CN113114800A - Resource processing method and device - Google Patents

Resource processing method and device Download PDF

Info

Publication number
CN113114800A
CN113114800A CN202110474048.6A CN202110474048A CN113114800A CN 113114800 A CN113114800 A CN 113114800A CN 202110474048 A CN202110474048 A CN 202110474048A CN 113114800 A CN113114800 A CN 113114800A
Authority
CN
China
Prior art keywords
nat
resource
nat resource
state
master device
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202110474048.6A
Other languages
Chinese (zh)
Other versions
CN113114800B (en
Inventor
张恒
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
New H3C Security Technologies Co Ltd
Original Assignee
New H3C Security Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by New H3C Security Technologies Co Ltd filed Critical New H3C Security Technologies Co Ltd
Priority to CN202110474048.6A priority Critical patent/CN113114800B/en
Publication of CN113114800A publication Critical patent/CN113114800A/en
Application granted granted Critical
Publication of CN113114800B publication Critical patent/CN113114800B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/09Mapping addresses
    • H04L61/25Mapping addresses of the same type
    • H04L61/2503Translation of Internet protocol [IP] addresses
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0654Management of faults, events, alarms or notifications using network fault recovery
    • H04L41/0663Performing the actions predefined by failover planning, e.g. switching to standby network elements
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08Configuration management of networks or network elements
    • H04L41/0803Configuration setting

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The application provides a resource processing method and a device, wherein the method is applied to any one of double main devices, and the method comprises the following steps: setting the use state of the NAT resource configured to the main equipment in the NAT resource configuration information as an activation state and setting the use state of the NAT resource configured to the other main equipment in the double main equipment in the NAT resource configuration information as a deactivation state according to the obtained NAT resource configuration information; using the NAT resource in the activated state to perform NAT conversion on the received service message; if it is determined that another master device fails, the use state of the NAT resource of the other master device is changed to an activated state, and the NAT session table entry which is not backed up by the other master device and the service packet of the NAT session table entry created by the master device are subjected to NAT conversion by using the unoccupied NAT resource in the activated state. The application can improve user experience.

