Iwebhu yesimanje cishe ayinakucatshangwa ngaphandle kokuqukethwe kwemidiya: cishe wonke ugogo une-smartphone, wonke umuntu usezingosini zokuxhumana nabantu, futhi isikhathi sokuphumula sesevisi siyabiza ezinkampanini. Ukuze ukunake, umbhalo wendaba yenkampani mayelana nendlela ahlele ngayo ukulethwa kwezithombe esebenzisa isixazululo se-hardware, yiziphi izinkinga zokusebenza ahlangabezane nazo kule nqubo, yini eyabangela, nokuthi lezi zinkinga zaxazululwa kanjani kusetshenziswa isisombululo sesofthiwe esisekelwe ku-Nginx, ngenkathi kuqinisekiswa ukubekezelelana kwamaphutha kuwo wonke amazinga (). Sibonga ababhali bendaba u-Oleg U-Efimova no-Alexandra Dymova, ababelane ngolwazi lwabo engqungqutheleni .
Ake siqale ngesingeniso esincane mayelana nokuthi sigcina futhi sigcina kanjani izithombe. Sinesendlalelo lapho sizigcina khona, kanye nesendlalelo lapho sigcina khona izithombe. Ngesikhathi esifanayo, uma sifuna ukufeza iqhinga elikhulu futhi sinciphise umthwalo kwisitoreji, kubalulekile kithi ukuthi isithombe ngasinye somsebenzisi ngamunye silele kuseva eyodwa ye-caching. Uma kungenjalo, kuzofanela sifake amadiski aphindwe kaningi kunamaseva amaningi. Izinga lethu lokushaya lizungeze i-99%, okungukuthi, sinciphisa umthwalo kwisitoreji sethu izikhathi ezingu-100, futhi ukuze senze lokhu, eminyakeni eyi-10 edlule, lapho konke lokhu kwakhiwa, sasinamaseva angu-50. Ngokufanelekile, ukuze sinikeze lezi zithombe, besidinga, empeleni, izizinda zangaphandle ezingama-50 ezisetshenziswa yilawa maseva.
Ngokwemvelo, umbuzo waphakama ngokushesha: uma enye yamaseva ethu yehla futhi ingatholakali, iyiphi ingxenye yethrafikhi esilahlekelwa yiyo? Sabheka okwakusemakethe sanquma ukuthenga insimbi ukuze izoxazulula zonke izinkinga zethu. Ukukhetha kuwele kwisixazululo senkampani ye-F5-network (okuyinto, ngendlela, ethenge i-NGINX, Inc hhayi kudala): Umphathi Wethrafikhi Yendawo ye-BIG-IP.
Okwenziwa lolu cezu lwensimbi (i-LTM): irutha yensimbi eyenza ukunganaki kwensimbi kumachweba ayo angaphandle futhi ikuvumela ukuthi uhambise ithrafikhi ngokusekelwe ku-topology yenethiwekhi, kwezinye izilungiselelo, futhi ihlola impilo. Bekubalulekile kithi ukuthi lesi siqeshana sensimbi singahlelwa. Ngokufanelekile, singachaza indlela enengqondo yokuthi izithombe zomsebenzisi othile zibuyiswe kanjani kunqolobane ethile. Ibukeka kanjani? Kukhona ucezu lwehadiwe olubheka i-inthanethi yesizinda esisodwa, i-ip eyodwa, yenza i-ssl ikhiphe, idlulise izicelo ze-http, ikhethe inombolo yenqolobane ku-IRule, ukuthi uye kuphi, futhi ivumela ithrafikhi ukuthi iye lapho. Ngasikhathi sinye, ihlola impilo, futhi uma umshini ungatholakali, sikwenze ukuthi ithrafikhi iye kuseva eyodwa yokusekela ngaleso sikhathi. Ngokombono wokucushwa, kukhona, yiqiniso, amanye ama-nuances, kodwa ngokuvamile konke kulula: sibeka imephu, inombolo ethile ihambisana ne-IP yethu kunethiwekhi, sithi sizolalela emachwebeni 80. futhi 443, sithi uma iseva ingatholakali, khona-ke udinga ukuvumela ithrafikhi ukuthi iye kusipele, kulokhu, i-35, futhi sichaza inqwaba yomqondo wokuthi lesi sakhiwo kufanele sihlakazwe kanjani. Inkinga nje kwaba ukuthi ulimi insimbi ehlelwe ngalo ulimi Tcl. Uma kukhona okukhumbulayo lokhu ... lolu limi lubhala kuphela kunolimi olulungele ukuhlela:
Sitholeni? Sithole ucezu lwehadiwe oluqinisekisa ukutholakala okuphezulu kwengqalasizinda yethu, imizila yonke ithrafikhi yethu, ehlinzeka ngokuhlolwa kwezempilo kanye nokusebenza nje. Ngaphezu kwalokho, ibisebenza isikhathi eside impela: kule minyaka eyi-10 edlule, azikho izikhalo ngayo. Ekuqaleni kuka-2018, besesivele sinikeza cishe izithombe ezingu-80k ngesekhondi. Lokhu kuyindawo ezungeze amagigabhithi angama-80 wethrafikhi evela kuzo zombili izikhungo zethu zedatha.
Nokhoβ¦
Ekuqaleni kuka-2018, sabona isithombe esibi kumashadi: isikhathi sokubuyisela izithombe senyuke ngokucacile. Futhi kwanqamuka ukusifanela. Inkinga ukuthi lokhu kuziphatha bekubonakala kuphela lapho isiminyaminya esiphezulu - enkampanini yethu lobu busuku obusuka ngeSonto kuya ngoMsombuluko. Kodwa sonke isikhathi uhlelo luziphathe njengenjwayelo, azikho izimpawu zokuphuka.
Nokho, inkinga kwadingeka ixazululwe. Sabona izingqinamba ezingase zibe khona futhi saqala ukuziqeda. Okokuqala, vele, sandise ama-uplink angaphandle, senze ukubuyekezwa okuphelele kwama-uplinks angaphakathi, futhi sathola zonke izingqinamba ezingase zibe khona. Kodwa konke lokhu akuzange kunikeze umphumela osobala, inkinga ayizange iphele.
Okunye okungaba nomthelela ongemuhle kwaba wukusebenza kwama-caches ezithombe ngokwawo. Futhi sinqume ukuthi mhlawumbe inkinga iphezu kwabo. Hhayi-ke, sinwebe ukusebenza - ngokuyisisekelo, izimbobo zenethiwekhi kuma-caches wezithombe. Kodwa futhi, akukho ntuthuko ecacile eyabonwa. Ekugcineni, sanaka kakhulu ukusebenza kwe-LTM ngokwayo, futhi lapha sabona isithombe esidabukisayo emagrafu: ukulayishwa kwawo wonke ama-CPU kuqala ukuhamba kahle, kodwa bese kuphumula ngokuqinile eshalofini. Ngesikhathi esifanayo, i-LTM iyeka ukuphendula ngokwanele ekuhlolweni kwezempilo kanye nama-uplinks futhi iqala ukuyivala ngokungahleliwe, okuholela ekulimazeni okukhulu kokusebenza.
Okusho ukuthi siwuhlonze umnyombo wenkinga, sahlonza ibhodlela. Kusele ukuthi sinqume ukuthi sizokwenzani.
Into yokuqala esobala esingayenza ukwenza ngandlela thize i-LTM ngokwayo. Kodwa kunama-nuances athile lapha, ngoba le nsimbi ihluke kakhulu, ngeke uye esitolo esiseduze uyithenge. Kuyinkontileka ehlukile, inkontileka yelayisense ehlukile, futhi kuzothatha isikhathi esiningi. Okwesibili ongakhetha kukho ukuqala ukuzicabangela, uqhamuke nesixazululo sakho ezingxenyeni zakho, okungcono usebenzisa uhlelo lomthombo ovulekile. Kusele kuphela ukunquma ukuthi yini ngempela esizoyikhetha kulokhu nokuthi sizochitha isikhathi esingakanani ekuxazululeni le nkinga, ngoba abasebenzisi abazange bathole izithombe. Ngakho-ke, kuyadingeka ukwenza konke lokhu, ngokushesha okukhulu, umuntu angase athi - izolo.
Njengoba umsebenzi uzwakala njengokuthi "yenza okuthile ngokushesha ngangokunokwenzeka futhi usebenzise i-hardware esinayo", into yokuqala esasicabanga ukuthi ukususa imishini engeyona enamandla kakhulu ngaphambili, sibeke i-Nginx lapho, esazi ngayo ukuthi kanjani. ukusebenza, futhi uzame ukusebenzisa yonke indlela yokucabanga efanayo neyasetshenziswa ucezu lwensimbi. Okusho ukuthi, eqinisweni, sishiye ucezu lwethu lwehadiwe, safaka amanye amaseva angu-4 okwakudingeka siwalungise, senze izizinda zangaphandle kubo ngokufanisa nendlela okwenzeka ngayo eminyakeni eyi-10 edlule ... Silahlekelwe ukutholakala kancane uma le mishini iwa. , kodwa, nokho kancane, ixazulule inkinga yabasebenzisi bethu endaweni.
Ngakho-ke, ingqondo ihlala ifana: sifaka i-Nginx, ingenza i-SSL-offload, singahlela ngandlela-thile i-logic yomzila, ukuhlola impilo kuma-configs futhi simane siphindaphinde ingqondo esasinayo ngaphambili.
Sihlala phansi ukubhala configs. Ekuqaleni kwakubonakala sengathi yonke into ilula kakhulu, kodwa, ngeshwa, kunzima kakhulu ukuthola imanyuwali yomsebenzi ngamunye. Ngakho-ke, asikweluleki ukuthi umane u-google "ungayilungisa kanjani i-Nginx yezithombe": kungcono ukubhekisela kumadokhumenti asemthethweni, azobonisa ukuthi yiziphi izilungiselelo okufanele zithintwe. Kodwa kungcono ukukhetha ipharamitha ethile ngokwakho. Nokho, khona-ke yonke into ilula: sichaza amaseva esinawo, sichaza izitifiketi ... Kodwa into ethakazelisayo kakhulu, empeleni, i-logic yomzila ngokwayo.
Ekuqaleni, kithina kwakubonakala sengathi simane sichaza indawo yethu, sifanise inombolo yethu yenqolobane yesithombe kuyo, sichaze ngezandla zethu noma ngejeneretha ukuthi sidinga imifula emingaki, enhla nomfula ngamunye sibonisa iseva lapho ithrafikhi kufanele iye khona, futhi iseva eyisipele - uma ngabe iseva eyinhloko ingatholakali:
Kodwa, mhlawumbe, ukube yonke into ibilula kangaka, besiyovele sigoduke singasho lutho. Ngeshwa, ngezilungiselelo ezizenzakalelayo ze-Nginx, okuyinto, ngokuvamile, ezenziwe eminyakeni eminingi yokuthuthuka futhi hhayi ngempela kuleli cala ... ukulungiselelwa kubukeka kanje: uma kwenzeka iseva ethile ekhuphukayo inephutha lesicelo noma isikhathi sokuvala, i-Nginx ihlale njalo. ishintsha ithrafikhi iye kwelandelayo. Ngesikhathi esifanayo, ngemva kokwehluleka kokuqala, iseva nayo izovalwa phakathi nemizuzwana eyi-10, kokubili ngephutha nangesikhathi sokuvala - lokhu akukwazi ngisho nokulungiswa nganoma iyiphi indlela. Okusho ukuthi, uma sisusa noma sisetha kabusha inketho yesikhathi sokuvala kumyalelo okhuphukayo, khona-ke, nakuba i-Nginx ingeke icubungule lesi sicelo futhi iphendule ngephutha elithile elingelihle kangako, iseva izocisha.
Ukugwema lokhu, senze izinto ezimbili:
a) banqabele i-Nginx ekwenzeni lokhu ngesandla - futhi ngeshwa, okuwukuphela kwendlela yokwenza lokhu ukumane usethe izilungiselelo zokuhluleka okukhulu.
b) sikhumbule ukuthi kwamanye amaphrojekthi sisebenzisa imojula ekuvumela ukuthi uhlole impilo yangemuva - ngakho-ke, siye sahlola impilo kaningi ukuze sibe nesikhathi esincane sokuphumula uma kwenzeka ingozi.
