa asizange sifunde indlela yokusabalalisa umthwalo ngaphakathi kweenkonzo. Ke ngoko, sandise olu cwangciso kancinci: siqhubele phambili ekulinganiseni phakathi kweedilesi ezininzi ze-IP ezimhlophe.

Ukulinganisa ngokusekelwe kwi-DNS kunye ne-BGP

Umba wokulinganisa umthwalo we-HAProxy yethu uhlala ungasonjululwa. Nangona kunjalo, inokusonjululwa ngokulula, njengoko senzile apha.

Ukulinganisa iiseva ezintathu uya kufuna iidilesi ezi-3 ezimhlophe ze-IP kunye ne-DNS endala. Nganye kwezi dilesi imiselwe kwi-loopback interface ye-HAProxy nganye kwaye ipapashwe kwi-Intanethi.

Kwi-OpenStack, ukulawula izixhobo, i-directory yenkonzo isetyenziswa, echaza i-API yesiphelo senkonzo ethile. Kulo luhlu sibhalisa igama lesizinda - public.infra.mail.ru, esonjululwe nge-DNS ngeedilesi ezintathu ze-IP ezahlukeneyo. Ngenxa yoko, sifumana ukuhanjiswa komthwalo phakathi kweedilesi ezintathu nge-DNS.

Kodwa ukusukela xa sibhengeza iidilesi ezimhlophe ze-IP asilawuli izinto eziphambili zokukhetha umncedisi, oku akusalungelelani okwangoku. Ngesiqhelo, umncedisi omnye kuphela ozakukhethwa ngokusekwe kwidilesi ye IP ephezulu, kwaye ezinye ezimbini ziya kuba ngasebenziyo kuba akukho metrics echaziweyo kwi BGP.

Saqala ukuthumela iindlela nge-ExaBGP ngeemetrics ezahlukeneyo. Ibhalansi nganye ibhengeza zontathu iidilesi ezimhlophe ze-IP, kodwa enye yazo, eyona iphambili yale balancer, ipapashwa ngeyona metric incinci. Ke ngelixa zontathu izibalancers zisebenza, iminxeba kwidilesi yokuqala ye-IP iya kwi-balancer yokuqala, ifowunela kweyesibini ukuya kweyesibini, kwaye ifowunela kweyesithathu ukuya kweyesithathu.

Kwenzeka ntoni xa omnye wabalinganisi esiwa? Ukuba nayiphi na ibhalansi iyasilela, idilesi yayo ephambili isapapashwa kwezinye ezimbini, kwaye i-traffic ihanjiswa kwakhona phakathi kwabo. Ke, sinika umsebenzisi iidilesi ezininzi ze-IP ngaxeshanye ngeDNS. Ngokulinganisa nge-DNS kunye neemetrics ezahlukeneyo, sifumana ukuhanjiswa okulinganayo komthwalo kuzo zontathu izikali. Kwaye kwangaxeshanye asiphulukani nokunyamezela iimpazamo.

Ukulinganisa i-HAProxy esekelwe kwi-DNS + BGP

Ukusebenzisana phakathi kwe-ExaBGP kunye ne-HAProxy

Ke, siphumeze ukunyamezela impazamo kwimeko apho umncedisi uyahamba, ngokusekwe ekumiseni ukubhengezwa kweendlela. Kodwa i-HAProxy inokuvala ngenxa yezinye izizathu ngaphandle kokungaphumeleli kweseva: iimpazamo zolawulo, ukungaphumeleli ngaphakathi kwenkonzo. Sifuna ukususa i-balancer eyaphukileyo phantsi komthwalo kule meko kwakhona, kwaye sifuna indlela eyahlukileyo.

Ke ngoko, ukwandisa iskimu sangaphambili, siphumeze ukubetha kwentliziyo phakathi kwe-ExaBGP kunye ne-HAProxy. Oku kukuphunyezwa kwesoftware yokusebenzisana phakathi kwe-ExaBGP kunye ne-HAProxy, xa i-ExaBGP isebenzisa izikripthi zesiko ukujonga imeko yezicelo.

Ukwenza oku, kufuneka uqwalasele umkhangeli wezempilo kwi-ExaBGP config, enokuthi ihlolisise isimo se-HAProxy. Kwimeko yethu, silungiselele i-backend yezempilo kwi-HAProxy, kwaye ukusuka kwicala le-ExaBGP sijonga ngesicelo esilula se-GET. Ukuba isibhengezo siyeka ukwenzeka, ngoko i-HAProxy inokwenzeka ukuba ayisebenzi kwaye akukho mfuneko yokuyibhengeza.

HAProxy Health Check

HAProxy Peers: ungqamaniso lweseshoni

Into elandelayo ekufuneka yenziwe kukulungelelanisa iiseshoni. Xa usebenza ngama-balancers asasazwayo, kunzima ukucwangcisa ukugcinwa kolwazi malunga neeseshoni zabaxhasi. Kodwa i-HAProxy ingomnye wabalinganisi abambalwa abanokwenza oku ngenxa yokusebenza koontanga - ukukwazi ukudlulisa iitafile zeseshoni phakathi kweenkqubo ezahlukeneyo ze-HAProxy.

Kukho iindlela ezahlukeneyo zokulinganisa: ezilula ezifana ne Irobhothi ejikelezayo, kwaye yandisiwe, xa iseshoni yomthengi ikhunjulwe, kwaye ixesha ngalinye liphela kwiseva efanayo njengangaphambili. Besifuna ukuphumeza ukhetho lwesibini.

I-HAProxy isebenzisa iitafile ezincamathelayo ukugcina iiseshoni zabaxumi bolu matshini. Bagcina idilesi ye-IP yoqobo yomxhasi, idilesi ekujoliswe kuyo ekhethiweyo (i-backend) kunye nolunye ulwazi lwenkonzo. Ngokuqhelekileyo, iitafile zentonga zisetyenziselwa ukugcina umthombo-IP + indawo-IP pair, eyona nto iluncedo kakhulu kwizicelo ezingakwazi ukudlulisa umxholo weseshoni yomsebenzisi xa utshintshela kwelinye ibhalansi, umzekelo, kwimodi yokulinganisa i-RoundRobin.

Ukuba itheyibhile yezinti ifundiswa ukuhamba phakathi kweenkqubo ezahlukeneyo ze-HAProxy (phakathi kwe-balanceing eyenzekayo), abalinganisi bethu baya kukwazi ukusebenza kunye nephuli enye yeetafile zeentonga. Oku kuya kwenza ukuba kube lula ukutshintsha inethiwekhi yomxhasi ukuba omnye wabalinganisi uyasilela;

Ukusebenza ngokufanelekileyo, ingxaki yedilesi ye-IP yomthombo we-balancer apho iseshoni yasungulwa kufuneka isonjululwe. Kwimeko yethu, le yidilesi eguquguqukayo kwi-loopback interface.

Umsebenzi ochanekileyo woontanga ufezekiswa kuphela phantsi kweemeko ezithile. Oko kukuthi, ixesha lokuphuma kwe-TCP kufuneka libe likhulu ngokwaneleyo okanye ukutshintsha kufuneka kukhawuleze ngokwaneleyo ukuze iseshoni ye-TCP ingabi naxesha lokuphelisa. Nangona kunjalo, ivumela ukutshintshela ngaphandle komthungo.

Kwi-IaaS sinenkonzo eyakhiwe kusetyenziswa iteknoloji efanayo. Oku Layisha iBalancer njengenkonzo ye-OpenStack, ebizwa ngokuba yiOctavia. Isekelwe kwiinkqubo ezimbini ze-HAProxy kwaye ekuqaleni ibandakanya inkxaso yoontanga. Baye bazingqina bebalasele kule nkonzo.

Umfanekiso ubonisa ngokucwangcisiweyo ukuhamba kweetafile zontanga phakathi kweemeko ezintathu ze-HAProxy, uqwalaselo lucetywayo malunga nendlela oku nokwenziwa ngayo:

HAProxy Peers (ungqamaniso lweseshoni)

Ukuba uphumeza inkqubo efanayo, ukusebenza kwayo kufuneka kuhlolwe ngononophelo. Akuyonyani ukuba iya kusebenza ngendlela efanayo 100% yexesha. Kodwa ubuncinci awuyi kuphulukana neetafile zentonga xa kufuneka ukhumbule umthombo womthengi we-IP.

