Network isolation device load balancing method based on L2 data forwarding

Abstract

This invention discloses a network isolation device load balancing method based on L2 data forwarding: Step 1, Configuring the network isolation device and the gateway array; Step 2, Setting the weight of the link; Step 3, Forwarding messages according to the weight and link health, wherein: when the request of the inner network server is received, the gateway array I chooses the forward isolation device, then modifies the destination MAC address of the received messages to the selected inner network MAC address of the forward isolation device, and forwards the inner network MAC address; when the request of the outer network server is received, the gateway array II chooses the backward isolation device, and then modifies the destination MAC address of the received messages to the selected outer network MAC address of the backward isolation device, and forwards the outer network MAC address. The method has the advantages of saving IP resources, reducing the transformation cost at the same time during the isolation array implementation to the running business, and further making the link health detection more reasonable.

Description

technical field [0001] The invention relates to a load balancing method of a network isolation device based on L2 data forwarding. Background technique [0002] The network isolation device is a security protection device for the network boundary, including two types of forward isolation device and reverse isolation device, and is deployed between the production control area and the management information area of ​​the power information system in the power production environment. The array gateway is a transparent gateway with load balancing function, which is deployed at the network entrance and exit of the network array composed of stacked isolation devices. [0003] At present, the load balancing method of the network isolation device is implemented by L3 data forwarding. For example, the patent application number 201210535074.6 discloses a traffic sharing method based on the combination of the isolation device and the isolation gateway. However, the network isolation dev...

AI Technical Summary

Problems solved by technology

While causing waste of IP address resources, it is also not conducive to operations such as adding, deleting, and managing network isolation device nodes in the isolation array

[0005] b. When using the reverse network isolation device in the isolation array, a virtual file server must be deployed between the array gateway and the reverse isolation device, which increases the complexity and cost of the system, and also increases a possible single point of failure

[0006] c. When the reverse network isolation device is used in the isolation array, the array gateway has limited detection function on the link, and can only detect the virtual server, but cannot detect the actual health of the link

Images