Description

Resource processing method and device
Technical Field
The present application relates to the field of communications technologies, and in particular, to a resource processing method and apparatus.
Background
In the dual-master networking, each master device in the dual-master networking processes a service message from a user side device, and when one master device fails, the other master device can immediately process the service message born by the other master device.
Specifically, in the dual-master networking, in order to avoid that two masters use the same Network Address Translation (NAT) resource (i.e., a public Network Address or a port corresponding to the public Network Address) to perform NAT Translation on a service packet received from a user side device, an administrator usually performs balanced splitting on NAT resources configured for the dual-master device, where one master uses a part of the NAT resources and the other master uses the other part of the NAT resources. Thus, when the two main devices work normally, each main device uses its respective NAT resource to perform NAT conversion on the received service message from the user side device, and backs up the created corresponding NAT session table entry to each other.
Once any one of the two main devices fails, the service message of the user side device which originally takes the main device as a gateway can reach the other main device, and if the other main device has a corresponding backup NAT session table entry, the corresponding NAT session table entry is still used for processing the service message; if there is no backup corresponding NAT session table item (possibly aged) on the other main device, the other main device uses its NAT resource to perform NAT conversion to the service message and create a new NAT session table item.
However, under the situation that the main device fails, once the number of service messages missing from the backed-up NAT session entry is greater than the number of NAT resources used by the main device, a problem of NAT translation failure due to insufficient NAT resources may occur, so that the corresponding user side device cannot access network resources, and user experience is affected.
Disclosure of Invention
In order to overcome the problems in the related art, the application provides a resource processing method and device.
According to a first aspect of embodiments of the present application, there is provided a resource processing method, which is applied to any one of dual master devices in a dual-master networking, and the method includes:
setting the use state of the NAT resource configured to the main equipment in the NAT resource configuration information as an activation state and setting the use state of the NAT resource configured to the other main equipment in the double main equipment in the NAT resource configuration information as a deactivation state according to the obtained NAT resource configuration information, wherein the NAT resource of the main equipment is a public network address or a port corresponding to the public network address;
using the NAT resource in the activated state to perform NAT conversion on the received service message;
if it is determined that the other main device fails, the use state of the NAT resource of the other main device is changed into an activated state, and the NAT resource which is in the activated state and is not occupied is used for carrying out NAT conversion on the received NAT session table entry which is not backed up by the other main device and the service message of the NAT session table entry which is established by the main device.
According to a second aspect of the embodiments of the present application, there is provided a resource processing apparatus, which is applied to any one of dual master devices in a dual-master networking, the apparatus including:
the setting module is used for setting the use state of the NAT resource configured to the main equipment in the NAT resource configuration information as an activated state and setting the use state of the NAT resource configured to the other main equipment in the double main equipment in the NAT resource configuration information as a deactivated state according to the obtained NAT resource configuration information, wherein the NAT resource of the main equipment is a public network address or a port corresponding to the public network address;
the first conversion module is used for carrying out NAT conversion on the received service message by using the NAT resource in an activated state;
and the second conversion module is used for changing the use state of the NAT resource of the other main equipment into an activated state if the fact that the other main equipment fails is determined, using the NAT resource which is in the activated state and is not occupied, and carrying out NAT conversion on the received NAT session table entry which is not backed up by the other main equipment and the service message of the NAT session table entry which is established by the main equipment.
The technical scheme provided by the embodiment of the application can have the following beneficial effects:
in the embodiment of the application, for the dual master devices in the dual master networking, under the condition of normal operation, the use states of the respective NAT resources are maintained, and each NAT resource in an activated state (that is, the NAT resource configured by an administrator for itself) is used to perform NAT conversion on the received service message; once a certain master device fails, another master device immediately changes the use state of the NAT resource of the failed master device (i.e., changes to an active state), so that another master device can use the NAT resource that is in the active state and is not occupied (the number of the NAT resource at this time is greater than that of the NAT resource configured by another device itself), and continue to perform NAT conversion on the received service packet that does not hit the NAT session table entry backed up by the another master device, thereby avoiding the problem of NAT conversion failure due to insufficient NAT resources to a certain extent, and further improving user experience.
It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the application.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this application, illustrate embodiments consistent with the present application and together with the description, serve to explain the principles of the application.
Fig. 1 is a schematic flowchart of a resource processing method according to an embodiment of the present application;
fig. 2 is a schematic structural diagram of a resource processing apparatus according to an embodiment of the present disclosure;
fig. 3 is a schematic structural diagram of an electronic device according to an embodiment of the present application.
Detailed Description
Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present application, as detailed in the appended claims.
The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. As used in this application and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein refers to and encompasses any and all possible combinations of one or more of the associated listed items.
Next, examples of the present application will be described in detail.
An embodiment of the present application provides a resource processing method, where the method is applied to any one of dual master devices in a dual-master networking, where the master device may be a firewall device, and as shown in fig. 1, the method may include the following steps:
and S11, setting the use state of the NAT resource configured to the main equipment in the NAT resource configuration information as an activation state and setting the use state of the NAT resource configured to the other main equipment in the double main equipment in the NAT resource configuration information as a deactivation state according to the obtained NAT resource configuration information.
In this step, the NAT resource of the host device may be a public network address, which is suitable for a scenario in which the host device needs to convert a source IP address (i.e., a private network IP address) of a received service packet into a corresponding public network IP address (one source IP address uniquely corresponds to one public network IP address). In this scenario, the source port of the traffic packet is not converted.
The NAT resource of the master device may also be a port corresponding to a public network address, and this situation is applicable to a scenario in which the master device needs to convert a source IP address (i.e., a private network IP address) and a source port of a received service packet into a corresponding public network IP address and a corresponding port thereof. In this scenario, one public network address corresponds to multiple ports, multiple source IP addresses can be converted into the same public network IP address, and different source ports are converted into different ports.
S12, using the NAT resource in the activated state to perform NAT conversion on the received service message;
and S13, if it is determined that another master device fails, changing the use state of the NAT resource of the other master device into an activated state, and using the NAT resource which is in the activated state and is not occupied to perform NAT conversion on the received NAT session table entry which is not backed up by the other master device and the service message of the NAT session table entry which is created by the master device.
Specifically, in step S11, for the master device, when the master device is a configuration master device, the master device may obtain the NAT resource configuration information in the following manner:
the first mode is as follows: and after the main equipment is powered on, acquiring NAT resource configuration information from local.
That is, in the first mode, the administrator has configured resource configuration information (including information such as NAT resources that the dual master devices need to use) to the master device in advance, and once the master device is powered on, the administrator can obtain the resource configuration information from the local and synchronize the obtained resource configuration information to the other master device.
The second mode is as follows: and after the main equipment is powered on, receiving NAT resource configuration information input by an administrator.
That is, in the second mode, the administrator does not configure the resource configuration information (including information such as NAT resources that the dual master devices need to use) to the master device in advance, but inputs the resource configuration information to the master device after the master device is powered on, and the master device synchronizes the resource configuration information to another master device after receiving the resource configuration information.
When the master device is not the configuration master device, the master device receives NAT resource configuration information synchronized by another master device.
It should be noted that, in the embodiment of the present application, a specific implementation process for the master device to perform the step S12 is a prior art, and is not described in detail herein.
Specifically, in the above step S13, the determination process of how the master device determines that another master device has failed is the prior art and will not be described in detail here.
It should be particularly noted that, when the primary device receives a notification message, which is sent when a link for processing a service packet of another device fails and notifies that the other device is unavailable, the primary device changes the use state of the NAT resource configured to the primary device into a deactivated state, so that the NAT resource is subsequently changed into an activated state when the failure is recovered, and the service packet can be normally processed.
Further, in this embodiment of the present application, in order to facilitate an administrator to maintain the NAT resources configured for the dual master device, before using the NAT resource that is in an active state and is unoccupied, the master device may further perform the following operations:
