CN113708975A - Data processing method and electronic equipment - Google Patents

Data processing method and electronic equipment Download PDF

Info

Publication number
CN113708975A
CN113708975A CN202111049720.3A CN202111049720A CN113708975A CN 113708975 A CN113708975 A CN 113708975A CN 202111049720 A CN202111049720 A CN 202111049720A CN 113708975 A CN113708975 A CN 113708975A
Authority
CN
China
Prior art keywords
service board
message
backup
service
board
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202111049720.3A
Other languages
Chinese (zh)
Inventor
王铭圣
王强
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Topsec Technology Co Ltd
Beijing Topsec Network Security Technology Co Ltd
Beijing Topsec Software Co Ltd
Original Assignee
Beijing Topsec Technology Co Ltd
Beijing Topsec Network Security Technology Co Ltd
Beijing Topsec Software Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Topsec Technology Co Ltd, Beijing Topsec Network Security Technology Co Ltd, Beijing Topsec Software Co Ltd filed Critical Beijing Topsec Technology Co Ltd
Priority to CN202111049720.3A priority Critical patent/CN113708975A/en
Publication of CN113708975A publication Critical patent/CN113708975A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0654Management of faults, events, alarms or notifications using network fault recovery
    • H04L41/0663Performing the actions predefined by failover planning, e.g. switching to standby network elements
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/12Avoiding congestion; Recovering from congestion
    • H04L47/125Avoiding congestion; Recovering from congestion by balancing the load, e.g. traffic engineering
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/09Mapping addresses
    • H04L61/25Mapping addresses of the same type
    • H04L61/2503Translation of Internet protocol [IP] addresses

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention provides a data processing method and electronic equipment, wherein the method comprises the following steps: the method comprises the steps that a first message is obtained on a first service board, and the first message is processed when the first message is determined to be a forward message; the first service board calculates and determines a backup service board corresponding to the first service board from the plurality of service boards, and the backup service board is used for receiving the message shunted to the first service board when the first service board is off-line and processing the message; the first service board synchronously backs up the processing result of the first message to a backup service board; when the first service board is off-line and the backup service board obtains the first message, calculating a second service board for receiving a second message; the second service board creates a first redirection table based on the first message; if the second service board and the backup service board are different service boards, the second service board changes the first redirection table, so that the second message can be redirected to the backup service board when reaching the second service board, and the first message and the second message are both processed by the same service board.

