Research on the High Availability and Load Balancing of Web Hosts Combining Cloud Virtualization Cluster Architecture and Network Intrusion Detection System

• Main Authors: CHANG,YI-SHING, 張怡祥
• Other Authors: HUANG,CHAO-HSI
• Format: Others
• Language: zh-TW
• Published: 2018
• Online Access: http://ndltd.ncl.edu.tw/handle/92m6rd

碩士 === 國立宜蘭大學 === 多媒體網路通訊數位學習碩士在職專班 === 106 === This purpose of the paper is the reserach for Cloud Era. Due to the maturity of cloud virtualization technology, the virtual technology is now used widely to set up the server. This technology is not only to save on the cost for IT infrastructure, but also to maximize the efficiency in the limited resources. Therefore, to transfer web services and system servers to the cloud will become the trend in the future. However, the single point of failurestill occurs while transferring the web server to the cloud such as the service is interrupted due to host downtime, system maintenance, or unable to handle high loading issues while the booming web transaction. Besides, more and more cyber attacks cause serious threats to cloud platform users. In this research, under our own virtual cloud environment, it proposes a high availability architecture by using LVS keepalived components to avoid service interruptions due to the hardware failure or repair of virtual host. To solve the booming web transaction problem, we build the cluster with load balancing technology by using LVS ipvsadm component. It allows to handle a huge number of connection work in a short time, and make the service run smoothly. In addition, OSSEC to enhance the cyber security is used. If the virtual host is subjected to a malicious attack, such as distributed denial-of-service attack, the rule blocking setting in our OSSEC intrusion detection system will keep the operation normally. Cloud cluster architecture used for web server is the future trend. While the single host changes to the cluster, it can prevent the single point of failure risk. In the event of a hardware failure or system maintenance, the cluster architecture will automatically back up the data and remain the normal operation. In the situation of explosive web transaction, it maneuvering increase the number of servers according to the current needs and maintain the normal operation, satisfy the users’ expectation, and always provide the services in high quality and security.