CN1315298C - System and method for synchronous packaging processing - Google Patents
System and method for synchronous packaging processing Download PDFInfo
- Publication number
- CN1315298C CN1315298C CNB031481248A CN03148124A CN1315298C CN 1315298 C CN1315298 C CN 1315298C CN B031481248 A CNB031481248 A CN B031481248A CN 03148124 A CN03148124 A CN 03148124A CN 1315298 C CN1315298 C CN 1315298C
- Authority
- CN
- China
- Prior art keywords
- package
- processing unit
- priority order
- handled
- package processing
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Abstract
The present invention relates to a system and a method for synchronous packet processing, which are used for realizing load balance so as to enhance the speed of processing private packets. The system for synchronous packet processing comprises an exchanger and a plurality of packet processing devices, wherein the exchanger is used for receiving and transmitting private packets; the packet processing devices are used for receiving the private packets transmitted by the exchanger and respectively have unduplicated device numbers, and besides, the packet processing devices can realize synchronous operation so as to process the private packets by one synchronous action mode.
Description
Technical field
The present invention relates to a kind of synchronous packet processing systems, relate in particular to a kind of synchronous packet processing systems that improves the speed of package processing with concentrating type structure (clusteredarchitecture) realization load balance (load balance).
Background technology
(IP security protocol IPsec) is the technology of a kind of specific implementation VPN (virtual private network) (Virtual Private Network is designated hereinafter simply as VPN) to the internet security agreement.And VPN a kind ofly can provide the proprietary routing terminal that cost is low and tool is safe by the public network system.
Ipsec protocol is integrated multiple safe practice, sets up the tunnel (tunnel) of a tool fail safe between two gateways (gateway), makes the external world can't obtain the data of being transmitted in this tunnel.Above-mentioned safe practice comprises: Internet Key Exchange (Diffie-Hellman), data encryption standard (Data EncryptionStandard, DES), secret key cipher (Ron ' s Code 4, RC4), IDEA (InternationalData Encryption Algorithm, IDEA), informative abstract (Message Digest 5, MD5), safe HASH algorithm (Secure Hash Algorithm, SHA) and digital signature etc.
Ipsec protocol is the protocol package that is made of a plurality of sub-protocol, and these sub-protocols include: internet key exchange protocol (Internet Key Exchange, IKE), IP authentication header (AuthenticationHeader, AH), IP encapsulation secure loading (Encapsulating Security Payload, ESP) etc.Wherein the most frequently used with the agreement that realizes the IKE agreement be internet security association and IKMP (InternetSecurity Association Key Management Protocol, ISAKMP).The ISAKMP agreement then is the program environment of using when being used for defining Data transmission between the main frame of two equities that adopt the IPsec agreement, as: DES.
The sub-protocol that the IPsec agreement is provided is in order in network layer, data origin authentication, data integrity checking and data security checking when offering Data transmission between the physical network main frame of two equities.Wherein the checking of data origin authentication and data integrity realizes that by the AH agreement data security then is to realize by ESP.
See also Fig. 1, Fig. 1 adopts the schematic diagram of the system configuration of IPsec agreement for prior art.The said procedure environment is defined by a security association, and (Security Association, SA), and SA sets up by the IKE agreement.Each SA uniaxially is established, and in other words, if will set up IPsec agreement between as shown in Figure 1 two peer hosts, is to set up the SA of first main frame, 10 to second main frames 11 and the SA of second main frame, 11 to first main frames 10.When setting up the SA of first main frame, 10 to second main frames 11 by the IKE agreement, can with a Security Parameter Index (Security Parameter Index, SPI) and the IP address of first main frame 10 and define unique SA.Under the IPsec agreement, the data packet that first main frame 10 will transmit is passed to second main frame 11 by the internet after becoming additionally to have the secret package of SPI by AH agreement or ESP protocol processes.After second main frame 11 receives this secret package, can find corresponding SA by the SPI that is had in this secret package, and second main frame 11 is handled this secret package with defined program environment among the SA.In addition, when the data packet that first main frame 10 will transmit by the AH protocol processes becomes the secret package, can additionally give a sequence numbering, make when the sequence numbering of second main frame 11, and judge that whether this secret package was for receiving by each secret package of record.If second main frame 11 finds that these secret packages are out-of-date for receiving, this secret package will be given up by second main frame 11 and not handle, in order to avoid heavily sending attack (replay attack).
