Как в датацентре доставить трафик до сервиса?

Итак, если мы решили создать сайт с котиками и хотим, чтобы он был масштабируемым и надёжным, какие шаги нужно предпринять для обеспечения его отказоустойчивости? На этот философский вопрос я тут и рассуждаю, но сначала - вспомним немножко, что же это такое — сети дата-центров?

https://habr.com/ru/articles/908180/

#load_balancing #datacenters #ecmp #зоопарк #мыши #слоны #clos #leaf

And once again, one thing that ALL cloud providers are missing is an option for #ECMP and/or a #LoadSpreader.

Because of course the VM with the entrypoint IP is down and you don't offer anything that would allow me to have L3 redundancy...

It turns out that #ECMP with dual uplinks is a bad idea if your kid is in to #Roblox =\

When packets streams arrive from different source IPs, apparently Roblox just say "nah fam" and terminates both streams.

Good times.

#OpenBSD #ECMP with #ifstated up and running. Now to see if the internet monitoring nodes (Ms 404 Jr and 404 Jr) report any issues over the next few hours...

Also, just for the record, if you don't have amazing uptime monitoring, teenagers are **awesome** at filling that role (among other things, too, of course, but they simply *excel* at network monitoring).

#Comcast has been beat up by outages in my area for a few weeks now, so Mrs 404 officially blessed the backup internet project. Working on the #OpenBSD configs, and while I can easily do #ECMP for the uplinks, I'm not seeing a clean way to do the #VPN tunnels (ideally redundant connections to each endpoint, with one tunnel per endpoint routed over each uplink), unless I set static routes in an rdomain and configure the VPN tunnels there. #OSPF and #BGP mostly rely on the VPN tunnels, so really I have to solve those bits first before I move on to dynamic routing.

Unless of course I'm overlooking something silly (OpenBSD has a way of having idiotically simple solutions to problems, oftentimes), and someone happens to have a #cluestick with my name on it.

Weekend Reads:

* DNSSEC measured https://www.potaroo.net/ispcol/2023-09/dnssec-queries.html
* Flow distribution with ECMP https://dipsingh.github.io/Flow-Distribution-Across-ECMP/
* DNS resolver fuzzing https://publications.cispa.saarland/4033/
* Adaptive address family selection https://arxiv.org/abs/2309.05369
* US DoD cybersecurity strategy https://media.defense.gov/2023/Sep/12/2003299076/-1/-1/1/2023_DOD_Cyber_Strategy_Summary.PDF

#DNSSEC #ECMP #DNS #HappyEyeballs #USDoD