Menene bambanci tsakanin L4 da L7 load balancing, da forward da reverse proxies?

Question

IT Interview Practice · Accepted Answer

**Load balancer** yana rarraba zirga-zirga mai shigowa a kan tarin backend servers don kada guda ya cika kuma tsarin ya ci gaba da kasancewa idan server ya mutu. Mahimmancin bambanci shine *layer* da yake aiki a kai:

```text
        L4 (Transport)                        L7 (Application)
  routes by IP + port only            reads HTTP: path, headers, cookies, host
  ┌──────────────┐                    ┌──────────────┐
  │ balancer     │──▶ server A        │ balancer     │  /api/*   ──▶ API pool
  │ (TCP/UDP)    │──▶ server B        │ (HTTP-aware) │  /img/*   ──▶ static pool
  └──────────────┘──▶ server C        └──────────────┘  cookie=X ──▶ sticky backend
  fast, opaque, protocol-agnostic     smart routing, TLS termination, can inspect
```

**L4 load balancing** yana aiki a Transport layer: yana tura haɗin TCP/UDP bisa IP da port kawai, ba tare da duba cikin packets ba. Yana da sauri, mai arha kuma yana aiki ga kowace protocol, amma ba zai iya yin shawara bisa abun ciki ba. **L7 load balancing** yana aiki a Application layer: yana ƙare haɗin, yana parse HTTP, kuma zai iya route ta URL path, host, headers, ko cookies — yana ba da damar routing bisa path (`/api` da `/static`), sticky sessions, TLS termination, matsawa, da retries ga kowane request. Farashin shine ƙarin sarrafawa kowane request.

**Proxy** shine matsakanci, kuma alkibla ce ta bayyana nau'in:

```text
FORWARD proxy: sits in front of CLIENTS, acts on their behalf (outbound)
   clients ──▶ [forward proxy] ──▶ internet    (corp filtering, caching, anonymity)

REVERSE proxy: sits in front of SERVERS, acts on their behalf (inbound)
   internet ──▶ [reverse proxy] ──▶ backend servers  (LB, TLS, cache, WAF)
```

**Forward proxy** yana wakiltar *client* — yana zaune tsakanin masu amfani da intanet don tacewa, caching, ko ɓoye tantancewar client (corporate proxies, egress kamar VPN). **Reverse proxy** yana wakiltar *server* — clients suna tunanin suna magana da shi, yayin da yake fuskantar rundunar backends (nginx, Envoy, edge na CDN). L7 load balancer *shi ne* reverse proxy na musamman; yana kuma dabi'a sarrafa TLS termination, caching, rate limiting, da aiki a matsayin WAF.

## Me ya sa yake da muhimmanci

Load balancers da reverse proxies su ne mashigar kusan kowane tsari mai iya faɗaɗawa, don haka ana sa ran injiniyoyi na senior su yi tunani a kansu cikin gwaninta. Sassaucin L4-da-L7 ainihin shawara ce ta ƙira — tsantsar throughput da rashin sanin protocol da routing mai fahimtar abun ciki da fasaloli — kuma zaɓe ba daidai ba na nufin ko dai balancer wawa inda kake buƙatar routing, ko biyan overhead na L7 inda L4 ya isa. Bambancin forward-da-reverse yana bayyana tattaunawar architecture kuma yana bayyana koyaushe a hirar system design, inda ƙare TLS, ƙara cache, yin health checks, da ba da damar turawa ba tare da tsayawar aiki ba duk sun dogara ga samun wannan layer daidai.

Me ya sa yake da muhimmanci

Tambayoyi masu alaƙa