Data synchronization method and device

Abstract

The embodiment of the invention provides a data synchronization method and device. The data synchronization method and device are applied to an active main board after master-to-slave shift in a distributed firewall. The method comprises: receiving a data synchronization request sent by the business board in the distributed firewall, wherein the data synchronization request comprises first identification of the first data corresponding to a business module stored at present by the business board; and when the second identification of the second data corresponding to the business module stored at present is different from the first identification, sending the second data and the second identification to the business board. In the embodiment of the invention, the data synchronization time in the master-to-slave shift process is reduced, and the influence of the master-to-slave shift on the flow detection business of the distributed firewall is reduced.

Description

Technical field [0001] The present invention relates to the field of computer defense technology, in particular to a data synchronization method and device. Background technique [0002] Firewalls are generally deployed at the network exits of large and medium-sized enterprises, between corporate internal networks, or at the exits of data centers. The external network accesses the internal network traffic to achieve the purpose of protecting the internal network security, and the internal network access traffic to the external network is detected to achieve the enterprise Control of sensitive information. For example, the firewall can perform traffic detection according to the user configuration and the matching rules carried in the predefined signature database, so as to realize the function of traffic identification and control. [0003] In practical applications, for high availability considerations, distributed firewalls are generally deployed. A distributed firewall usually ...

AI Technical Summary

Problems solved by technology

[0006] However, for a distributed firewall, it usually includes a large number of service boards, and each service board includes multiple service modules, and each service module stores its corresponding data. Therefore, the new main control board needs There are usually a lot of data sent, which leads to a long time for data synchronization, which leads to the busy main control board for a long time and does not respond to users in a timely manner.

Moreover, during the data synchronization period, each service board needs to send a data synchronization request, and receive the data sent by the new main control board, and use the received data to update the locally stored data. During this period, each service board cannot perform normal Traffic detection, therefore, this will affect the normal operation of the traffic detection business of the distributed firewall

Images