See also Fig. 2, Fig. 2 is the system construction drawing of another employing of prior art IPsec agreement.If when first main frame 10 that will be as shown in fig. 1 and second main frame 11 all changed over gateway, as shown in Figure 2 first main frame 10 and second main frame 11 were regarded as a security gateway.Under such structure, client computer 21～28th need not done any setting or measure, can be by the tunnel mode under first main frame 10 and second main frame, the 11 use IPsec agreements, when making the mutual Data transmission of client computer 21～24 and client computer 25～28, the data packet that is transmitted can not be acquired in the internet or palm off.The above-mentioned package that is transmitted in the IPsec agreement comprises unduplicated sequence numbering, Security Parameter Index (SPI), source address and destination address at least.Wherein source address then is meant the transmission source of package, and destination address is the transmission object of package.
Yet under the IPsec agreement, the deal with data package has used the calculation program of a large amount of encrypt/decrypts, and when the client computer quantity that above-mentioned security gateway connected was more and more, the load of security gateway can be increasing.Loading when excessive when security gateway can't normal operation, and therefore whole network communication will become very slow, even interrupt, and therefore, needs other method or structure to become bottleneck in the overall network communication to avoid security gateway really.When above-mentioned security gateway is changed the security gateway of adopting concentrating type structure (clusteredarchitecture), can avoid security gateway to become bottleneck in the network communication, also can avoid single security gateway to operate and cause network communication to be interrupted.
In the security gateway of concentrating type structure, need make secret package to be processed be given different package processing unit fifty-fifty and handle with a kind of load balance mechanism, improve the speed of disposed of in its entirety secret package.And each the package processing unit in the security gateway of concentrating type structure need obtain the SA that other package processing unit is produced in real time, makes each package processing unit to find corresponding SA according to SPI.And, in the process that produces SA, must correctly and as one man SPI be allocated among each SA.And the sequence numbering in the secret package all can correctly be given and note down to each package processing unit.
Yet, existing load balance mechanism, be only applicable to handle the package that does not have interdependence, the SA that package processing unit wherein can't be produced allows other package processing unit also have in real time and synchronously, so other package processing unit can't be searched corresponding SA by SPI, and need rebulid another SA, therefore just can't reach the purpose of load balance.And, because existing load balance mechanism in order to handle the characteristic of package, makes the consistency of the corresponding SA of SPI also have problems.In addition, under existing load balance mechanism, each package processing unit also is difficult to prevent from heavily to send attack by the sequence numbering in the secret package.
In summary, the package processing unit and the method for described prior art on reality is used, obviously exist inconvenience and defective, so be necessary to be improved.
Summary of the invention
At above-mentioned defective, main purpose of the present invention is, a kind of synchronous packet processing systems is provided, to improve the speed that whole package is handled.
Another object of the present invention is to, a kind of synchronous packet processing systems is provided, make that each package processing unit can be in real time and synchronously had identical SA in synchronous packet processing systems, synchronously to carry out the processing of package.
Another object of the present invention is to, make that each package processing unit can be in real time and synchronously distributed suitable SPI to give each SA in synchronous packet processing systems, to carry out the processing of package efficiently.
Another object of the present invention is to, make that in synchronous packet processing systems each package processing unit can be in real time and synchronously give and note down the sequence numbering of each secret package, to carry out the processing of package efficiently.
To achieve these goals, the invention provides a kind of synchronous packet processing systems, realize load balance, and be improved the speed of handling the secret package by the concentrating type structure.Packet processing systems comprises interchanger and a plurality of package processing unit synchronously.Interchanger is in order to this secret package of sending and receiving.A plurality of package processing unit are in order to receive the secret package by interchanger passed on, and a plurality of package processing unit have unduplicated device numbering respectively, and make by a synchronous function mode and can realize between a plurality of package processing unit that synchronous operation handles the secret package.
The present invention also provides a kind of synchronous packet processing systems, comprises at least: at least one interchanger, in order to the reception and the package that passes on; And a plurality of package processing unit, has a unduplicated device numbering respectively, synchronously receive this package that passes on by this interchanger according to a synchronous function mode, and synchronously handle a sequence numbering of this package, and select this package of continuation processing in these a plurality of package processing unit certainly.