Ngeshwa, akukhona konke lokhu, ngoba amasonto amabili okuqala okusebenza kwalolu hlelo abonise ukuthi ukuhlolwa kwezempilo kwe-TCP nakho kuyinto engathembeki: hhayi i-Nginx, noma i-Nginx ku-D-state ingathulwa kuseva ekhuphukayo, futhi kuleli cala i-kernel izokwamukela uxhumano, ukuhlolwa kwezempilo kuzodlula, kodwa ngeke kusebenze. Ngakho-ke, ngokushesha sayishintsha nge-http's health-check, senza ethize, okuthi, uma isivele inikeze i-200, khona-ke konke kusebenza kulesi script. Ungenza ingqondo eyengeziwe - isibonelo, endabeni yamaseva e-caching, hlola ukuthi isistimu yefayela ifakwe ngendlela efanele:
Futhi lokho kungasifanela, ngaphandle kokuthi okwamanje isifunda sakuphinda ngokuphelele lokho okwenziwa ucezu lwensimbi. Kodwa sasifuna ukwenza kangcono. Ngaphambilini, sineseva eyodwa yokusekelayo, futhi lokhu cishe akukuhle kakhulu, ngoba uma unamaseva ayikhulu, khona-ke lapho amaningana ewa ngesikhathi esisodwa, iseva eyodwa yokusekelayo ayinakwenzeka ukubhekana nomthwalo. Ngakho-ke, sinqume ukusabalalisa ukubhukha phakathi kwawo wonke amaseva: simane senza enye ehlukile eya phezulu, saqopha wonke amaseva lapho ngamapharamitha athile ngokuhambisana nokuthi yimuphi umthwalo angawunikeza, sengeza ukuhlolwa kwezempilo okufanayo ebesinakho ngaphambili :
Njengoba ungeke ukwazi ukuya komunye umfudlana okhuphukayo ngaphakathi komfula okhuphukayo, bekudingeka ukuqinisekisa ukuthi uma umfula oyinhloko, lapho sibhale khona inqolobane yesithombe efanele, edingekayo, ingatholakali, sivele sabuyela emuva ngephutha_page, ukusuka lapho. siye kukhophi yasenqolobaneni enhla nomfula:
Futhi ngokwengeza ngokoqobo amaseva amane, sithole lokhu: sishintshe ingxenye yomthwalo - sisuswe ku-LTM saya kulawa maseva, sasebenzisa i-logic efanayo lapho sisebenzisa i-hardware evamile nesofthiwe, ngokushesha sathola ibhonasi ukuthi lawa maseva angalinganiswa, ngoba angakwazi umane ufake okuningi njengoba udinga. Nokho, okubi kuphela ukuthi silahlekelwe ukutholakala okuphezulu kubasebenzisi bangaphandle. Kodwa ngaleso sikhathi kwakudingeka ngidele lokhu, ngoba kwakudingeka ukuxazulula inkinga ngokushesha. Ngakho-ke, sasusa ingxenye yomthwalo, kwakungaba ngu-40% ngaleso sikhathi, i-LTM yaba ngcono, futhi ngokoqobo ngemva kwamasonto amabili inkinga iqalile, saqala ukunikeza hhayi izicelo ezingu-45k ngomzuzwana, kodwa 55k. Eqinisweni, sikhule ngo-20% - lokhu ngokusobala ithrafikhi esingazange siyinike umsebenzisi. Futhi ngemva kwalokho, baqala ukucabanga ngendlela yokuxazulula inkinga esele - ukuqinisekisa ukutholakala okuphezulu kwangaphandle.
Sike sathula lapho saxoxa ngokuthi yisiphi isixazululo esizosisebenzisa kulokhu. Kwakukhona iziphakamiso zokuqinisekisa ukwethembeka kusetshenziswa i-DNS, ngosizo lwemibhalo ethile ebhalwe ngokwakho, izivumelwano zomzila eziguquguqukayo ... bekunezinketho eziningi, kodwa sekuvele kwacaca ukuthi ukubuya okuthembekile kwezithombe, udinga ukwethula esinye isendlalelo. lokho kuzoqapha lokhu. Le mishini siyibize ngabaqondisi bezithombe. Isofthiwe ebesithembele kuyo bekuyi-Keepaalived:
Okokuqala, lokho okuqukethe i-Keepitalived. Eyokuqala iphrothokholi ye-VRRP, eyaziwa kabanzi ngabaxhumanisi, etholakala kumishini yenethiwekhi enikeza ukubekezelelana kwamaphutha ekhelini le-IP langaphandle lapho amaklayenti axhuma khona. Ingxenye yesibili i-IPVS, iseva ye-IP ebonakalayo, ukuze ibhalansise phakathi kwamarutha ezithombe futhi inikeze ukubekezelelana kwamaphutha kuleli zinga. Futhi okwesithathu ukuhlola impilo.
Ake siqale ngengxenye yokuqala: I-VRRP - ibukeka kanjani? Kukhona i-IP ethile ebonakalayo, enombhalo othi dns badoocdn.com, lapho amaklayenti axhuma khona. Ngesinye isikhathi, sinekheli le-IP kuseva eyodwa. Amaphakethe agciniwe asebenza phakathi kwamaseva asebenzisa iphrothokholi ye-VRRP, futhi uma okuyinhloko kunyamalala ku-radar - iseva isiqaliswe kabusha noma enye into, iseva eyisipele iphakamisa ngokuzenzakalelayo leli kheli le-IP - azikho izenzo ezenziwa mathupha ezidingekayo. I-Master ne-backup iyahluka, ikakhulukazi okubaluleke kakhulu: uma iphezulu, maningi amathuba okuba umshini ube umpetha. Inzuzo enkulu kakhulu ukuthi awudingi ukumisa amakheli e-IP kuseva ngokwayo, kwanele ukuwachaza ku-config, futhi uma amakheli e-IP edinga imithetho ethile yomzila ngokwezifiso, lokhu kuchazwa ngokuqondile ku-config, ku-config. i-syntax efanayo njengoba ichazwe kuphakheji ye-VRRP. Ngeke uhlangane nanoma yiziphi izinto ongazazi.
Ibukeka kanjani ekusebenzeni? Kwenzekani uma enye yeziphakeli yehla? Ngokushesha nje lapho okuyinhloko kunyamalala, ikhophi yasenqolobaneni yethu iyayeka ukuthola amaphromoshini futhi ngokuzenzakalelayo iba inkosi. Ngemva kwesikhathi esithile, salungisa okuyinhloko, saqalisa kabusha, saphakamisa i-Keepaalived - izikhangiso ezibaluleke kakhulu kunokufika kwekhophi yasenqolobaneni, futhi ikhophi yasenqolobaneni ibuyela emuva ngokuzenzakalelayo, isusa amakheli e-IP kuwo, azikho izenzo ezenziwa ngesandla ezidingekayo.
Ngakho, siqinisekise ukubekezelelwa kwephutha kwekheli le-IP langaphandle. Ingxenye elandelayo iwukuba ngandlela thize ukulinganisa ithrafikhi kusuka ekhelini le-IP langaphandle kuya kumarutha ezithombe asevele ayinqamula. Ngamaphrothokholi okulinganisa, yonke into icace ngokwanele. Lokhu kungaba i-round-robin elula, noma izinto eziyinkimbinkimbi, i-wrr, uxhumano lohlu nokunye. Lokhu kuchazwa ngokuyisisekelo kumadokhumenti, akukho lutho olukhethekile ngakho. Kodwa indlela yokulethwa ... Lapha sizohlala ngokuningiliziwe - kungani sikhethe omunye wabo. Lezi yi-NAT, Direct Routing kanye ne-TUN. Iqiniso liwukuthi ngokushesha sabeka phansi ukubuyiswa kwe-100 gigabits of traffic kusuka kumasayithi. Lokhu uma ukutholile, udinga amakhadi egigabit ayi-10, akunjalo? Amakhadi we-gigabit ayi-10 kuseva eyodwa - lokhu sekungaphezu kwalokho, okungenani, umqondo wethu "wemishini ejwayelekile". Sabe sesikhumbula ukuthi asinikezi nje ithrafikhi ethile, sinikeza izithombe.
