AI实践哪家强?来 AICon, 解锁技术前沿,探寻产业新机! 了解详情
写点什么

Netflix API 网关 Zuul 如何做到每秒处理两百万请求

  • 2019-09-10
  • 本文字数:2148 字

    阅读完需:约 7 分钟

Netflix API网关Zuul如何做到每秒处理两百万请求

ArchSummit北京2018大会上,Susheel Aroskar 讲师做了《Netflix API 网关 Zuul 如何做到每秒处理两百万请求》主题演讲,主要内容如下。


演讲简介


Zuul - Netflix API Gateway that handles 2M requests per second


How do we effectively route 2M requests per second to hundreds of backend services? How do we protect those backend services from constant DDoS attacks and retry storms? How do we keep Netflix humming along when an Amazon Web Services outage takes an entire AWS region out?


Meet Zuul - Netflix’s swiss army knife for application networking. Zuul is Netflix’s API gateway, load balancer, reverse proxy and more. It fronts all of the API traffic entering Netflix cloud and routes it to many backend services. It shields these backend services from retry storms, DDoS attacks and other outages shifting traffic across AWS regions, if necessary. It load balances millions of requests per second across thousands of machines, routing them intelligently and automatically around faulty instances.


In addition to this mission critical role in live production, Zuul is also invaluable during development and test to debug, canary and load test new features. Zuul lets us define new routing rules dynamically at run time that take effect near instantly without any deployments or restarts. This capability to slice, dice and change route for a portion of traffic quickly lets Zuul do all sort of tricks like canary / load testing, surgical traffic debugging for a single customer / device, black-holing malicious traffic etc.


At its heart, Zuul is a high performance, non blocking reverse proxy and layer 7 load balancer built on top of Netty. It supports multiple protocols including HTTP 1.0, HTTP 1.1, HTTP/2, WebSockets and Server Sent Events. It also offers flexible, configurable transport layer security including TLS, mTLS and application layer security like Netflix specific security protocols like MSL.


We will cover:


  • Zuul concept - where Zuul fits in overall Netflix architecture.

  • Zuul design - Architecture of Zuul and its fundamental components.

  • Zuul operation - How we operate 80+ Zuul clusters to proxy traffic to hundreds of backends

  • Zuul future - where are we going next with Zuul


参考译文


我们是如何有效的在每秒中向数百个后端服务发送请求的?我们又是如何保护这些后端服务免受持续的 DDoS 攻击和重试风暴?当 AWS 服务中断时,我们如何保持 Netflix 正常运作。


Zuul——被称为 Netflix 应用网络的瑞士军刀,它是 Netflix 的 API 网关,负载均衡器,反向代理等等。它掌控着 Netflix 云的所有 API 流量,并将这些流量分发到多个后端服务上。必要时,它可以保护这些后端服务免受重试风暴,DDoS 攻击以及其他服务中断在 AWS 区域之间转移流量带来的影响。它可以在数千台计算机上平衡每秒数百万个请求,并在故障实例周围智能的调度资源。


不仅在处理在线业务的过程中发挥关键作用,Zuul 在开发和测试过程中也非常有价值,可用于调试、测试、加载测试新功能。Zuul 支持在运行时动态定义新的分发规则,这些规则可以在无需任何部署或重新启动的情况下即时生效。这种切片,切块和更改部分流量分发的功能可以让 Zuul 执行各种任务,如为单个客户/设备、黑洞恶意流量做 Canary(金丝雀部署)/负载测试,以及外科式流量调试。


从本质上讲,Zuul 构建于 Netty 之上,是一个高性能,无阻塞的反向代理和 7 层负载均衡器。它支持多种协议,包括 HTTP 1.0,HTTP 1.1,HTTP / 2,WebSockets 和 Server Sent Events。还提供灵活可配置的传输层安全性,包括 TLS,mTLS 和应用层安全性,如 Netflix 特定的安全协议 MSL。


演讲提纲


  • Zuul 概念 - Zuul 适合整体 Netflix 的架构

  • Zuul 设计 - Zuul 架构及其基本组成部分

  • Zuul 运维 - 我们如何运维 80 多个 Zuul 集群来代理数百个后端的流量

  • Zuul 未来 - Zuul 的下一步打算


讲师介绍


Susheel Aroskar


Netflix Senior Software Engineer


Susheel works as a senior software engineer on the Cloud Gateway team at Netflix, which develops and operates Zuul - an API gateway that fronts all of the Netflix cloud traffic and handles more than 100 billion requests a day. Prior to Zuul, Susheel worked on Netflix CDN’s control plane in the cloud, which is responsible for steering more than a third of all North American peak evening internet traffic.


He joined Netflix just as Netflix was taking its first steps towards migrating from datacenter to cloud and he still has scars from those early days to prove it. He lives in California with his wife and daughter, both of whom find her dad jokes intolerable.












完整演讲 PPT 下载链接


https://archsummit.infoq.cn/2018/beijing/schedule


2019-09-10 14:011919

评论

发布
暂无评论
发现更多内容

正式开源:从 Greenplum 到 Cloudberry 迁移工具 cbcopy 发布

酷克数据HashData

greenplum 数据迁移

第72期 | GPTSecurity周报

云起无垠

利用免费的Geo Location API进行实时用户分析

幂简集成

API 免费API

字节码文件解剖

不在线第一只蜗牛

腾讯云的相关DDoS封堵问题概览

网络安全服务

腾讯云 服务器 DDoS 腾讯云服务器 DDoS 攻击

ETLCloud遇上MongoDB:灵活数据流,轻松管理

RestCloud

数据库 mongodb 数据处理 ETL 数据集成

鸿蒙生态加速落地湖北:多家政企单位及高校启动内部应用鸿蒙化,近百款原生鸿蒙应用上架

最新动态

一键制作ppt工具哪个好?5款好用的AI软件盘点!

职场工具箱

效率工具 PPT AIGC AI 人工智能 AI生成PPT

Paimon x StarRocks 助力喜马拉雅构建实时湖仓

StarRocks

从方言对话这枚“落子”,看AI手机“棋局”的尴尬赛点

脑极体

AI

一文读懂什么是RAG,如何搭建多模态RAG降低大模型幻觉

Zilliz

Milvus LLM 大模型幻觉 多模态rag RAG搭建

探索新机遇:当跨境外贸独立站挑战重重,反向海淘代购模式成为新蓝海

代码忍者

反向海淘

Steinberg Dorico Pro for Mac 破解补丁 及安装包

Rose

EndNote 21 for mac 授权破解版 EndNote下载安装包

Rose

CrossOver 24 for Mac(windows 虚拟机) 附激活补丁

Rose

运用通义灵码有效管理遗留代码:提升代码质量与可维护性

阿里云云效

阿里云 云原生 通义灵码

Nginx性能优化的几个方法

江南一点雨

AnyToISO Pro mac破解版:ISO镜像文件制作工具

Rose

运用通义灵码有效管理遗留代码:提升代码质量与可维护性

阿里巴巴云原生

阿里云 云原生 通义灵码

我的新书出版啦!和大家聊聊写书的酸甜苦辣

码哥字节

数据库 nosql 写作 redis 精讲 程序员 java

.NET 9 AOT的突破 - 支持老旧Win7与XP环境

沙漠尽头的狼

功能强大、简单易用的视频下载工具 4K Video Downloader for mac

Rose

Netflix API网关Zuul如何做到每秒处理两百万请求_ArchSummit_Susheel Aroskar_InfoQ精选文章