Dell 3-DNS manuale d’uso

3-DNS ® Administrator Guide version 4.5 MAN-0046 -02[...]

[...]

3-DNS ® Administrator Guide i Product V ersion This manual applies to v ersion 4.5 of 3 -DNS® Controller. Legal Notices Copyright Information in this do cument is subject to change without notice. © 2002 Dell Computer Corporation. All r ights reserved. Reproduction in any manner whatsoev er without the written permission of Dell Computer Corpora[...]

ii Standards Compliance The product conforms to ANSI/UL Std 1950 and Certified to CAN/CSA Std. C22.2 No. 950. Acknowledgments This product includes software developed by the Univer sity of California, Berke ley and its contributors . This product includes software developed by the Comp uter Systems Engineering Group at the Lawrence Berkeley Laborat[...]

3-DNS ® Administrator Guide iii This product includes Malloc library softw are de veloped by Mark Moraes. (© 1988, 1 989, 1993, University of Toronto). This product includes open SSL sof tware developed by Eric Yo ung (eay@cryptsoft.com ), (© 1995-1998) . This product includes open SSH software develop e d by Tatu Ylonen (ylo@cs.hut.fi) , Espoo,[...]

iv[...]

Table of Contents[...]

[...]

Table of Contents 3-DNS ® Administrator Guide vii 1 Introduction IMPORTANT HARDWARE INFORMA TION .......... ........... ............. ........... ............ ... 1-1 Getting started ............ ........... ......... ........... ........... ........... ........... ......... ........... ........... .... .. 1-1 Choosing a configuration tool .......[...]

Table of Contents viii Setting the in terface media type ....... ........... ......... ........... ........... ........... ......... ........ 3-7 Configuring VLANs and IP addresses ...... ........... ........... ........... ............. ............ ... 3-7 Configuring a default gateway pool ....... ............ ........... ........... ...........[...]

Table of Contents 3-DNS ® Administrator Guide ix 6 Configuring a Globally-D istributed Network Understanding a global ly-distributed network ........... ............. ........... ........... .............. ... 6-1 Using Topology load balanci ng ........... ........... ............ ...................... ...................... ........ 6-2 Setting [...]

Table of Contents x Running the 3dns_add script .. ................................. ............ ........... ......... ........ ............. 10-4 Verifying the configurati on ........ ............ ........... ........... ........... ........... ........... ........... .... 10-4 Glossary Index[...]

1 Introduction • IMPORTANT HARDWARE INFORMATION • Getting started • Using the Administrator Kit • What is the 3-DNS Controller? • What’s new in version 4.5 • Finding help and technical support resources[...]

[...]

Introduction 3-DNS ® Administrator Guide 1 - 1 IMPORTANT HARDWARE INFORMATION References to hardware and upgrades contained in this document are specific to F5 Networks hardware pr odu cts. For informat ion concerning the initial deployment of your system , see the Deployment Guide that w as shipped with your system. Fo r in-depth Dell-specific ha[...]

Chapter 1 1 - 2 ◆ Working with Global Avai lability Load Balancing This chapter describes the components of the Global Availability load balancing mode. ◆ Adding a 3-DNS Controller to an Existing Network This chapter describes the tasks you complete to configure an additi onal 3-DNS Controller in a network that al ready contains one o r more 3-[...]

Introduction 3-DNS ® Administrator Guide 1 - 3 Please note that your li cense allows you to manage a maximum o f 100 IP addresses in the NameSurfer applicati on. For more information, refer to the end-user license agreement included in your product ship ment. 3-DNS Maintenance menu The 3-DNS Maintenance menu is a command line utility that runs scr[...]

Chapter 1 1 - 4 ◆ 3-DNS Reference Guide The 3-DNS Reference Guide provides basic descriptions of individual 3-DNS objects, such as wide IPs, poo ls, virtual servers, load balancing modes, the big3d agent, resource records, a nd product ion rules. It also provides syntax information for 3dnsmaint commands, configuration utilities, the wideip.conf [...]

Introduction 3-DNS ® Administrator Guide 1 - 5 Identifying command syntax We show actual, complete commands in bold Courier text. Note that we do not include the correspon ding screen prompt, un less the command is shown in a figure that depicts an entire command line screen. For example, the following command sets the 3- DNS Controller load balan[...]

Chapter 1 1 - 6 • Set up load balancing amon g BIG- IP systems, EDGE-FX Caches, and other load-balancing hosts • Monitor real-time netwo rk conditions Internet protocol and network management support The 3-DNS Controller supports both the standard DNS pro tocol and the 3-DNS iQuery protocol (a protocol used for collecting dynamic load balancing[...]

Introduction 3-DNS ® Administrator Guide 1 - 7 Controller supports a variety o f media options, includin g Fast Ethernet, and Gigabit Ethernet; the 3-DNS Controller also supp orts multiple network interface cards that can provide redundant or alternate paths to the network. Note If you use NameSurfer to manage your DNS zone files, you can configur[...]

Chapter 1 1 - 8 The 3-DNS Controller actually supports two methods of checking the status of the peer system in a redundant system: ◆ Hardware-based fail-over In a redundant system that has been set u p with hardware-b ased fail-over, the two units in the system are conn ected to each other directly using a fail-over cable attached to the serial [...]

Introduction 3-DNS ® Administrator Guide 1 - 9 Once the 3-DNS Controller returns a DNS answer to an LDNS, the conversation between the LDNS and the 3-D NS Controller ends, and the client connects to the IP address retu rned by the 3-DNS Co ntroller. Unlike the 3-DNS Controller, the BIG-IP syst em sits between the client and the content servers. It[...]

Chapter 1 1 - 10 Expanded statistics The statistics screens on the 3-DNS Controller have been enhanced and expanded. You can now view statis tics for the foll owing objects: • The Detailed Wide IP Statistics screen, available from the Wide IP Statistics screen, now d isplays info rmation about virtual servers in the context of the wide IP pools o[...]

Introduction 3-DNS ® Administrator Guide 1 - 11 Finding help and technical support resources You can find additi onal technical documentation about the 3-DNS Controller in the follow ing locations: ◆ Release notes Release notes for the 3-DNS Contro ller are available from the home screen of the Configuration utility. The release no te contains t[...]

Chapter 1 1 - 12[...]

2 Planning the 3-DNS Configuration • Managing traffic on a global network • Planning issues for the network setup • Choosing the 3-DNS mode • Planning issues for the lo ad balancing configuration • Using advanced traffic control features[...]

[...]

Planning the 3-DNS Configuration 3-DNS ® Administrator Guide 2 - 1 Managing traffic on a global network[...]

Chapter 2 2 - 2 Figure 2.1 A sample network layout showing data paths Synchronizing configurations and broadcasting performance metrics 3-DNS Controllers typically work in sync gro ups, where a group of controllers shares load balancing confi guration set tings. In a sync group, any system that has new configuration chan ges can broadcast the chang[...]

Planning the 3-DNS Configuration 3-DNS ® Administrator Guide 2 - 3 the big3d agents collect the data, they each broadcast the collected data to all systems in the network, again allowing for sim ple and reliable metrics distribution. Using a 3-DNS Controller as a standard DNS server When a client requests a DNS reso lution for a domain name, an LD[...]

Chapter 2 2 - 4 Figure 2.2 illustrates the specific steps in the name resolu tion process. 1. The client connects to an Internet Service Provider (ISP) and queries the local DNS server to resolve the domai n name www.siterequest.com . 2. If the information is not alread y in the LDNS server’s cache, the local DNS serv er queries a root serv er (s[...]

Planning the 3-DNS Configuration 3-DNS ® Administrator Guide 2 - 5 ◆ EDGE-FX systems An EDGE-FX virtual server maps to cach ed content that gets refreshed at frequent intervals. ◆ Generic host A host virtual server can be an IP a ddress or an IP alias that hosts the content. ◆ Other load balan cing hosts Other load balancing hosts map virtua[...]

Chapter 2 2 - 6 Planning issues for the network setup After you finish running the Setup uti lity, and connect each system to the network, you can set up the netwo rk and load balan cing configuration on one 3-DNS Controller, and let the sync group feature automati cally broadcast the configuration to the other 3-D NS Controllers in the network. Yo[...]

Planning the 3-DNS Configuration 3-DNS ® Administrator Guide 2 - 7 can only be configured using the Setup utility or its com ponents. (To make changes to other base network comp onents, such as domain names, default routes, and certifi cate information , refer to Chapter 3, Usin g the Setup Utility , wh ich describes the Setup utility and its vari[...]

Chapter 2 2 - 8 group receive broadcasts of metrics data from the big3d agents. All members of the sync group also receive broadcasts of updated configuration settings from the 3-DNS Controller that has th e latest config uration changes. When you define the sync group, you select the sync group mem bers from the list of 3-DNS Controllers you have [...]

Planning the 3-DNS Configuration 3-DNS ® Administrator Guide 2 - 9 ◆ 3-DNS Controllers communicatin g with other 3-DNS Controllers To allow 3-DNS Controllers t o commun icate with each other, you must set up ssh and scp utilities. ◆ 3-DNS Controllers communicatin g with BIG-IP systems and EDGE-FX systems To allow the 3-DNS Controller to commun[...]

Chapter 2 2 - 10 big3d agent, managing the factories, opening the UDP ports, and working with firewalls, review Chapter 5, Probing an d Metrics Collection , in the 3-DNS Reference Guide . Choosing the 3-DNS mode The 3-DNS Controller can run in one of three modes: no de, bridge, or router. The base network configuration changes depending on wh ich m[...]

Planning the 3-DNS Configuration 3-DNS ® Administrator Guide 2 - 11 Using the 3-DNS sync hronization features If you use the advanced synchronization features of the 3-DNS Controller, we strongly recommend that you configu re each 3-DNS Controller to ru n as authoritative for the domain. This type of configuration offers the followin g advantages:[...]

[...]

3 Using the Setup Utility • Creating the initial software configuration with the Setup utility • Connecting to the 3-DNS Controller for the first time • Using the Setup utility for the first time • Running the Setup utility after creating the initial software configuration[...]

[...]

Using the Setup Utility 3-DNS ® Administrator Guide 3 - 1 Creating the initial software configuration with the Setup utility Once you install and connect the hardware and obtain a license, the next step in the installation process is to turn the system on an d run the Setup utility. The Setup utility defines the initial conf iguration settings req[...]

Chapter 3 3 - 2 Connecting to the 3-DNS Controller for the first time The Setup utility prompts you to enter the same information, wheth er you run the utility from a web br owser, or from the command lin e. If you run the utility from the console, no reboot is necessary; if you run the ut ility from the web, the unit reboot s automatically; if you[...]

Using the Setup Utility 3-DNS ® Administrator Guide 3 - 3 To set up an IP alias fo r th e alternate IP address The IP alias must be in the same netwo rk as the default IP address yo u want the 3-DNS Controller to use. For ex ample, on a UNIX work station, yo u might create one of the foll owing aliases: ◆ If you want the unit to use the default [...]