Description

Data processing method and electronic equipment
Technical Field
The embodiment of the invention relates to the technical field of computers, in particular to a data processing method and electronic equipment.
Background
The distributed framework firewall consists of a plurality of service boards and provides a data processing function together; when the forward message hits NAT strategy, address conversion is carried out, so that the IP addresses of the forward message and the reverse message are inconsistent, the exchange board distributes the forward message and the reverse message to different service boards for processing through a Hash algorithm, a redirection table mechanism is used for ensuring the integrity of connection, and the reverse message can inquire a table entry and redirect to a board card where the forward message is located; because the session table entry and the redirection table entry node are not subjected to backup processing, when the board card where the forward message is located is offline, the flow of the forward message is shunted to other service boards through Hash, because the session table entry is not inquired, session interruption occurs, when the service board where the reverse message is shunted is offline, the flow of the reverse message is shunted to a new service board, the redirection table is not matched, and the session table entry is not searched, so that the session interruption phenomenon occurs; as shown in fig. 1, a client sends a request message, a firewall branches to a service board a through a hash algorithm, and performs NAT conversion and session table entry creation on the service board a; when the service board A goes offline, the message sent by the client is shunted to the service board B again, and as the service board B has no relevant session table entry, the message is discarded, and the session is interrupted. As shown in fig. 2, the client message is shunted to the service board a in a hash manner for NAT conversion and session table creation, the first forward message of the session is redirected to the service board C to create a redirection table by calculating the service board (here, the calculation result is the service board C) of the reverse message shunt through a hash algorithm, comparing the inconsistency of the slot position of the local board, and the reverse message is sent to the service board C and then matched with the redirection table, and redirected to the service board a to process the service; when the service board C is off-line, the reverse message is shunted to the service board B again, the redirection table cannot be matched, and the session table entry is not inquired, so that the message is discarded, and the session is interrupted.
In order to solve the problem of session interruption, the scheme adopted at present is to divide the CPUs corresponding to each two service boards into several backup groups, and take the backup groups as unit to perform mutual backup of session table entries, wherein the main division mode includes N +1 backup, where N +1 means that a plurality of service boards and one service board perform backup, when one of the N service boards is offline, the flow is shunted to the backup service board card, and the other service board is offline, and the flow is shunted to the backup service board card. However, when this scheme is adopted, although the session interruption can be avoided, the session entries of the multiple service boards are all backed up on the same service board, and when the multiple service boards are off-line at the same time, the traffic is shunted to the backup service board, which causes the traffic distribution to be uneven, and the backup service board needs to load the traffic of the multiple service boards, resulting in an excessive load pressure | of the backup service board!
Disclosure of Invention
The invention provides a data processing method capable of ensuring uniform flow distribution and effectively preventing session interruption and electronic equipment applying the method.
In order to solve the above technical problem, an embodiment of the present invention provides a data processing method applied to an electronic device having a plurality of service boards, where the method includes:
the method comprises the steps that a first message is obtained on a first service board, and when the first message is determined to be a forward message, the first message is processed;
the first service board calculates and determines a backup service board corresponding to the first service board from the plurality of service boards, wherein the backup service board is used for receiving messages distributed to the first service board when the first service board is off-line and processing the messages;
the first service board synchronously backs up the processing result of the first message to the backup service board;
when the first service board is offline and the backup service board obtains the first message, calculating a second service board for receiving a second message, wherein the second message is a reverse message corresponding to the first message;
the second service board creates a first redirection table based on the first message;
if the second service board and the backup service board are different service boards, the second service board changes the first redirection table, so that the second message can be redirected to the backup service board when reaching the second service board, the first message and the second message are both processed by the same service board, and further, the session is ensured not to be interrupted.
Optionally, the method further comprises:
and the second service board sends the first message to a server.
Optionally, the processing the first packet includes:
and the first service board carries out network address conversion on the first message based on the type of the first message and creates a session table corresponding to the first message.
Optionally, the synchronously backing up the processing result of the first packet to the backup service board includes:
and synchronously backing up at least the session table to the backup service board.
Optionally, the first packet is a forward packet, and the method further includes:
when the second service board and the backup service board are determined to be different service boards, the backup service board responds to the offline action of the first service board and redirects to the second service board;
and the second service board changes the service board in which the first message is recorded in the first redirection table as the backup service board.
Optionally, the method further comprises:
and when the second message is obtained by the second service board, redirecting the second message to the backup service board based on the first redirection table, and processing the second message by the backup service board.
Optionally, the method further comprises:
when the second service board is offline, the backup service board responds to the offline action of the second service board, recalculates and determines that the service board for receiving the second message is a third service board;
the backup service board redirects the first message to the third service board;
the third service board creates a second redirection table according to the first message;
