Active dialogue backup system, equipment and method in dual-server hot-backup network

Abstract

The invention discloses an active dialogue backup system in dual-server hot-backup network. The system comprises first equipment and second equipment which are configured as a dual-server hot-backup relation. The first equipment and the second equipment respectively create a dialogue table according to the first package of each dialogue, and back up to the equipment of the other one. The first equipment or the second equipment, when receiving a message about having no self-matching dialogue table, transparently transmits the message to the other equipment for checking a matched dialogue tablewhich is then returned for backup and used for forwarding message. The invention also discloses the corresponding equipment and method. The proposal of the invention uses the transparent transmissionof a message for triggering to actively backup the matched dialogue table, and guarantees that the flow can be seamlessly switched when the faulty equipment is restored under the circumstance of hugedialogue data. In an asymmetric dual-server hot-backup network, the proposal guarantees that the service is not affected by the dialogue table backup efficiency and the response message returning speed, and ensures that the message is forwarded as per the original route without changing the forwarding route.

Description

technical field [0001] The invention relates to a dual-computer hot standby networking technology, in particular to a system, device and method for realizing active backup of session table items in a dual-computer hot standby networking. Background technique [0002] In current networking applications, in order to avoid the risk of network interruption due to single point of failure, multiple The devices form a backup network. [0003] The traditional backup networking solution is to deploy multiple devices at the access point to form a backup, and perform link switching through mechanisms such as VRRP (Virtual Router Redundancy Protocol) or dynamic routing, so that after a device fails, Automatically switch traffic to another working device. This solution is only applicable when the access point is a forwarding device such as a router; when the access point is a network security device such as a stateful firewall, since it will establish the source IP, source port, destin...

AI Technical Summary

Problems solved by technology

[0007] However, there is a defect in the dual-unit networking scheme of the prior art, whether it is backup or backup, that is, the entry backup process is initiated by the device that records the session entry, and the session entry is needed to The device that forwards the message is passively accepting the backup of the initiating device, which may cause the following two problems

First, when the traffic switching time is faster than the table item preparation processing time, it will cause some business interruptions for unfinished backups: for example figure 1 As shown, under normal conditions, all packets pass through device 11, and the generated table entries are backed up to device 12; when device 11 fails (the number X in the figure indicates a device failure), the packet traffic is switched to device 12. All session entries have been backed up to device 12, so services will not be interrupted; however, when device 11 recovers from a fault and packet traffic is switched back to device 11, the sessions on device 12 may not be fully backed up to device 11 , which will cause the business corresponding to this part of the session to be interrupted

Second, in an asymmetric network, when the time for the response message to return to the device is faster than the backup processing time of the entry, the unfinished backup service will be interrupted: for example figure 2 As shown, the session initiator message passes through the device 21, and the generated table item is backed up to the device 22; when the session responder's message reaches the device 22, if the table item has been backed up, the response message can be forwarded through matching ; but when encountering specific situations such as too fast response from the responder or too slow processing of table entries, if the response message arrives at device 22 and the table entry corresponding to the session has not been backed up, the response message will be unable to Blocked by device 22 through matching (the number X in the figure represents packet blocking, and the dotted arrow line represents the normal path of the packet), thereby causing the corresponding service to be interrupted

[0008] At the same time, the above two problems can be attributed to: when the packet arrival time is earlier than the entry backup completion time, because the system does not have a corresponding processing mechanism, the packet cannot be forwarded correctly, and the corresponding service is also interrupted.

Images