Chapter 3 3 - 4 4. On the Configuration St atus screen, click Setup Utility . 5. Fill out each screen using the in formation from the Setup utility configuration list. After you complete the Setup utility , the 3-DNS Controller reboots and uses the new set tings you defi ned. Note You can rerun the Setup utility from a web browser at any time by cl[...]

Using the Setup Utility 3-DNS ® Administrator Guide 3 - 5 Note You can rerun the Setup utility at any time using the setup command. Using the Setup utility for the first time The following sections provide detailed in formation about the settings th at you define in the Setup ut ility. Keyboard type Select the type of keyboard you want to use with[...]

Chapter 3 3 - 6 Host name The host name identifies the 3- DNS Controller itself. Host na mes must be fully qualified domain names (FQDNs). The host portion of the name must start with a letter, and must be at least two characters. The FQDN must be less than or equal to 256 characters, but not less than 1 character. Each label part of the name must [...]

Using the Setup Utility 3-DNS ® Administrator Guide 3 - 7 Setting the interface media type Configure media settings for each interface. The media type options depend on the network interface card included in your hardware configuration. The Setup utility prompts y ou with the settings that apply to the interface installed in the unit. The 3-DNS Co[...]

Chapter 3 3 - 8 Note The IP address of the external VLAN is not the IP address of your site or sites. The IP addresses of the sites them selves are specified by the virtual IP addresses associated with each virtual se rver you configure. Assigning interf aces to VLANs After you configure the VLANs that you want to use on the 3-DNS Controller, you c[...]

Using the Setup Utility 3-DNS ® Administrator Guide 3 - 9 3-DNS web server configuration also requires that you define a password for the admin user. If SSL is available, th e configuration also generates authentication certificates. Note If the host name portion of the FQDN is greater than 64 charac ters, the 3-DNS software cannot use it for the [...]

Chapter 3 3 - 10 When the Setup utility prompts yo u to enter an IP address for administration, you can type a single IP ad dress or a list of IP addresses, from which the 3-DNS Controller w ill accept administra tive connections (either remote shell connections, or connections to th e web server on the 3-DNS Controller). To specify a range of IP a[...]

Using the Setup Utility 3-DNS ® Administrator Guide 3 - 11 Configuring the 3-DNS mode The 3-DNS Controller can run in three different modes: node, bridge, and router. ◆ Node mode The node mode is the traditional instal lation of the 3-DNS Contro ller. The 3-DNS Controller replaces a DNS server in a network and uses the DNS server’s IP address.[...]

Chapter 3 3 - 12 Using the local LDAP database only When you run th e Setup utility, you are not required to configure an external LDAP or RADIUS database to manage user authentication. Instead, you can use the default authentication mechanism, which is the 3-DNS Controller’s local LDAP database. In this case, the local LDAP database manages not [...]

Using the Setup Utility 3-DNS ® Administrator Guide 3 - 13 users. For detailed instructions on setting roles for users, see Managing user accounts , in Chapter 6, Administration and Monitoring , in the 3-DNS Reference Guide . Configuring external RADIUS authentication When you configure the un it to use an external RADIUS server for user authentic[...]

Chapter 3 3 - 14 2. Edit the zone file in formation as req uired. For help with the NameSurfer app lication, click Help in the NameSurfer navigation pane. Note Remember that if you run the 3-DNS C ontroller in bridge o r router mode, the system is not authoritative for any domains, so the NameSu rfer application is not availab le to manage any zone[...]

Using the Setup Utility 3-DNS ® Administrator Guide 3 - 15 • Configure Telnet • Set time zone • Remote authentication • License activation • Configure remote access (for configuration synchronization) • Set support access Options available only th rough the Setup utility menu This section contains descriptions of options that are avail[...]

Chapter 3 3 - 16 want to embed as objects in the porta l object reference. Typically, in a redundant system, this list includes the fail-ove r IP address of the other 3-DNS unit in the redundant syst em. This option prompts you to set the portal to use IP addresses instead of DNS names. If the portal is set to use IP addresses, the 3-DNS Controller[...]

Using the Setup Utility 3-DNS ® Administrator Guide 3 - 17 If the service port for FTP is closed, this utility opens the service port to permit FTP connections to the 3-DNS Controller. Although you can configure FTP and Telnet on a 3-D NS Controller, we recommend that you leave these servi ces disabled, for security reasons.[...]

Chapter 3 3 - 18[...]

4 Post-Setup Tasks • Introduction • Configuring the interfaces • Working with VLANs • Configuring a self IP address[...]

[...]

Post-Setup Tasks 3-DNS ® Administrator Guide 4 - 1 Introduction Setting up the base network for the 3-DN S Controller means configurin g elements such as the 3-DNS Controlle r host name, a default gateway pool, interface media settings, and VLANs and self IP addresse s. Configuration tasks for the BIG-IP base net work are performed using the Setup[...]

Chapter 4 4 - 2 Configuring the interfaces Typically, a 3-DNS Controller has tw o network interfaces. The following sections describe the nam ing conven tion, displaying th e status, setting the media type, and setting th e duplex mode for the interfaces in the 3-DNS Controller. Understanding the inte rface naming convention By convention, the Ethe[...]

Post-Setup Tasks 3-DNS ® Administrator Guide 4 - 3 Setting the media type You can set the media type for the interface card either to the specific media type or to auto for auto detection. If the media type is set to auto and the card does not support auto detection, the default type for that interface is used, for example 100BaseTX . Use the foll[...]

