CN103944749B - A kind of double hot standby method and system based on heartbeat - Google Patents
A kind of double hot standby method and system based on heartbeat Download PDFInfo
- Publication number
- CN103944749B CN103944749B CN201410071568.2A CN201410071568A CN103944749B CN 103944749 B CN103944749 B CN 103944749B CN 201410071568 A CN201410071568 A CN 201410071568A CN 103944749 B CN103944749 B CN 103944749B
- Authority
- CN
- China
- Prior art keywords
- fire wall
- routed path
- weighted value
- heartbeat
- value summation
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 19
- 230000001629 suppression Effects 0.000 claims abstract description 11
- 230000008859 change Effects 0.000 claims description 17
- 230000003111 delayed effect Effects 0.000 claims description 11
- 206010022000 influenza Diseases 0.000 claims description 6
- 238000004458 analytical method Methods 0.000 claims description 2
- 230000007613 environmental effect Effects 0.000 description 4
- 230000002265 prevention Effects 0.000 description 3
- 230000004888 barrier function Effects 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 238000004364 calculation method Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
Landscapes
- Hardware Redundancy (AREA)
- Alarm Systems (AREA)
Abstract
The invention discloses a kind of double hot standby method and system based on heartbeat, the system includes：First fire wall, second fire wall and heartbeat, it is attached between first fire wall and the second fire wall by heartbeat, and pass through the size of the more respective routed path weighted value summation of heartbeat, the state of itself is arranged to aggressive mode by the larger fire wall of routed path weighted value summation, ARP broadcasting packets are handled and carry out data forwarding, the state of itself is arranged to passive suppression mode by the less fire wall of routed path weighted value summation, any message is not handled, this method and system can set and switch the activestandby state of fire wall automatically according to the state of routed path, avoid causing ARP broadcasting packets to influence routed path up and down when causing two fire walls to be converted into active state by heartbeat signal failure simultaneously, and then the problem of causing message forwarding path confusion.
Description
Technical field
The present invention relates to dual-host backup field, more particularly to a kind of double hot standby method and system based on heartbeat.
Background technology
Fire wall is the barrier positioned at network boundary guarding network attack, and the reliability of firewall system is directly related to whole
The availability of individual protected network, so the redundancy of data channel must be provided using correlation technique for it.Lead in the prior art
Two fire walls are connected usually through heartbeat, by the data between two fire walls of heartbeat line locking, when a fire wall occurs
Failure and when being not normally functioning, another fire wall is automatically switched to, so as to ensure that network environment is normally effectively run.But
It is that this method needs artificially to set and distinguish active and standby fire wall, can not sets and switch automatically according to the state of routed path
The activestandby state of fire wall.
The content of the invention
The present invention makes in view of the foregoing, and the purpose is to provide a kind of double hot standby method based on heartbeat and be
System, it can set and switch the activestandby state of fire wall automatically according to the state of routed path.
According to an aspect of the present invention, there is provided a kind of double hot standby method based on heartbeat, comprise the following steps：
Step S1, the first fire wall and the second fire wall are connected by heartbeat.
Step S2, the first fire wall set weighted value to each routed path associated with the first fire wall, and second is anti-
Wall with flues sets weighted value to each routed path associated with the second fire wall.
Step S3, the first fire wall calculate the summation of the weighted value of all routed paths associated with the first fire wall,
Second fire wall calculates the summation of the weighted value of all routed paths associated with the first fire wall.
Step S4, the first fire wall and the second fire wall are issued respective routed path weighted value summation by heartbeat
Other side.
Step S5, the first fire wall and the second fire wall are respectively compared the routed path weighted value summation of itself with receiving
Other side routed path weighted value summation size.
The state of itself is arranged to aggressive mode by step S6, the larger fire wall of routed path weighted value summation, over the ground
Location analysis protocol（ARP）Broadcasting packet is handled and carries out data forwarding, the less fire wall of routed path weighted value summation
The state of itself is arranged to passive suppression mode, does not handle any message.