Siyini isici? - Umehluko omkhulu phakathi kwethrafikhi engenayo naphumayo. Ithrafikhi engenayo incane kakhulu, ithrafikhi ephumayo inkulu kakhulu:
Uma ubheka lawa magrafu, ungabona ukuthi okwamanje mayelana ne-200 Mb ngomzuzwana ithunyelwa kumqondisi, lolu usuku olujwayelekile kakhulu. Sibuyisela u-4,500 MB ngomzuzwana, isilinganiso singaba ngu-1/22. Sekuvele kusobala ukuthi ukuze sinikeze ngokugcwele ithrafikhi ephumayo kumaseva asebenzayo angama-22, eyodwa yanele eyamukela lokhu kuxhumana. Lapha i-algorithm yomzila oqondile, i-algorithm yomzila, isiza kithi.
Ibukeka kanjani? Umqondisi wethu wezithombe, ngokusho kwetafula lakhe, udlulisela ukuxhumana kumarutha ezithombe. Kodwa ama-routers ezithombe athumela i-traffic reverse ngqo ku-intanethi, ayithumele kuklayenti, ayibuyeli emuva ngomqondisi wesithombe, ngakho-ke, ngenani elincane lemishini, sinikeza ukubekezelelana okuphelele kwamaphutha kanye nokupompa yonke i-traffic. Ku-configs, kubonakala kanje: sicacisa i-algorithm, esimweni sethu i-rr elula, sinikeza indlela eqondile yomzila, bese siqala ukufaka kuhlu zonke iziphakeli zangempela, zingaki zazo esinazo. Okuzonquma lokhu kugcwala kwezimoto. Esimeni lapho sinesinye noma ezimbili ngaphezulu, amaseva ambalwa avela lapho, isidingo esinjalo sivela - simane sengeze lesi sigaba kulungiselelo futhi ungakhathazeki kakhulu. Kusukela ohlangothini lwamaseva wangempela, kusukela ohlangothini lwe-photo-router, le ndlela idinga ukucushwa okuncane kakhulu, ichazwe ngokuphelele kumadokhumenti, futhi azikho izingibe lapho.
Okujabulisa kakhulu ukuthi isisombululo esinjalo asisho ukuguqulwa okukhulu kwenethiwekhi yendawo, lokhu bekubalulekile kithi, bekufanele sikuxazulule ngezindleko eziphansi. Uma ubheka khona-ke sizobona ukuthi ibukeka kanjani. Lapha sineseva ethile ebonakalayo, ku-port 443, ilalela, yamukela uxhumano, wonke amaseva asebenzayo afakwe ohlwini, futhi kuyacaca ukuthi uxhumano, ukuhlanganisa noma ukususa, kuyafana. Uma sibheka izibalo kuseva efanayo ebonakalayo, sinamaphakethe angenayo, uxhumo olungenayo, kodwa awekho nhlobo aphumayo. Izixhumanisi eziphumayo ziya ngqo kuklayenti. Nokho, sikwazile ukungalingani. Manje, kwenzekani uma enye yamarutha ethu esithombe yehluleka? Phela insimbi iyinsimbi. Ingase ingene ku-kernel panic, ingase iphule, ukunikezwa kwamandla kungase kushe. Noma yini. Yilokhu okushiwo ukuhlolwa kwezempilo. Kungaba lula njengokuhlola ukuthi ichweba livuleke kanjani ngathi, noma okunye okuyinkimbinkimbi, kuze kufike kwezinye izikripthi ezizibhalele ezizohlola nokucabanga kwebhizinisi.
Sima endaweni ethile phakathi: sinesicelo se-https sendawo ethile, iskripthi sibizwa uma siphendula ngempendulo engama-200, sikholelwa ukuthi konke kuhamba kahle ngale seva, ukuthi iyaphila futhi ingavulwa kalula. .
Lokhu, futhi, kubukeka kanjani ekusebenzeni. Icime iseva, evunyelwe ukulungiswa - ikhanyisa i-BIOS, isibonelo. Ezingodweni, ngokushesha sinesikhathi sokuvala, sibona umugqa wokuqala, bese emva kwemizamo emithathu imakwe ngokuthi "yehlulekile", futhi ivele isuswe ohlwini.