Chapter 4 4 - 4 Working with VLANs A VLAN is a grouping of separate 3-DNS Controller networks that allows those networks to behave as if they were a single local area network, whether or not there is a direct ethernet connection between them. The 3-DNS Controller offers several optio ns that you can configure for a VLAN. These options are su mmariz[...]

Post-Setup Tasks 3-DNS ® Administrator Guide 4 - 5 Figure 4.3 Simple VLAN configuration for a 3-DNS Con troller VLAN flexibility is such that separate IP networks can belon g to a single VLAN, while a single IP network can be split am ong multiple VLANs. (The latter case allows the 3-DNS Controller to be inserted into an existing LAN without renam[...]

Chapter 4 4 - 6 To rename or delete a VLAN using the Configuration utility 1. In the navig ation pane, click Network . The VLANs screen opens. 2. In the VLANs screen, use on e of the following opti ons: • To rename a VLAN, click the VLAN name you want to change. The VLAN properties screen opens. Type the new name in the VLAN name box. • To dele[...]

Post-Setup Tasks 3-DNS ® Administrator Guide 4 - 7 Configuring packet access to VLANs The 3-DNS Controller supports two methods for sending and receiving packets through an interface that is a member of one or more VLANs. These two methods are: ◆ Port-based access to VLANs Packets are accepted for a VLAN becau se the packets have no tags in thei[...]

Chapter 4 4 - 8 Each time you add an interface to a VLAN, either when creating a VLAN or modifying its properties, you can designate that interface as a tagged interface. A single interface can therefore have multiple tags associated with it. The result is that whenever a packet comes into tha t interface, the interface reads the tag that is embedd[...]

Post-Setup Tasks 3-DNS ® Administrator Guide 4 - 9 To configure tag-based access on an existing VLAN using the Configuration utility Configuring tag-based acces s on an existing VLAN means changing the existing status of one or more member interfaces from untagged to tagged . 1. In the navig ation pane, click Network . The VLAN screen opens. 2. Cl[...]

Chapter 4 4 - 10 To enable or disable port lockdown using the Configurati on utility 1. In the navig ation pane, click Network . The VLAN screen opens. 2. Click the VLAN name in the list. The properties screen for that VLAN opens. 3. To enable port lockdown, click a check in the Port Lockdown box. To disable port lockdown, clear the Port Lockdown c[...]

Post-Setup Tasks 3-DNS ® Administrator Guide 4 - 11 To set the fail-over timeout an d arm the fail-safe from the command line Using the vlan command, you may set the timeout period and also arm or disarm the fail-safe. To set the timeout, type: b vlan <vlan_name> timeout <timeout_in_seconds> To arm the fail-safe, type: b vlan <vlan_[...]

Chapter 4 4 - 12 Find the MAC address on both the active and standby unit s, and pick one that is similar but unique. A safe technique for selectin g the shared MAC address follows. Suppose you want t o set up mac_masq on the external in terfaces. Using the b interface show command on the active and standby units, you note that their MAC addresses [...]

Post-Setup Tasks 3-DNS ® Administrator Guide 4 - 13 3. Click the Add button. 4. In the IP Address box, type the self IP address to be assigned. 5. In the Netmask box, type an optional netmask. 6. In the Broadcast box, type an optional broadcast address. 7. If you want to configure the self IP address as a floating address, check the Floating box. [...]

Chapter 4 4 - 14[...]

5 Essential Configuration Tasks • Reviewing the configuration tasks • Setting up a basic configuration • Setting up a data center • Setting up servers • Working with sync groups • Overview of auto-configuration • Configuring global variables[...]

[...]

Essential Configuratio n Tasks 3-DNS ® Administrator Guide 5 - 1 Reviewing the configuration tasks Once you have completed the Setup utility , you set up the network and load balancing aspects of the 3-DNS Contro ll er. The 3-DNS Controller has three essential configuration tasks that all users m ust complete, regardless of the chosen load balanci[...]

Chapter 5 5 - 2 Setting up a basic configuration Each 3-DNS Controller in the network setup mu st have information regarding which data center houses sp ecific servers, and with which other 3-DNS Controllers it can share co nfigurati on and load balanci ng information. A basic network setup incl udes data centers, servers, and one sync group. Once [...]

Essential Configuratio n Tasks 3-DNS ® Administrator Guide 5 - 3 domain name to a pool of virtual servers, and it specifies the load balancing modes that the 3-DNS Co ntroller uses to choose a virtual server from the pool. When a local DNS server requests a connection to a specific domain name, the wide IP definition specifies which virtual server[...]

Chapter 5 5 - 4 Figure 5.1 Example of a multiple data center setup When you add servers to the network setup, you assign the servers to the appropriate data centers. To configure a data center us ing the Configuration utility 1. In the navig ation pane, click Data Centers . 2. On the toolbar, click Add Data Center . The Add New Data Center screen o[...]

Essential Configuratio n Tasks 3-DNS ® Administrator Guide 5 - 5 Setting up servers There are five types of servers you can configure on a 3-DNS Control ler: 3-DNS Controllers, BIG-IP systems, EDGE-FX systems, hosts, and routers. At the minimum, your network includ es one 3-DNS Controller, and at least one server (BIG-IP system, EDGE-FX sy stem, o[...]

Chapter 5[...]

