【摘要】：網(wǎng)絡(luò)設(shè)備的一個(gè)重要的特點(diǎn)是能夠長(zhǎng)期、可靠的運(yùn)行。這一要求對(duì)于連接內(nèi)部網(wǎng)絡(luò)和外部網(wǎng)絡(luò)的防火墻來(lái)說(shuō)更加至關(guān)重要。專(zhuān)門(mén)針對(duì)防火墻的雙機(jī)熱備系統(tǒng)是能夠保證防火墻穩(wěn)定的有效手段。同路由器和交換機(jī)不同,側(cè)重于安全防護(hù)的防火墻會(huì)在設(shè)備上保存每個(gè)連接的會(huì)話表信息,并記錄了連接所進(jìn)行的相關(guān)業(yè)務(wù)。采用一般的路由器雙機(jī)熱備系統(tǒng),只備份配置和路由表等數(shù)據(jù),在防火墻發(fā)生主備倒換之后會(huì)造成連接中斷的情況。本課題設(shè)計(jì)了一種專(zhuān)門(mén)針對(duì)防火墻的雙機(jī)熱備系統(tǒng),針對(duì)防火墻的具體業(yè)務(wù)會(huì)備份不同的數(shù)據(jù)。論文研究了雙機(jī)熱備系統(tǒng)的發(fā)展歷史和華三安全產(chǎn)品的業(yè)務(wù)流程,針對(duì)現(xiàn)有的防火墻設(shè)備設(shè)計(jì)了防火墻雙機(jī)熱備系統(tǒng)。本論文的主要研究?jī)?nèi)容分為了四大模塊,熱備系統(tǒng)控制模塊、熱備系統(tǒng)數(shù)據(jù)同步模塊、熱備系統(tǒng)板間通信模塊和相關(guān)業(yè)務(wù)處理模塊�？刂颇K通過(guò)備份組實(shí)現(xiàn)了主備倒換和鏈路控制的功能。數(shù)據(jù)同步模塊通過(guò)調(diào)用會(huì)話業(yè)務(wù)對(duì)會(huì)話表的數(shù)據(jù)進(jìn)行了封裝和發(fā)送,實(shí)現(xiàn)了兩種備份方式。板間通信模塊設(shè)計(jì)了一種隊(duì)列模式,此種隊(duì)列可以有效的減少丟包率和時(shí)延。相關(guān)業(yè)務(wù)處理模塊供其他業(yè)務(wù)模塊使用,使其他業(yè)務(wù)模塊能夠維護(hù)對(duì)端設(shè)備上的業(yè)務(wù)數(shù)據(jù)。測(cè)試部分模擬了實(shí)際的防火墻工作環(huán)境,通過(guò)對(duì)防火墻雙機(jī)熱備系統(tǒng)的功能測(cè)試和非功能測(cè)試。測(cè)試結(jié)果表明本系統(tǒng)能夠滿足對(duì)防火墻進(jìn)行熱備的需求。在發(fā)生主備倒換時(shí),不會(huì)出現(xiàn)連接中斷的情況。
[Abstract]:An important feature of network equipment is its long-term, reliable operation. This requirement is even more critical for firewalls that connect internal and external networks. The two-machine hot standby system is an effective way to ensure the stability of firewall. Unlike routers and switches, the firewall, which focuses on security, holds the session table information for each connection on the device and records the related business done by the connection. Using the general router dual-machine hot standby system, only the data such as configuration and routing table are backed up, and the connection will be interrupted after the firewall switch. In this paper, a dual-computer hot standby system is designed for firewall, and different data are backed up according to the specific business of firewall. This paper studies the development history of dual-machine hot standby system and the business process of Huasang security product, and designs a dual-machine firewall hot standby system for the existing firewall equipment. The main research content of this paper is divided into four modules, the hot standby system control module, the hot standby system data synchronization module, the hot standby system inter-board communication module and the related business processing module. The control module realizes the functions of main and backup switching and link control through backup group. The data synchronization module encapsulates and sends the data of the session table by calling the session service and realizes two backup modes. A queue mode is designed in the inter-panel communication module, which can effectively reduce packet loss rate and delay. The related service processing module is used by other service modules, which enables other service modules to maintain service data on the end-to-end equipment. The test part simulates the actual firewall working environment, through the function test and the non-function test of the firewall dual computer hot standby system. The test results show that the system can meet the need of firewall hot standby. There will be no connection interruptions when the main standby switch occurs.
【學(xué)位授予單位】：哈爾濱工業(yè)大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2017
【分類(lèi)號(hào)】：TP393.05

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 譚宇;姚亞峰;陳登;霍興華;;基于FPGA主備倒換的電路設(shè)計(jì)與實(shí)現(xiàn)[J];電視技術(shù);2014年11期

2 李洪亮;;防火墻雙機(jī)熱備的設(shè)計(jì)與實(shí)現(xiàn)[J];電子技術(shù)與軟件工程;2013年22期

3 李潔;黃婷熙;潘濤濤;;高可靠性通信設(shè)備主備倒換軟件實(shí)現(xiàn)方法[J];電視技術(shù);2013年11期

4 李一兵;王爽;葉方;;軟件實(shí)現(xiàn)主備倒換的設(shè)計(jì)[J];微計(jì)算機(jī)信息;2011年06期

5 沈浩;;基于雙機(jī)熱備的控制計(jì)算機(jī)系統(tǒng)研究與實(shí)現(xiàn)[J];工業(yè)控制計(jì)算機(jī);2011年04期

6 張國(guó)波;;交換機(jī)主控單元熱備份設(shè)計(jì)與實(shí)現(xiàn)[J];信息安全與通信保密;2010年12期

7 史文路;胡平;;雙機(jī)熱備份系統(tǒng)的研究與改進(jìn)[J];微處理機(jī);2008年03期

8 韓明軍;;軟件性能測(cè)試過(guò)程[J];信息技術(shù)與標(biāo)準(zhǔn)化;2007年11期

9 尚艷玲;張?jiān)其h;;軟件可靠性測(cè)試方法研究[J];現(xiàn)代計(jì)算機(jī)(專(zhuān)業(yè)版);2007年06期

10 劉曉潔;黃永佳;;基于Linux的雙機(jī)熱備系統(tǒng)的實(shí)現(xiàn)技術(shù)[J];計(jì)算機(jī)應(yīng)用研究;2007年04期

相關(guān)碩士學(xué)位論文 前2條

1 黃山松;統(tǒng)一通信平臺(tái)設(shè)計(jì)與業(yè)務(wù)實(shí)現(xiàn)[D];復(fù)旦大學(xué);2008年

2 曹瓊;高端路由交換機(jī)中的路由熱備份技術(shù)應(yīng)用研究[D];西南交通大學(xué);2005年

，

本文編號(hào)：2160319