8 Top Open Source Karkatar da Wakiliyar Servers don Linux


Sabbin wakili mai juyawa shine nau'in sabar wakili wanda aka tura tsakanin abokan ciniki da sabobin baya/asali, alal misali, uwar garken HTTP kamar NGINX, Apache, da dai sauransu .. ko sabar aikace-aikacen da aka rubuta a Nodejs, Python, Java, Ruby , PHP, da sauran yarukan shirye-shirye da yawa.

Gateofar ƙofa ce ko sabar tsaka-tsakin da ke karɓar buƙatar abokin ciniki, ta miƙa shi zuwa ɗaya ko fiye da masu amfani da ƙarshen baya, sannan daga baya su karɓi amsa daga uwar garken kuma su mayar da shi ga abokin ciniki, don haka ya zama kamar abin ya ƙunsa samo asali daga sabar wakili na baya kanta.

Gabaɗaya, uwar garken wakili mai juyawa wakili ne wanda yake fuskantar ciki wanda aka yi amfani dashi azaman 'ƙarshen-gaba' don sarrafawa da kuma kare damar isa ga sabobin baya-baya akan hanyar sadarwar masu zaman kansu: galibi ana turashi ne a bayan katangar hanyar sadarwa.

Yana taimaka wa masu amfani da ƙarshen-baya don cimma asirce don haɓaka tsaronsu. A cikin kayan aikin IT, wakili na baya zai iya aiki azaman katangar aikace-aikace, ma'aunin nauyi, TLS terminator, mai hanzarta yanar gizo (ta hanyar ɓoye tsayayyun abubuwa masu motsi), da ƙari.

A cikin wannan labarin, zamuyi bitar manyan samfuran wakili guda 8 wadanda zasu iya amfani dasu akan tsarin Linux.

1. HAProxy

HAProxy (HAProxy, wanda ke wakiltar High Availability Proxy), mai kyauta, buɗe-tushe, mai saurin gaske, abin dogaro, kuma mafi girman ma'auni mai daidaitawa da software mai kusanci don aikace-aikacen TCP da HTTP, wanda aka gina don wadatacciyar samuwa.

HAProxy shine wakili na baya-baya na HTTP, wakili na TCP da mai daidaita doka, mai ƙare SSL/TLS/mai ƙaddamarwa/farawa, mai wakiltar caching, mai shigar da matsawa na HTTP, mai kula da zirga-zirga, mai sauya abun ciki, ƙofar FastCGI, da ƙari. Hakanan kariya ce daga DDoS da cin zarafin sabis.

Ana amfani da shi ta hanyar injin da ba a hanawa ba, wanda ba ya toshe hanyar I/O mai sauri tare da tushen fifiko, mai tsara abubuwa masu yawa wanda ke ba shi damar magance dubun dubatan hanyoyin haɗin kai. Hakanan, HAProxy yana amfani da yarjejeniya ta PROXY don ƙaddamar da bayanan haɗin abokin ciniki don tallafawa ko asalin sabobin don aikace-aikacen ya sami duk bayanan da suka dace.

Wasu daga cikin abubuwan HAProxy na asali sun hada da neman tallafi, tallafi na SSL, sa ido a kan jihohin uwar garke da kuma jiharsa, yawan samu, daidaita nauyi, mannewa (kula da maziyarci a wannan tsarin harma da abubuwan daban daban), sauya abun ciki, sake rubuta HTTP, da juyarwa, kariyar uwar garke, sa-hannun gizo, kididdiga, da ƙari.

2. NGINX

NGINX, kyauta, buɗaɗɗen tushe, aiki mai kyau, kuma sanannen uwar garken HTTP da wakilin wakilcin baya. Hakanan yana aiki azaman uwar garken wakili na IMAP/POP3. NGINX sanannen sananne ne saboda babban aikinsa, kwanciyar hankali, saitin fasali mai sauƙi, daidaitawa mai sauƙi da sassauƙa, da ƙarancin amfani da albarkatu (musamman ƙaramin sawun ƙwaƙwalwar ajiya).

