Data transmission method, egress router, firewall and double firewall system

Abstract

The invention provides a data transmission method, an egress router, a firewall, and a dual firewall system. The link states of the IPSEC virtual tunnels corresponding to the two firewalls are obtained through the egress routers in the dual firewall system; if the links of the two IPSEC virtual tunnels are If the road status is normal, the egress router adopts load sharing mode to transmit data with the peer device through two IPSEC virtual tunnels. The method of the present invention enables the two firewalls to load process IPSEC VPN service traffic through the active-active mode load sharing of the dual firewall systems, improves the data transmission speed, avoids waste of resources, and has high reliability and stability at the same time. And the peer device does not need to set up two firewalls, which avoids the increase of cost and the waste of address resources.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to a data transmission method, an egress router, a firewall and a dual firewall system. Background technique [0002] Firewall, also known as protective wall, was invented by Check Point founder Gil Shwed in 1993 and introduced into the Internet (US5606668(A) 1993-12-15). It is a network security system located between the internal network and the external network. An information security protection system that allows or restricts the transmission of data according to specific rules. The government, transportation, public security, telecommunications, finance, energy and other departments all carry intranet information systems. With the development of Internet services, these enterprise-level intranet systems and networks usually need to establish session connections with the public network. In order to prevent network intrusion and network attacks on the intranet, firewalls...

AI Technical Summary

Problems solved by technology

[0004] In the prior art, there are two firewalls at the local end, and usually only the main firewall performs data transmission, resulting in a waste of system resources, and the data transmission speed is limited

Images