Wherein, first fire wall and second fire wall are under consolidated network topological environmental, and described
One fire wall and second fire wall have the configuration of identical routed path.
First fire wall and second fire wall every time by heartbeat line locking before, recalculate respective route
Path weight value value summation.
When any one failure causes heartbeat signal to interrupt in first fire wall and second fire wall,
The Status Change of itself is emergency mode by another fire wall, and it is wide to carry out ARP according to current routed path weighted value summation
The delay for reporting text is sent, and all messages are forwarded by another fire wall.
First fire wall and second fire wall is caused not to receive other side when the heartbeat breaks down
Heartbeat signal when, first fire wall and second fire wall are emergency mode by the Status Change of itself, described
First fire wall and second fire wall carry out prolonging for ARP broadcasting packets according to each current routed path weighted value summation
When send, wherein the routed path weighted value summation is higher, be then delayed longer.
According to another aspect of the present invention, there is provided a kind of Dual-Computer Hot-Standby System based on heartbeat, including：First fire wall,
Second fire wall and heartbeat, it is attached between the first fire wall and the second fire wall by heartbeat.
First fire wall sets weighted value to each routed path associated with the first fire wall, and calculates all with the
The weighted value summation of the associated routed path of one fire wall.
Second fire wall sets weighted value to each routed path associated with the second fire wall, and calculates all with the
The weighted value summation of the associated routed path of two fire walls.
Respective routed path weighted value summation is issued other side by the first fire wall and the second fire wall by heartbeat, and
The size of the routed path weighted value summation of other side for being respectively compared the routed path weighted value summation of itself and receiving.
The state of itself is arranged to aggressive mode by the larger fire wall of routed path weighted value summation, and ARP is broadcasted and reported
Text is handled and carries out data forwarding, and the state of itself is arranged to passive by the less fire wall of routed path weighted value summation
Suppression mode, any message is not handled.
Wherein, first fire wall and second fire wall are under consolidated network topological environmental, and described
One fire wall and second fire wall have the configuration of identical routed path.
First fire wall and second fire wall every time by heartbeat line locking before, recalculate respective route
Path weight value value summation.
When any one failure causes heartbeat signal to interrupt in first fire wall and second fire wall,
The Status Change of itself is emergency mode by another fire wall, and it is wide to carry out ARP according to current routed path weighted value summation
The delay for reporting text is sent, and all messages are forwarded by another fire wall.
First fire wall and second fire wall is caused not to receive other side when the heartbeat breaks down
Heartbeat signal when, first fire wall and second fire wall are emergency mode by the Status Change of itself, described
First fire wall and second fire wall carry out prolonging for ARP broadcasting packets according to each current routed path weighted value summation
When send, wherein the routed path weighted value summation is higher, be then delayed longer.
According to the present invention, there is provided a kind of double hot standby method and system based on heartbeat, can be according to routed path
State is set automatically and the activestandby state of switching fire wall, while avoids causing two fire walls to be changed by heartbeat signal failure
To cause ARP broadcasting packets to influence routed path up and down and then the problem of cause message forwarding path confusion during active state.
Brief description of the drawings
Fig. 1 is the schematic flow sheet of the double hot standby method based on heartbeat of embodiment of the present invention；
Fig. 2 is the structural representation of the Dual-Computer Hot-Standby System based on heartbeat of embodiment of the present invention.
Embodiment
To make the object, technical solutions and advantages of the present invention of greater clarity, with reference to embodiment and join
According to accompanying drawing, the present invention is described in more detail.It should be understood that these descriptions are merely illustrative, and it is not intended to limit this hair
Bright scope.In addition, in the following description, the description to known features and technology is eliminated, to avoid unnecessarily obscuring this
The concept of invention.
The present invention provides a kind of double hot standby method and system based on heartbeat, can be automatic according to the state of routed path
The activestandby state of fire wall is set and switched, while avoids causing two fire walls to be converted into active shape by heartbeat signal failure
The problem of causing ARP broadcasting packets to influence routed path up and down during state and then causing message forwarding path confusion.
Fig. 1 is the schematic flow sheet of the double hot standby method based on heartbeat of embodiment of the present invention.
As shown in figure 1, a kind of double hot standby method based on heartbeat, comprises the following steps：
Step S1, the first fire wall and the second fire wall are connected by heartbeat.
First fire wall and the second fire wall are under consolidated network topological environmental, between the first fire wall and the second fire wall
It is attached by heartbeat, and is spaced at every fixed time by heartbeat（Such as 10 seconds）Carry out to each other match somebody with somebody confidence
The synchronization of breath and data message so that they have identical routed path.
Step S2, the first fire wall set weighted value to each routed path associated with the first fire wall, and second is anti-
Wall with flues sets weighted value to each routed path associated with the second fire wall.
For identical routed path, the first fire wall and the second fire wall set different weighted values.Implement in example
In mode, the first fire wall and the second fire wall have identical routed path, including routed path 1 and a routed path 2, and first
The weighted value of routed path 1 is arranged to 50 by fire wall, and the weighted value of routed path 2 is arranged into 30, and the second fire wall is by road
30 are arranged to by the weighted value in path 1, the weighted value of routed path 2 is arranged to 40.
Step S3, the first fire wall calculate the summation of the weighted value of all routed paths associated with the first fire wall,
Second fire wall calculates the summation of the weighted value of all routed paths associated with the second fire wall.
In example embodiment, the routed path weighted value summation of the first fire wall is 80, the route of the second fire wall
Path weight value value summation is 70.
Step S4, the first fire wall and the second fire wall are issued respective routed path weighted value summation by heartbeat
Other side.
In example embodiment, the routed path weighted value summation for the second fire wall that the first fire wall receives is 70,
The routed path weighted value summation for the first fire wall that second fire wall receives is 80.
Step S5, the first fire wall and the second fire wall are respectively compared the routed path weighted value summation of itself with receiving
Other side routed path weighted value summation size.
In example embodiment, the first fire wall determines that the routed path weighted value summation of itself is larger by comparing,
Second fire wall determines that the routed path weighted value summation of itself is smaller by comparing.
Step S6, the state of itself is arranged to aggressive mode by the larger fire wall of routed path weighted value summation, to ARP
Broadcasting packet is handled and carries out data forwarding, and the less fire wall of routed path weighted value summation sets the state of itself
For passive suppression mode, any message is not handled.
In example embodiment, the state of itself is arranged to by the first larger fire wall of routed path weighted value summation
Aggressive mode, ARP broadcasting packets are handled and carry out data forwarding, less second fire prevention of routed path weighted value summation
The state of itself is arranged to passive suppression mode by wall, does not handle any message.
In the first fire wall and the second fire wall every time by heartbeat line locking before, the first fire wall and the second fire wall weight
Respective routed path weighted value summation is newly calculated, so as to when by heartbeat line locking that newest routed path weighted value is total
Be sent to other side.
In example embodiment, when routed path 1 because after failure or other reasonses interrupt, the first fire wall is counted again
The routed path weighted value summation of calculation is the weighted value 30 of routed path 2, the routed path weight that the second fire wall recalculates
It is worth the weighted value 40 that summation is routed path 2.When the first fire wall and the second fire wall by heartbeat by each newest road
After issuing other side by path weight value value summation, the first fire wall by compare determine the routed path weighted value summation of itself compared with
It is small, the second fire wall by compare determine itself routed path weighted value summation it is larger, therefore the second fire wall by itself
State is arranged to aggressive mode, and ARP broadcasting packets are handled and carry out data forwarding, and the first fire wall is by the state of itself
Passive suppression mode is arranged to, does not handle any message.
When any one failure causes heartbeat signal to interrupt in the first fire wall and the second fire wall, another is anti-
The Status Change of itself is emergency mode by wall with flues, and ARP broadcasting packets are carried out according to current routed path weighted value summation
Delay is sent, and all messages are forwarded by the fire wall.In example embodiment, when event occurs in the first fire wall
When barrier causes the heartbeat signal to interrupt, the second fire wall is by road that the Status Change of itself is emergency mode, now the second fire wall
It is 70 by path weight value value summation, the second fire wall, which is delayed 70 milliseconds, sends ARP broadcasting packets, the other equipment on routed path
Cache table can be refreshed by the ARP broadcasting packets of the second fire wall, and all messages are forwarded by the second fire wall.
When heartbeat, which breaks down, causes the first fire wall and the second fire wall not to receive the heartbeat signal of other side,
First fire wall and the second fire wall by the Status Change of itself be emergency mode, the first fire wall and the second fire wall according to
Each current routed path weighted value summation carries out the delay transmission of ARP broadcasting packets, and routed path weighted value summation
Higher, delay is longer.So, when upper level router sends ARP broadcasting packets, because two fire walls reply ARP broadcast reports
The time interval of text is fixed and different, the arp cache table of the side meeting configuration file of router sent later, and then ensures
Only a fire wall is sent message therefrom, is avoided because message forwards caused by two fire walls are converted into active state
The problem of path confusion.In example embodiment, cause the first fire wall and the second fire wall equal when heartbeat breaks down
When not receiving the heartbeat signal of other side, the first fire wall and the second fire wall are emergency mode by the Status Change of itself,
Now the weighted value summation of the routed path of the first fire wall is 80, and the routed path weighted value summation of the second fire wall is 70,
Therefore the first fire wall is even more important, and according to respective weighted value summation, the first fire wall, which is delayed 80 milliseconds, sends ARP broadcast reports
Text, the second fire wall, which is delayed 70 milliseconds, sends ARP broadcasting packets, the arp cache table meeting of the other equipment on such routed path
Refreshed by the ARP broadcasting packets of the first fire wall, and all messages are forwarded by the first fire wall.
Fig. 2 is the structural representation of the Dual-Computer Hot-Standby System based on heartbeat of the present invention.
As shown in Fig. 2 a kind of Dual-Computer Hot-Standby System based on heartbeat, including：First fire wall 1, the second fire wall 2 and the heart
Wire jumper 3, the first fire wall 1 and the second fire wall 2 are under consolidated network topological environmental, the first fire wall 1 and the second fire wall 2
Between be attached by heartbeat 3, and be spaced at every fixed time by heartbeat 3（Such as 10 seconds）Carry out matching somebody with somebody to each other
Confidence ceases and the synchronization of data message so that they have identical routed path.
First fire wall 1 sets weighted value to each routed path associated with the first fire wall 1, and calculate it is all with
The weighted value summation of the associated routed path of first fire wall 1.
Second fire wall 2 sets weighted value to each routed path associated with the second fire wall 2, and calculate it is all with
The weighted value summation of the associated routed path of second fire wall 2.
For identical routed path, the first fire wall 1 and the second fire wall 2 set different weighted values.It is real in example
To apply in mode, the first fire wall 1 and the second fire wall 2 have identical routed path, including routed path 1 and routed path 2,
The weighted value of routed path 1 is arranged to 50 by the first fire wall 1, the weighted value of routed path 2 is arranged into 30, then routed path
Weighted value summation is 80, and the weighted value of routed path 1 is arranged to 30 by the second fire wall 2, and the weighted value of routed path 2 is set
For 40, then routed path weighted value summation is 70.
First fire wall 1 and the second fire wall 2 are issued respective routed path weighted value summation pair by heartbeat 3
Side, and it is respectively compared the big of the routed path weighted value summation of itself and the routed path weighted value summation of other side that receives
It is small.
In example embodiment, the routed path weighted value summation for the second fire wall 2 that the first fire wall 1 receives is
70, the routed path weighted value summation for the first fire wall 1 that the second fire wall 2 receives is 80.
First fire wall 1 determines that the routed path weighted value summation of itself is larger by comparing, and the second fire wall 2 passes through ratio
It is smaller compared with the routed path weighted value summation for determining itself.
The state of itself is arranged to aggressive mode by the larger fire wall of routed path weighted value summation, and ARP is broadcasted and reported
Text is handled and carries out data forwarding, and the state of itself is arranged to passive by the less fire wall of routed path weighted value summation
Suppression mode, any message is not handled.
In example embodiment, the first larger fire wall 1 of routed path weighted value summation sets the state of itself
For aggressive mode, ARP broadcasting packets are handled and carry out data forwarding, routed path weighted value summation less second is anti-
The state of itself is arranged to passive suppression mode by wall with flues 2, does not handle any message.
In the first fire wall 1 and the second fire wall 2 every time by the synchronization of heartbeat 3 before, the first fire wall 1 and the second fire prevention
Wall 2 recalculates respective routed path weighted value summation, to ensure newest routed path when synchronous by heartbeat 3
Weighted value summation is sent to other side.
In example embodiment, when routed path 1 because after failure or other reasonses interrupt, the first fire wall 1 is again
The routed path weighted value summation of calculating is the weighted value 30 of routed path 2, the routed path power that the second fire wall 2 recalculates
Weight values summation is the weighted value 40 of routed path 2.When the first fire wall 1 and the second fire wall 2 will be each newest by heartbeat 3
Routed path weighted value summation issue other side after, the first fire wall 1 by compare determine itself routed path weighted value it is total
Smaller, the second fire wall 2 determines that the routed path weighted value summation of itself is larger by comparing, therefore the second fire wall 2 will
The state of itself is arranged to aggressive mode, and ARP broadcasting packets are handled and carry out data forwarding, and the first fire wall 1 will be certainly
The state of body is arranged to passive suppression mode, does not handle any message.
When any one failure causes heartbeat signal to interrupt in the first fire wall 1 and the second fire wall 2, another
The Status Change of itself is emergency mode by fire wall, and ARP broadcasting packets are carried out according to current routed path weighted value summation
Delay is sent, and all messages are forwarded by the fire wall.In example embodiment, when the first fire wall 1 occurs
When failure causes the heartbeat signal to interrupt, the Status Change of itself is emergency mode by the second fire wall 2, now the second fire wall 2
Routed path weighted value summation be 70, the second fire wall 2 is delayed 70 milliseconds of transmission ARP broadcasting packets, its on routed path
The cache table of his equipment can be refreshed by the ARP broadcasting packets of the second fire wall 2, and all messages pass through the second fire wall 2
Forwarded.
The first fire wall 1 and the second fire wall 2 is caused not to receive the heartbeat signal of other side when heartbeat 3 breaks down
When, the first fire wall 1 and the second fire wall 2 are emergency mode, the first fire wall 1 and the second fire prevention by the Status Change of itself
The delay that wall 2 carries out ARP broadcasting packets according to respective current routed path weighted value summation is sent, and routed path weighted value
Summation is higher, is delayed longer so, when upper level router sends ARP broadcasting packets, because two fire walls reply ARP are wide
The time interval of report text is fixed and different, the arp cache table of the side meeting configuration file of router sent afterwards, and then ensures
Only a fire wall is sent message therefrom, is avoided because message forwards caused by two fire walls are converted into active state
The problem of path confusion.In example embodiment, cause the first fire wall 1 and the second fire wall 2 when heartbeat 3 breaks down
When not receiving the heartbeat signal of other side, the first fire wall 1 and the second fire wall 2 are urgent mould by the Status Change of itself
Formula, now the weighted value summation of the routed path of the first fire wall 1 is 80, the routed path weighted value summation of the second fire wall 2
Even more important for the 70, therefore first fire wall 1, according to respective weighted value summation, the first fire wall 1 is delayed 80 milliseconds and sent
ARP broadcasting packets, the second fire wall 2, which is delayed 70 milliseconds, sends ARP broadcasting packets, the other equipment on such routed path
Arp cache table can be refreshed by the ARP broadcasting packets of the first fire wall 1, and all messages pass through 1 turn of the first fire wall
Hair.
