Service flow detection method and device, server and storage medium

Abstract

The invention discloses a service flow detection method and device, a server and a storage medium, and the method comprises the steps: determining a plurality of safety detection equipment clusters of a service type based on the service type carried by a first service flow, and carrying out the detection of the service flow based on the cluster load of each safety detection equipment cluster, determining a sequence of processing the first service traffic by each security detection device cluster, determining a target security detection device in each security detection device cluster based on the service traffic attribute, further determining a forwarding path of the first service traffic, and forwarding the first service traffic to each security detection device in the forwarding path in sequence based on the forwarding path, and after security detection results returned by the security detection devices are received, sending the first service flow to the service processing node. By adopting the method and the device, the security detection equipment through which the service flow needs to pass can be flexibly selected, so that the security detection efficiency of the service flow is improved.

Description

technical field

[0001] The present application relates to the technical field of flow monitoring, and in particular to a service flow detection method and device, a server, and a storage medium. Background technique

[0002] The existing service traffic detection scheme is mainly to connect the security detection device to the service link in series. In this connection mode, the security detection device detects the business traffic from the external network in real time. When the business traffic is detected and triggers a security rule alarm, The business traffic will be intercepted to realize real-time detection and protection of business traffic. However, because the existing solution adopts the serial connection mode, when the security detection equipment in the service link fails, the entire service link will not work normally. In addition, when there are multiple security detection devices in the service link In the case of devices, the business traffic can only be p...

Examples

Embodiment Construction

[0048] The technical solutions in this application will be clearly and completely described below in conjunction with the drawings in this application. Apparently, the described embodiments are only some of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of this application.

[0049] Aiming at the problem of low security detection efficiency of business traffic proposed above, this application proposes a business traffic detection method, which can determine the forwarding path of the first business traffic based on the business type and business traffic attributes carried by the first business traffic, and based on the The forwarding path sequentially forwards the first service flow to each security detection device in the forwarding path, and then sends the first service flow to the service processin...

technical field

[0001] The present application relates to the technical field of flow monitoring, and in particular to a service flow detection method and device, a server, and a storage medium. Background technique

[0002] The existing service traffic detection scheme is mainly to connect the security detection device to the service link in series. In this connection mode, the security detection device detects the business traffic from the external network in real time. When the business traffic is detected and triggers a security rule alarm, The business traffic will be intercepted to realize real-time detection and protection of business traffic. However, because the existing solution adopts the serial connection mode, when the security detection equipment in the service link fails, the entire service link will not work normally. In addition, when there are multiple security detection devices in the service link In the case of devices, the business traffic can only be p...

Examples

Embodiment Construction

[0048] The technical solutions in this application will be clearly and completely described below in conjunction with the drawings in this application. Apparently, the described embodiments are only some of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of this application.

[0049] Aiming at the problem of low security detection efficiency of business traffic proposed above, this application proposes a business traffic detection method, which can determine the forwarding path of the first business traffic based on the business type and business traffic attributes carried by the first business traffic, and based on the The forwarding path sequentially forwards the first service flow to each security detection device in the forwarding path, and then sends the first service flow to the service processin...

Images