and the third service board sends the first message to a server.
Optionally, the method further comprises:
after the third service board obtains the second message, redirecting the second message to the backup service board according to the second redirection table;
and the backup service board processes the second message and sends a processing result to the client.
Optionally, when the first service board is always online, the first service board executes all the processes executed by the backup service board.
Another embodiment of the present invention provides an electronic device, including:
the first service board is used for processing a first message when the first message is obtained and determined to be a forward message, and calculating and determining a backup service board corresponding to the first service board from the plurality of service boards, wherein the backup service board is used for receiving the message shunted to the first service board when the first service board is offline and processing the message, and the first service board synchronously backs up the processing result of the first message to the backup service board;
the backup service board is used for obtaining the first message when the first service board is offline, and calculating a second service board for receiving a second message, wherein the second message is a reverse message corresponding to the first message;
and the second service board is used for creating a first redirection table according to the first message, judging whether the second service board and the backup service board are the same service board or not, and if the second service board and the backup service board are different service boards, changing the first redirection table to enable the second message to be redirected to the backup service board when reaching the second service board, so that the first message and the second message are both processed by the same service board, and further, the session is not interrupted.
Additional features and advantages of the invention will be set forth in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention will be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.
The technical solution of the present invention is further described in detail by the accompanying drawings and embodiments.
Drawings
Fig. 1 is a diagram illustrating an actual application relationship of an embodiment in the prior art.
Fig. 2 is a diagram of a practical application relationship of another embodiment in the prior art.
Fig. 3 is a flowchart of a data processing method according to an embodiment of the present invention.
Fig. 4 is a flowchart of a first application of the data processing method in the embodiment of the present invention.
Fig. 5 is a flowchart of a second application of the data processing method in the embodiment of the present invention.
Fig. 6 is a block diagram of an electronic device in an embodiment of the present invention.
Detailed Description
The following detailed description of specific embodiments of the present invention is provided in connection with the accompanying drawings, which are not intended to limit the invention.
It will be understood that various modifications may be made to the embodiments disclosed herein. The following description is, therefore, not to be taken in a limiting sense, but is made merely as an exemplification of embodiments. Other modifications will occur to those skilled in the art within the scope and spirit of the disclosure.
The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments of the disclosure and, together with a general description of the disclosure given above, and the detailed description of the embodiments given below, serve to explain the principles of the disclosure.
These and other characteristics of the invention will become apparent from the following description of a preferred form of embodiment, given as a non-limiting example, with reference to the accompanying drawings.
It should also be understood that, although the invention has been described with reference to some specific examples, a person of skill in the art shall certainly be able to achieve many other equivalent forms of the invention, having the characteristics as set forth in the claims and hence all coming within the field of protection defined thereby.
The above and other aspects, features and advantages of the present disclosure will become more apparent in view of the following detailed description when taken in conjunction with the accompanying drawings.
Specific embodiments of the present disclosure are described hereinafter with reference to the accompanying drawings; however, it is to be understood that the disclosed embodiments are merely examples of the disclosure that may be embodied in various forms. Well-known and/or repeated functions and structures have not been described in detail so as not to obscure the present disclosure with unnecessary or unnecessary detail. Therefore, specific structural and functional details disclosed herein are not to be interpreted as limiting, but merely as a basis for the claims and as a representative basis for teaching one skilled in the art to variously employ the present disclosure in virtually any appropriately detailed structure.
The specification may use the phrases "in one embodiment," "in another embodiment," "in yet another embodiment," or "in other embodiments," which may each refer to one or more of the same or different embodiments in accordance with the disclosure.
Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.
As shown in fig. 3, an embodiment of the present invention provides a data processing method, which is applied to an electronic device having a plurality of service boards, where the method includes:
the method comprises the steps that a first message is obtained on a first service board, and the first message is processed when the first message is determined to be a forward message;
the first service board calculates and determines a backup service board corresponding to the first service board from the plurality of service boards, and the backup service board is used for receiving the message shunted to the first service board when the first service board is off-line and processing the message;
the first service board synchronously backs up the processing result of the first message to a backup service board;
when the first service board is offline and the backup service board obtains the first message, calculating a second service board for receiving a second message, wherein the second message is a reverse message corresponding to the first message;
the second service board creates a first redirection table based on the first message;
if the second service board and the backup service board are different service boards, the second service board changes the first redirection table, so that the second message can be redirected to the backup service board when reaching the second service board, the first message and the second message are both processed by the same service board, and further, the session is not interrupted.