It should be appreciated that the above-mentioned embodiment of the present invention is used only for exemplary illustration or explains the present invention's
Principle, without being construed as limiting the invention.Therefore, that is done without departing from the spirit and scope of the present invention is any
Modification, equivalent substitution, improvement etc., should be included in the scope of the protection.In addition, appended claims purport of the present invention
Covering the whole changes fallen into scope and border or this scope and the equivalents on border and repairing
Change example.
Claims (10)
1. a kind of double hot standby method based on heartbeat, it is characterised in that comprise the following steps：
Step S1, the first fire wall and the second fire wall are connected by heartbeat；
Step S2, the first fire wall set weighted value, the second fire wall to each routed path associated with the first fire wall
Weighted value is set to each routed path associated with the second fire wall, for identical routed path, the first fire wall and
Second fire wall sets different weighted values；
Step S3, the summation of the weighted value of all routed paths associated with the first fire wall of the first fire wall calculating, second
Fire wall calculates the summation of the weighted value of all routed paths associated with the second fire wall；
Step S4, the first fire wall and the second fire wall are issued respective routed path weighted value summation pair by heartbeat
Side；
Step S5, the first fire wall and the second fire wall are respectively compared the routed path weighted value summation of itself and pair received
The size of the routed path weighted value summation of side；
The state of itself is arranged to aggressive mode by step S6, the larger fire wall of routed path weighted value summation, and address is solved
Analysis agreement (ARP) broadcasting packet is handled and carries out data forwarding, and the less fire wall of routed path weighted value summation will be certainly
The state of body is arranged to passive suppression mode, does not handle any message；
The larger fire wall of routed path weighted value summation is to ARP(Address Resolution Protocol)) broadcasting packet carries out processing and goes forward side by side line number
Include according to the step of forwarding：The delay that ARP broadcasting packets are carried out according to current routed path weighted value summation is sent.
2. according to the method for claim 1, it is characterised in that first fire wall and second fire wall are in same
Under one network topology environment, first fire wall and second fire wall have the configuration of identical routed path.
3. according to the method for claim 1, it is characterised in that first fire wall and second fire wall lead to every time
Before crossing heartbeat synchronization, respective routed path weighted value summation is recalculated.
4. according to the method described in claims 1 to 3 any one, it is characterised in that when first fire wall and described
When any one failure causes the heartbeat signal to interrupt in two fire walls, the Status Change of itself is tight by another fire wall
Anxious pattern, the delay that ARP broadcasting packets are carried out according to current routed path weighted value summation is sent, and all messages pass through
Another fire wall is forwarded.
5. according to the method described in claims 1 to 3 any one, it is characterised in that cause when the heartbeat breaks down
When first fire wall and second fire wall do not receive the heartbeat signal of other side, first fire wall and described
Second fire wall is emergency mode, first fire wall and second fire wall according to each by the Status Change of itself
The delay that current routed path weighted value summation carries out ARP broadcasting packets is sent, wherein the routed path weighted value summation
It is higher, then it is delayed longer.
A kind of 6. Dual-Computer Hot-Standby System based on heartbeat, it is characterised in that including：First fire wall, the second fire wall and heartbeat
Line；
It is attached between first fire wall and the second fire wall by heartbeat；
First fire wall sets weighted value to each routed path associated with the first fire wall, and calculate it is all with it is first anti-
The summation of the weighted value of the associated routed path of wall with flues, for identical routed path, the first fire wall and the second fire wall
Different weighted values is set；
Second fire wall sets weighted value to each routed path associated with the second fire wall, and calculate it is all with it is second anti-
The summation of the weighted value of the associated routed path of wall with flues；
Respective routed path weighted value summation is issued other side by the first fire wall and the second fire wall by heartbeat, and respectively
The size of the routed path weighted value summation of other side for comparing the routed path weighted value summation of itself and receiving；
The state of itself is arranged to aggressive mode by the larger fire wall of routed path weighted value summation, to address resolution protocol
(ARP) broadcasting packet is handled and carries out data forwarding, and the less fire wall of routed path weighted value summation is by the shape of itself
State is arranged to passive suppression mode, does not handle any message；
The larger fire wall of routed path weighted value summation is to ARP(Address Resolution Protocol)) broadcasting packet carries out processing and goes forward side by side line number
Include according to the step of forwarding：The delay that ARP broadcasting packets are carried out according to current routed path weighted value summation is sent.
7. system according to claim 6, it is characterised in that first fire wall and second fire wall are in same
Under one network topology environment, first fire wall and second fire wall have the configuration of identical routed path.
8. system according to claim 6, it is characterised in that first fire wall and second fire wall lead to every time
Before crossing heartbeat synchronization, respective routed path weighted value summation is recalculated.
9. according to the system described in claim 6 to 8 any one, it is characterised in that when first fire wall and described
When any one failure causes the heartbeat signal to interrupt in two fire walls, the Status Change of itself is tight by another fire wall
Anxious pattern, the delay that ARP broadcasting packets are carried out according to current routed path weighted value summation is sent, and all messages pass through
Another fire wall is forwarded.
10. according to the system described in claim 6 to 8 any one, it is characterised in that cause when the heartbeat breaks down
When first fire wall and second fire wall do not receive the heartbeat signal of other side, first fire wall and described
Second fire wall is emergency mode, first fire wall and second fire wall according to each by the Status Change of itself
The delay that current routed path weighted value summation carries out ARP broadcasting packets is sent, wherein the routed path weighted value summation
It is higher, then it is delayed longer.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410071568.2A CN103944749B (en) | 2014-02-28 | 2014-02-28 | A kind of double hot standby method and system based on heartbeat |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410071568.2A CN103944749B (en) | 2014-02-28 | 2014-02-28 | A kind of double hot standby method and system based on heartbeat |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103944749A CN103944749A (en) | 2014-07-23 |
| CN103944749B true CN103944749B (en) | 2017-12-12 |
Family
ID=51192247
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410071568.2A Active CN103944749B (en) | 2014-02-28 | 2014-02-28 | A kind of double hot standby method and system based on heartbeat |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103944749B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104537460A (en) * | 2014-12-08 | 2015-04-22 | 张君 | RFID signal parallel transmitting system for bottled liquid food production |
| CN105099777B (en) * | 2015-07-23 | 2018-09-11 | 南京国电南自轨道交通工程有限公司 | The method of communication gate dual-computer redundancy suitable for track traffic electric power monitoring system |
| CN107835086A (en) * | 2017-09-06 | 2018-03-23 | 王小亮 | A kind of method that system reliability is improved under double net two-shipper environment |
| CN108900544A (en) * | 2018-08-13 | 2018-11-27 | 武汉思普崚技术有限公司 | Active and standby fire wall setting method and device |
| CN109639512B (en) * | 2019-01-28 | 2021-06-15 | 中船重工鹏力（南京）大气海洋信息***有限公司 | Hot backup method of VTS multi-sensor information comprehensive processing system |
| CN111083174B (en) * | 2019-12-31 | 2022-03-29 | 北京力控华康科技有限公司 | Firewall dual-computer hot standby system, standby firewall and state processing method and device |
| CN111130914A (en) * | 2020-02-27 | 2020-05-08 | 紫光云技术有限公司 | Hot standby method for dual computers of firewall system |
| CN111371625A (en) * | 2020-03-18 | 2020-07-03 | 北京佳讯飞鸿电气股份有限公司 | Method for realizing dual-computer hot standby |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101848100A (en) * | 2009-03-23 | 2010-09-29 | 北京鼎信高科信息技术有限公司 | Fire wall dual-computer hot-standby system based on CONNTRACK synchronism |
| CN103227725A (en) * | 2012-03-30 | 2013-07-31 | 杭州华三通信技术有限公司 | Method and device for dual-server backup of firewall |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7237259B2 (en) * | 2002-11-07 | 2007-06-26 | International Business Machines Corporation | Fault reducing firewall system |
| CN101465793B (en) * | 2007-12-18 | 2011-02-16 | 中国科学院计算技术研究所 | Method and device for obtaining shortest route between two points in network |
| CN101895482A (en) * | 2009-05-18 | 2010-11-24 | 华为技术有限公司 | Method and device for abstracting logic topology information of peer-to-peer technological network |
| CN103532844A (en) * | 2013-09-27 | 2014-01-22 | 南京日新科技有限公司 | Micro-power wireless networking and communication method, master node and system |
-
2014
- 2014-02-28 CN CN201410071568.2A patent/CN103944749B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101848100A (en) * | 2009-03-23 | 2010-09-29 | 北京鼎信高科信息技术有限公司 | Fire wall dual-computer hot-standby system based on CONNTRACK synchronism |
| CN103227725A (en) * | 2012-03-30 | 2013-07-31 | 杭州华三通信技术有限公司 | Method and device for dual-server backup of firewall |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103944749A (en) | 2014-07-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103944749B (en) | A kind of double hot standby method and system based on heartbeat | |
| US10454806B2 (en) | SDN controller, data center system, and routing connection method | |
| US9722917B2 (en) | Traffic recovery in openflow networks | |
| EP3171555A1 (en) | Fault detection method for virtual router redundancy protocol and router device | |
| EP2528272A1 (en) | Dual-attached protection switching method based on vpls and system thereof | |
| CN102264088B (en) | Pseudo-wire pretection switch implementation method and device | |
| US10122618B2 (en) | Path switching method and device | |
| JP2011501494A5 (en) | ||
| EP2696542A1 (en) | Method, ToR switch, and system for implementing protection switchover based on TRILL network | |
| CN104539461A (en) | Device and method for inhibitory protocol port oscillation reporting | |
| WO2011157149A2 (en) | Method, communication device and system, and service request device for main/standby switch between communication devices | |
| EP3355533B1 (en) | Path switching | |
| CN105610743A (en) | Method and apparatus for realizing STP (Spanning Tree Protocol) protocol family in MLAG (Multi-Chassis Link Aggregation) environment | |
| EP2712135A1 (en) | Network system, transmission device, and fault information delivery method | |
| CN103441940B (en) | The network equipment is by the switching method, device and the network equipment for state to major state | |
| EP3059910B1 (en) | Method and system for redundancy protection | |
| CN104468347B (en) | Control method and device of the network data from loopback | |
| CN105939215B (en) | The method and device of VRRP backup group state switching | |
| JP5989911B2 (en) | Method and apparatus for protecting service traffic | |
| US20150036542A1 (en) | Method for receiving information, method for sending information, and apparatus for the same | |
| CN103036781A (en) | Method and device for processing main path link failures | |
| WO2012122817A1 (en) | Method and system for switching p2mp multicast tunnel protection | |
| EP1944936A1 (en) | A method for protecting the service flow and a network device | |
| CN103973498B (en) | A kind of many home network active-standby path systems of selection and equipment | |
| WO2016161802A1 (en) | Method and system for realizing quick changeover of dni-pw |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| PP01 | Preservation of patent right |
Effective date of registration: 20180528 Granted publication date: 20171212 |
|
| PP01 | Preservation of patent right | ||
| PD01 | Discharge of preservation of patent |
Date of cancellation: 20240528 Granted publication date: 20171212 |
|
| PP01 | Preservation of patent right |
Effective date of registration: 20240528 Granted publication date: 20171212 |