Kamar dai HAProxy, NGINX yana da gine-ginen da ke faruwa don haka ba shi da matsala wajen ma'amala da dubun dubatar hanyoyin haɗin kai, kamar yadda yake amfani da yarjejeniyar PROXY ta HAProxy.

NGINX yana tallafawa saurin juyawa baya tare da yin amfani da tsarin ngx_http_proxy_module, wanda ke ba da izinin aika buƙatun zuwa wani sabar akan ladabi banda HTTP, kamar FastCGI, uwsgi, SCGI, da memcached.

Mahimmanci, yana tallafawa daidaita ɗaukar kaya da haƙuri haƙuri waɗanda sune mahimman al'amura na manyan tsarin sarrafa kwamfuta da aka rarraba. Tsarin ngx_http_upstream_module yana ba da izini don bayyana ƙungiyoyin sabobin baya don rarraba buƙatun da ke zuwa daga abokan ciniki. Wannan ya sa aikace-aikacenku suka fi ƙarfi, wadatattu kuma abin dogaro, mai iya daidaitawa sosai, tare da lokacin amsawa da kayan aiki. Bugu da ƙari, game da tsaro, yana tallafawa dakatarwar SSL/TLS da sauran fasalolin tsaro da yawa.

Abubuwa masu amfani akan sabar yanar gizo ta Nginx kuna so ku karanta:

  • Yadda ake Shigar da Nginx Web Server akan Ubuntu 20.04
  • Yadda ake Shigar da Nginx akan CentOS 8
  • Yadda Ake Kunna Shafin Matsayi NGINX

3. Varnish HTTP Cache

Varnish HTTP Cache (ko Varnish Cache ko kuma kawai Varnish) kyauta ce, buɗe-tushe, aiki mai kyau, kuma mashahuri mai ɓoye software na wakilci wanda aka fi sani da hanzarin aikace-aikacen yanar gizo, an tsara shi don haɓaka aikin HTTP ta amfani da ɓoye-ɓoye.

An sanya shi tsakanin abokin ciniki da uwar garken gidan yanar gizo na HTTP ko sabar aikace-aikace; duk lokacin da abokin ciniki ya nemi bayani ko wata hanya daga sabar yanar gizo, Varnish tana adana kwafin bayanin, don haka a karo na gaba idan abokin harka ya nemi irin wannan bayanin, Varnish zai yi masa aiki ba tare da aikawa da sakon ga mai satar yanar gizo ba saboda haka rage kayan akan sabar kuma a cikin hanzarta isar da kayan cikin gidan yanar gizo.

Varnish yana amfani da harshe mai sassauci wanda aka sani da Harshen Tsarin Maganganu na Varnish (VLC) wanda tsakanin waɗancan abubuwa yana bawa masu gudanarwa damar tsara yadda yakamata a aiwatar da buƙatun shigowa, abin da yakamata ayi aiki dasu, kuma daga ina, da yadda za a canza buƙata ko amsawa. , da ƙari.

Hakanan varnar ana iya fadadawa - ana iya fadada shi ta amfani da Kayan Varnish (VMODs) kuma masu amfani zasu iya rubuta matakan su na al'ada ko amfani da kayan aikin da aka basu na gari.

Babban iyakancewar Varnish shine rashin tallafi ga SSL/TLS. Hanya guda daya tak da za a iya taimakawa HTTPS ita ce ta tura mai kawo karshen SSL/TLS ko mai saukar da kaya kamar HAProxy ko NGINX a gabanta.

4. Træfɪk

Træfɪk (wanda aka faɗi da Traffic) kyauta ne, buɗe-tushe, na zamani, da kuma saurin HTTP wakili da ma'auni don ƙaddamar da ƙananan sabis waɗanda ke tallafawa algorithms daidaita daidaito da yawa. Zai iya yin hulɗa tare da wasu masu samarwa (ko hanyoyin gano sabis ko kayan aikin kade kade) kamar Kubernates, Docker, Etcd, Hutun API, Mesos/Marathon, Swarm, da Zookeper.

