组网如下
LB旁挂SW,虚服务IP为1.1.1.1,并且公网IP只有这一个
真实IP分别为10.0.0.1与20.0.0.1
现场想要实现HTTP跳转HTTPS,跳转后进行HTTPS卸载,然后同时
根据终端输入的具体域名分别调度到不同的实际服务器
配置步骤
HTTPS卸载的配置请参考官网典型配置
本案例着重强调HTTP---HTTPS的跳转以及基于host的负载
HTTP到HTTP的调整,需要建立两个虚服务,一个是80端口名字为网盘的虚服务用于HTTP到HTTPS的跳转(调用LB策略网盘http-https)
virtual-server 网盘 type http
virtual ip address 1.1.1.1
lb-policy 网盘http-https
default server-farm xxx
route-advertisement enable
sticky-sync enable global
service enable
loadbalance class 网盘http type http match-any
match 2 url /
#
loadbalance action http-https type http
redirect relocation https://%h%p
loadbalance policy 网盘http-https type http
class 网盘http action http-https
一个虚服务用于跳转后的真实HTTPS的业务
virtual-server 网盘 type http
port 443
virtual ip address 1.1.1.1
lb-policy 网盘yewuxitong
default server-farm xxx
ssl-server-policy lnyyxx
route-advertisement enable
sticky-sync enable global
service enable
基于HOST的调度策略在HTTPS的虚服务中调用LB策略
loadbalance class wangpan type http
match 1 header host value ***.***
loadbalance class xuegon type http
match 1 header host value ***.***
loadbalance action wangpan type http
server-farm sf1
#
loadbalance action xuegon type http
server-farm sf2
loadbalance policy yewuxitong type http
class wangpan action wangpan
class xuegon action xuegon
virtual-server 网盘 type http
port 443
virtual ip address 1.1.1.1
lb-policy 网盘yewuxitong
server-farm sf1
predictor hash address source
probe t1
success-criteria at-least 1
real-server rs1 port 80
success-criteria at-least 1
#
server-farm sf2
predictor hash address source
probe t1
success-criteria at-least 1
real-server rs2 port 80
success-criteria at-least 1
real-server rs1
ip address 10.0.0.1
#
real-server rs2
ip address 20.0.0.1
HTTP到HTTPS的跳转需要配置两个虚服务,一个HTTP的虚服务,用于跳转
一个HTTPS的虚服务,实际业务
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作