跳至主要内容Skip to content
私有化部署 · 企业软件授权 · 主控与节点均运行在您的基础设施中 Self-hosted · licensed enterprise software · control plane and nodes run on your own infrastructure 系统架构Architecture FAQ
高可用High availability

给关键站点加一层页面级容灾 A page-level failover layer for critical sites

只有整页导航请求会走这套逻辑,图片、脚本这类子资源不接管。功能只面向增强版和定制版开放。 Only full-page navigation requests go through this logic; sub-resources such as images and scripts are not taken over. The capability is available in the Enhanced and Custom editions only.

工作原理与能力边界How it works & scope

页面级容灾,覆盖范围明确Page-level failover, with a clear scope

给关键站点启用高可用规则后,系统会注入页面容灾逻辑。主地址不可达时,页面导航请求可以切到预设的备用地址;没有可用的备用地址时,还可以给访客显示离线页。Once HA rules are enabled for a critical site, the system injects page-failover logic. When the primary is unreachable, page-navigation requests can switch to a preset backup address, and when no backup is available it can show visitors the offline page instead.

可配置备用地址、离线页内容和粘滞时长Configurable backup address, offline page and sticky duration 切换事件会记录在效果报告和切换统计中Failover events are recorded in an effect report with switch stats 支持灰度下发;已经下发的规则在授权变更后仍可继续运行Gray rollout supported; rules already pushed keep running across license changes
边界说明:Scope: 这个功能只为页面导航请求做页面级容灾,不会把站内图片、脚本等子资源一起透明切走。它只面向增强版和定制版开放;全功能版能看到入口,但调用管理 API 会返回 403,并提示升级版本。failover here is page-level and applies to page-navigation requests only, not to sub-resources such as a site's images or scripts. Only the Enhanced and Custom editions have it; in the Full edition the entry is visible, but calling the management API returns 403 with a prompt to upgrade.
容灾切换如何发生How failover happens 增强版 · 定制版Enhanced · Custom
1
仅处理页面导航请求Handle navigations only

只有整页导航请求会进入容灾逻辑;图片、脚本等子资源请求不会被接管。Only full-page navigation requests enter the logic; sub-resource requests like images and scripts are not taken over.

2
优先正常访问主站Serve the primary first

页面导航请求会先按正常流程访问主地址。主地址响应成功时,响应直接返回,不触发跳转。A navigation first hits the primary as usual; when the primary responds successfully, that response is returned directly, with no redirect.

3
主站访问失败,探测并跳转至备用地址Primary down → probe & redirect

主地址请求失败后,系统会以 no-cors 方式对备用地址进行轻量探测,超时时间约为 2.5 秒。只有探测确认备用地址可访问后,才会通过 302 跳转至该地址;跳转时保留原路径、查询参数和锚点,并设置粘滞状态。After the primary request fails, the system runs a lightweight no-cors probe of the backup with a timeout of about 2.5s. Only once the probe confirms the backup is reachable does it 302-redirect there, preserving the original path, query and hash and setting a sticky state.

4
所有备用地址均不可达,显示离线页No backup reachable → offline page

如果备用地址探测也失败,系统将返回可配置的离线页,避免访客直接看到原始错误信息。If probing the backups also fails, the system returns a configurable offline page instead of exposing the raw error to visitors.

在功能对比中查看高可用版本差异 →See HA in the feature comparison → 仅增强版和定制版可用。不承诺具体的数据留存天数或精确的切换耗时。Enhanced and Custom editions only. This page does not commit to specific data-retention days or exact switching times.

按需要选择授权版本和档位Choose the edition and tier you need

按节点数和授权站点数(以根域名 Zone 计)透明计费。选哪一档看实际部署规模,选哪个版本看您需要哪些高级功能与服务。Transparent pricing, based on licensed node count and licensed sites counted per root-domain Zone. The tier follows your deployment size; the edition follows which advanced capabilities and services you need.