Ukuziphatha kwesibili nakho kungenzeka, lapho i-VS imane isethelwe ku-zero, kodwa esimweni sokubuyisela isithombe, lokhu akusebenzi kahle. Iseva iyakhuphuka, i-Nginx iqala lapho, ngokushesha ukuhlolwa kwezempilo kuyaqonda ukuthi uxhumano ludlula, ukuthi konke kuhamba kahle, futhi iseva ibonakala ohlwini lwethu, futhi umthwalo ngokushesha uqala ukusetshenziswa kuwo ngokuzenzakalelayo. Azikho izenzo ezenziwa mathupha ezidingekayo kumphathi womsebenzi. Ebusuku, iseva iqale kabusha - umnyango wokuqapha awusibizi ngalokhu ebusuku. Bakwazisa ngokwenzekile, konke kuhamba kahle.
Ngakho-ke, ngendlela elula, ngosizo lwenombolo encane yamaseva, saxazulula inkinga yokubekezelelana kwamaphutha kwangaphandle.
Kusamele sithi konke lokhu, vele, kudinga ukugadwa. Ngokwehlukana, kufanele kuqashelwe ukuthi i-Keepalivede, njengesofthiwe eyabhalwa kudala kakhulu, inenqwaba yezindlela zokuyiqapha, kokubili kusetshenziswa amasheke nge-DBus, SMTP, SNMP, kanye ne-Zabbix evamile. Ngaphezu kwalokho, yena ngokwakhe uyakwazi ukubhala izincwadi cishe kuzo zonke ukuthimula, futhi ukwethembeka, ngesinye isikhathi sake sacabanga ukuyivala, ngoba ubhala izincwadi eziningi kunoma yikuphi ukushintshwa kwethrafikhi, ukufakwa, kuwo wonke ama-IP-shnik kanye njalonjalo. Yiqiniso, uma kukhona amaseva amaningi, ungakwazi ukuzikhukhumeza ngalezi zinhlamvu. Sisebenzisa izindlela ezijwayelekile, siqapha i-nginx kumarutha ezithombe, futhi ukuqapha kwezingxenyekazi zekhompyutha akuhambanga. Yiqiniso, sizokweluleka ezinye izinto ezimbili: okokuqala, ukuhlolwa kwezempilo kwangaphandle nokufinyeleleka, ngoba ngisho noma konke kusebenza, empeleni, kungenzeka ukuthi abasebenzisi bangazitholi izithombe ngenxa yezinkinga nabahlinzeki bangaphandle noma into eyinkimbinkimbi. Kuhlale kufanelekile ukugcina kwenye indawo kwenye inethiwekhi, e-amazon noma kwenye indawo, umshini ohlukile ongafaka amaseva akho ngaphandle, futhi kufanelekile ukusebenzisa noma ukutholwa okungaqondakali, kulabo abanekhono lokufunda ngomshini olukhohlisayo, noma okulula. ukuqapha, okungenani ukuze kulandelelwe ukuthi izicelo zehle kakhulu yini, noma ngokuphambene, sezikhulile. Kuyasiza futhi.
Ukufingqa: thina, empeleni, sashintsha isixazululo sensimbi, okwathi ngesinye isikhathi sayeka ukusifanela, ngohlelo olulula owenza konke ngendlela efanayo, okungukuthi, luhlinzeka ngokuqedwa kwethrafikhi ye-HTTPS nokunye umzila ohlakaniphile ngempilo edingekayo. -hlola. Sikhuphule ukuzinza kwalolu hlelo, okungukuthi, sisenokutholakala okuphezulu kwesendlalelo ngasinye, futhi sithole ibhonasi ukuthi kulula kakhulu ukukala konke kusendlalelo ngasinye, ngoba lokhu kuyi-hardware evamile enesofthiwe evamile, okungukuthi. , ngokwenza kanjalo, siye sazenza zaba lula ukuxilonga izinkinga ezingase zibe khona.
Sagcina ngani? Sibe nenkinga ngamaholidi kaJanuwari ka-2018. Ezinyangeni eziyisithupha zokuqala, ngenkathi sifaka lolu hlelo lokusebenza, silukhulisa kuwo wonke ama-traffic, ukuze sisuse yonke i-traffic kusuka ku-LTM, sikhule kuphela ku-traffic endaweni eyodwa yedatha kusuka ku-40 gigabits kuya ku-60 gigabits, futhi ngesikhathi esifanayo. isikhathi sonyaka wonke we-2018 bakwazi ukunikeza cishe izithombe eziphindwe kathathu ngomzuzwana.
Source: www.habr.com