and acquiring the priority corresponding to the unoccupied NAT resource in the activated state.
After acquiring the priority corresponding to the unoccupied NAT resource in the activated state, the master device may perform NAT conversion on the received service packet that does not hit the NAT session table entry backed up by another master device and the NAT session table entry created by the master device in the following manner:
and carrying out NAT conversion on the received service message which does not hit the NAT session table entry backed up by the other main equipment by using the NAT resources which are in the activated state and are not occupied according to the sequence of the obtained priorities corresponding to the NAT resources which are in the activated state and are not occupied from high to low.
More specifically, in the above operation flow, the master device may obtain the priority corresponding to the NAT resource that is in an active state and is unoccupied by:
the first mode is as follows: and acquiring the priority corresponding to the unoccupied NAT resource in an activated state from the priority corresponding to the NAT resource of the main equipment and the priority corresponding to the NAT resource of the other main equipment, which are configured when the main equipment receives the NAT resource configuration instruction.
The second mode is as follows: and acquiring the priority corresponding to the unoccupied NAT resource in the activated state from the priority corresponding to the NAT resource of the main equipment and the priority corresponding to the NAT resource of the other main equipment, which are configured after the use state of the NAT resource of the other main equipment is changed into the activated state by the main equipment.
In any of the above methods, among the NAT resources that are in an active state and are not occupied, the priority corresponding to the NAT resource of the master device is high, and the priority corresponding to the NAT resource of the other master device is low.
Further, in the embodiment of the present application, the master device may further perform the following operations:
when receiving a recovered NAT resource message sent by another main device, changing the use state of the NAT resource of the other main device into a deactivation state, wherein the recovered NAT resource message is sent by the other device after the fault is recovered;
and sending a notification message for notifying the other main device that the use state of the NAT resource of the other main device is changed into the deactivation state to the other main device, so that the other main device changes the use state of the NAT resource of the other main device into the activation state according to the notification message, and processes the received service message by using the NAT resource in the activation state.
In this operation flow, for another master device, in order to ensure that it can stably process the service packet from the user side device, after sending the message of recovering the NAT resource to the master device, the fault flag is still maintained, and then the fault flag is removed after the use state of the NAT resource of the master device is changed according to the notification message sent by the master device to notify that the master device has changed the use state of the NAT resource to the deactivated state, so as to normally process the service packet.
It can be seen from the above technical solutions that, in the embodiment of the present application, for the dual master devices in the dual master networking, under the condition of normal operation, the usage states of the respective NAT resources are maintained, and the NAT resources in the activated state are used by the respective NAT resources (that is, the NAT resources configured by the administrator for the respective NAT resources) to perform NAT conversion on the received service packet; once a certain master device fails, another master device immediately changes the use state of the NAT resource of the failed master device (i.e., changes to an active state), so that another master device can use the NAT resource that is in the active state and is not occupied (the number of the NAT resource at this time is greater than that of the NAT resource configured by another device itself), and continue to perform NAT conversion on the received service packet that does not hit the NAT session table entry backed up by the another master device, thereby avoiding the problem of NAT conversion failure due to insufficient NAT resources to a certain extent, and further improving user experience.
Based on the same inventive concept, the present application further provides a resource processing apparatus, where the apparatus is applied to any one of dual master devices in a dual-master networking, where the master device may be a firewall device, and a schematic structural diagram of the apparatus is shown in fig. 2, and specifically includes:
a setting module 21, configured to convert, according to the obtained network address, NAT resource configuration information, set a use state of the NAT resource configured to the host device in the NAT resource configuration information to an activated state, and set a use state of the NAT resource configured to another host device in the dual host devices in the NAT resource configuration information to a deactivated state, where the NAT resource of the host device is a public network address or a port corresponding to the public network address;
the first conversion module 22 is configured to perform NAT conversion on the received service packet by using an NAT resource in an activated state;
the second conversion module 23 is configured to, if it is determined that the another master device fails, change the use state of the NAT resource of the another master device into an activated state, and perform NAT conversion on the received service packet that misses the NAT session entry backed up by the another master device and the NAT session entry created by the master device, by using the unoccupied NAT resource in the activated state.
Preferably, the apparatus further comprises:
an obtaining module (not shown in fig. 2) configured to obtain a priority corresponding to an unoccupied NAT resource in an active state before the second translation module uses the unoccupied NAT resource in the active state;
the second translation module (not shown in fig. 2) is specifically configured to perform NAT translation on the received service packet that misses the NAT session entry backed up by the another host device and the NAT session entry created by the host device in the following manner:
and performing NAT conversion on the received NAT session table entry which is not backed up by the other main device and the service message of the NAT session table entry which is established by the main device and missed by using the NAT resources which are in the activated state and are not occupied according to the sequence of the obtained priorities corresponding to the NAT resources which are in the activated state and are not occupied from high to low.
Preferably, the obtaining module is specifically configured to obtain the priority corresponding to the NAT resource that is in an activated state and is unoccupied by the following method:
acquiring the priority corresponding to the unoccupied NAT resource in an activated state from the priority corresponding to the NAT resource of the main device and the priority corresponding to the NAT resource of the other main device, which are configured when the main device acquires the NAT resource configuration information;
among the unoccupied NAT resources in the activated state, the priority corresponding to the NAT resource of the master device is high priority, and the priority corresponding to the NAT resource of the other master device is low priority.
Preferably, the obtaining module is specifically configured to obtain the priority corresponding to the NAT resource that is in an activated state and is unoccupied by the following method:
acquiring the priority corresponding to the unoccupied NAT resource in the activated state from the priority corresponding to the NAT resource of the main equipment and the priority corresponding to the NAT resource of the other main equipment, which are configured after the main equipment changes the use state of the NAT resource of the other main equipment into the activated state;
among the unoccupied NAT resources in the activated state, the priority corresponding to the NAT resource of the master device is high priority, and the priority corresponding to the NAT resource of the other master device is low priority.
Preferably, the apparatus further comprises:
a changing module, configured to change, when receiving a NAT resource recovery message sent by the other host device, a use state of the NAT resource of the other host device to a deactivated state, where the NAT resource recovery message is sent by the other device after fault recovery;
a notifying module, configured to send, to the another master device, a notification message for notifying the another master device that the use state of the NAT resource of the another master device has been changed to the deactivated state, so that the another master device changes the use state of the NAT resource of the another master device to the activated state according to the notification message, and processes the received service packet by using the NAT resource in the activated state.
It can be seen from the above technical solutions that, in the embodiment of the present application, for the dual master devices in the dual master networking, under the condition of normal operation, the usage states of the respective NAT resources are maintained, and the NAT resources in the activated state are used by the respective NAT resources (that is, the NAT resources configured by the administrator for the respective NAT resources) to perform NAT conversion on the received service packet; once a certain master device fails, another master device immediately changes the use state of the NAT resource of the failed master device (i.e., changes to an active state), so that another master device can use the NAT resource that is in the active state and is not occupied (the number of the NAT resource at this time is greater than that of the NAT resource configured by another device itself), and continue to perform NAT conversion on the received service packet that does not hit the NAT session table entry backed up by the another master device, thereby avoiding the problem of NAT conversion failure due to insufficient NAT resources to a certain extent, and further improving user experience.
An electronic device is further provided in the embodiments of the present application, as shown in fig. 3, including a processor 31 and a machine-readable storage medium 32, where the machine-readable storage medium 32 stores machine-executable instructions that can be executed by the processor 31, and the processor 31 is caused by the machine-executable instructions to: and realizing the steps of the resource processing method.
The machine-readable storage medium may include a Random Access Memory (RAM) or a Non-Volatile Memory (NVM), such as at least one disk Memory. Alternatively, the machine-readable storage medium may be at least one memory device located remotely from the processor.
The Processor may be a general-purpose Processor, including a Central Processing Unit (CPU), a Network Processor (NP), and the like; but also Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), Field Programmable Gate Arrays (FPGAs) or other Programmable logic devices, discrete Gate or transistor logic devices, discrete hardware components.
In yet another embodiment provided by the present application, a computer-readable storage medium is further provided, in which a computer program is stored, and the computer program realizes the steps of the above resource processing method when being executed by a processor.
The above description is only exemplary of the present application and should not be taken as limiting the present application, as any modification, equivalent replacement, or improvement made within the spirit and principle of the present application should be included in the scope of protection of the present application.