The present invention also provides a kind of synchronous method for processing packet, comprises the following step at least: a plurality of package processing unit and at least one interchanger are provided; Make these a plurality of package processing unit synchronously receive a package from this interchanger; Set up a security association between the specified destination of a transmitting terminal of this package and this package; Make these a plurality of package processing unit synchronously give an identical sequence numbering and give this package; In these a plurality of package processing unit, select in the lump by this this package of security association continuation processing according to a load balance mechanism; And send this package to this destination.
The present invention also provides a kind of synchronous method for processing packet, comprises the following step at least: a plurality of package processing unit and at least one interchanger are provided; Make these a plurality of package processing unit synchronously receive a package from this interchanger; Find a security association by the destination position that a transmitting terminal position that this package comprised and this package are specified; Make these a plurality of package processing unit synchronously give an identical sequence numbering and give this package; In these a plurality of package processing unit, select in the lump by this this package of security association continuation processing according to a load balance mechanism; And send this package to this destination.
The present invention also provides a kind of synchronous method for processing packet, comprises the following step at least: a plurality of package processing unit and at least one interchanger are provided; Make these a plurality of package processing unit synchronously receive a package from this interchanger; A sequence numbering that makes these a plurality of package processing unit synchronously note down this package to be had if this sequence numbering of this package has been present in this tables of data, is then given up this package in a tables of data; By the security association index that this package had, find out a security association that corresponds to this security association index; In these a plurality of package processing unit, select in the lump by this this package of security association continuation processing according to a load balance mechanism; And send this package to destination.
Brief Description Of Drawings
Below in conjunction with accompanying drawing,, will make technical scheme of the present invention and other beneficial effects apparent by detailed description to preferred embodiment of the present invention.
In the accompanying drawing,
Fig. 1 adopts the schematic diagram of the system configuration of IPsec agreement for prior art;
Fig. 2 is the schematic diagram of the system configuration of another employing of prior art IPsec agreement;
Fig. 3 is the schematic diagram of the system configuration of the present invention's one specific embodiment;
Fig. 4 A and Fig. 4 B are the schematic diagram of rotation priority power mode of the present invention;
Fig. 5 A and Fig. 5 B are the schematic diagram for the treatment of capacity priority mode of the present invention.
Embodiment
Hereinafter, will describe the present invention in detail.
See also Fig. 3, Fig. 3 is the schematic diagram of the system configuration of the present invention's one specific embodiment.System in the specific embodiment of the invention comprises a package processing unit group 39 and 40, interchanger 31～34, package processing unit group 37 and 38, router three 5 and 36.Wherein package processing unit group 39 and 40 is able to the Data transmission package by interchanger 32 and 34 respectively, and for package processing unit group 39 and 40, package processing unit group 37 and 38 by interchanger 31 and 33 and router three 5 and 36 become a virtual router.In other words, under structure as Fig. 3, for the client computer 21～28 that is comprised in package processing unit group 39 and 40, not only do not need extra fit step, can also improve client computer 21～24 and client computer 25～28 pass through the internet communication mutually with the IPsec agreement speed.
When 32 collocation of package processing unit group 37 and interchanger, in order to handle the package of the client computer 21～24 in package processing unit group 39, and be passed to package processing unit group 38 by interchanger 31 in the back of finishing dealing with.At this moment, the synchronous operation that is carried out in package processing unit group 37 is passed to package processing unit group 38 after mainly package being handled again.
Another kind of situation is when package processing unit group 38 and interchanger 33 collocation, in order to receive and handle transmission by internet (being external network) from package processing unit group 37 and be passed to package processing unit group 38 package.At this moment, be passed to the client computer 25～28 among the package processing unit group 40 after the synchronous operation that is carried out is mainly handled package in package processing unit group 38.
Because in the IPsec agreement, the processing of package needs according to the SA of (package processing unit group 37 and 38) between two packages processing group and carries out.Therefore, below will be directed to whether respectively explanation of foundation that two packages handle SA between the group respectively, include: two packages are handled to set up earlier between the group and are sent that package, two packages handle that the package that has established SA between the group sends behind the SA again and two packages are handled the package that has established SA between the group and received.
