lb route 相关的一些问题

lb route 相关的一些问题

==========================

查看系统平台和版本

> show hardware
    Platform: NetScaler Virtual Appliance
    Manufactured on: //
    CPU: 3192MHZ
    Host Id: 000c294ffa77
    Serial no: HE2H81UJ47
    Encoded serial no: 891e0000cb254307ee9a
 Done
>
> show version
    NetScaler NS12.: Build 56.20.nc, Date: Dec  , ::
 Done
> 

进行 lb route 配置

虚拟服务器必须配置固定的IP地址和端口以及协议
协议: ANY IP地址: 0.0.0.0 端口: 0

LLB的负载均衡虚拟服务器的名字建议命名为: lb_vsrv_isp_llb_all lb_vsrv_isp_llb_ct lb_vsrv_isp_llb_cu lb_vsrv_isp_llb_cmcc lb_vsrv_isp_llb_edu
LLB的虚拟服务的名字建议命名为: svc_isp_ct svc_isp_cu svc_isp_cmcc svc_isp_edu
虚拟服务器支持的负载算法和会话保持算法
支持的负载算法: DESTINATIONIPHASH LEASTBANDWIDTH LEASTPACKETS LRTM ROUNDROBIN SOURCEIPHASH SRCIPDESTIPHASH
支持的会话保持算法: SOURCEIP SRCIPDESTIP DESTIP

> show ip
      Ipaddress        Traffic Domain  Type             Mode     Arp      Icmp     Vserver  State
      ---------        --------------  ----             ----     ---      ----     -------  ------
)    192.168.11.15                   NetScaler IP     Active   Enabled  Enabled  NA       Enabled
)    192.168.10.45                   SNIP             Active   Enabled  Enabled  NA       Enabled
)    192.168.11.5                    SNIP             Active   Enabled  Enabled  NA       Enabled
 Done
> show route
    Network          Netmask          Gateway/OwnedIP  State   Traffic Domain  Type
    -------          -------          ---------------  -----   --------------  ----
)    0.0.0.0          0.0.0.0          192.168.10.1     UP                    STATIC
)    127.0.0.0        255.0.0.0        127.0.0.1        UP                    PERMANENT
)    192.168.10.0     255.255.255.0    192.168.10.45    UP                    DIRECT
)    192.168.11.0     255.255.255.0    192.168.11.15    UP                    DIRECT
 Done
>
> enable ns mode usnip
 Done
> add server srv_route1 9.9.9.9
 Done
> add server srv_route2 192.168.30.1
 Done
> add server srv_route3 192.168.10.1
 Done
> add service svc_route1 srv_route1 any *
 Done
> add service svc_route2 srv_route2 any *
 Done
> add service svc_route3 srv_route3 any *
 Done
> bind service svc_route1 -monitorName ping
 Done
> bind service svc_route2 -monitorName ping
 Done
> bind service svc_route3 -monitorName ping
 Done
> show service -summary
---------------------------------------------------------------------------------------------
      Name        State           IP Addr           Port  Protocol   MaxClients  MaxReqs
---------------------------------------------------------------------------------------------
     svc_route1  UP              srv_route1        *     ANY
     svc_route2  UP              srv_route2        *     ANY
     svc_route3  UP              srv_route3        *     ANY
 Done
>
> add monitor mon_tcp_llb TCP -destIP 114.114.114.114 -destPort  -Transparent YES -LRTM DISABLED
 Done
> add monitor mon_ping_llb PING -destIP 114.114.114.114 -Transparent YES -LRTM DISABLED
 Done
> bind service svc_route1 -monitorName mon_tcp_llb
 Done
> bind service svc_route2 -monitorName mon_tcp_llb
 Done
> bind service svc_route3 -monitorName mon_tcp_llb
 Done
> show service -summary
---------------------------------------------------------------------------------------------
      Name        State           IP Addr           Port  Protocol   MaxClients  MaxReqs
---------------------------------------------------------------------------------------------
     svc_route1  DOWN            srv_route1        *     ANY
     svc_route2  DOWN            srv_route2        *     ANY
     svc_route3  UP              srv_route3        *     ANY
 Done
>
> add lb vserver lb_vsrv_isp1 ANY 0.0.0.0  -persistenceType DESTIP -lbMethod ROUNDROBIN
 Done
> bind lb vserver lb_vsrv_isp1 svc_route1
 Done
> add lb vserver lb_vsrv_isp2 ANY 0.0.0.0  -persistenceType DESTIP -lbMethod ROUNDROBIN
 Done
> bind lb vserver lb_vsrv_isp2 svc_route2
 Done
> add lb vserver lb_vsrv_isp3 ANY 0.0.0.0  -persistenceType DESTIP -lbMethod ROUNDROBIN
 Done
> bind lb vserver lb_vsrv_isp3 svc_route3
 Done> 

