Method and device for realizing software bypass in firewall

Abstract

The invention provides a method and device for realizing software bypass in a firewall. The method comprises a step of judging whether a current network traffic flow is larger than or equal to a preset flow threshold, a step of calling a pre-packaged software bypass operation interface in a message receiving end function or an important safety service processing function if the current network traffic flow is larger than or equal to a preset flow threshold such that the software bypass operation interface obtains a current CPU use rate and a current network port receiving rate through calling a pre-packaged calculation interface and the software bypass is carried out between preset paired software bypass network ports according to a preset rule when the current CPU use rate and the current network port receiving rate are larger than a current hardware equipment platform safety service processing packet loss threshold value. According to the method and the device, the problem of network jam or disconnection caused by equipment packet loss when current network flow is large or the sudden traffic of a peak time appears and the current network flow reaches the maximum performance upper limit of the safety service processing of a firewall in the prior art is solved.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a method and device for implementing software bypass in a firewall. Background technique [0002] At present, network security devices are generally applied between two or more networks, such as between an internal network and an external network. The application program in the network security device will process the business through his network packets. Then the packets are forwarded according to certain routing rules, and if the network security device fails, such as after power failure or crash, all network segments connected to the device will lose contact with each other. Each network also needs to be connected to each other, so the hardware bypass must come forward. [0003] Hardware bypass is the bypass function, which can make the two networks not pass through the system of the network security device through a specific trigger state (power failure or crash), ...

AI Technical Summary

Problems solved by technology

[0006] In order to solve the above-mentioned technical problems, the present invention provides a method and device for implementing software bypass in a firewall, which can solve the problem that the current network traffic in the prior art is relatively large or burst traffic occurs during peak hours, and the current network traffic reaches The problem of network freeze or disconnection caused by device packet loss at the maximum performance limit of the security business processing of the firewall

Images