A fast switching method of ssl tunnel under cluster

Abstract

The invention discloses a method for quickly switching SSL tunnels under a cluster, which specifically includes the following steps: S1) The gateway service module continuously writes different detection data into the shared memory; the shared memory is the shared memory of the gateway service module and the health detection module ; S2) The health detection module reads the detection data in the shared memory, if the detection data read multiple times is the same, it determines that the gateway service module is abnormal, and sends the abnormal information of the gateway service module to the SSL proxy module; S3) After receiving the abnormal information of the gateway service module, the SSL proxy module connects to the new gateway and switches the SSL tunnel. The present invention realizes rapid detection of faults through the rapid detection capability of the health detection module, and can switch gateways in time, and at the same time, reconnects the switched gateways through the SSL proxy module, so that the user has no perception of cluster gateway switching.

Description

technical field [0001] The invention relates to the field of cluster technology. Specifically, it is a fast switching method of an SSL tunnel under a cluster. Background technique [0002] In today's society, with the rapid expansion of information, a single access gateway can no longer meet the needs of users. In order to ensure user experience, gateways often use high-availability technologies, such as cluster technology, and the balancer provides load balancing for the cluster. provide users with services such as figure 1 shown. However, the problem of information security followed, and various data leakage crises accompanied it. As a result, the concept of information security became more and more popular, and more and more attention was paid, and then the information reaching the gateway cluster was protected and the gateway There is an urgent need for the timeliness of fault detection. In addition, after an encrypted channel is established, once the gateway in the c...

AI Technical Summary

Problems solved by technology

[0002] In today's society, with the rapid expansion of information, a single access gateway can no longer meet the needs of users. In order to ensure user experience, gateways often use high-availability technologies, such as cluster technology, and the balancer provides load balancing for the cluster. provide users with services such as figure 1 shown

However, the problem of information security followed, and various data leakage crises accompanied it. As a result, the concept of information security became more and more popular, and more and more attention was paid, and then the information reaching the gateway cluster was protected and the gateway There is an urgent need for the timeliness of fault detection. In addition, after an encrypted channel is established, once the gateway in the cluster is switched, the new gateway does not have the key information of the old gateway, and the key needs to be renegotiated with the user. If the user can perceive this process, it will have a bad impact on the user experience, and even if the user experience problem caused by gateway switching is solved, the long switching delay will also affect the user experience. The security and reliability of information in information services and the service capabilities of gateways pose challenges

Images