Essential Configuratio n Tasks 3-DNS ® Administrator Guide 5 - 7 To add virtual servers using the Configuration utility 1. In the navig ation pane, expand the Servers item, and then click BIG-IP . 2. In the table, find the BIG-IP system that you just added. 3. Click the entry in it s BIG-IP Virtual Servers column. 4. On the toolbar, click Add Virt[...]

Chapter 5 5 - 8 5. Add the rest of the settings as needed. Note : When you have finished defining the BIG-IP system, you can add the 3-DNS Controller module to the configuration. 6. In the navig ation pane, expand the Servers item, and then click 3-DNS . The 3-DNS List screen opens. 7. On the toolbar, click Add 3-DNS . The Add 3-DNS screen opens. 8[...]

Essential Configuratio n Tasks 3-DNS ® Administrator Guide 5 - 9 3. Add the new router settings. Fo r help on defining a router, click Help on the toolbar. Note For details on how to configure a router f rom the command li ne, refer to Appendix A, 3-DNS Configuration File , in the 3-DNS Reference Guide . Defining EDGE-FX systems An EDGE-FX system [...]

Chapter 5 5 - 10 If you do not turn on Discovery when you add the EDGE-FX system to the configuration, then use the followin g procedure to add virtual servers to the EDGE-FX definition in the configuration. To add virtual servers using the Configuration utility 1. In the navig ation pane, click Servers , then click EDGE-FX . 2. In the table, find [...]

Essential Configuratio n Tasks 3-DNS ® Administrator Guide 5 - 11 Important Auto-configuratio n automatically collects the virt ual server configuration information for any load-balancing hosts yo u may have in your network (with the exception of Cisco ® LocalD irectors). For more informa tion about auto-configuration, see Overview of auto-config[...]

Chapter 5 5 - 12 Configuring host SNMP settings After defining a host server, you need to config ure its SNMP settings if you want to use SNMP host probing. Remember that you must first set up at least one SNMP probing factory on a ny 3-DNS Controller, BIG-IP system, EDGE-FX Cache, or GLOBAL-SI TE Controller that runs the big3d agent and is in the [...]

Essential Configuratio n Tasks 3-DNS ® Administrator Guide 5 - 13 Viewing host performance metrics The Configuration utility displ ays the host metrics in the Host Statisti cs screen. The 3-DNS Controller bases the advanced load balancing decisions on packet rate, kilobytes per second, and current conn ections metrics, bu t the Host Statistics scr[...]

Chapter 5 5 - 14 To define a sync group using the Configuration utility 1. In the navig ation pane, click 3-DNS Sync . The System - Add a New S ync Group screen opens. 2. In the New Sync Group Name box, type the name of t he new sync group and click Add. The Add a 3-DNS to a Sync Group screen opens. 3. From the list of 3-D NS Controllers, first sel[...]

Essential Configuratio n Tasks 3-DNS ® Administrator Guide 5 - 15 4. Save and close the file. 5. Commit the changes to the configurati on by typing: 3ndc reload Overview of auto-configuration The 3-DNS Controller autom atically retrieves confi guration details from BIG-IP systems, hosts, and other 3-DNS Controllers that you add to th e 3-DNS confi[...]

Chapter 5 5 - 16 host systems in the network. Instead, you must make all changes to the configuration either by usi ng the Configuration util ity, or by editing th e wideip.conf file. Note that this is the defaul t setting . Note In the Configurat ion utility, auto -configuration is labeled Discovery . To modify the auto-configuration setting for a[...]

Essential Configuratio n Tasks 3-DNS ® Administrator Guide 5 - 17 3. In the Discovery box, select one of the following settings: ON , ON/NO DELETE , or OFF . 4. Click Update . The configuration updates with the new set ting. Configuring global variables The global variables determine the default settings for iQuery messages, synchronization, encry[...]

Chapter 5 5 - 18[...]

6 Configuring a Globally-Distributed Network • Understanding a globally-distributed network • Using Topology load balancing • Setting up a globally -distributed network configuration • Additional configuratio n settings and tools[...]

[...]

Configuring a Glob ally-Distributed Network 3-DNS ® Administrator Guide 6 - 1 Understanding a globally-distributed network When you are familiar wi th your traffic patterns an d are expanding into a global marketplace, you can use the 3-DN S Controller to distribute requests in an efficient and seamless manner usin g Topology load balancing. When [...]

Chapter 6 6 - 2 Using Topology load balancing The Topology load balancing mo de is optimal for organizations that have data centers in more than one count ry or on more than one continent. The 3-DNS Controller enables topology-base d load balancing by resolving DNS requests to the geographically cl osest server. The traditional topolo gy load balan[...]

Configuring a Glob ally-Distributed Network 3-DNS ® Administrator Guide 6 - 3 Adding data centers to the globally-distributed network configuration The first task you perform is to add your data centers to the 3-DNS configuration. To add data centers using the Configuration utility 1. In the navig ation pane, click Data Centers . The Data Centers [...]

Chapter 6 6 - 4 2. Click Add 3-DNS on the toolbar. The Add New 3-DNS screen opens. For information and help on th e sp ecific settings on any screen in the Configuratio n utility, click Help on the toolbar. 3. Add the 3-D NS Controller information. 4. Repeat the previous steps to a dd any additional 3-DNS Controllers to the configur ation. Configur[...]

Configuring a Glob ally-Distributed Network 3-DNS ® Administrator Guide 6 - 5 7. Once you have configured your first BIG-IP system , you can repeat the previous steps to add all of th e additional BIG-IP systems to the 3-DNS configuration. Tip For information and hel p on the specific settings on any screen in the Configuration utilit y, click Hel[...]

