Yadda ake Saita Failover da Load Daidaita a cikin PFSense


Failover nau'in yanayin aiki ne na madadin wanda a cikinsa ake ɗaukar ayyukan abubuwan tsarin kamar cibiyar sadarwa ta tsarin sakandare, kawai lokacin da tsarin Firamare ya zama ba samuwa saboda gazawar tsarin ko kowane lokacin da aka tsara.

A cikin wannan saitin, za mu ga yadda ake saita Failover da Load daidaitawa don ba da damar PFSense don ɗaukar ma'auni na zirga-zirga daga hanyar sadarwar LAN zuwa WAN da yawa (a nan mun yi amfani da haɗin WAN guda biyu, WAN1 da WAN2).

Misali, idan a cikin hali, ɗayan haɗin WAN ɗinku ya tafi layi a layi saboda wasu matsalolin haɗin yanar gizo, a wannan yanayin WAN naku na biyu za a canza shi ta atomatik daga WAN1 zuwa WAN2 ta hanyar danna ɗayan tsarin IP ɗin ku, idan babu komai. amsa daga tsarin, zai canza ta atomatik daga WAN1 zuwa WAN2 ko akasin haka.

Load Balancer zai haɗu da haɗin WAN ɗin mu biyu don zama haɗin intanet ɗaya mai ƙarfi. Misali, idan kuna da haɗin 2MB don WAN1 da 2MB don WAN2, zai haɗa duka biyu zuwa ɗaya tare da 4MB don daidaita saurin haɗin yanar gizon.

Don saita Failover Load Balancer, muna buƙatar aƙalla katunan Ethernet guda uku tare da mafi ƙarancin 100MB/1GB kamar haka. Ana amfani da NIC na farko don LAN tare da tsayayyen IP da sauran biyu tare da DHCP.

IP Address LAN	:	192.168.1.1/24	
IP Address WAN1	:	From DHCP
IP Address WAN2	:	From DHCP

Kafin ci gaba, dole ne ka sami shigarwar PFSense mai aiki, don ƙarin sani kan yadda ake shigar da pfsense, shiga cikin labarin mai zuwa.

  1. Yadda ake Shigar da Sanya PFSense

Mataki 1: Saita Interface Interface

1. Bayan shigar da PFSense, za ku gabatar da allon mai zuwa tare da wadatattun hanyoyin sadarwa don saita hanyar sadarwa.

2. Zabi 1st interface em0 kamar yadda WAN1, IP za a sanya daga DHCP, na biyu interface zai zama em2 ga LAN kuma ƙara daya more interface em2. b>em01 (na zaɓi), za a canza wannan daga baya zuwa WAN2 tare da adireshin IP na DHCP. Anan ga musaya na ƙarshe da aka sanya kamar haka.

3. Bayan daidaita hanyoyin sadarwa na cibiyar sadarwa, shiga cikin dashboard na Pfsense a wuri mai zuwa kuma saita LoadBalancer.

https://192.168.1.1

4. Bayan shiga cikin GUI, a can za ku iya ganin WAN kawai, LAN a ƙarƙashin widgets na dubawa kamar yadda aka nuna a kasa.

5. Don saita Interface zaɓi Interface daga cikin TOP menu kuma danna WAN don ƙara bayanin zuwa WAN1 >, sannan danna Ajiye don yin canje-canje.

Sake danna Interface sannan ka zabi OPT1 sannan ka ba da damar wurin canja bayanin daga OPT1 zuwa WAN2.

Na gaba, zaɓi DHCP don IPv4 nau'in sanyi, ko kuma zaɓi IPv6 da nau'in daidaitawa kamar DHCP 6.

6. Daga kasan shafin WAN2 a karkashin Cibiyoyin sadarwa masu zaman kansu, cire toshe hanyoyin sadarwar masu zaman kansu don cire katangar zirga-zirga daga cibiyoyin sadarwar gida, da toshe hanyoyin sadarwar bogon. Ajiye canje-canje ta danna kan Ajiye.

Bayan yin canje-canjen da ke sama, zai nemi ku yi amfani da canje-canje a saman shafin, Danna don tabbatar da canje-canje.

Yanzu zaku sami musaya guda uku a cikin 'Interface' widget a cikin Dashboard.

Don haka, a nan mun saita 2 WAN don pfsense. Yanzu bari mu ga yadda za a daidaita LoadBalancer don waɗannan WAN da aka saita.

Mataki 2: Saita Kulawar IP

7. Kafin daidaita Load Balance don pfsense, muna buƙatar saita IP mai saka idanu don Load Balancer. Kewaya zuwa 'System' menu a saman kuma zaɓi Routing.

8. A cikin 'Edit gateway'shafin, shigar da adireshin IP na duba IP na WAN1 da WAN2. A cikin WAN1 zan yi amfani da uwar garken ISP DNS na IP 218.248.233.1. A cikin WAN2 za a yi amfani da Google jama'a DNS 8.8.8.8.

9. Bayan ƙara Monitor IP, danna Advanced kuma ba da ƙarancin ƙima don KASADA, anan ina amfani da 3 seconds don saka idanu akan IP. Default zai zama dakika 10.

Yi amfani da saitunan iri ɗaya don WAN2. Anan na yi amfani da Google DNS maimakon amfani da ISP DNS dina. Danna ajiyewa don fita.

Danna kan Aiwatar da canje-canje don sanya canje-canjen su zama dindindin.