Shunze ¾Ç¶é (http://www.shunze.info/forum/index.php)
|- Array (http://www.shunze.info/forum/board.php?boardid=32)
|-- ¡m¤À¨É¡nOutbound Link Load Balance (http://www.shunze.info/forum/threadid.php?boardid=32&threadid=1821)


§@ªÌ: shunze µoªí®É¶¡: 2014-08-08, 11:32:

¡m¤À¨É¡nOutbound Link Load Balance

APV¤£¶È¬O¤@¥xServer Load Balance¥~¡A¤]¬O¤@¥xLink Load Balance¡A
¥i¥H¶i¦æInbound»POutboundªº½u¸ô­t¸ü¥­¿Å½Õ°t¡C

¦bOutboundªº³¡¤À¡A
°£¤F¥i³z¹Lpriority¨Ó°Ï¤À½u¸ôÀu¥ýÅv¥~¡A
¤]¥i¥H¦b¬Û¦Ppriorityªº±¡ªp¤U¡A¨Ì¤£¦Pªºweight(Åv­«)¨Ó½Õ°t½u¸ô¬y¶q¤ñ¨Ò¡A
§ó¥i¥H¨Ì¤£¦Pªº¨Ó·½/¥Øªº¡A³]©weroute¨Ó«ü©w¸ô¥Ñ¡C
¬O¤@¥x¦h¥\¯à«¬ªº­t¸ü¥­¿Å³]³Æ¡C


¥H¤U¬°ÂùWANªº¥Ü½dÀô¹Ò¡A§Ú­Ì³v¤@¨Ó³]©wOutbound LLB¡C

½u¸ô1¡AIP 172.17.1.1¡AMask 255.255.0.0¡AGW 172.17.0.254
½u¸ô2¡AIP 172.18.1.1¡AMask 255.255.0.0¡AGW 172.18.0.254
¤º³¡ºô¬q10.10.1.0¡AMask 255.255.255.0
APV¤ººôIP 10.10.1.104

½u¸ô1¡A2 Priority¬Û¦P¡A¦ýWeigth¤À§O¬°100»P50



°t¸mIP¤ÎDefault Route
§Ú­Ìµ¹Port1°t¤W¤º³¡IP 10.10.1.104/24
Port3°t¤W½u¸ô1ªºIP 172.17.1.1/16
Port4°t¤W½u¸ô2ªºIP 172.18.1.1/16
ip address port1 10.10.1.104 255.255.255.0
ip address port3 172.17.1.1 255.255.0.0
ip address port4 172.17.1.1 255.255.0.0
ip route default 172.17.0.254



°t¸mÃì¸ô
³]©w¤¶­±¦bADVANCED LOAD BALANCE \ Link Load Balance \ OutBound Settings¤¤¶i¦æ¡C
²Ä¤@¨B¥ý¤À§O¹ï¨â­ÓWAN°t¸m¨ä¹ïÀ³¤§Ãì¸ô¡C








³z¹Licmp¹ïÃì¸ô°µhealth check¡A¦b­n³]©wcheckªºLink Route¤W³sÂI·Æ¹«¨â¤U¡C



µM«á«ö¤U ADD ·s¼W¸ÓLinkªºcheck¡C








±Ò¥Îhealth check»P³]©w½u¸ô½ü´`¤èªk


Weighted Round Robinªº Weighted ¬O«üÅv­«¡A³o¼Ë§Ú­Ì­è¤~¦b½u¸ô¤W°t¸mªºÅv­« (100/50) ´N·|®³¨Ó°Ñ¦Ò¡C


¬°¯S®í»Ý¨D³]©wERoute
¯S®í¤º¹ï¥~ªº»Ý¨D¸ô¥Ñ¡A§Ú­Ì¥i³z¹LERoute¨Ó³]©w¡A
³]©w­¶­±¦bSYSTEM CONFIGURATION / Basic Networking / Routing / RTS/IPFLOW/ERoutes¤¤¡C

³]°²¤º³¡IP 10.10.1.12¬OÁ`¦r½ú¤H¤h¡A§Ú­Ì­n°w¹ï¥L´£¨Ñ¸ûí©wªº¹ï¥~½u¸ô(¨Ò¦pISP2)¡A
¨º»ò§Ú­Ì¥i¥H°w¹ï¨Ó·½10.10.1.12¡A¥Øªº0.0.0.0/0¡AÅý¥L©¹ISP2°e¡C







¦pªG§Ú­Ì·Q°w¹ï¸û­«­nªº¥~³¡ºô¬q163.12.0.0/16±Ä¥Î¸ûí©wªº¹ï¥~½u¸ô(¨Ò¦pISP2)¡A
¨º»ò§Ú­Ì¥i¥H°w¹ï¨Ó·½0.0.0.0/0¡A¥Øªº163.12.0.0/16¡AÅý¥L©¹ISP2°e¡C





¦pªG§Ú­Ì¤£§Æ±æ¥H½u¸ôÅv­«¨Ó°µ¤À°t¡A¦Ó¬O¤@«ß©¹ISP1°e¡A
¨º§Ú­Ì¥i¥H³]¤@­ÓÀu¥ýÅvµy§C¤@ÂIISP1ªºdefault eroute¡C





