Cluster Standby Takeover Using Traffic-Based Failure Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication networks face challenges in maintaining uninterrupted service when an active member fails, as current methods for standby member activation in clusters are inefficient and lead to traffic loss due to delayed detection and synchronization of security associations.
Innovation Solution
A method and apparatus for a standby member in a cluster that detects active member failure based on incoming traffic, takes over the traffic, and refreshes sequence numbers, enabling real-time synchronization of security associations to ensure seamless transition.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If the standby member uses traditional failure detection methods, then the system structure is simple, but the failure detection time is delayed and service interruption occurs
Solution Approach 1:
The standby member proactively monitors incoming traffic and detects failures before they fully impact service by continuously checking for expected traffic patterns. This preliminary detection allows the standby member to initiate takeover procedures early, preventing service interruption rather than reacting after failure occurs.
Solution Approach 2:
The system implements feedback mechanisms where the standby member receives traffic information from the active member and continuously monitors incoming traffic patterns. This feedback loop enables real-time detection of failure conditions and triggers appropriate responses to maintain service continuity.
2Reliability
If the standby member synchronizes all security associations in real-time, then service continuity is maintained, but synchronization time and system resources are consumed
Solution Approach 1:
Instead of synchronizing all security associations completely, the system performs partial synchronization by only transferring essential security parameters (SPI, encryption/decryption keys, algorithms) when needed. This partial action approach maintains service continuity while reducing unnecessary synchronization time and resource consumption.
Solution Approach 2:
The system applies different synchronization strategies to different security associations based on their importance and state. Critical SAs with active traffic are synchronized in real-time, while inactive or less critical SAs are synchronized periodically or on-demand, optimizing the balance between service continuity and synchronization overhead.
3Speed
If the standby member waits for active member failure confirmation before taking over, then traffic loss is minimized, but detection speed is reduced
Solution Approach 1:
The standby member performs preliminary monitoring of incoming traffic patterns and security association states before formal failure confirmation. By detecting anomalies in traffic flow and SA status proactively, the system can initiate takeover procedures early, achieving both fast detection and minimal traffic loss.
Solution Approach 2:
The system maintains continuous monitoring and synchronization operations even during normal operation, so that when failure occurs, the standby member is already prepared to take over immediately. This continuous useful action eliminates detection delays while minimizing traffic disruption through seamless transition.
Data Source
AI summary
Embodiments of the present disclosure provide a method and an apparatus for a standby member and an active member in a cluster. A method performed by a first network node which is the standby member includes: determining a failure of the active member, based at least on a reception of an incoming traffic to the cluster; taking over the incoming traffic; and refreshing a sequence number associated with the incoming traffic. The first network node is a standby member in a cluster. According to embodiments of the present disclosure, the failure of an active member in the cluster may be detected in time.