The electronic device in this embodiment may be, for example, a firewall, or may also be other security devices or processing devices having a plurality of service boards. The electronic device in this embodiment may have a plurality of service boards, for example, 4, 5, 10, etc., but at least 2 service boards are required. After the first service board obtains the first message sent by the client, the type of the message is firstly judged, and when the first message is determined to be the first message, the first message is processed by the processing strategy of the first message. Specifically, the first service board needs to calculate and determine a backup service board corresponding to the first service board from a plurality of service boards in the electronic device, for example, the backup service board may be calculated and determined by a shunting algorithm. The backup service board is equivalent to a copy version of the first service board, and is configured to receive and process a message that is shunted to the first service board as a first message when the first service board is in an offline state. After determining the backup service board, the first service board synchronously backs up the processing result of the first message to the backup service board, wherein the processing result at least comprises a file and the like created based on the first message and is used for assisting in processing the first message and subsequent second messages. When the first service board is off-line, the first message is sent to the backup service board, and at the moment, the backup service board responds to the off-line action of the first service board and calculates a second service board for receiving a second message, wherein the second message is a reverse message corresponding to the first message, namely a message sent to the client by the server. Further, after the second service board is determined, the backup service board interacts with the second service board, so that the second service board creates a first redirection table based on the first message, the first redirection table may also be calculated and determined before the first service board is offline, for example, when the first message is processed, the second service board for receiving the second message, and then the first service board interacts with the backup service board, so that the second service board creates the first redirection table based on the first message. Or, the first redirection table may be determined by the first service board or the backup service board based on the first message and sent to the second service board, or generated based on other processing devices in the electronic device and sent to the second service board. Further, after the backup service board determines the second service board, the second service board is found to be not self through comparison, that is, when the second service board and the backup service board are not the same service board, the backup service board redirects the first message to the second service board, and modifies the first redirection table, so that the second message can be redirected to the backup service board when reaching the second service board, thereby ensuring that the first message and the second message are both processed by the same service board, and the service board has the processing result of the first message, and can assist in processing the second message, thereby ensuring that the session is not interrupted.
By the method, the forward message and the reverse message can be processed on the same service board after the first service board is offline, the integrity of connection is ensured, and the session is not interrupted. In addition, in the method in this embodiment, the plurality of service boards are arranged through the distributed framework, so that when any service board is offline, the flow of the service board can be uniformly distributed to other online service boards for processing, and is not intensively distributed to the same service board, thereby effectively avoiding the phenomenon that the load pressure of a certain service board is too high, the response speed is reduced, and the overall operation of the equipment is affected due to uneven distribution.
Further, the method of this embodiment further includes:
and the second service board sends the first message to the server.
That is, after the first redirection table is modified, the second service board may send the first message to the server.
Further, in this embodiment, when processing the first packet, the method includes:
the first service board performs network address conversion on the first message based on the type of the first message, and creates a session table corresponding to the first message.
For example, the first service board performs network address translation, such as NAT translation, on the first packet based on the type of the first packet, and creates a session table corresponding to the first packet, where the session table is used when the subsequent backup service board processes the second packet, which helps to ensure that the session is not interrupted. Of course, the processing of the first packet is not limited to the above processing steps, and may also include other related processing, which may be determined according to the actual situation.
After obtaining the processing result, synchronously backing up the processing result of the first message to a backup service board, comprising:
and synchronously backing up at least the session table to a backup service board. Of course, other processing results corresponding to the first packet may also be backed up at the same time, which is not unique.
Further, the method in this embodiment further includes:
when the second service board and the backup service board are determined to be different service boards, the backup service board responds to the offline action of the first service board and redirects the first service board to the second service board;
the second service board changes the service board in which the first message is recorded in the first redirection table as a backup service board;
and when the second message is obtained by the second service board, redirecting the second message to the backup service board based on the first redirection table, and processing the second message by the backup service board.
For example, when the second service board and the backup service board are different service boards, the backup service board redirects the first message to the second service board, so that the second service board is used for sending the first message and receiving the second message, i.e., both the sent and received corresponding messages are the same service board, thereby further ensuring accurate message sending and receiving without session interruption. Then, the second service board will change the service board where the first message recorded in the first redirection table is located, so that the service board where the first message recorded in the table is located is the backup service board. When the second service board obtains the second message sent by the server, the relocation position of the second message may be determined to be the backup service board based on the first redirection table on the second service board, and at this time, the second message may be redirected to the backup service board, so that the backup service board processes the second message, and sends the processing result to the client.