First embodiment
The present embodiment explanation sends the process of package again after setting up SA earlier between the two packages processing group.
When the client computer among the package processing unit group 39 21 will send a package to the client computer 25 among the package processing unit group 40 by the IPsec agreement, package processing unit group 37 can synchronously receive this package by interchanger 32.Yet,, must be first set up the transmitting terminal of this package and the SA between the specified destination by the IKE agreement if client computer 21 is when never sending any package to client computer 25.
After SA foundation is finished, be achieved the function that prevents from heavily to send attack that is provided in the IPsec agreement for making the package processing unit group 37 who receives this package, then make package processing unit group 37 synchronously give an identical sequence numbering and give package.
Under the great situation of package flow, package processing unit group 37 improves the speed of disposed of in its entirety package by load balance mechanism.This load balance mechanism is selected a package processing unit in the package processing unit 41～44 that package processing unit group 37 is comprised, for example: package processing unit 41.After package processing unit 41 was handled this package, package processing unit 41 can transmit this package to package processing unit group 38 by the internet, and package processing unit group 38 is passed to client computer 25 after then this package can being handled again.
Above-mentioned load balance mechanism realizes by circulation (Round-Robin) priority mode and treating capacity (Shortest-Queue-First) priority mode.In addition, no matter be that synchronous operation mode under which kind of situation all adopts identical load balance mechanism.
See also Fig. 4 A and Fig. 4 B, Fig. 4 A and Fig. 4 B are the schematic diagram of rotation priority power pattern of the present invention.Rotation priority power pattern shown in Fig. 4 A is the processing sequence of cycle assignment package processing unit according to the device numbering of package processing unit mainly.At first, according to the more little person of device numbering of each package processing unit, and the priority of setting package processing unit is high more, so package processing unit 41 has the highest priority.Then, after the package processing unit 41 with limit priority was handled the secret package, shown in Fig. 4 B, the package processing unit 41 that originally had limit priority will become the package processing unit with lowest priority.
Fig. 5 A and Fig. 5 B are the schematic diagram for the treatment of capacity priority pattern of the present invention.The packet size that treating capacity priority pattern has mainly been handled according to package place device and dynamic assignment is carried out the package processing unit that package is handled.At first, the more little person of the device of package processing unit numbering, the priority of setting this package processing unit is high more, shown in Fig. 5 A.Then, after each package processing unit was all handled the secret package and was noted down the data volume of the secret package of having handled, shown in Fig. 5 B, set the priority that the package processing unit is handled follow-up package according to the data volume size inverted sequence of having handled again, its priority of handling follow-up package of package processing unit that the data volume of promptly having handled is big more is low more.The loading level of each package processing unit of balance whereby.
Second embodiment
The package process of transmitting that has established SA between the group is handled in the present embodiment explanation at two packages.
When the client computer among the package processing unit group 39 21 will send a package to the client computer 25 among the package processing unit group 40 by the IPsec agreement, package processing unit group 37 can synchronously receive this package by interchanger 32.If client computer 21 once sent package to client computer 25, then the SA between the client computer 21 and 25 will be present among the package processing unit group 37, so the specified destination of the transmitting terminal that package processing unit group 37 can be by this package and this package finds out corresponding SA.
After finding out corresponding SA, make package processing unit group 37 synchronously give an identical sequence numbering and give package, with the function that prevents from heavily to send attack that realizes being provided in the IPsec agreement.
Under the great situation of package flow, package processing unit group 37 improves the speed of disposed of in its entirety package by the load balance mechanism identical with first embodiment.This load balance mechanism can be selected out a package processing unit in package processing unit group 37, for example: package processing unit 42, to continue to handle this package.After package processing unit 42 is handled this package, can transmit this package to package processing unit group 38 by the internet, package processing unit group 38 is passed to it client computer 25 after then this package can being handled again.
The 3rd embodiment
The package receiving course of present embodiment explanation after having established SA between the two packages processing group.
When the client computer among the package processing unit group 39 21 will send a package by the IPsec agreement and awards client computer 25 among the package processing unit group 40, package processing unit group 38 can synchronously receive this package by interchanger 33.If client computer 21 once sent package to client computer 25, then the SA between the client computer 21 and 25 will be present among the package processing unit group 38, so package processing unit group 38 can find out the SA that corresponds to this SPI by the SPI that this package had.