Abubuwan ƙaunataccen ƙawancen sa shine ikon sarrafa saitunan sa ta atomatik kuma a hankali don haka gano daidaitaccen tsari don sabis ɗin ku. Yana yin hakan ta hanyar bincika kayan aikin ku don nemo bayanai masu dacewa da kuma gano wane sabis ne yake yin buƙata wacce buƙata daga duniyar waje. Masu ba da sabis ɗin suna gaya wa Træfɪk inda aikace-aikacenku ko ƙananan ayyukanku suke.

Sauran kayan aikin na Træfɪk suna tallafawa ne don WebSockets, HTTP/2, da GRPC, da sake dawowa da zafi (ci gaba da sabunta tsarinsa ba tare da sake farawa ba), HTTPS ta amfani da takaddun Let Encrypt (tallafin takardar shaidar daji), kuma ya fallasa REST API. Hakanan yana riƙe rajistan ayyukan, kuma yana samar da awo (Sauran, Prometheus, Datadog, Statsd, InfluxDB).

Hakanan, Jirgin ruwa na Træfɪk tare da sauƙin amfani da mai amfani da yanar gizo mai amfani da HTML don kiyaye abubuwan da ke faruwa. Hakanan yana tallafawa masu yanke hanya, sake gwada buƙatun, ƙayyadadden ƙimar, da ingantaccen asali.

5. Apache Traffic Server

A da kayan kasuwanci ne mallakar Yahoo wanda daga baya aka miƙa su ga Gidauniyar Apache, Apache Traffic Server kyauta ce, buɗe-tushe, kuma saurin ɓoyewa gaba da sabar wakili.

Sabis ɗin zirga-zirga shima yana aiki azaman ma'aunin ɗaukar kaya kuma yana iya shiga cikin sauye-sauyen ɗakunan ajiya. An san cewa ya kula da TB 400 a kowace rana na zirga-zirga a Yahoo.

Ya ƙunshi saitin rayuwa, tacewa, ko ba da suna ga buƙatun abun ciki, kuma ana iya ƙarawa ta hanyar API wanda ke ba masu amfani damar ƙirƙirar abubuwan al'ada don haɓaka taken HTTP, kula da buƙatun ESI, ko tsara sabon algorithm na ɓoye.

6. Squid Server Wakili

Squid kyauta ce, buɗe-tushe, kuma sanannen wakilin wakili da Web cache daemon wanda ke tallafawa ladabi daban-daban kamar HTTP, HTTPS, FTP, da ƙari. Yana fasalin yanayin wakili na baya (httpd-accelerator) wanda ke adana buƙatun shigowa don bayanan mai fita.

Yana tallafawa zaɓuɓɓukan haɓaka zirga-zirgar ababen hawa, ikon samun dama, ba da izini, wuraren yin rajista, da ƙari.

7. Pound

Pound wata kyauta ce kuma budaddiyar hanya, wakili mai sauƙin nauyi-wakili da ma'aunin nauyi da ƙarshen-ƙarshen sabar yanar gizo. Hakanan mai dakatarwa ne na SSL (wanda ke warware buƙatun HTTPS daga abokan ciniki kuma ya aika su azaman HTTP a bayyane zuwa sabobin ƙarshen-baya), HTTP/HTTPS sanitizer (wanda ke tabbatar da buƙatun don daidaito da karɓar waɗanda suka dace da kyau), kuma ya kasa -a kan sabar.

8. Sabar HTTP ta Apache

A ƙarshe amma ba mafi ƙaranci ba, muna da sabar Apache HTTP (wanda aka fi sani da HTTPD), shahararren sabar gidan yanar gizo a duniya. Hakanan za'a iya tura shi kuma an saita shi don aiki azaman wakili na baya.

Bugu da ƙari, za ku iya kuma Skipper kyauta, sabon yaro a kan toshe. Hanya ce ta hanyar HTTP kyauta kuma mai buɗewa kuma baya wakilci don haɗin sabis, gami da maganganun amfani kamar Kubernetes Ingress.

Abin da muke da shi a gare ku a cikin wannan jagorar. Don ƙarin bayani game da kowane kayan aiki a cikin wannan jeri, bincika rukunin yanar gizon su. Kar ka manta raba ra'ayoyin ku tare da mu ta hanyar fom din da ke kasa.