Service flow detection method and device, server and storage medium

Abstract

The invention discloses a service flow detection method and device, a server and a storage medium, and the method comprises the steps: determining a plurality of safety detection equipment clusters of a service type based on the service type carried by a first service flow, and carrying out the detection of the service flow based on the cluster load of each safety detection equipment cluster, determining a sequence of processing the first service traffic by each security detection device cluster, determining a target security detection device in each security detection device cluster based on the service traffic attribute, further determining a forwarding path of the first service traffic, and forwarding the first service traffic to each security detection device in the forwarding path in sequence based on the forwarding path, and after security detection results returned by the security detection devices are received, sending the first service flow to the service processing node. By adopting the method and the device, the security detection equipment through which the service flow needs to pass can be flexibly selected, so that the security detection efficiency of the service flow is improved.

Description

technical field [0001] The present application relates to the technical field of flow monitoring, and in particular to a service flow detection method and device, a server, and a storage medium. Background technique [0002] The existing service traffic detection scheme is mainly to connect the security detection device to the service link in series. In this connection mode, the security detection device detects the business traffic from the external network in real time. When the business traffic is detected and triggers a security rule alarm, The business traffic will be intercepted to realize real-time detection and protection of business traffic. However, because the existing solution adopts the serial connection mode, when the security detection equipment in the service link fails, the entire service link will not work normally. In addition, when there are multiple security detection devices in the service link In the case of devices, the business traffic can only be p...

AI Technical Summary

Problems solved by technology

However, because the existing solution adopts the serial connection mode, when the security detection equipment in the service link fails, the entire service link will not work normally. In addition, when there are multiple security detection devices in the service link In the case of devices, the business traffic can only be processed by each security detection device in sequence according to the positional relationship of each security detection device in the business link, and it is impossible to flexibly select the security detection device that the business traffic needs to pass through, resulting in the security detection efficiency of the business traffic. not tall

Images