¦b³]©weroute®É¡A­nª`·N¥H¤U´XÂI¡C
  1. eroute¦WºÙ¤£¥i­«ÂСC
  2. ºô¬q­«Å|®É¡A­n¥H¤£¦P¤§Àu¥ýÅv¿ù¶}¡A§_«h·|¥X²{overlapªº¿ù»~¦ÓµLªk¼g¤J¡C
  3. IPºô¬q»P¤lºô¸ô¾B¸n­n¥¿½T¡A§_«h·|«Ø¥ß¥¢±Ñ¡C
  4. erouteªºpriority­È¡A­n³]©w¦b1001¡ã1999¶¡¡A1999³Ì°ª¡C
  5. link routeªºpriority¹w³]­È¬O2¡Aeroute¤§©Ò¥H¦³®ÄªG¡A¬O¦]¬°erouteªºpriority­È»·¤j©ólink route¡C
    APV¦UÃþ¸ô¥Ñ¹w³]priority¦Cªí¦p¤U¡G


³]©w¤º¹ï¥~ªºNAT
§Ú­Ì­n¤À§O¹ï¤º³¡client³z¹L¤£¦P½u¸ô¥X¥h°µ¦U¦ÛªºNATÂà´«¡C
NATªº³]©w­n¦bSYSTEM CONFIGURATION / NAT / NAT¤¤¨Ó¶i¦æ¡C








¨ä¥¦
±Ò¥Îipflow¡A¥i¥HÅý¤º³¡¹ï¥~¦P¤@flow¡A«O«ù¦P¤@½u¸ô¥~¥X¡C
±Ò¥Îrts¡A¥i¥HÅý¥~³¡ªA°È¦^¶Ç®É¡A±Ä¥Î»P­ìµo°_ªA°È¬Û¦P¤§½u¸ô¡C

³o¨â¶µ»Ý¦bSYSTEM CONFIGURATION / Basic Networking / Routing / RTS/IPFLOW/ERoutes ¤¤¶i¦æ³]©w¡C



ClientºÝ³]©w
IP 10.10.1.XX
Mask 255.255.255.0
GW 10.10.1.104



´ú¸Õ
¥i¥Îtracert¶i¦æ¸ô¥Ñ°lÂÜ´ú¸Õ¡C

¤@¯ëuser tracert 8.8.8.8»P163.12.0.1µ²ªG¦p¤U¡C

¥iµo²{¤@¯ëºô¬q¨«172.17.0.254¥~¥X¡F
¦Ó163.12.0.1«h¨«172.18.0.254¥~¥X¡A²Å¦X§Ú­Ì³W¹º¡C

Á`¦r½ú10.10.1.2 tracert 8.8.8.8»P163.12.0.1µ²ªG¦p¤U¡C

¥Ñ©ó§Ú­Ì³W¹º¤F³Ì°ªÀu¥ýÅvµ¹10.10.1.12¨«172.18.0.254¹ï¥~¡A
©Ò¥H¤£½×­þ­ÓIP¬Ò¥H172.18.0.254¥~¥X¡A²Å¦X§Ú­Ì³W¹º¡C



³z¹LCLI«ü¥O¨Ó³]©wOutbound LLB
³]©wLink Route
llb link route "ISP1" 172.17.0.254 100
llb link route "ISP2" 172.18.0.254 50
llb link health checker icmp "ISP1" "172.17.0.254"
llb link health checker icmp "ISP2" "172.18.0.254"
llb link health on
llb method outbound wrr

³]©wERout
ip eroute "er1" 1600 10.10.1.12 255.255.255.255 0 0.0.0.0 0.0.0.0 0 any 172.18.0.254 1
ip eroute "er2" 1550 0.0.0.0 0.0.0.0 0 163.12.0.0 255.255.0.0 0 any 172.18.0.254 1
ip eroute "er3" 1510 0.0.0.0 0.0.0.0 0 0.0.0.0 0.0.0.0 0 any 172.18.0.254 1

³]©wNAT
nat port "172.17.1.1" 10.10.1.0 255.255.255.0 60 172.17.0.254
nat port "172.18.1.1" 10.10.1.0 255.255.255.0 60 172.18.0.254

¨ä¥¦
ip ipflow on
ip rts on


§@ªÌ: shunze µoªí®É¶¡: 2014-09-04, 13:54:

¤W¤å¤¤ªºÃì¸ô°t¸m³]©w¦³¨Ç¿ù»~¡I


³oùتºSource IP¨Ã¤£¬O«ü¤º³¡ºô¸ôIP¡A
¤]¤£¬O«ü·|³z¹L³o±ø½u¸ô³s¥~ªºIPºô¬q¡C

³o­ÓÄæ¦ì¦b­ì¼t¤â¥U¤¤¬O¼ghc_srcip¡A
·N«ä¬O«ü¥i¥Î¨Ó°µ½u¸ôhealth checkªº¦Pºô¬q½u¸ôIP¡A
¶ñ0.0.0.0¬O¤£¹ïªº¡C

³o­Óhc_srcip³Ìª½±µ¡A¤]³Ì¾A¦Xªº¦ÛµM¬O°t¸m¦bAPV¤Wªº½u¸ôIP¡C
¥Ñ½u¸ôIP¨Ó°»´ú¸Ó½u¸ôªºDefault Gateway°µHealth check¬O¦A¾A¦X¤£¹Lªº¡C

¥H¤W¤å½d¨Ò¨Ó»¡¡AÀ³¸Ó¬O172.17.1.1¡C

Powered by: Burning Board 1.1.1 2001 by WoltLab
Taiwan Translation by Achi