ASA Traffic Zone

Posted 2020-09-29

 

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/release/notes/asarn93.html

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/general/asa-general-cli/interface-zones.html

 

1.non-zone base Load balance

 

算法:Traffic is distributed among the specified gateways based on an algorithm that hashes the source and destination IP addresses

 

会有什么问题?

1.不一致路由  connnection table不一样  一个interface base 一个zone base

2.路由消失后对connection的处理  一个重传 一个保持

3.负载均衡的方式   一个  一个借口多个网关   多个接口多个网关

 

2.Zone base Load balance

难道是完美的解决方案吗? 有什么缺点?

 

The ASA load balances connections across equal cost routes using a hash made from the packet 6-tuple (source and destination IP address, source and destination port, protocol, and ingress interface). 

 

一元组负载均衡

https://supportforums.cisco.com/document/59986/loadbalancing-dual-isp-asa

 

 

ECMP Load-Balancing Algorithms  负载均衡的算法

For Load Balance, select one of the following options from the Method drop-down:

 

IP Modulo —By default, the virtual router load balances sessions using this option, which uses a hash of the source and destination IP addresses in the packet header to determine which ECMP route to use.

IP Hash —Uses a hash of the source and destination IP addresses and optionally the source and destination port numbers in the packet header to determine which ECMP route to use. Specify options in Step 5 below.

Balanced Round Robin —Uses round robin among the ECMP paths and re-balances paths when the number of paths changes.

Weighted Round Robin —Uses round robin and a relative weight to select from among ECMP paths. Specify the weights in Step 6 below.

 

 

traffic-zone 对SLA的影响? 

 

如何监测流量是否被负载均衡?

 

-show conn zone

-show asp table zone

-show local-host zone

-show route zone

-show asp table routing

-show interface ( check the traffic in zone interfaces)