Ukunciphisa inani lezicelo ngaxeshanye ukusuka kumxhasi ofanayo

Naziphi na iinkonzo ezifumaneka esidlangalaleni, kubandakanywa ii-APIs zethu, zinokuxhomekeke kwii-avalanch zezicelo. Izizathu zabo zingahluka ngokupheleleyo, ukusuka kwiimpazamo zabasebenzisi ukuya kuhlaselo olujoliswe kuyo. Sihlala si-DDoSed ngeedilesi ze-IP. Abathengi bahlala besenza iimpazamo kwizikripthi zabo kwaye basinike i-mini-DDoSs.

Enye indlela okanye enye, ukhuseleko olongezelelweyo kufuneka lubonelelwe. Isisombululo esicacileyo kukunciphisa inani lezicelo ze-API kwaye ungachithi ixesha le-CPU ukucubungula izicelo ezinobungozi.

Ukuphumeza izithintelo ezinjalo, sisebenzisa imilinganiselo yemilinganiselo, ehlelwe ngesiseko se-HAProxy, sisebenzisa iitafile zeentonga ezifanayo. Ukuseta imida kulula kakhulu kwaye kukuvumela ukuba unciphise umsebenzisi ngenani lezicelo kwi-API. I-algorithm ikhumbula umthombo we-IP apho izicelo zenziwe khona kwaye inciphisa inani lezicelo zangaxeshanye kumsebenzisi omnye. Ngokuqinisekileyo, sibale iphrofayili yomthwalo we-API kwinkonzo nganye kwaye sibeka umda we-≈ amaxesha angama-10 kweli xabiso. Siyaqhubeka nokubeka iliso ngokusondeleyo imeko kwaye sigcine umnwe wethu kwi-pulse.

Ingaba oku kujongeka njani xa kusenziwa? Sinabathengi abasebenzisa i-autoscaling APIs ngalo lonke ixesha. Benza malunga namakhulu amabini ukuya kwamathathu oomatshini ababonakalayo kusasa kwaye bacime ngokuhlwa. Kwi-OpenStack, ukudala umatshini obonakalayo, kunye neenkonzo ze-PaaS, kufuna ubuncinane izicelo ze-API ze-1000, ekubeni ukusebenzisana phakathi kweenkonzo kwenzeka kwakhona nge-API.

Ukutshintshwa kwemisebenzi enjalo kubangela umthwalo omkhulu ngokufanelekileyo. Siwuvavanye lo mthwalo, saqokelela iincopho zemihla ngemihla, sazinyusa kalishumi, kwaye oku kwaba ngumda wethu wokulinganisa. Sigcina umnwe wethu kwi-pulse. Sihlala sibona i-bots kunye neeskena ezizama ukusijonga ukuze zibone ukuba sinazo naziphi na izikripthi ze-CGA ezinokuqhutywa, sizisika ngokusebenzayo.

Uyihlaziya njani icodebase yakho ngaphandle kokuba abasebenzisi baqaphele

Sikwaphumeza ukunyamezela iimpazamo kwinqanaba leenkqubo zokusasazwa kwekhowudi. Kusenokubakho amagingxigingxi ngexesha lokhuliso, kodwa impembelelo yazo ekufumanekeni kwenkonzo inokucuthwa.

Sihlala sihlaziya iinkonzo zethu kwaye kufuneka siqinisekise ukuba i-codebase ihlaziywa ngaphandle kokuchaphazela abasebenzisi. Sikwazile ukusombulula le ngxaki ngokusebenzisa amandla olawulo lwe-HAProxy kunye nokuphunyezwa kweGraceful Shutdown kwiinkonzo zethu.