Further, when the backup service board redirects the first message to the second service board, the backup service board or the second service board queries in the first redirection table according to the information of the first message, if the first redirection table records redirection information about the first message, the redirection information is changed, the slot position of the service board where the first message is located is changed into the backup service board, and if the redirection information of the first message is not queried, if the redirection information about the first message is revealed when the redirection table is created, the redirection information about the first message cannot be entered, the original redirection table is deleted, a new redirection table is created, and after the redirection information is completed, the second service board sends the first message to the server.
Further, the method in this embodiment further includes:
when the second service board is offline, the backup service board responds to the offline action of the second service board, recalculates and determines that the service board for receiving the second message is a third service board;
the backup service board redirects the first message to a third service board;
the third service board creates a second redirection table according to the first message;
and the third service board sends the first message to the server.
For example, when the backup service board calculates, through the offload algorithm, that the service board for receiving the second message is the second service board, if the second service board is found to be the offline service board, at this time, the backup service board responds to the offline event, and recalculates and determines that the service board for receiving the second message is the third service board. And then, the backup service board judges, if the third service board and the backup service board are different service boards, the backup service board redirects the first message to the third service board, and after the third service board obtains the first message, a second redirection table is established based on the first message, so that the third service board can redirect the second message to the backup service board based on the second redirection table after receiving the second message. And then, the third service board sends the first message to the server.
Further, still include:
after the third service board obtains the second message, redirecting the second message to the backup service board according to the second redirection table;
and the backup service board processes the second message and sends a processing result to the client.
That is, after the third service board obtains the second packet sent by the server, the second packet is redirected to the backup service board according to the second redirection table, so that the backup service board for processing the first packet processes the second packet at the same time, thereby ensuring that both the forward packet and the reverse packet are processed by the same service board, the connection is stable, and the session is not interrupted.
Further, as described above, the backup service board in this embodiment is equivalent to a copy version of the first service board, and the steps that the backup service board can execute can be executed by the first service board, so that when the first service board is always online, all processes executed by the backup service board can be executed by the first service board. However, the backup service board needs to be set to prevent the first service board from going offline suddenly.
Specifically, when the first service board is always on-line and the second service board is off-line, the first service board calculates a third service board for receiving the second message, and determines whether the third service board is the service board itself, if not, the first message is redirected to the third service board, so that the third service board establishes a second redirection table based on the first message. When the third service board receives the second message, the second message is redirected to the first service board based on the second redirection table, and the first service board processes the second message, so that the session is not interrupted.
To better illustrate the method in this example, the following detailed description is given with reference to specific examples:
when the service board where the first message is located is offline:
as shown in fig. 4, the client sends a first message (corresponding to 1111.3333 in the figure) to be shunted to the service board a, the service board a performs NAT conversion and session table item creation on the forward message, and creates a redirection table on the service board C for redirecting the reverse message to the service board a, so as to ensure session integrity;
pre-calculating by a known shunting algorithm to obtain a backup service board of the session as a service board B, and synchronously backing up the session table to the backup service board B;
after the service board A is offline, the forward message is distributed to a backup service board B, and the service board B creates a first redirection table based on the forward message;
the service board B responds to the offline action of the service board A, predicts that a reverse message (3333.5555 in a corresponding graph) is received by a service board C different from the service board B based on a shunting algorithm, and at the moment, the service board A redirects the forward message to the service board C where the reverse message is positioned;
the service board C changes the service board where the forward message is located recorded in the first redirection table into a service board B based on the actual service board where the first message is located;
when the reverse message reaches the service board C, the first redirection table is hit, and at the moment, the service board C can redirect the reverse message to the service board B for processing, so that the forward message and the reverse message are processed on the same service board B, and the session integrity and the service continuity are ensured.
When the service board where the second message is located is offline and the service board where the first message is located is not offline:
as shown in fig. 5, the client sends a forward message (corresponding to 1111.3333 in the figure) to be shunted to the service board a, performs NAT conversion and session table creation, obtains a reverse message through calculation of a known shunting algorithm to be shunted to the service board C, redirects the forward message to the service board C, correspondingly creates a redirection table, and then sends the forward message to the server;
when the service board C is off-line, the service board A responds to the off-line action of the service board C, recalculates a reverse message (3333.5555 in a corresponding graph) to be shunted to the service board B through a known shunting algorithm, redirects a forward message to the service board B, creates a new redirection table according to message information, and then sends the forward message to a server;
the reverse message reaches the service board B, can hit the redirection list successfully, then redirect to the service board A to process, and then send to the client;
through the above processing, it can be ensured that the reverse message is redirected to the service board a after the service board C is offline, and the session integrity and the service are not interrupted.
Certainly, when the service board a is also offline, the service board a may be replaced with the backup service board B, and the service board B executes the steps of the service board a.
As shown in fig. 6, another embodiment of the present invention also provides an electronic device, including:
the first service board is used for processing the first message when the first message is obtained and determined to be a forward message, calculating and determining a backup service board corresponding to the first service board from the plurality of service boards, wherein the backup service board is used for receiving the message distributed to the first service board when the first service board is offline and processing the message, and the first service board synchronously backs up the processing result of the first message to the backup service board;
the backup service board is used for obtaining a first message when the first service board is offline, and calculating a second service board for receiving a second message, wherein the second message is a reverse message corresponding to the first message;
and the second service board is used for creating a first redirection table according to the first message, judging whether the second service board and the backup service board are the same service board or not, and if the second service board and the backup service board are different service boards, changing the first redirection table to ensure that the second message can be redirected to the backup service board when reaching the second service board, so that the first message and the second message are both processed by the same service board, and further, the session is ensured not to be interrupted.
The electronic device in this embodiment may be, for example, a firewall, or may be another electronic device having a plurality of service boards.
As another embodiment, the method further comprises:
and the second service board sends the first message to a server.
As another embodiment, the processing the first packet includes:
and the first service board carries out network address conversion on the first message based on the type of the first message and creates a session table corresponding to the first message.
As another embodiment, the synchronously backing up the processing result of the first packet to the backup service board includes:
and synchronously backing up at least the session table to the backup service board.
As another embodiment, the first packet is a forward packet, and the method further includes:
when the second service board and the backup service board are determined to be different service boards, the backup service board responds to the offline action of the first service board and redirects to the second service board;
and the second service board changes the service board in which the first message is recorded in the first redirection table as the backup service board.
As another embodiment, the method further comprises:
and when the second message is obtained by the second service board, redirecting the second message to the backup service board based on the first redirection table, and processing the second message by the backup service board.
As another embodiment, the method further comprises:
when the second service board is offline, the backup service board responds to the offline action of the second service board, recalculates and determines that the service board for receiving the second message is a third service board;
the backup service board redirects the first message to the third service board;
the third service board creates a second redirection table according to the first message;
and the third service board sends the first message to a server.
As another embodiment, the method further comprises:
after the third service board obtains the second message, redirecting the second message to the backup service board according to the second redirection table;
and the backup service board processes the second message and sends a processing result to the client.
As another embodiment, when the first service board is always online, the first service board executes all the processes executed by the backup service board.
Another embodiment of the present application further provides an electronic device, including:
one or more processors;
a memory configured to store one or more programs;
the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the processing methods described above.
An embodiment of the present application also provides a storage medium, on which a computer program is stored, which when executed by a processor implements the processing method as described above. It should be understood that each solution in this embodiment has a corresponding technical effect in the foregoing method embodiments, and details are not described here.
Embodiments of the present application also provide a computer program product tangibly stored on a computer-readable medium and comprising computer-executable instructions that, when executed, cause at least one processor to perform a processing method such as the embodiments described above. It should be understood that each solution in this embodiment has a corresponding technical effect in the foregoing method embodiments, and details are not described here.
It should be noted that the computer storage media of the present application can be computer readable signal media or computer readable storage media or any combination of the two. The computer readable medium can be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples of the computer readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access storage media (RAM), a read-only storage media (ROM), an erasable programmable read-only storage media (EPROM or flash memory), an optical fiber, a portable compact disc read-only storage media (CD-ROM), an optical storage media piece, a magnetic storage media piece, or any suitable combination of the foregoing. In the present application, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. In this application, however, a computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, antenna, fiber optic cable, RF, etc., or any suitable combination of the foregoing.
It should be understood that although the present application has been described in terms of various embodiments, not every embodiment includes only a single embodiment, and such description is for clarity purposes only, and those skilled in the art will recognize that the embodiments described herein may be combined as suitable to form other embodiments, as will be appreciated by those skilled in the art.
The above embodiments are only exemplary embodiments of the present invention, and are not intended to limit the present invention, and the scope of the present invention is defined by the claims. Various modifications and equivalents may be made by those skilled in the art within the spirit and scope of the present invention, and such modifications and equivalents should also be considered as falling within the scope of the present invention.