问题1: 添加服务器的IP地址，不能为D类和E类的IPv4地址。

D类地址 前四位为1110，注意是位
    1、不分网络地址和主机地址。
    2、地址范围：224.0.0.1 --- 239.255.255.254

E类地址 前五位为11110，注意是位
    1、不分网络地址和主机地址
    2、地址范围：240.0.0.1 --- 255.255.255.254

> add server srv_route4 223.255.255.255
 Done
> rm server srv_route4
 Done
> add server srv_route4 224.0.0.0
ERROR: Operation not permitted
> add server srv_route4 224.0.0.1
ERROR: Operation not permitted
> add server srv_route4 239.255.255.254
ERROR: Operation not permitted
> add server srv_route4 239.255.255.255
ERROR: Operation not permitted
> add server srv_route4 240.0.0.0
ERROR: Operation not permitted
> add server srv_route4 240.0.0.1
ERROR: Operation not permitted
> add server srv_route4 255.255.255.254
ERROR: Operation not permitted
> add server srv_route4 255.255.255.255
ERROR: Operation not permitted
> 

问题2: 添加路由项时，若网关与设备不在同一网段(简单理解即没有与之互通的SNIP)，则操作失败，提示【ERROR: The gateway is not directly reachable】

> show ip
      Ipaddress        Traffic Domain  Type             Mode     Arp      Icmp     Vserver  State
      ---------        --------------  ----             ----     ---      ----     -------  ------
)    192.168.11.15                   NetScaler IP     Active   Enabled  Enabled  NA       Enabled
)    192.168.10.45                   SNIP             Active   Enabled  Enabled  NA       Enabled
)    192.168.11.5                    SNIP             Active   Enabled  Enabled  NA       Enabled
 Done
>
> show route
    Network          Netmask          Gateway/OwnedIP  State   Traffic Domain  Type
    -------          -------          ---------------  -----   --------------  ----
)    0.0.0.0          0.0.0.0          192.168.10.1     UP                    STATIC
)    127.0.0.0        255.0.0.0        127.0.0.1        UP                    PERMANENT
)    192.168.10.0     255.255.255.0    192.168.10.45    UP                    DIRECT
)    192.168.11.0     255.255.255.0    192.168.11.15    UP                    DIRECT
 Done
>
> add route 192.168.30.0 255.255.255.0 192.168.30.1
ERROR: The gateway is not directly reachable
> 

问题3: 对于与设备不在同一网段的服务(简单理解即没有与之互通的SNIP)，此服务绑定的透传类型(-Transparent YES)的健康检查监视器 mon_tcp_llb，健康检查失败，提示信息为【Failure - Internal error: resource unavailable to send probe.】

> show service svc_route1
    svc_route1 (9.9.9.9:*) - ANY
    State: DOWN
    Last state change was at Thu Aug  ::
    Time since last state change:  days, ::13.350
    Server Name: srv_route1
    Server ID : None     Monitor Threshold :
    Max Conn:     Max Req:     Max Bandwidth:  kbits
    Use Source IP: NO
    Client Keepalive(CKA): NO
    Access Down Service: NO
    TCP Buffering(TCPB): NO
    HTTP Compression(CMP): NO
    Idle timeout: Client:  sec    Server:  sec
    Client IP: DISABLED
    Cacheable: NO
    SC: OFF
    SP: OFF
    Down state flush: ENABLED
    Monitor Connection Close : NONE
    Appflow logging: ENABLED
    Process Local: DISABLED
    Traffic Domain: 