Chapter 6 6 - 6 Configuration not es For the globally-distributed networ k configuration shown in Figure 6.1, on pag e 6-1, we have set up o ne wide IP, labeled www.siterequest.com , and we added two pools to the wide IP, americas_pool and europ e_pool . When you configure the topology records, as explained in the next section, we designate these t[...]

Configuring a Glob ally-Distributed Network 3-DNS ® Administrator Guide 6 - 7 With this topology statement, in our exam ple configuration, queries to resolve www.siterequest.com from local DNS servers somewhere in North America get responses from virtual servers in the pool americas_pool . All other queries to resolve www.siterequest.com get respo[...]

Chapter 6 6 - 8 Other resources In addition to setting limits, the 3-DNS Controller prov ides the following resources to help you maintain your configuration and mo nitor system performance. Monitoring system performance The Statistics screens in the Confi guration utility provide a great deal of information about the 3-DNS Control 56.2.349Fabo y c[...]

7 Configuring a Content Delivery Network • Introducing the cont ent delivery network • Deciding to use a CDN provider • Setting up a CDN pr ovider configuration • Ensuring resource availability • Monitoring the configuration[...]

[...]

Configuring a Conten t Delivery Network 3-DNS ® Administrator Guide 7 - 1 Introducing the content delivery network A content delivery network (CDN) is a network of clusters that includes devices designed and configured to maximize the speed at which a content provider's content is delivered. The purpose and goal of a content delivery network [...]

Chapter 7 7 - 2 Reviewing a sample CDN configuration The two following diagrams illustr ate how DNS query resolutions for content delivery networks are processed by the 3-DNS Controller. In the example, the content provider for ww w.download.siterequest.com has two data centers, one in San Jose, California (see Figure 7.1), and one in Washington, D[...]

Configuring a Conten t Delivery Network 3-DNS ® Administrator Guide 7 - 3 CDN provider (2C). The CDN provider’s DNS server responds with t he IP address of the best virtual server for resolution among those in the CDN (2D). The CDN provider’s cache servers resolve to the origin site virtual servers for cache refreshes using a different domain [...]

Chapter 7 7 - 4 Deciding to use a CDN provider The 3-DNS Controller is well-suited to serve as the wide-area traffic manager (WATM) for CDNs that have man y of the following attr ibutes: ◆ The CDN provider has a global presence around the edge of the Internet. ◆ The CDN provider outsources a content deli very infrastructur e to content provider[...]

Configuring a Conten t Delivery Network 3-DNS ® Administrator Guide 7 - 5 Setting up a CDN provider configuration The following sections describe the specific tasks you perform to set up a CDN provider configuration, as sh own in the example co nfiguration on page 7-2. The tasks are as follows: • Adding data cen ters • Adding 3- DNS Controll e[...]

Chapter 7 7 - 6 Configuration not e Please note that when you are working with more than one 3-D NS Controller, you create your entire configurati on on one system and then add the second system using the 3dns_add script. The 3dns_add script copies the entire configuration from the fi rst system onto the second system, and synchronizes all of the s[...]

Configuring a Conten t Delivery Network 3-DNS ® Administrator Guide 7 - 7 c) In the Load Balancing Modes, Preferred list, select Round Trip Time . d) In the Load Bala ncing Modes, Alternate list, select Packet Rate . e) In the Load Balancing Modes, Fallback li st, select Round Robin . f) Accept the defaults for the rest of the settings and click N[...]

Chapter 7 7 - 8 You have now set up the load balancing and delegation poo ls for your domain. The last required configuratio n step is to create a topology statement. Adding a topology statement The topology statement contains the topology records that the 3-DNS Controller uses to load balance DNS queries from geo graphically dispersed local DNS se[...]

Configuring a Conten t Delivery Network 3-DNS ® Administrator Guide 7 - 9 Now you have creat ed a topology statement for your CDN, and the 3-D NS Controller can successfully load balance DNS queries based on the locat ion information derived from the DNS query message. For our example, using the topology statement you just created, the 3-DNS Co nt[...]

Chapter 7 7 - 10 Monitoring the configuration The following resources can help you mon itor your configuration and troubleshoot problems. ◆ You can view perfor mance metrics, limit settings, and other details about your data centers, servers, virtual se rvers, wide IPs, and pools in the Statistics screens in the Configuration utility. For m ore i[...]

8 Working with Quality of Service • Overview of Quality of Service • Understanding QOS coefficients • Customizing the QOS equation • Using the Dynamic Ratio option[...]

[...]

Working with Quality of Service 3-DNS ® Administrator Guide 8 - 1 Overview of Quality of Service The Quality of Service mode is a dynamic load balancing mode that includes a configurable combination of the Round Trip Ti me (RTT), Completion Rate, Pack et Rate, Topology, Hops, Lin k Capacity, VS Capacity, and Kilobytes/Second (KBPS) modes. The Qual[...]

Chapter 8 8 - 2 Understanding QOS coefficients Table 8.1 lists each Quality of Service (Q OS) coefficient, its scale, a likely upper limit for each, and whether a higher or lower value is more efficient. If you change the defau lt QOS coefficients, keep the following issues in mind. ◆ Scale The raw metrics for each coefficient are not on the same[...]

Working with Quality of Service 3-DNS ® Administrator Guide 8 - 3 • Emphasis You can adjust coefficients to emphasize one normalized metric over another. For example, by changing th e coefficients to the values shown in Figure 8.1, you are putting the most emphasis on completio n rate. In the preceding example, if the completion rates fo r two v[...]

Chapter 8 8 - 4 To modify QOS coefficients for a specific wide IP using the Configuration utility 1. In the navig ation pane, click Wide IPs . 2. In the Wide IP column, click a wide IP name. The Modify Wide IP screen opens. 3. On the toolbar, click Modify Pool . The Modify Wide IP Pools screen opens. 4. In the Pool Name column, cl ick the name of a[...]

Working with Quality of Service 3-DNS ® Administrator Guide 8 - 5 To assign QOS coefficients for a specific wide IP from the command line 1. Type the following command to en sure that the configuration files contain the same information as the memory cache. 3ndc dumpdb 2. Open the wideip.conf file in a text edito r (either vi or pico ). 3. Locate [...]

Chapter 8 8 - 6 Using the Dynamic Ratio option When the Dynamic Ratio option is turned on, the 3-DNS Control ler treats QOS scores as ratios, and it uses each server in proport ion to the ratio determined by the Q OS calculation. When the Dynamic R atio option is turned off (the default), th e 3-DNS Controller uses only the server w ith the highest[...]

Working with Quality of Service 3-DNS ® Administrator Guide 8 - 7 6. Commit the changes to the configurati on by typing: 3ndc reload pool { name <"pool_name"> [ ratio <pool_ratio> ] dynamic_ratio yes [ rr_ldns < yes | no > ] [ rr_ldns_limit <number> ] [ preferred < completion_rate | ga | hops | kbps | leastconn[...]

Chapter 8 8 - 8[...]

9 Working with Global Availability Load Balancing • Overview of the Global Av ailability load balancing mode • Configuring the Global Availability mode[...]

[...]

Working with Global Av ailability Load Balancing 3-DNS ® Administrator Guide 9 - 1 Overview of the Global Availability load balancing mode You can use the Gl obal Availabilit y mode in one of two ways: either to load balance among wide IP pools, or to load balance within a wide IP pool. When you use the Global Availability mode to load balance amo[...]

Chapter 9 9 - 2 Figure 9.1 shows the 3-D NS Controller using the Global Availability load balancing mode. Figure 9.1 Global Availabilit y mode[...]

Working with Global Av ailability Load Balancing 3-DNS ® Administrator Guide 9 - 3 Configuring the Global Availability mode The following sections describe ho w to configure the Global Availability load balancing mode to load balance amon g pools and to load balance within a pool. To configure the Global Availabi lity load balancing mode among poo[...]

Chapter 9 9 - 4 3. On the toolbar, click Modify Pool . The Modify Wide IP Pools screen opens. 4. In the Pool Name column, cl ick the name of a pool. The Modify Load Balancing screen opens. 5. Select Global Availabilit y as the Preferred , Alternate , or Fallback load balancing mode. 6. Click Update . 7. A popup screen appears, i ndicating that with[...]

Working with Global Av ailability Load Balancing 3-DNS ® Administrator Guide 9 - 5 A Global Availability configuration example With the Global Availability load ba lancing mode, you can configure one data center as your primary service pro vider and have several alternate service providers on standby . In the wideip statement, list the virtual ser[...]

Chapter 9 9 - 6[...]

10 Adding a 3-DNS Controller to an Existing Network • Working with multip le 3-DNS Controllers • Preparing to add a second 3-DNS Controller to your network • Running the 3dns_add script • Verifying the configuration[...]

[...]

Adding a 3-DNS Cont roller to an Exist ing Network 3-DNS ® Administrator Guide 10 - 1 Working with multiple 3-DNS Controllers When you are working with more than one 3-DNS Con troller in your network, and you want the systems to lo ad balance to the same virtual servers, you can create your entire conf ig uration on one system and then add the sec[...]

Chapter 10 10 - 2 Preparing to add a second 3-DNS Controller to your network Before you run the 3dns_add script on any additional 3-DN S Controllers you are adding to your network, yo u should complete the following tasks: ◆ Physically install the second 3-DNS C ontroller in its data center. (For more information on hardw are installation, refer [...]

Adding a 3-DNS Cont roller to an Exist ing Network 3-DNS ® Administrator Guide 10 - 3 Making the existing 3-DNS Cont roller aware of the additional controller Once you have installed the hardware and run the Setu p utility on the new system, you add its configuration informat ion to the existing 3-DNS Controller (the 3-DNS Controller that is alrea[...]

Chapter 10 10 - 4 Running the 3dns_add script You can run the 3dns_add script on the new 3-DNS Controller either by using a remote secure shell session, or by using a monitor and keyboard connected directly to the controller. To run the 3dns_add script 1. At the login prompt on the new controller, type root . 2. At the password prompt, type the pas[...]

Adding a 3-DNS Cont roller to an Exist ing Network 3-DNS ® Administrator Guide 10 - 5 2. In the Server and Big3d columns, make sure the status is up , which is indicated by a green ball. 3. In the E/D column, make sure the systems are enabled . 4. If the status of any of your systems is down , unknown , or unavailable , wait a few minutes and clic[...]

Chapter 10 10 - 6 If the virtual servers belonging to th e wi de IP appear in a pattern that reflects the load balancing mode you selected, you have successfully configured your 3-DNS Controllers. N ote that y ou can repeat the previous procedure for each wide IP you conf igured, and each controll er in the sync group. Note This is the only verific[...]

Glossary[...]

[...]

Glossary 3-DNS ® Administrator Guide Glossary-1 3-DNS Distributed Traffic Controller The 3-DNS Distribut ed Traffic Controll er is a wide area load distribution solution that intelligently allo cates Internet and intranet service requests across geographically distributed netw ork servers. The 3-DNS Distribu ted Traffic Controller is also most oft[...]

