Shulou(Shulou.com)05/31 Report--

This article is about how WinSrv2019 uses DNS to build time-aware Azure application service traffic diversion. The editor thinks it is very practical, so share it with you as a reference and follow the editor to have a look.

The architecture of local and pre-Azure application load balancing is as follows:

Primary-DNS I have configured the public network DNS forwarding so that both headquarters and Chengdu sites can access Internet.

On the router server, I added a network card that can access Internet and configured NAT

In order to complete this demonstration, first create a WinSrv08-Web03 server on Azure to build the Web service. Now I find that Azure has changed again in the wizard of creating a new virtual machine, and there are some UI adjustments to create a virtual machine that I wrote in the first half of the year, but these are not difficult. Follow the wizard to configure the next step, first create a new resource group, and set the name of the virtual machine and placement area and other information.

Then choose whether the disk type is HDD or SSD

Configure virtual networks and subnets, and select the ports that the firewall needs to map

Next step

Next step

Next step

Verification passed, click create

Wait for the creation to be completed

Deployment complete

Connect the virtual machine to configure the Web service

The WEB server is provided as follows:

Next, I would like to talk about the requirements goals achieved:

Next, I want to achieve:

No matter what network segment the client comes from, as long as the DNS is resolved through Primary-DNS, 100% of the traffic to access the web.basehome.com.cn between 16:30 and 17:00 every day is borne by the Web03 server on the Azure, and the Web01 in Chengdu does not bear the traffic; at other times of the day (not 16:30-17:00), the web01 server in Chengdu bears the 100% traffic, and the web03 on the Azure does not bear the traffic

The steps for implementation are roughly as follows: create a regional scope, add records within the regional scope, and finally make a DNS policy

Create an area range:

All you need to do here is to add an Azure region range:

Add-DnsServerZoneScope-ZoneName "basehome.com.cn"-Name "AzureZoneScope"

Next, add an A record in the area.

Add-DnsServerResourceRecord-ZoneName "basehome.com.cn"-A-Name "web"-IPv4Address "52.163.55.124"-ZoneScope "AzureZoneScope"-TimeToLive 600

Add-DnsServerResourceRecord-ZoneName "basehome.com.cn"-A-Name "web"-IPv4Address "172.16.1.10"

To execute the blue command without the range parameter is to simply add a regular A record to the DNS.

The next step is to configure the DNS policy

Example:

Add-DnsServerQueryResolutionPolicy-Name "Contoso6To9Policy"-Action ALLOW-ZoneScope "contosogiftservices.com,7;AzureZoneScope,3"-TimeOfDay "EQ,18:00-21:00"-ZoneName "contosogiftservices.com"-ProcessingOrder 1

If I want to achieve between 16:30 and 17:30 in my environment, 70% of the traffic is borne by the web01 server in Chengdu and 30% by the web03 server in Azure, then I can perform:

Add-DnsServerQueryResolutionPolicy-Name "Azure1630To1700Policy"-Action ALLOW-ZoneScope "basehome.com.cn,7;AzureZoneScope,3"-TimeOfDay "EQ,16:30-17:00"-ZoneName "basehome.com.cn"-ProcessingOrder 1

To be more extreme, I follow the requirements goals set above, and my environment executes:

Add-DnsServerQueryResolutionPolicy-Name "Azure1630To1700Policy"-Action ALLOW-ZoneScope "AzureZoneScope,1"-TimeOfDay "EQ,16:30-17:00"-ZoneName "basehome.com.cn"-ProcessingOrder 1

Test and verify:

Between 16:30 and 17:30:

When the time is outside 16:30-17:30:

Thank you for reading! This is the end of the article on "how WinSrv2019 uses DNS to build time-aware Azure application service traffic diversion". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, you can share it for more people to see!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.