Ukusombulula le ngxaki, bekuyimfuneko ukuqinisekisa ulawulo lwe-balancer kunye nokuvalwa kweenkonzo "ezichanekileyo":

• Kwimeko ye-HAProxy, ulawulo lwenziwa ngefayile yezibalo, eyona nto isisiseko kwaye ichazwe kwi-HAProxy config. Ungathumela imiyalelo kuyo nge-stdio. Kodwa isixhobo sethu sokulawula uqwalaselo oluphambili lufanelekile, ngoko sinemodyuli eyakhelwe-ngaphakathi yokulawula i-HAProxy. Esiyisebenzisa ngenkuthalo.
• Uninzi lweenkonzo zethu ze-API kunye neNjini zixhasa itekhnoloji yokuvala itekhnoloji: xa ucima, balinda ukuba umsebenzi wangoku ugqitywe, nokuba sisicelo se-http okanye umsebenzi othile wenkonzo. Kwenzeka into efanayo nakumsebenzi. Iyayazi yonke imisebenzi eyenzayo kwaye iphetha xa igqibe ngempumelelo yonke into.

Ngombulelo kula manqaku mabini, i-algorithm ekhuselekileyo yokuthunyelwa kwethu ibonakala ngolu hlobo.

1. Umphuhlisi uhlanganisa ipakethe entsha yekhowudi (kithi le RPM), ivavanya kwindawo ye-dev, ivavanya kwinqanaba, kwaye uyishiya kwindawo yokugcina indawo.
2. Umphuhlisi ubeka umsebenzi wokuthunyelwa kunye nenkcazo ecacileyo "yezinto zakudala": inguqu yephakheji entsha, inkcazo yokusebenza okutsha kunye nezinye iinkcukacha malunga nokuthunyelwa ukuba kuyimfuneko.
3. Umlawuli wenkqubo uqala uhlaziyo. Izisa incwadi yokudlala enokuthi yenze oku kulandelayo:
   • Ithatha ipakethe ukusuka kwindawo yokugcina isiteji kwaye iyisebenzise ukuhlaziya uguqulelo lwephakheji kwindawo yokugcina imveliso.
   • Iqulunqa uluhlu lwasemva kwenkonzo ehlaziyiweyo.
   • Ivala inkonzo yokuqala ukuba ihlaziywe kwi-HAProxy kwaye ilindele ukuba iinkqubo zayo zigqibe ukusebenza. Ngombulelo kukuvalwa okuthandekayo, siqinisekile ukuba zonke izicelo zabathengi zangoku ziya kugqiba ngempumelelo.
   • Emva kokuba i-API kunye nabasebenzi bayeke ngokupheleleyo, kwaye i-HAProxy icinyiwe, ikhowudi ihlaziywa.
   • Iinkonzo eziqhubayo.
   • Kwinkonzo nganye, “izibambo” ezithile ziyatsalwa, ezenza uvavanyo lweyunithi kwinani leemvavanyo eziphambili ezichazwe kwangaphambili. Ukutshekishwa okusisiseko kwekhowudi entsha kwenzeka.
   • Ukuba akukho ziphoso zifunyenwe kwisinyathelo sangaphambili, i-backend iyasebenza.
   • Masiqhubele phambili kwi-backend elandelayo.
4. Emva kokuba zonke ii-backends zihlaziywa, iimvavanyo ezisebenzayo ziqaliswa. Ukuba zilahlekile, ngoko umphuhlisi ujonga nayiphi na into entsha yokusebenza ayidalileyo.

Oku kugqiba ukusasazwa.

Umjikelo wohlaziyo lwenkonzo

Esi sicwangciso besingayi kusebenza ukuba besingenamthetho omnye. Sixhasa zombini iinguqulelo ezindala kunye ezintsha edabini. Ngaphambili, kwinqanaba lophuhliso lwesoftware, kubekwe ukuba nangona kukho utshintsho kwisiseko sedatha yenkonzo, abayi kuphula ikhowudi yangaphambili. Ngenxa yoko, isiseko sekhowudi sihlaziywa ngokuthe ngcembe.

isiphelo

Ukwabelana ngeengcinga zam malunga noyilo lwe-WEB olunyamezelayo, ndingathanda ukuphinda ndiphawule amanqaku ayo aphambili:

• ukunyamezela iimpazamo zomzimba;
• ukunyamezela impazamo kwinethiwekhi (balancers, BGP);
• ukunyamezela impazamo kwisoftware esetyenzisiweyo kwaye yaphuhliswa.

Ixesha elizinzileyo wonke umntu!

umthombo: www.habr.com