Claims (10)

1. A data processing method is applied to an electronic device with a plurality of service boards, and comprises the following steps:
the method comprises the steps that a first message is obtained on a first service board, and when the first message is determined to be a forward message, the first message is processed;
the first service board calculates and determines a backup service board corresponding to the first service board from the plurality of service boards, wherein the backup service board is used for receiving messages distributed to the first service board when the first service board is off-line and processing the messages;
the first service board synchronously backs up the processing result of the first message to the backup service board;
when the first service board is offline and the backup service board obtains the first message, calculating a second service board for receiving a second message, wherein the second message is a reverse message corresponding to the first message;
the second service board creates a first redirection table based on the first message;
if the second service board and the backup service board are different service boards, the second service board changes the first redirection table, so that the second message can be redirected to the backup service board when reaching the second service board, the first message and the second message are both processed by the same service board, and further, the session is ensured not to be interrupted.
2. The method of claim 1, further comprising:
and the second service board sends the first message to a server.
3. The method of claim 1, wherein the processing the first packet comprises:
and the first service board carries out network address conversion on the first message based on the type of the first message and creates a session table corresponding to the first message.
4. The method according to claim 3, wherein the synchronously backing up the processing result of the first packet to the backup service board comprises:
and synchronously backing up at least the session table to the backup service board.
5. The method of claim 1, wherein the method further comprises:
when the second service board and the backup service board are determined to be different service boards, the backup service board redirects the first message to the second service board;
and the second service board changes the service board in which the first message is recorded in the first redirection table as the backup service board.
6. The method of claim 5, further comprising:
and when the second message is obtained by the second service board, redirecting the second message to the backup service board based on the first redirection table, and processing the second message by the backup service board.
7. The method of claim 1, further comprising:
when the second service board is offline, the backup service board responds to the offline action of the second service board, recalculates and determines that the service board for receiving the second message is a third service board;
the backup service board redirects the first message to the third service board;
the third service board creates a second redirection table according to the first message;
and the third service board sends the first message to a server.
8. The method of claim 7, further comprising:
after the third service board obtains the second message, redirecting the second message to the backup service board according to the second redirection table;
and the backup service board processes the second message and sends a processing result to the client.
9. The method of any of claims 1-8, wherein all processes performed by the backup service board are performed by the first service board while the first service board is always online.
10. An electronic device, comprising:
the first service board is used for processing a first message when the first message is obtained and determined to be a forward message, and calculating and determining a backup service board corresponding to the first service board from the plurality of service boards, wherein the backup service board is used for receiving the message shunted to the first service board when the first service board is offline and processing the message, and the first service board synchronously backs up the processing result of the first message to the backup service board;
the backup service board is used for obtaining the first message when the first service board is offline, and calculating a second service board for receiving a second message, wherein the second message is a reverse message corresponding to the first message;
and the second service board is used for creating a first redirection table according to the first message, judging whether the second service board and the backup service board are the same service board or not, and if the second service board and the backup service board are different service boards, changing the first redirection table to enable the second message to be redirected to the backup service board when reaching the second service board, so that the first message and the second message are both processed by the same service board, and further, the session is not interrupted.
CN202111049720.3A 2021-09-08 2021-09-08 Data processing method and electronic equipment Pending CN113708975A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111049720.3A CN113708975A (en) 2021-09-08 2021-09-08 Data processing method and electronic equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111049720.3A CN113708975A (en) 2021-09-08 2021-09-08 Data processing method and electronic equipment

Publications (1)

Publication Number Publication Date
CN113708975A true CN113708975A (en) 2021-11-26

Family

ID=78659221

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111049720.3A Pending CN113708975A (en) 2021-09-08 2021-09-08 Data processing method and electronic equipment

Country Status (1)

Country Link
CN (1) CN113708975A (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115277213A (en) * 2022-07-29 2022-11-01 北京天融信网络安全技术有限公司 Message board transferring processing method and device
CN115412526A (en) * 2022-08-17 2022-11-29 北京天融信网络安全技术有限公司 NAT processing method, device, electronic equipment and medium in distributed system

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101783770A (en) * 2010-03-12 2010-07-21 成都市华为赛门铁克科技有限公司 Method and system for processing message, service processing board and circuit processing board
CN109218205A (en) * 2018-09-26 2019-01-15 新华三信息安全技术有限公司 A kind of message forwarding method and device
CN112650704A (en) * 2020-12-04 2021-04-13 北京天融信网络安全技术有限公司 Distributed multi-board flow division NAT (network Address translation) processing method and device and electronic equipment

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101783770A (en) * 2010-03-12 2010-07-21 成都市华为赛门铁克科技有限公司 Method and system for processing message, service processing board and circuit processing board
CN109218205A (en) * 2018-09-26 2019-01-15 新华三信息安全技术有限公司 A kind of message forwarding method and device
CN112650704A (en) * 2020-12-04 2021-04-13 北京天融信网络安全技术有限公司 Distributed multi-board flow division NAT (network Address translation) processing method and device and electronic equipment

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115277213A (en) * 2022-07-29 2022-11-01 北京天融信网络安全技术有限公司 Message board transferring processing method and device
CN115277213B (en) * 2022-07-29 2023-07-14 北京天融信网络安全技术有限公司 Message transfer board processing method and device
CN115412526A (en) * 2022-08-17 2022-11-29 北京天融信网络安全技术有限公司 NAT processing method, device, electronic equipment and medium in distributed system
CN115412526B (en) * 2022-08-17 2024-02-02 北京天融信网络安全技术有限公司 NAT processing method, device, electronic equipment and medium in distributed system

Similar Documents

Publication Publication Date Title
US6775743B2 (en) Content caching with special handling of multiple identical requests for content
CN113708975A (en) Data processing method and electronic equipment
US8352434B2 (en) Performing scheduled backups of a backup node associated with a plurality of agent nodes
US8826402B2 (en) Management of an instant message session
CN103229487B (en) Partition balancing method, device and server in distributed memory system
US11206173B2 (en) High availability on a distributed networking platform
US11122108B2 (en) End-to-end file transmission method and system thereof
CN104980478A (en) Cache sharing method, devices and system in content delivery network
CN103051647B (en) Method, equipment and system that a kind of session realizes
CN108933829A (en) A kind of load-balancing method and device
CN107707631B (en) Data acquisition method and device
CN106101297B (en) A kind of message answer method and device
CN111756711A (en) Flow control method, device, system and storage medium
CN108874947B (en) Data processing system and data processing method
CN106878320A (en) A kind of method and apparatus for preventing IP address spoofing
CN103795584A (en) Client side identity detection method and gateway
CN110290196B (en) Content distribution method and device
CN113612851A (en) Remote connection method and device, storage medium and processor
CN111163055B (en) Weak authentication method and device for non-ground network access
CN103916411B (en) The processing method and processing device of hypertext transfer protocol requests time-out
CN104883265A (en) Backup file data retransmission method, apparatus and system
US20220045961A1 (en) Adaptive rate limiting of flow probes
CN114553508B (en) Data access method and device
US20060287940A1 (en) Systems and methods for preventing server and network overload
CN112134957B (en) Data request method, device, server and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination