getting started with my next-gen ip load balancing

Getting Started With My Next-Gen IPLB

• Arnaud Jost• Tech Lead IPLB

Getting Started with My Next-Gen IPLB

1. Why using an IPLB?

2. IPLB Legacy

3. IPLB Next-Gen: New Features

4. IPLB Next-Gen: Advanced Use Case

5. IPLB Next-Gen: Current Status

6. IPLB Next-Gen: Start with API

7. IPLB Next-Gen: Start with Sunrise

8. IPLB Next-Gen: What Can Be Done with IPLB in 10 minutes?

Why Using an IPLB?• Distribute load

Why Using an IPLB?• Eliminate downtimes

Why Using an IPLB?• Scale your infra easily

Why Using an IPLB?• Facilitates maintenance

Hard drive remplacement

Getting Started with My Next-Gen IPLB1. Why using an IPLB?

2. IPLB Legacy

3. IPLB Next-Gen: New Features

4. IPLB Next-Gen: Advanced Use Case

5. IPLB Next-Gen: Current Status

6. IPLB Next-Gen: Start with API

7. IPLB Next-Gen: Start with Sunrise

8. IPLB Next-Gen: What Can Be Done with IPLB in 10 minutes?

IPLB Legacy: Infrastructure

• Cisco ACE• End of life• End of sales• End of support

• Master/slave mode

• Limited scaling capacity, enough until now, not for the future

IPLB Legacy: Product • Limited ports/protocols

• HTTP/HTTPS• Mysql• Postgresql

• Only one backend/frontend

• No vRack

• No SSL with servers in backend

• Cannot handle SSL certs > 2048

• ... Not easy to add new features

Set me free!

Getting Started with My Next-Gen IPLB1. Why using an IPLB?

2. IPLB Legacy

3. IPLB Next-Gen: New Features

4. IPLB Next-Gen: Advanced Use Case

5. IPLB Next-Gen: Current Status

6. IPLB Next-Gen: Start with API

7. IPLB Next-Gen: Start with Sunrise

8. IPLB Next-Gen: What Can Be Done with IPLB in 10 minutes?

IPLB Next-Gen: Features

• Based on HAProxy• Huge and active community• Great performances• Lot of features• OpenSource

• Associated with the power of OVH • Advanced automation stack• Powerful servers• Dedicated network• Advanced and dedicated DDoS protection with permanent mitigation

IPLB Next-Gen: Features• Scalable with no limit

• Multi-master mode using BGP multi-path

• HTTP/HTTPS with advanced options• Headers inspections• Advanced routing rules• ACL• Much more

• TCP (all ports)• High throughput• SSL

IPLB Next-Gen: Features• Multi frontends, multi backends

• Configurable ports• Link between frontends and backend can be updated on the fly

• HTTP Redirect

• HSTS

• Can be used behind a failover IP

• Async configuration

IPLB Next-Gen: Features• vRack (todo)

• Native• QinQ

• IPV6 (doing)

Oh yeah !

Getting Started with My Next-Gen IPLB1. Why using an IPLB?

2. IPLB Legacy

3. IPLB Next-Gen: New Features

4. IPLB Next-Gen: Advanced Use Case

5. IPLB Next-Gen: Current Status

6. IPLB Next-Gen: Start with API

7. IPLB Next-Gen: Start with Sunrise

8. IPLB Next-Gen: What Can Be Done with IPLB in 10 minutes?

Advanced Use Case: Blue-Green

Blue farm Green farm

Advanced Use Case: Mixed Services

Advanced Use Case: Anycast

Advanced Use Case: Not Only Web!• Mail

Advanced Use Case: Not Only Web!• Mysql

master

backu

p backup

backup

Getting Started with My Next-Gen IPLB1. Why using an IPLB?

2. IPLB Legacy

3. IPLB Next-Gen: New Features

4. IPLB Next-Gen: Advanced Use Case

5. IPLB Next-Gen: Current Status

6. IPLB Next-Gen: Start with API

7. IPLB Next-Gen: Start with Sunrise

8. IPLB Next-Gen: What Can Be Done with IPLB in 10 minutes?

IPLB Next-Gen: Current Status• Current state: gamma

• 95% of legacy IPLB already migrated

• API: beta available

• Manager: sunrise available

IPLB Next-Gen: Current Status

OVH Web hosting is load balanced by IPLB Next-Gen, including SSL Offload for ALL websites

= 1.5 Millions of SSL certificates

And all Hubic traffic

IPLB Next-Gen: Current Status

• Available zones:• Roubaix• Gravelines• Strasbourg• Beauharnois• … Anycast!

• And..much more

IPLB

Getting Started with My Next-Gen IPLB1. Why using an IPLB?

2. IPLB Legacy

3. IPLB Next-Gen: New Features

4. IPLB Next-Gen: Advanced Use Case

5. IPLB Next-Gen: Current Status

6. IPLB Next-Gen: Start with API

7. IPLB Next-Gen: Start with Sunrise

8. IPLB Next-Gen: What Can Be Done with IPLB in 10 minutes?

IPLB Next-Gen: Start With API• Everything can be done using API

• Automation!

Getting Started with My Next-Gen IPLB1. Why using an IPLB?

2. IPLB Legacy

3. IPLB Next-Gen: New Features

4. IPLB Next-Gen: Advanced Use Case

5. IPLB Next-Gen: Current Status

6. IPLB Next-Gen: Start with API

7. IPLB Next-Gen: Start with Sunrise

8. IPLB Next-Gen: What Can Be Done with IPLB in 10 minutes?

IPLB Next-Gen: Start With Sunrise

IPLB Next-Gen: Start With Sunrise

IPLB Next-Gen: Start With Sunrise

IPLB Next-Gen: Start With Sunrise

IPLB Next-Gen: Start With Sunrise

https://www.ovh.com/manager/sunrise/iplb/index.html#/iplb

Getting Started with My Next-Gen IPLB1. Why using an IPLB?

2. IPLB Legacy

3. IPLB Next-Gen: New Features

4. IPLB Next-Gen: Advanced Use Case

5. IPLB Next-Gen: Current Status

6. IPLB Next-Gen: Start with API

7. IPLB Next-Gen: Start with Sunrise

8. IPLB Next-Gen: What Can Be Done with IPLB in 10 minutes?

IPLB Next-Gen: Demo

DNS Round Robin Real Load Balancing

Arnaud Jost

@ArnaudAtOvh