Fire wall system and data processing method based on fire wall system

A firewall and data packet technology, applied in the field of data processing and firewall systems, can solve the problem that the system cannot perform business expansion, and achieve the effect of improving performance

Active Publication Date: 2014-06-18
HILLSTONE NETWORKS CO LTD
View PDF4 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] Aiming at the problem that the system in the related art cannot expand services, the present invention provides a firewall system and a data processing method based on the firewall system to at least solve the above problems

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Fire wall system and data processing method based on fire wall system
  • Fire wall system and data processing method based on fire wall system
  • Fire wall system and data processing method based on fire wall system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment approach

[0035] After each distribution module receives the data packet sent by the I / O module, it sends the above data packet to the same business processing module according to the distribution rule that the data packet in the same session is sent to the same business processing module. For the distribution module After receiving the first data packet, how to select the business processing module to transmit the data packet, the present embodiment provides two preferred implementation modes, of course, the present invention is not limited to these two implementation modes, the distribution module is described below Two preferred implementations of how to select a business processing module after receiving the first data packet are described respectively, wherein this preferred implementation starts with image 3 The first shunt module 34a in is taken as an example for detailed description.

[0036] In the first way, the first distribution module 34a of the firewall system includes: a...

Embodiment 1

[0072] Figure 7 It is a flowchart of a data processing method based on a firewall system according to Embodiment 1 of the present invention. The firewall system may be composed of a main control module, a service processing module, a distribution module, a Switch (switching) module, and an I / O port. The main control module is responsible for the control plane processing of the system. The two main control modules form the active and standby redundancy. The business processing module is responsible for the firewall business processing. The distribution module is responsible for distributing data packets to the business processing module. The Switch module is used for the interconnection of each module. , the service and control data exchanged between modules will be forwarded by the Switch module. Such as Figure 7 As shown, the method includes the following steps (step S702-step S724):

[0073] Step S702, the system upgrades the main control module in the standby state.

...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a fire wall system and a data processing method based on the fire wall system, wherein the system comprises two main control modules, a plurality of service processing modules, a plurality of diverter modules, a plurality of I / O (input / output) modules and a switching module; two main control modules are in a primary-backup relationship with each other to control each module, the switching module is used for forwarding data packages among all modules, the plurality of I / O modules are bound with the plurality of the diverter modules, and each I / O module is used for transmitting the received data packages to the diverter module which is bound with the I / O module; each diverter module is used for transmitting the received data packages in the same session to a service processing module; each service processing module is used for outputting the processed data packages by the I / O module. By the fire wall system, the problem that the business expansion can not be performed to a system is solved, and the quantity of the service processing module in the system can be configured as required, so as to support the business expansion of the system, thereby improving the performances of the system.

Description

technical field [0001] The present invention relates to the communication field, in particular to a firewall system and a data processing method based on the firewall system. Background technique [0002] At present, a firewall system usually includes a central processing unit (Central Processing Unit, referred to as CPU), Switch (exchange) system and several input / output (Input / output, referred to as I / O) ports, such as figure 1 The schematic diagram of the firewall system structure is shown, in which the CPU is responsible for completing the business processing of all firewalls, and the data packets of the firewall system flow to such as figure 2 As shown, first, the data packet enters the I / O port of the firewall system, and the data packet is sent to the Switch system by the I / O port, and then forwarded to the CPU by the Switch system; then, the CPU processes the data packet, and the processed The data packet is forwarded to the I / O port by the Switch system; finally, ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L12/911
Inventor 杨启军刘向明王钟莫宁
Owner HILLSTONE NETWORKS CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap