A fast switching system for industrial engine failure based on firewall transparent mode

Abstract

The present invention discloses a fast switching system when an industrial engine fails based on a firewall transparent mode, including a first industrial switch and a second industrial switch. The first industrial switch and the second industrial switch can support the configuration of an industrial engine monitoring port for industrial protocol transceiver, the first industrial switch generates a first signal transceiver port and a second signal transceiver port through configuration, and the second industrial switch generates a first signal transceiver port and a second signal transceiver port through configuration. The present invention belongs to the field of industrial production technology. The purpose of the present invention is to solve the problem in the prior art that when a fault is found, operation and maintenance personnel need to manually restore or temporarily bypass the industrial firewall of the industrial engine failure, which will prolong the business recovery time. The technical effect achieved is: when the industrial protocol engine status fails, the second signal transceiver port is automatically converted to the first signal transceiver port for traffic transmission, and the fault point is automatically skipped, so as to realize fast switching and network recovery when the industrial engine fails.

Description

Technical Field

[0001] The present invention relates to the technical field of industrial production, and in particular to a fast switching system when an industrial engine fails based on a firewall transparent mode. Background Art

[0002] The industrial engine of an industrial firewall is a key component of industrial control system network security. It monitors and manages network traffic within the industrial control system, protecting the system from unauthorized access and malicious attacks. These engines implement various security measures based on pre-defined security policies, including traffic filtering, access control, and other defensive measures against potential threats. By implementing access control lists, detecting and blocking potentially malicious traffic, or restricting access to critical systems, the industrial engine effectively ensures system security. The Spanning Tree Protocol (STP) is a protocol used to prevent loops and determine the optimal path within a network. It ensures that only one active path exists within a network topology, preventing packets from looping endlessly within the network. The STP achieves this by establishing a tree-like structure between switches and disabling some links. Each port on a switch has a priority setting that determines its role and status in the spanning tree calculation. Ports with lower priorities receive higher priority.

[0003] Currently, industrial firewalls are usually unable to proactively determine whether their own industrial engines have failed. Instead, they must rely on operations personnel to observe abnormalities in business processes or interruptions in business traffic, and then troubleshoot and locate the problem one by one. Once a failure is discovered, operations personnel need to manually restore or temporarily bypass the industrial firewall with the faulty industrial engine, which obviously prolongs business recovery time. This passive and inefficient method increases the cost of operations. However, in industrial sites, the interruption of the lives and business of on-site operators is absolutely unacceptable, as it may lead to production stagnation, production line failure, and even pose a threat to safety, which will have a serious impact on the production and operation of the enterprise. Summary of the Invention

[0004] To this end, the present invention provides a fast switching system for industrial engines in case of failure based on a firewall transparent mode to solve the above-mentioned problems in the prior art.

[0005] In order to achieve the above object, the present invention provides the following technical solutions:

[0006] According to a first aspect of the present invention, a rapid switching system in the event of an industrial engine failure based on a firewall transparent mode includes a first industrial switch and a second industrial switch, wherein the first industrial switch and the second industrial switch can support configuration of industrial engine monitoring ports for industrial protocol transceiver, the first industrial switch generates a first signal transceiver port and a second signal transceiver port through configuration, the second industrial switch generates a third signal transceiver port and a fourth signal transceiver port through configuration, the first signal transceiver port of the first industrial switch is signal-connected to the third signal transceiver port of the second industrial switch, the second signal transceiver port of the first industrial switch is signal-connected to the fourth signal transceiver port of the second industrial switch, and an industrial firewall is provided between the first signal transceiver port of the first industrial switch and the third signal transceiver port of the second industrial switch;

[0007] Specifically, the spanning tree protocol is enabled on both the first and second industrial switches. The first industrial switch is set as the root bridge, and the second industrial switch is set as the backup bridge. The spanning tree port priorities of the first signal transceiver port of the first industrial switch and the third signal transceiver port of the second industrial switch are set to high, and the default is medium. The third signal transceiver port of the second industrial switch is set to blocked because it has a lower priority than the fourth signal transceiver port. Traffic is forwarded through the fourth signal transceiver port and the industrial firewall.

[0008] If the industrial engine status is detected to be normal, no changes are made. If the industrial engine status is detected to be failed, the first industrial switch and the second industrial switch will automatically change the spanning tree port priority of the first and third signal transceiver ports to high, and the spanning tree port priority of the second and fourth signal transceiver ports to high. The default is medium. The status of the fourth signal transceiver port of the second industrial switch changes from forwarding to blocking, and the blocking status of the third signal transceiver port changes to forwarding.

[0009] Furthermore, the second signal transceiver port of the first industrial switch and the fourth signal transceiver port of the second industrial switch are industrial engine monitoring ports, the first industrial switch acts as a MODBUS client, and the second industrial switch operates as a MODBUS server.

[0010] Furthermore, the first industrial switch will use the second signal transceiver port to send a MODBUS query request to the second industrial switch at a certain time interval, recorded as N seconds. The second industrial switch that receives the instruction will immediately reply a MODBUS response to the first industrial switch through the fourth signal transceiver port.

[0011] Furthermore, if the first industrial switch does not receive a response from the second industrial switch within 3N, the industrial protocol engine state is set to failure; and if a response is received from the second industrial switch within this period, the industrial protocol engine state is set to normal.

[0012] Furthermore, if the second industrial switch does not receive a MODBUS query request from the first industrial switch within 3N, the industrial protocol engine status will be set to failure. If a MODBUS query request is received from the first industrial switch during this period, the industrial engine status will be set to normal.

[0013] Furthermore, the industrial firewall is in a transparent mode. In this mode, messages related to the transparent transmission of the spanning tree protocol do not participate in spanning tree protocol calculations.

[0014] Furthermore, the first industrial switch is set as a root bridge during switching and recovery when an industrial engine fails, and the second industrial switch is set as a backup bridge.

[0015] The present invention has the following advantages: in the transparent mode of the industrial firewall, the first industrial switch sends a MODBUS query request to the second industrial switch at regular intervals, and detects whether the industrial protocol engine status is normal based on the MODBUS query request and response between the second industrial switch and the first industrial switch, thereby automatically monitoring the industrial engine status of the industrial firewall. When the industrial protocol engine status fails, the second signal transceiver port is automatically switched to the first signal transceiver port for traffic transmission, automatically skipping the fault point, and realizing rapid switching and network recovery when the industrial engine fails. When the fault is restored, the first signal transceiver port again transmits traffic and switches to the second signal transceiver port, which can solve the problem of automatic recovery of traffic to the industrial firewall when the industrial engine fault of the industrial firewall is restored. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 The present invention provides a process flow chart for quickly switching the system industrial engine status successfully when an industrial engine fails in firewall transparent mode.

[0017] Figure 2 The present invention provides a flowchart of a process for quickly switching the system industrial engine status to failure when an industrial engine fails in firewall transparent mode.

[0018] Figure 3 This is a schematic diagram of the structure of a fast switching system when an industrial engine fails based on a firewall transparent mode provided by the present invention. DETAILED DESCRIPTION

[0019] The following describes the implementation of the present invention using specific embodiments. Those skilled in the art will readily understand the other advantages and benefits of the present invention from the disclosure herein. Obviously, the embodiments described are only a portion of the present invention, not all of it. All other embodiments derived by persons of ordinary skill in the art based on the embodiments of the present invention without inventive effort are intended to fall within the scope of protection of the present invention. Example 1

[0020] like Figures 1 to 3 As shown, in an embodiment of the first aspect of the present invention, a rapid switching system in the event of an industrial engine failure based on a firewall transparent mode includes a first industrial switch and a second industrial switch. The first industrial switch and the second industrial switch can support the configuration of industrial engine monitoring ports for industrial protocol transceiver. The first industrial switch generates a first signal transceiver port and a second signal transceiver port through configuration. The second industrial switch generates a third signal transceiver port and a fourth signal transceiver port through configuration. The first signal transceiver port of the first industrial switch is signal-connected to the third signal transceiver port of the second industrial switch. The second signal transceiver port of the first industrial switch is signal-connected to the fourth signal transceiver port of the second industrial switch. An industrial firewall is provided between the first signal transceiver port of the first industrial switch and the third signal transceiver port of the second industrial switch.

[0021] In the above embodiment, it should be noted that the industrial firewall is in transparent mode. In this mode, the relevant messages of the transparent spanning tree protocol do not participate in the spanning tree protocol calculation. In the switching and recovery device when the industrial engine fails, the spanning tree protocol is enabled through the first industrial switch and the second industrial switch. The first industrial switch is set as the root bridge, and the second industrial switch is set as the backup bridge. In order to achieve this configuration, the spanning tree port priority of the first signal transceiver port of the first industrial switch and the third signal transceiver port of the second industrial switch is modified to high. The default is medium. According to the spanning tree algorithm calculation, the third signal transceiver port of the second industrial switch will be set to a blocked state because its priority is lower than the fourth signal transceiver port. The traffic is forwarded through the fourth signal transceiver port and through the industrial firewall. When it is detected that the industrial engine is in normal status, no changes are made.

[0022] The technical effect achieved by the above embodiment is: solving the problem that the industrial engine of the industrial firewall cannot automatically sense when it fails, and realizing automatic monitoring of the industrial engine status of the industrial firewall. Example 2

[0023] like Figures 1 to 3As shown, a fast switching system in case of industrial engine failure based on firewall transparent mode includes all the contents of Example 1. In addition, the second signal transceiver port of the first industrial switch and the fourth signal transceiver port of the second industrial switch are industrial engine monitoring ports. The first industrial switch acts as a MODBUS client, and the second industrial switch acts as a MODBUS server. The first industrial switch uses the second signal transceiver port to send a MODBUS query request to the second industrial switch at a certain time interval (N seconds). After receiving the instruction, the second industrial switch immediately replies a MODBUS response to the first industrial switch through the fourth signal transceiver port.

[0024] In the above embodiment, it should be noted that, if the industrial engine status is detected as failure, the first industrial switch and the second industrial switch will automatically modify the spanning tree port priority of the first signal transceiver port and the third signal transceiver port to medium, and modify the spanning tree port priority of the second signal transceiver port and the fourth signal transceiver port to high, and default to medium, so that the spanning tree is recalculated, and the status of the fourth signal transceiver port of the second industrial switch is changed from forwarding to blocking, and the blocking status of the third signal transceiver port is changed to forwarding. Therefore, the traffic will be forwarded from the first signal transceiver port and the third signal transceiver port of the first industrial switch and the second industrial switch, bypassing the industrial firewall of the industrial engine failure. When the industrial engine monitoring port configured on the industrial switch is in a blocking state, it will not forward other business traffic, but can still send and receive MODBUS query requests and responses from the opposite switch;

[0025] The technical effect achieved by the above embodiment is: solving the problem that the industrial firewall cannot switch to skip the fault point when the industrial engine fails, and realizing rapid switching and network recovery when the industrial engine fails. Example 3

[0026] like Figures 1 to 3As shown, a fast switching system in the event of an industrial engine failure based on a firewall transparent mode includes all the contents of Example 2. In addition, if the first industrial switch does not receive a response from the second industrial switch within 3N, the industrial protocol engine status is set to failure; if a response is received from the second industrial switch within this period, the industrial protocol engine status is set to normal. If the second industrial switch does not receive a MODBUS query request from the first industrial switch within 3N, the industrial protocol engine status is also set to failure. If a MODBUS query request is received from the first industrial switch within this period, the industrial engine status is set to normal. The industrial firewall is in transparent mode. In this mode, the related messages of the transparently transmitted spanning tree protocol do not participate in the spanning tree protocol calculation. The first industrial switch is set as the root bridge during switching and recovery when the industrial engine fails, and the second industrial switch is set as the backup bridge.

[0027] In the above embodiment, it should be noted that when the industrial engine of the industrial firewall recovers from a failed state to a normal state, the first industrial switch and the second industrial switch will automatically configure the priority of the first signal transceiver port and the third signal transceiver port to high, and the priority of the second signal transceiver port and the fourth signal transceiver port to medium. At this time, the spanning tree is triggered to be recalculated, and the fourth signal transceiver port of the second industrial switch changes from a blocking state to a forwarding state, and the third signal transceiver port changes from a forwarding state to a blocking state. The traffic is forwarded from the second signal transceiver port and the fourth signal transceiver port of the first industrial switch and the second industrial switch through the industrial firewall, achieving the switching of the industrial engine state from failure to normal.

[0028] The technical effect achieved by the above embodiment is: solving the problem that the traffic cannot be automatically restored to the industrial firewall when the industrial engine of the industrial firewall recovers from a failure, and realizing that the initial networking can be quickly restored when the industrial engine recovers.

[0029] Working principle: The industrial firewall is in transparent mode. In this mode, the related messages of the transparent spanning tree protocol do not participate in the spanning tree protocol calculation. In the switching and recovery device when the industrial engine fails, the spanning tree protocol is enabled through the first industrial switch and the second industrial switch. The first industrial switch is set as the root bridge, and the second industrial switch is set as the backup bridge. In order to achieve this configuration, the spanning tree port priority of the first signal transceiver port of the first industrial switch and the third signal transceiver port of the second industrial switch is modified to high. The default is medium. According to the spanning tree algorithm calculation, the third signal transceiver port of the second industrial switch will be set to blocking state because its priority is lower than the fourth signal transceiver port. Traffic is forwarded through the fourth signal transceiver port and through the industrial firewall. When the industrial engine status is detected to be normal, no changes are made. However, if the industrial engine status is detected to be failed, the first industrial switch and the second industrial switch will automatically modify the spanning tree port priority of the first and third signal transceiver ports to medium, and the spanning tree port priority of the second and fourth signal transceiver ports to high. The default is medium. This causes the spanning tree to be recalculated. The fourth signal transceiver port on the second industrial switch changes from forwarding to blocking, and the third signal transceiver port changes from blocking to forwarding. As a result, traffic is forwarded from the first and third signal transceiver ports on the first and second industrial switches, bypassing the industrial firewall with the failed industrial engine. When the industrial engine monitoring port configured on an industrial switch is in a blocked state, it does not forward other service traffic but can still send and receive MODBUS query requests and responses from the peer switch. When the industrial engine on the industrial firewall recovers from a failed state, the first and second industrial switches automatically reconfigure the priority of the first and third signal transceiver ports to high, and the priority of the second and fourth signal transceiver ports to medium. This triggers a spanning tree recalculation. The fourth signal transceiver port on the second industrial switch changes from blocking to forwarding, and the third signal transceiver port changes from forwarding to blocking. Traffic is then forwarded from the second and fourth signal transceiver ports on the first and second industrial switches through the industrial firewall, transitioning the industrial engine from failure to normal.

Claims

1. A fast switching system for industrial engine failure based on firewall transparent mode, characterized in that: It includes a first industrial switch and a second industrial switch, wherein the first industrial switch and the second industrial switch can support the configuration of industrial engine monitoring ports for industrial protocol transceiver, the first industrial switch generates a first signal transceiver port and a second signal transceiver port through configuration, the second industrial switch generates a third signal transceiver port and a fourth signal transceiver port through configuration, the first signal transceiver port of the first industrial switch is signal-connected to the third signal transceiver port of the second industrial switch, the second signal transceiver port of the first industrial switch is signal-connected to the fourth signal transceiver port of the second industrial switch, and an industrial firewall is provided between the first signal transceiver port of the first industrial switch and the third signal transceiver port of the second industrial switch; Specifically: the first industrial switch and the second industrial switch both have the spanning tree protocol enabled. The first industrial switch is set as the root bridge, and the second industrial switch is set as the backup bridge. The spanning tree port priorities of the first signal transceiver port of the first industrial switch and the third signal transceiver port of the second industrial switch are high, and the default is medium. The third signal transceiver port of the second industrial switch is set to a blocking state because its priority is lower than that of the fourth signal transceiver port. Traffic is forwarded through the fourth signal transceiver port and the industrial firewall. If the industrial engine status is normal, no change is made. If the industrial engine status is failed, the first industrial switch and the second industrial switch will automatically modify the spanning tree port priority of the first signal transceiver port and the third signal transceiver port to high, and the spanning tree port priority of the second signal transceiver port and the fourth signal transceiver port to high, and the default is medium. The fourth signal transceiver port status of the second industrial switch changes from forwarding to blocking, and the blocking status of the third signal transceiver port changes to forwarding. The second signal transceiver port of the first industrial switch and the fourth signal transceiver port of the second industrial switch are industrial engine monitoring ports. The first industrial switch acts as a MODBUS client, and the second industrial switch runs as a MODBUS server. The first industrial switch will use the second signal transceiver port to send a MODBUS query request to the second industrial switch at a certain time interval, recorded as N seconds. The second industrial switch that receives the instruction will immediately reply a MODBUS response to the first industrial switch from the fourth signal transceiver port. If the second industrial switch does not receive a MODBUS query request from the first industrial switch within 3N, If a query request is received from the first industrial switch, the industrial protocol engine status will be set to failure. If a query request is received from the first industrial switch during this period, the industrial engine status will be set to normal. The second signal transceiver port of the first industrial switch and the fourth signal transceiver port of the second industrial switch are industrial engine monitoring ports. The first industrial switch acts as a MODBUS client, and the second industrial switch operates as a MODBUS server.

2. According to claim 1, a fast switching system for industrial engine failure based on firewall transparent mode is characterized in that: The first industrial switch will use the second signal transceiver port to send a MODBUS query request to the second industrial switch at a certain time interval, recorded as N seconds. The second industrial switch that receives the instruction will immediately reply a MODBUS response to the first industrial switch from the fourth signal transceiver port.

3. According to claim 1, a fast switching system for industrial engine failure based on firewall transparent mode is characterized in that: If the first industrial switch does not receive a response from the second industrial switch within 3N, the industrial protocol engine state is set to failure; if a response is received from the second industrial switch within this period, the industrial protocol engine state is set to normal.

4. According to claim 1, a fast switching system for industrial engine failure based on firewall transparent mode is characterized in that: If the second industrial switch does not receive a MODBUS query request from the first industrial switch within 3N, the industrial protocol engine status will also be set to failure. If a MODBUS query request is received from the first industrial switch during this period, the industrial engine status will be set to normal.

5. According to claim 1, a fast switching system for industrial engine failure based on firewall transparent mode is characterized in that: The industrial firewall is in a transparent mode. In this mode, messages related to the transparently transmitted spanning tree protocol do not participate in the spanning tree protocol calculation.

6. According to claim 1, a fast switching system for industrial engine failure based on firewall transparent mode is characterized in that: The first industrial switch is set as a root bridge during switching and recovery when an industrial engine fails, and the second industrial switch is set as a backup bridge.

Images