绑定 HTTP DoS 监视器和策略

若要在配置 HTTP DoS 服务后使 HTTP DoS 保护生效,必须绑定监视器,然后将该服务绑定到 HTTP DoS 策略。

使用 CLI 将监视器绑定到服务

在命令提示符下,键入以下命令以将监视器绑定到服务并验证配置:

-  bind lb monitor <monitorName> <serviceName>
-  show lb monitor

示例:

> bind lb monitor tcp ser-HTTP-DoS
 Done
> show lb monitor
1)   Name.......:   ping-default  Type......:      PING   State....ENABLED
2)   Name.......:    tcp-default  Type......:       TCP   State....ENABLED
3)   Name.......:           ping  Type......:      PING   State....ENABLED
4)   Name.......:            tcp  Type......:       TCP   State....ENABLED
5)   Name.......:           http  Type......:      HTTP   State....ENABLED
 .
 .
 .
17)   Name.......:       ldns-dns  Type......:  LDNS-DNS   State....ENABLED
 Done

使用 CLI 将策略绑定到服务

在命令提示符下,键入以下命令以将策略绑定到服务并验证配置:

bind service <serviceName> -policyName <policyname>

示例:

> bind service ser-HTTP-DoS -policyName pol-HTTP-DoS
 Done
> show service
1)      srv-http-10 (10.102.29.30:80) - HTTP
        State: DOWN
        Last state change was at Wed Jul  8 07:49:52 2009
        Time since last state change: 34 days, 01:24:58.510
        Server Name: 10.102.29.30
        Server ID : 0   Monitor Threshold : 0
        Max Conn: 0     Max Req: 0      Max Bandwidth: 0 kbits
        Use Source IP: NO
        Client Keepalive(CKA): NO
        Access Down Service: NO
        TCP Buffering(TCPB): NO
        HTTP Compression(CMP): NO
        Idle timeout: Client: 180 sec   Server: 360 sec
        Client IP: DISABLED
        Cacheable: NO
        SC: OFF
        SP: ON
        Down state flush: ENABLED
        .
        .
        .
4)      ser-HTTP-Dos (10.102.29.18:88) - HTTP
        State: DOWN
        Last state change was at Tue Aug 11 08:19:45 2009
        Time since last state change: 0 days, 00:55:05.40
        Server Name: 10.102.29.18
        Server ID : 0   Monitor Threshold : 0
        Max Conn: 0     Max Req: 0      Max Bandwidth: 0 kbits
        Use Source IP: NO
        Client Keepalive(CKA): NO
        Access Down Service: NO
        TCP Buffering(TCPB): NO
        HTTP Compression(CMP): YES
        Idle timeout: Client: 180 sec   Server: 360 sec
        Client IP: DISABLED
        Cacheable: NO
        SC: OFF
        SP: ON
        Down state flush: ENABLED
5)      ser-HTTP-Dos1 (10.102.29.40:87) - HTTP
        State: DOWN
        Last state change was at Tue Aug 11 08:23:40 2009
        Time since last state change: 0 days, 00:51:10.110
        Server Name: 10.102.29.40
        Server ID : 0   Monitor Threshold : 0
        Max Conn: 0     Max Req: 20     Max Bandwidth: 0 kbits
        Use Source IP: NO
        Client Keepalive(CKA): NO
        Access Down Service: NO
        TCP Buffering(TCPB): NO
        HTTP Compression(CMP): YES
        Idle timeout: Client: 180 sec   Server: 360 sec
        Client IP: DISABLED
        Cacheable: NO
        SC: OFF
        SP: OFF
        Down state flush: ENABLED
 Done

使用 GUI 将监视器和策略绑定到服务

  1. 导航到 Traffic Management(流量管理)> Load Balancing(负载平衡)> Services(服务)。
  2. 在详细信息窗格中,选择要绑定的服务,然后单击打开。
  3. 在“配置服务”对话框中,选择“监视器”选项卡,单击“监视器”列表中所需的监视器名称,然后单击“添加”。选定的监视器将添加到已配置的帧中。
  4. 选择策略选项卡,然后选择 HTTP DoS 选项卡。
  5. 从“可用策略”列表中选择一个策略,然后单击“添加”。策略将显示在“已配置的策略”列表中。
  6. 单击 OK(确定),然后单击 Close(关闭)。状态栏中将显示一条消息,指出服务已配置。