After finding out corresponding SA, the sequence numbering that package processing unit group 38 synchronously notes down this package and had is in a tables of data, if when this sequence numbering of this package of being received has been present in this tables of data, then give up this package and the function that prevents from heavily to send attack that realizes being provided in the IPsec agreement.
Similarly, package processing unit group 38 improves the speed of disposed of in its entirety package by the load balance mechanism identical with first embodiment.This load balance mechanism is selected out a package processing unit in the package processing unit 45～48 that package processing unit group 38 is comprised, for example: package processing unit 45, to continue to handle this package.After package processing unit 45 is handled this package, can this package be passed to client computer 25 by interchanger 34.
In sum, synchronous packet processing systems provided by the present invention can satisfy the IPsec agreement for suitable foundation or share SA and prevent from heavily to send attack to wait require under, realize the speed of raising disposed of in its entirety package by disclosed three kinds of different synchronous operation modes of the present invention and load balance mechanism.
Be understandable that; for the person of ordinary skill of the art; can make other various corresponding changes and distortion according to technical scheme of the present invention and technical conceive, and all these changes and distortion all should belong to the protection range of accompanying Claim of the present invention.
Claims (12)
1, a kind of synchronous packet processing systems is characterized in that, comprises at least:
At least one interchanger is in order to receive the package that a terminal computer is transmitted, this interchanger and the package that passes on;
At least one router connects this at least one interchanger, and this router is in order to transmit this package between this interchanger and an internet;
A plurality of package processing unit groups wherein include a plurality of package processing unit among each package processing unit group, and this package processing unit group transmits this package to another terminal computer by this interchanger;
A plurality of package processing unit, has a unduplicated device numbering respectively, synchronously receive this package that passes on by this interchanger according to a synchronous function mode, and synchronously handle a sequence numbering of this package, and select this package of continuation processing in these a plurality of package processing unit certainly;
Wherein, when a terminal computer transmits a package to another terminal computer, establish a security association between specified another terminal computer end of this package and this package.
2, packet processing systems according to claim 1 is characterized in that, this sequence numbering is a treating capacity priority, sets a package of these a plurality of package processing unit according to this sequence numbering in proper order and handles priority order.
3, packet processing systems according to claim 1 is characterized in that, this security association is a SA.
4, a kind of synchronous method for processing packet is characterized in that, comprises the following step at least:
A plurality of package processing unit and at least one interchanger are provided;
Make these a plurality of package processing unit synchronously receive a package from this interchanger;
Set up a security association between the specified destination of a transmitting terminal of this package and this package;
Make these a plurality of package processing unit synchronously give an identical sequence numbering and give this package;
In these a plurality of package processing unit, select in the lump by this this package of security association continuation processing according to a load balance mechanism; And
Send this package to this destination.
5, synchronous method for processing packet according to claim 4 is characterized in that, this load balance mechanism is rotation priority power mode, comprises the following step at least:
Set a package of these a plurality of package processing unit according to the device number order of these a plurality of package processing unit and handle priority order;
Make and have this this package of package processing unit continuation processing that this highest package is handled priority order; And
This package of circulating transfer is handled priority order to this package with inferior and is handled this package processing unit of priority order, and repeats above-mentioned steps.
6, synchronous method for processing packet according to claim 4 is characterized in that, this load balance mechanism is a treating capacity priority mode, comprises the following step at least:
Set a package of these a plurality of package processing unit according to the device number order of these a plurality of package processing unit and handle priority order;
Make that having this highest package handles the data volume that this package processing unit of priority order continues to handle this package and notes down this package;
This package of circulating transfer is handled priority order to package with time and is handled this package processing unit of priority order, and repeat above-mentioned steps to all these a plurality of package processing unit all note down this data volume of this package; And
Set this package of these a plurality of package processing unit according to this data volume of these a plurality of package processing unit and handle priority order, make this more little package processing unit of this data volume have this high more package and handle priority order, and make that having this highest package handles this package processing unit continuation this package of processing of priority order and this data volume of this package of record that adds up, repeats this step.
7, a kind of synchronous method for processing packet is characterized in that, comprises the following step at least:
A plurality of package processing unit and at least one interchanger are provided;
Make these a plurality of package processing unit synchronously receive a package from this interchanger;
A destination location lookup specified by a transmitting terminal position that this package comprised and this package goes out a security association;
Make these a plurality of package processing unit synchronously give an identical sequence numbering and give this package;
In these a plurality of package processing unit, select in the lump by this this package of security association continuation processing according to a load balance mechanism; And
Send this package to this destination.
8, synchronous method for processing packet according to claim 7 is characterized in that, this load balance mechanism is rotation priority power mode, comprises the following step at least:
Set a package of these a plurality of package processing unit according to the device number order of these a plurality of package processing unit and handle priority order;
Make and have this this package of package processing unit continuation processing that this highest package is handled priority order; And
This package of circulating transfer is handled priority order to this package with inferior and is handled this package processing unit of priority order, and repeats above-mentioned steps.
9, synchronous method for processing packet according to claim 7 is characterized in that, this load balance mechanism is a treating capacity priority mode, comprises the following step at least:
Set a package of these a plurality of package processing unit according to the device code of these a plurality of package processing unit in proper order and handle priority order;
Make that having this highest package handles the data volume that this package processing unit of priority order continues to handle this package and notes down this package;
This package of circulating transfer is handled priority order to this package with time and is handled this package processing unit of priority order, and repeat above-mentioned steps to all these a plurality of package processing unit all note down this data volume of this package; And
Set this package of these a plurality of package processing unit according to this data volume of these a plurality of package processing unit and handle priority order, make this more little package processing unit of this data volume have this high more package and handle priority order, and make that having this highest package handles this package processing unit continuation this package of processing of priority order and this data volume of this package of record that adds up, repeats this step.
10, a kind of synchronous method for processing packet is characterized in that, comprises the following step at least:
A plurality of package processing unit and at least one interchanger are provided;
Make these a plurality of package processing unit synchronously receive a package from this interchanger;
A sequence numbering that makes these a plurality of package processing unit synchronously note down this package to be had if this sequence numbering of this package has been present in this tables of data, is then given up this package in a tables of data;
By the security association index that this package had, find out a security association that corresponds to this security association index;
In these a plurality of package processing unit, select in the lump by this this package of security association continuation processing according to a load balance mechanism; And
Send this package to destination.
11, synchronous method for processing packet according to claim 10 is characterized in that, this load balance mechanism is rotation priority power mode, comprises the following step at least:
Set a package of these a plurality of package processing unit according to the device number order of these a plurality of package processing unit and handle priority order;
Make and have this this package of package processing unit continuation processing that this highest package is handled priority order; And
This package of circulating transfer is handled priority order to this package with inferior and is handled this package processing unit of priority order, and repeats above-mentioned steps.
12, synchronous method for processing packet according to claim 10 is characterized in that, this load balance mechanism is a treating capacity priority mode, comprises the following step at least:
Set a package of these a plurality of package processing unit according to the device number order of these a plurality of package processing unit and handle priority order;
Make that having this highest package handles the data volume that this package processing unit of priority order continues to handle this package and notes down this package;
This package of circulating transfer is handled priority order to this package with time and is handled this package processing unit of priority order, and repeat above-mentioned steps to all these a plurality of package processing unit all note down this data volume of this package; And
Set this package of these a plurality of package processing unit according to this data volume of these a plurality of package processing unit and handle priority order, make this more little package processing unit of this data volume have this high more package and handle priority order, and make that having this highest package handles this package processing unit continuation this package of processing of priority order and this data volume of this package of record that adds up, repeats this step.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB031481248A CN1315298C (en) | 2003-07-01 | 2003-07-01 | System and method for synchronous packaging processing |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB031481248A CN1315298C (en) | 2003-07-01 | 2003-07-01 | System and method for synchronous packaging processing |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1567877A CN1567877A (en) | 2005-01-19 |
| CN1315298C true CN1315298C (en) | 2007-05-09 |
Family
ID=34472197
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNB031481248A Expired - Fee Related CN1315298C (en) | 2003-07-01 | 2003-07-01 | System and method for synchronous packaging processing |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN1315298C (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106470238A (en) * | 2015-08-20 | 2017-03-01 | 阿里巴巴集团控股有限公司 | It is applied to the connection establishment method and device in server load balancing |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1179047A (en) * | 1996-10-01 | 1998-04-15 | 国际商业机器公司 | Load balancing in distributed enterprise computer environment |
| CN1366402A (en) * | 2002-02-05 | 2002-08-28 | 威盛电子股份有限公司 | Load balancing device for packet switching |
| US6449734B1 (en) * | 1998-04-17 | 2002-09-10 | Microsoft Corporation | Method and system for discarding locally committed transactions to ensure consistency in a server cluster |
| US20020133602A1 (en) * | 2001-01-17 | 2002-09-19 | Godwin James Russell | Methods, systems and computer program products for security processing outbound communications in a cluster computing environment |
| WO2003007524A2 (en) * | 2001-07-10 | 2003-01-23 | Telecom Italia S.P.A. | Virtual private network mechanism incorporating security association processor |
| CN1410905A (en) * | 2002-11-14 | 2003-04-16 | 华中科技大学 | Full distribution type aggregation network servicer system |
-
2003
- 2003-07-01 CN CNB031481248A patent/CN1315298C/en not_active Expired - Fee Related
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1179047A (en) * | 1996-10-01 | 1998-04-15 | 国际商业机器公司 | Load balancing in distributed enterprise computer environment |
| US6449734B1 (en) * | 1998-04-17 | 2002-09-10 | Microsoft Corporation | Method and system for discarding locally committed transactions to ensure consistency in a server cluster |
| US20020133602A1 (en) * | 2001-01-17 | 2002-09-19 | Godwin James Russell | Methods, systems and computer program products for security processing outbound communications in a cluster computing environment |
| WO2003007524A2 (en) * | 2001-07-10 | 2003-01-23 | Telecom Italia S.P.A. | Virtual private network mechanism incorporating security association processor |
| CN1366402A (en) * | 2002-02-05 | 2002-08-28 | 威盛电子股份有限公司 | Load balancing device for packet switching |
| CN1410905A (en) * | 2002-11-14 | 2003-04-16 | 华中科技大学 | Full distribution type aggregation network servicer system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN1567877A (en) | 2005-01-19 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP3603001B1 (en) | Hardware-accelerated payload filtering in secure communication | |
| CN1209712C (en) | Network address translation gateway for local area networks using local IP addresses and non-translatable port addresses | |
| US8006297B2 (en) | Method and system for combined security protocol and packet filter offload and onload | |
| US7058718B2 (en) | Blended SYN cookies | |
| US6772334B1 (en) | System and method for preventing a spoofed denial of service attack in a networked computing environment | |
| KR100938519B1 (en) | Method to synchronize and upload an offloaded network stack connection with a network stack | |
| US9467290B2 (en) | Method and apparatus for providing secure streaming data transmission facilities using unreliable protocols | |
| US8468337B2 (en) | Secure data transfer over a network | |
| US7280540B2 (en) | Processing of data packets within a network element cluster | |
| CN107046542A (en) | A kind of method that common recognition checking is realized using hardware in network level | |
| CN101051891A (en) | Method and device for safety strategy uniformly treatment in safety gateway | |
| CN1536847A (en) | Method for authority discrimination grouping and effective loading | |
| CN1173256A (en) | Network security device | |
| US8175271B2 (en) | Method and system for security protocol partitioning and virtualization | |
| WO2002088893A2 (en) | Application-specific information-processing method, system, and apparatus | |
| CN1378735A (en) | Protection of communications | |
| CN1747380A (en) | The block encryption data are decrypted | |
| CN101030935A (en) | Method for crossing NAT-PT by IPSec | |
| US20050198498A1 (en) | System and method for performing cryptographic operations on network data | |
| US7564976B2 (en) | System and method for performing security operations on network data | |
| CN1315298C (en) | System and method for synchronous packaging processing | |
| CN101051987A (en) | Method and device for spreading network route to remote network using IPScc | |
| Unurkhaan et al. | Secure SCTP–a versatile secure transport protocol | |
| CN1599316A (en) | Asymmetic identification scheme and long-distance access safety protocol | |
| EP1189410B1 (en) | Processing of data packets within a network cluster |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20070509 Termination date: 20150701 |
|
| EXPY | Termination of patent right or utility model |