)    Monitor Name: mon_tcp_llb
        State: DOWN    Weight:     Passive:
        Probes:     Failed [Total:  Current: ]
        Last response: Failure - Internal error: resource unavailable to send probe.
        Response Time: 0.0 millisec
)    Monitor Name: ping
        State: UP    Weight:     Passive:
        Probes:     Failed [Total:  Current: ]
        Last response: Success - ICMP echo reply received.
        Response Time: 273.67 millisec
 Done
> show service svc_route2
    svc_route2 (192.168.30.1:*) - ANY
    State: DOWN
    Last state change was at Thu Aug  ::
    Time since last state change:  days, ::13.220
    Server Name: srv_route2
    Server ID : None     Monitor Threshold :
    Max Conn:     Max Req:     Max Bandwidth:  kbits
    Use Source IP: NO
    Client Keepalive(CKA): NO
    Access Down Service: NO
    TCP Buffering(TCPB): NO
    HTTP Compression(CMP): NO
    Idle timeout: Client:  sec    Server:  sec
    Client IP: DISABLED
    Cacheable: NO
    SC: OFF
    SP: OFF
    Down state flush: ENABLED
    Monitor Connection Close : NONE
    Appflow logging: ENABLED
    Process Local: DISABLED
    Traffic Domain: 

)    Monitor Name: mon_tcp_llb
        State: DOWN    Weight:     Passive:
        Probes:     Failed [Total:  Current: ]
        Last response: Failure - Internal error: resource unavailable to send probe.
        Response Time: 0.0 millisec
)    Monitor Name: ping
        State: UP    Weight:     Passive:
        Probes:     Failed [Total:  Current: ]
        Last response: Success - ICMP echo reply received.
        Response Time: 0.344 millisec
 Done
> show service svc_route3
    svc_route3 (192.168.10.1:*) - ANY
    State: UP
    Last state change was at Thu Aug  ::
    Time since last state change:  days, ::40.260
    Server Name: srv_route3
    Server ID : None     Monitor Threshold :
    Max Conn:     Max Req:     Max Bandwidth:  kbits
    Use Source IP: NO
    Client Keepalive(CKA): NO
    Access Down Service: NO
    TCP Buffering(TCPB): NO
    HTTP Compression(CMP): NO
    Idle timeout: Client:  sec    Server:  sec
    Client IP: DISABLED
    Cacheable: NO
    SC: OFF
    SP: OFF
    Down state flush: ENABLED
    Monitor Connection Close : NONE
    Appflow logging: ENABLED
    Process Local: DISABLED
    Traffic Domain: 

)    Monitor Name: mon_tcp_llb
        State: UP    Weight:     Passive:
        Probes:     Failed [Total:  Current: ]
        Last response: Success - TCP syn+ack received.
        Response Time: 0.0 millisec
)    Monitor Name: ping
        State: UP    Weight:     Passive:
        Probes:     Failed [Total:  Current: ]
        Last response: Success - ICMP echo reply received.
        Response Time: 0.157 millisec
 Done
> 

问题4: 对于与设备不在同一网段的服务(简单理解即没有与之互通的SNIP)，绑定此服务的虚拟服务器，添加 lb route 使用此虚拟服务器作为网关，执行失败，报错提示【ERROR: Service parameters are invalid for LLB/PBR VIP】

> add lb route 223.255.252.0 255.255.254.0 lb_vsrv_isp1
ERROR: Service parameters are invalid for LLB/PBR VIP
>
> add lb route 223.223.192.0 255.255.240.0 lb_vsrv_isp2
ERROR: Service parameters are invalid for LLB/PBR VIP
>
> add lb route 223.120.0.0 255.248.0.0 lb_vsrv_isp3
 Done
>
> show lb route
    Network          Netmask          Traffic Domain  VIP                  Flags
    -------          -------          --------------  ---                  -----
)    223.120.0.0      255.248.0.0                     lb_vsrv_isp3         UP
 Done
>
> show route
    Network          Netmask          Gateway/OwnedIP  State   Traffic Domain  Type
    -------          -------          ---------------  -----   --------------  ----
)    0.0.0.0          0.0.0.0          192.168.10.1     UP                    STATIC
)    127.0.0.0        255.0.0.0        127.0.0.1        UP                    PERMANENT
)    192.168.10.0     255.255.255.0    192.168.10.45    UP                    DIRECT
)    192.168.11.0     255.255.255.0    192.168.11.15    UP                    DIRECT
)    223.120.0.0      255.248.0.0      lb_vsrv_isp3     UP                    |LBROUTE
 Done
>
> show ip
      Ipaddress        Traffic Domain  Type             Mode     Arp      Icmp     Vserver  State
      ---------        --------------  ----             ----     ---      ----     -------  ------
)    192.168.11.15                   NetScaler IP     Active   Enabled  Enabled  NA       Enabled
)    192.168.10.45                   SNIP             Active   Enabled  Enabled  NA       Enabled
)    192.168.11.5                    SNIP             Active   Enabled  Enabled  NA       Enabled
 Done
> 

============= End