Glossary Glossary-2 CDN switching CDN switching is the functionalit y of the 3-DNS Controller that allo ws a user to redirect traffic to a third-party n etwork, or transparen tly switch traffic to a CDN. The tw o features of the 3-DNS Controller that make CDN switching possible are geographic redirect ion and the pool type CDN. CNAME record A canon[...]

Glossary 3-DNS ® Administrator Guide Glossary-3 domain n ame A domain name is a unique name that is associated with one or more IP addresses. Domain names are used in URLs to identify particular Web pages. For example, in the URL http://www .sitereque st.com/index.html , the domain name is siterequest.com . dynamic load balancing modes Dynamic loa[...]

Glossary Glossary-4 Global Availabi lity mode Global Availability is a static load balancing m ode that bases connection distribution on a particular server order, alw ays sending a connection to the first available server in the list. This mo de differs from Round Robin mode in that it searches for an available serv er always starting with the fir[...]

Glossary 3-DNS ® Administrator Guide Glossary-5 to try if t he preferred met hod fails, an d the fallback method specifies the last load balancing mode to use if both the preferred and the altern ate methods fail. load balancing mod e A load balancing mode is the way in whi ch the 3-DNS Controller determines how to distribute connections across an[...]

Glossary Glossary-6 NS record A name server (NS) record i s used to defin e a set of authoritat ive name servers for a DNS zone. A name server is considered authoritative for some given zone when it has a complete set of data for the zone, allowing it to answer queries about the zone on its o wn, without needing to consult another name server. NTP [...]

Glossary 3-DNS ® Administrator Guide Glossary-7 pool ratio A pool ratio is a ratio weight applied to pools in a wide IP. If the Pool LB mode is set to Ratio, the 3-DNS Controller uses each pool for load balancing in proportion to the weight defi ned for the pool. preferred method The preferred method specifies the first load balancing mo de that t[...]

Glossary Glossary-8 Quality of Service load ba lancing mode The Quality of Service load balancing mode is a dynamic load balancing mode that bases connection distribut ion on a configurable combination of the packet rate, completion rat e, round trip time, hops, virtual server capacity, kilobytes per second, and topol ogy information. ratio A ratio[...]

Glossary 3-DNS ® Administrator Guide Glossary-9 root name server A root name server is a master DNS server that maint ains a complete DNS database. There are approximately 13 root name servers in the world that manage the DNS database for the World Wide Web. Round Robin mode Round Robin mode is a static load balancing mode that bases connection di[...]

Glossary Glossary-10 standby unit A standby unit is a system in a redundant system that is always prepared to become the active unit if the active unit fails. static load balancing mod es Static load balancing modes base th e distribution of name resolut ion requests to virtual servers on a pre-defined list of criteria and server and virtual server[...]

Glossary 3-DNS ® Administrator Guide Glossary-11 topology record A topology record specifies a score fo r a local DNS server location endpoint and a virtual server location endpoint. topology score The topology score is the weight as signed to a topology record when the 3-DNS Controller is fil tering the topology record s to find the best virtual [...]

Glossary Glossary-12 watchdog timer card The watchdog timer card is a hardware d evice that monitors the 3-DNS Controller for hardwa re failure. wide IP A wide IP is a collection of one or more domain names that maps to one or more groups of virtual servers mana ged either by BIG-IP systems, EDGE-FX Caches, or by host servers. The 3-DNS Controller [...]

Index[...]

[...]

Index 3-DNS ® Administrator Guide Index-1 /etc/hosts file 4-1 3-DNS Maintenance menu about 1-3 3-DNS modes configuring 3-11 3dns_add script about 10-1 and sync groups 10-1 running the script 10-4 verifying the configuration 10-4 A A records 2-3 active-active configurations and unit ID numbers 3-6 additional systems configuring 10-1 admin user acco[...]

Index Index-2 default IP addresses alternate address 3-2 and IP alias 3-3 overview 3-2 preferred address 3-2 default root password 3-2 default route configuration 3-8 discovery 5-16 modifying 5-15 settings for 5-15 Discovery setting 1-9 DNS master servers 2-3 root servers 2-4 DNS queries delegating to CDN providers 7-2 documentation 1-11 domain nam[...]

Index 3-DNS ® Administrator Guide Index-3 L last resort pool using in a CDN configuration 7-9 LDAP 1-10 LED indicators 3-7 limits settings modifying thresholds 6-7 load balancing modes Global Availability 9-3 Quality of Service 8-1 Topology 6-2 load balancing, using pools 2-4 M MAC addresses 4-11 setting MAC masquerade 4-2 MAC masquerade 4-11 medi[...]

Index Index-4 routers, host names 4-1 RSH configuring 3-16 rsh utilities 2-9 S sample 3-DNS configuration 2-1 sample configuration big3d agent communications 2-1 scalability 1-6 security features 1-6 self IP address, about 4-12 self IP addresses and translations 1-10 for target devices 3-7 server performance monitoring 6-8 server types 5-5 servers [...]

Index 3-DNS ® Administrator Guide Index-5 user accounts 1-9 user authorization 1-10 user authorization roles 1-10 utilities 3-DNS Maintenance menu 1-3 Configuration 1-2 Setup 1-2 V virtual servers and host names 4-1 availabili ty settings 6-7 defining 2-7 VLAN access methods 4-7 VLAN groups 4-9 VLAN IDs 4-7 vlangroup command 4-9 VLANs configuring [...]