A data synchronization method and device

Abstract

Embodiments of the present invention provide a data synchronization method and device, which are applied to an active main control board after an active / standby switchover in a distributed firewall. The method includes: receiving data synchronization sent by a service board in the distributed firewall request, wherein the data synchronization request includes the first identifier of the first data corresponding to the business module currently stored on the business board; when the locally stored second identifier of the second data corresponding to the business module is the same as the When the first identifiers are different, the second data and the second identifier are sent to the service board. In the embodiment of the present invention, the data synchronization time in the process of the active / standby switchover can be reduced, and the influence of the active / standby switchover on the traffic detection service of the distributed firewall can be reduced.

Description

technical field [0001] The invention relates to the technical field of computer defense, in particular to a data synchronization method and device. Background technique [0002] Firewalls are generally deployed at the network exits of large and medium-sized enterprises, between enterprise internal networks, or at the exits of data centers. They detect the traffic from the external network accessing the internal network to achieve the purpose of protecting the security of the internal network, and detect the traffic from the internal network to the external network to achieve enterprise Control of Sensitive Information. For example, the firewall can detect traffic according to user configuration and matching rules carried in the predefined signature database, so as to realize traffic identification and control functions. [0003] In practical applications, for the sake of high availability, distributed firewalls are generally deployed. A distributed firewall usually include...

AI Technical Summary

Problems solved by technology

[0006] However, for a distributed firewall, it usually includes a large number of service boards, and each service board includes multiple service modules, and each service module stores its corresponding data. Therefore, the new main control board needs There are usually a lot of data sent, which leads to a long time for data synchronization, which leads to the busy main control board for a long time and does not respond to users in a timely manner.

Moreover, during the data synchronization period, each service board needs to send a data synchronization request, and receive the data sent by the new main control board, and use the received data to update the locally stored data. During this period, each service board cannot perform normal Traffic detection, therefore, this will affect the normal operation of the traffic detection business of the distributed firewall

Images