Method and device for realizing bypass mode based on software

Abstract

The invention provides a method and a device for realizing a bypass mode based on software. A method for realizing a bypass mode based on software is applied to network security equipment, and comprises the following steps: receiving a data packet in a network, and determining a to-be-processed data packet from the data packet; judging whether a packet receiving queue corresponding to the to-be-processed data packet is full or not; under the condition that the packet receiving queue is not full, sending data packets to be processed into the packet receiving queue according to a preset rule; and under the condition that the packet receiving queue is full, forwarding the to-be-processed data packet from a pre-packaged operation interface in a software bypass mode. Compared with the prior art, the bypass mode can be achieved through software, and network interruption is avoided.

Description

technical field [0001] The present application relates to the field of network security, in particular to a method and device for realizing a bypass mode based on software. Background technique [0002] In order to ensure network security, communication between different networks generally requires the use of network security devices. The network security device analyzes the data packets communicated between the networks to determine whether there is a threat, and then forwards the data packets that are confirmed to be safe after analysis. Therefore, once a certain network security device fails, all networks connected through this device will lose contact with each other, resulting in network interruption. In this case, if you want to ensure that the network is not interrupted, you can rely on the bypass mode (bypass) to achieve. [0003] In the bypass mode, through a specific trigger state, the data packets transmitted between the networks can be forwarded directly from t...

AI Technical Summary

Problems solved by technology

However, for other occasions where the network must be guaranteed to be uninterrupted, the traditional bypass mode cannot be triggered, and its functions cannot be realized

For example, when there is a sudden increase in network traffic, due to the large amount of data, the network security device reaches the upper limit of processing performance, which will also cause network freezes or even disconnection. However, this situation may not involve power outages or crashes. Traditional Bypass mode does not perform its function

Images