Load balancing in a network with session information
    1.
    发明授权
    Load balancing in a network with session information 有权
    在具有会话信息的网络中进行负载平衡

    公开(公告)号:US08776207B2

    公开(公告)日:2014-07-08

    申请号:US13356399

    申请日:2012-01-23

    摘要: Methods and systems for balancing load among firewall security devices are provided. According to one embodiment, a switch maintains a session table the session entries of which represent established traffic sessions between a source and a destination and form an association between the traffic session and a particular firewall security device (FSD). Responsive to receiving a packet of a first traffic session on a first port, a determination is made whether there exists a matching session entry. Responsive to a negative determination, a load balancing function is performed to select an FSD with which to associate the first traffic session and a corresponding reverse second traffic session. After processing of the packet by the selected FSD and receipt of the packet at a second port, a session entry is installed within the session table for the second traffic session and which associates the selected FSD with the second traffic session.

    摘要翻译: 提供了在防火墙安全设备之间平衡负载的方法和系统。 根据一个实施例,交换机维护会话表,其会话表项表示源和目的地之间建立的业务会话,并形成业务会话与特定防火墙安全设备(FSD)之间的关联。 响应于在第一端口上接收到第一通信会话的分组,确定是否存在匹配的会话条目。 响应于否定确定,执行负载平衡功能以选择与第一业务会话关联的FSD和相应的反向第二业务会话。 在通过所选择的FSD处理分组并在第二端口接收到分组之后,在第二业务会话的会话表中安装会话条目,并且将所选择的FSD与第二业务会话相关联。

    LOAD BALANCING IN A NETWORK WITH SESSION INFORMATION
    2.
    发明申请
    LOAD BALANCING IN A NETWORK WITH SESSION INFORMATION 有权
    负载平衡与网络的会话信息

    公开(公告)号:US20120210416A1

    公开(公告)日:2012-08-16

    申请号:US13356399

    申请日:2012-01-23

    IPC分类号: G06F21/00

    摘要: Methods and systems for balancing load among firewall security devices are provided. According to one embodiment, a switch maintains a session table the session entries of which represent established traffic sessions between a source and a destination and form an association between the traffic session and a particular firewall security device (FSD). Responsive to receiving a packet of a first traffic session on a first port, a determination is made whether there exists a matching session entry. Responsive to a negative determination, a load balancing function is performed to select an FSD with which to associate the first traffic session and a corresponding reverse second traffic session. After processing of the packet by the selected FSD and receipt of the packet at a second port, a session entry is installed within the session table for the second traffic session and which associates the selected FSD with the second traffic session.

    摘要翻译: 提供了在防火墙安全设备之间平衡负载的方法和系统。 根据一个实施例,交换机维护会话表,其会话表项表示源和目的地之间建立的业务会话,并形成业务会话与特定防火墙安全设备(FSD)之间的关联。 响应于在第一端口上接收到第一通信会话的分组,确定是否存在匹配的会话条目。 响应于否定确定,执行负载平衡功能以选择与第一业务会话关联的FSD和相应的反向第二业务会话。 在通过所选择的FSD处理分组并在第二端口接收到分组之后,在第二业务会话的会话表中安装会话条目,并且将所选择的FSD与第二业务会话相关联。