Claims (10)

1. A resource processing method is applied to any one of dual master devices in a dual master networking, and comprises the following steps:
setting the use state of the NAT resource configured to the main equipment in the NAT resource configuration information as an activated state and setting the use state of the NAT resource configured to the other main equipment in the double main equipment in the NAT resource configuration information as a deactivated state according to the acquired NAT resource configuration information, wherein the NAT resource of the main equipment is a public network address or a port corresponding to the public network address;
using the NAT resource in the activated state to perform NAT conversion on the received service message;
if it is determined that the other main device fails, the use state of the NAT resource of the other main device is changed into an activated state, and the NAT resource which is in the activated state and is not occupied is used for carrying out NAT conversion on the received NAT session table entry which is not backed up by the other main device and the service message of the NAT session table entry which is established by the main device.
2. The method of claim 1, wherein prior to using the unoccupied NAT resource in an active state, the method further comprises:
acquiring the priority corresponding to the unoccupied NAT resource in an activated state;
performing NAT conversion on the received NAT session table entry which is not backed up by the other main device and the service message of the NAT session table entry which is established by the main device in the following mode:
and performing NAT conversion on the received NAT session table entry which is not backed up by the other main device and the service message of the NAT session table entry which is established by the main device and missed by using the NAT resources which are in the activated state and are not occupied according to the sequence of the obtained priorities corresponding to the NAT resources which are in the activated state and are not occupied from high to low.
3. The method of claim 2, wherein the priority corresponding to the unoccupied NAT resource in the active state is obtained by:
acquiring the priority corresponding to the unoccupied NAT resource in an activated state from the priority corresponding to the NAT resource of the main device and the priority corresponding to the NAT resource of the other main device, which are configured when the main device acquires the NAT resource configuration information;
among the unoccupied NAT resources in the activated state, the priority corresponding to the NAT resource of the master device is high priority, and the priority corresponding to the NAT resource of the other master device is low priority.
4. The method of claim 2, wherein the priority corresponding to the unoccupied NAT resource in the active state is obtained by:
acquiring the priority corresponding to the unoccupied NAT resource in the activated state from the priority corresponding to the NAT resource of the main equipment and the priority corresponding to the NAT resource of the other main equipment, which are configured after the main equipment changes the use state of the NAT resource of the other main equipment into the activated state;
among the unoccupied NAT resources in the activated state, the priority corresponding to the NAT resource of the master device is high priority, and the priority corresponding to the NAT resource of the other master device is low priority.
5. The method of claim 1, further comprising:
when receiving a recovered NAT resource message sent by the other master device, changing the use state of the NAT resource of the other master device into a deactivated state, wherein the recovered NAT resource message is sent by the other device after fault recovery;
and sending a notification message for notifying the other master device that the use state of the NAT resource of the other master device is changed into the deactivation state to the other master device, so that the other master device changes the use state of the NAT resource of the other master device into the activation state according to the notification message, and processes the received service message by using the NAT resource in the activation state.
6. An apparatus for processing resources, the apparatus being applied to any one of dual masters in a dual-master networking, the apparatus comprising:
the setting module is used for setting the use state of the NAT resource configured to the main equipment in the NAT resource configuration information as an activated state and setting the use state of the NAT resource configured to the other main equipment in the double main equipment in the NAT resource configuration information as a deactivated state according to the acquired NAT resource configuration information converted by the network address, wherein the NAT resource of the main equipment is a public network address or a port corresponding to the public network address;
the first conversion module is used for carrying out NAT conversion on the received service message by using the NAT resource in an activated state;
and the second conversion module is used for changing the use state of the NAT resource of the other main equipment into an activated state if the fact that the other main equipment fails is determined, using the NAT resource which is in the activated state and is not occupied, and carrying out NAT conversion on the received NAT session table entry which is not backed up by the other main equipment and the service message of the NAT session table entry which is established by the main equipment.
7. The apparatus of claim 6, further comprising:
an obtaining module, configured to obtain a priority corresponding to an unoccupied NAT resource in an activated state before the second translation module uses the unoccupied NAT resource in the activated state;
the second conversion module is specifically configured to perform NAT conversion on the received service packet that misses the NAT session table entry backed up by the other master device and the NAT session table entry created by the master device in the following manner:
and performing NAT conversion on the received NAT session table entry which is not backed up by the other main device and the service message of the NAT session table entry which is established by the main device and missed by using the NAT resources which are in the activated state and are not occupied according to the sequence of the obtained priorities corresponding to the NAT resources which are in the activated state and are not occupied from high to low.
8. The apparatus according to claim 7, wherein the obtaining module is specifically configured to obtain the priority corresponding to the unoccupied NAT resource in the activated state by:
acquiring the priority corresponding to the unoccupied NAT resource in an activated state from the priority corresponding to the NAT resource of the main device and the priority corresponding to the NAT resource of the other main device, which are configured when the main device acquires the NAT resource configuration information;
among the unoccupied NAT resources in the activated state, the priority corresponding to the NAT resource of the master device is high priority, and the priority corresponding to the NAT resource of the other master device is low priority.
9. The apparatus according to claim 7, wherein the obtaining module is specifically configured to obtain the priority corresponding to the unoccupied NAT resource in the activated state by:
acquiring the priority corresponding to the unoccupied NAT resource in the activated state from the priority corresponding to the NAT resource of the main equipment and the priority corresponding to the NAT resource of the other main equipment, which are configured after the main equipment changes the use state of the NAT resource of the other main equipment into the activated state;
among the unoccupied NAT resources in the activated state, the priority corresponding to the NAT resource of the master device is high priority, and the priority corresponding to the NAT resource of the other master device is low priority.
10. The apparatus of claim 6, further comprising:
a changing module, configured to change, when receiving a NAT resource recovery message sent by the other host device, a use state of the NAT resource of the other host device to a deactivated state, where the NAT resource recovery message is sent by the other device after fault recovery;
a notifying module, configured to send, to the another master device, a notification message for notifying the another master device that the use state of the NAT resource of the another master device has been changed to the deactivated state, so that the another master device changes the use state of the NAT resource of the another master device to the activated state according to the notification message, and processes the received service packet by using the NAT resource in the activated state.
CN202110474048.6A 2021-04-29 2021-04-29 Resource processing method and device Active CN113114800B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110474048.6A CN113114800B (en) 2021-04-29 2021-04-29 Resource processing method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110474048.6A CN113114800B (en) 2021-04-29 2021-04-29 Resource processing method and device

Publications (2)

Publication Number Publication Date
CN113114800A true CN113114800A (en) 2021-07-13
CN113114800B CN113114800B (en) 2022-05-24

Family

ID=76720408

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110474048.6A Active CN113114800B (en) 2021-04-29 2021-04-29 Resource processing method and device

Country Status (1)

Country Link
CN (1) CN113114800B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115442456A (en) * 2022-09-16 2022-12-06 北京惠而特科技有限公司 Double-main redundant backup method and system based on industrial protocol

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101123531A (en) * 2006-12-30 2008-02-13 华为技术有限公司 Convergence method and device based on VPLS dual home full connection network
CN101227530A (en) * 2008-02-03 2008-07-23 中兴通讯股份有限公司 Method and apparatus of resource backup
US20100162383A1 (en) * 2008-12-19 2010-06-24 Watchguard Technologies, Inc. Cluster Architecture for Network Security Processing
CN103929333A (en) * 2014-05-08 2014-07-16 陈桂芳 Implementation method for SDN controller pool
CN108337118A (en) * 2018-01-31 2018-07-27 新华三技术有限公司 Message forwarding method and device
CN108924272A (en) * 2018-06-26 2018-11-30 新华三信息安全技术有限公司 A kind of port resource distribution method and device

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101123531A (en) * 2006-12-30 2008-02-13 华为技术有限公司 Convergence method and device based on VPLS dual home full connection network
CN101227530A (en) * 2008-02-03 2008-07-23 中兴通讯股份有限公司 Method and apparatus of resource backup
US20100162383A1 (en) * 2008-12-19 2010-06-24 Watchguard Technologies, Inc. Cluster Architecture for Network Security Processing
CN103929333A (en) * 2014-05-08 2014-07-16 陈桂芳 Implementation method for SDN controller pool
CN108337118A (en) * 2018-01-31 2018-07-27 新华三技术有限公司 Message forwarding method and device
CN108924272A (en) * 2018-06-26 2018-11-30 新华三信息安全技术有限公司 A kind of port resource distribution method and device

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115442456A (en) * 2022-09-16 2022-12-06 北京惠而特科技有限公司 Double-main redundant backup method and system based on industrial protocol

Also Published As

Publication number Publication date
CN113114800B (en) 2022-05-24

Similar Documents

Publication Publication Date Title
JP3932994B2 (en) Server handover system and method
CN110971698B (en) Data forwarding system, method and device
CN105933407B (en) method and system for realizing high availability of Redis cluster
US10560550B1 (en) Automatic configuration of a replacement network device in a high-availability cluster
CN107911291B (en) VRRP router switching method, router, VRRP active-standby switch system and storage medium
CN104935672A (en) High available realizing method and equipment of load balancing service
US8108514B2 (en) High availability of internet protocol addresses within a cluster
US9886358B2 (en) Information processing method, computer-readable recording medium, and information processing system
CN112346899B (en) Micro-service performance optimization method and device
CN110324375B (en) Information backup method and related equipment
WO2021185169A1 (en) Switching method and apparatus, and device and storage medium
CN104506372A (en) Method and system for realizing host-backup server switching
CN113114800B (en) Resource processing method and device
CN111083049B (en) User table item recovery method and device, electronic equipment and storage medium
CN109412980B (en) BRAS backup method and device
WO2014032532A1 (en) Enum-dns disaster recovery method and system in ims network
CN117201507A (en) Cloud platform switching method and device, electronic equipment and storage medium
CN108270593B (en) Dual-computer hot backup method and system
CN110351122B (en) Disaster recovery method, device, system and electronic equipment
CN1310481C (en) Method for realizing application characteristic dual processor backup
US10536875B2 (en) System and method for seamless TCP connection handoff
WO2016177211A1 (en) Address resolution protocol (arp) table entry synchronization method and device
CN115190040B (en) High-availability realization method and device for virtual machine
CN106992878B (en) Multicast detection method and device
CN110716827A (en) Hot backup method suitable for distributed system and distributed system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant