Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

A high-performance data synchronization method for ipsec VPN

A data synchronization, high-performance technology, applied in transmission systems, electrical components, etc., can solve problems such as system performance impact, VPN device performance impact is very large, affecting the normal operation of the device, etc., to reduce the effect of data copying

Active Publication Date: 2019-04-09
中电科网络安全科技股份有限公司
View PDF4 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0006] If real-time synchronization is performed for the micro-level update frequency, it will have a great impact on the performance of the VPN device and affect the normal operation of the device.
[0007] Traditional IPSec VPN data synchronization generally uses timing queries to obtain synchronization data, which has a serious impact on system performance

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A high-performance data synchronization method for ipsec VPN

Examples

Experimental program
Comparison scheme
Effect test

specific Embodiment 1

[0034] A kind of IPSec VPN high-performance data synchronization method, setting waiting queue and synchronizing queue, adopting batch synchronization based on timer, when the data information item data changes, actively link to waiting queue, realize timing synchronization; The queue is used to link all data information items that have changed but have not started to be synchronized; the synchronization queue is used to maintain all data information items that have changed and are being synchronized; the timer is responsible for initiating data information items according to the set timing threshold. Synchronization function.

[0035] When the data of a data information item changes, the specific method of actively linking to the queue to be synchronized is as follows: set a linked list pointing to the queue to be synchronized in the data information item, and when the synchronization information in a certain data information item changes, the data information Items are linke...

specific Embodiment 2

[0043] The difference from the first embodiment is only that a list entry is set in the IKE SA, and when the IKE SA initiates or receives a DPD probe and a corresponding message, the list entry is attached to the queue to be synchronized.

specific Embodiment 3

[0044] The difference with the specific embodiment 1 is only: a list entry is set in the IPSec SA, and it is judged whether the current IPSec SA has performed a VPN process, if yes, then the anti-replay serial number or the anti-replay window has changed, and the The list entry of the current IPSec SA is hooked into the queue to be synchronized.

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides an IPSec VPN high-performance data synchronization method; the method comprises the steps of setting a to-be-synchronized queue and a synchronizing queue, adopting batch synchronization based on a timer, and actively linking to the to-be-synchronized queue when data in a data information item changes, thereby realizing timing synchronization; the to-be-synchronized queue is used for linking all data information items which are changed but do not start synchronization; the synchronizing queue is used for maintaining all data information items which are changed and are being synchronized; and the timer is responsible for initiating a data synchronization function according to a set timing time threshold. The meaningless waste due to a fact that the traditional timing inquiry method cannot obtain whether the synchronous data is changed and inquires all items is saved; and meanwhile, the data copy due to timing inquiry is also reduced.

Description

technical field [0001] The invention relates to an IPSec VPN high-performance data synchronization method, in particular to a method suitable for synchronizing data between a master device and a backup device in an IPSec VPN in a dual-machine hot standby or load balancing environment. Background technique [0002] IPSec VPN equipment needs to support dual-machine hot standby function and adapt to load balancing network, so as to realize the reliability of IPSec VPN equipment itself, as well as the reliable operation of the network and user services where it is located. The device needs to set the configuration parameter information before running, and a large amount of working data will be generated during the running process. In order to ensure that the other device can quickly participate in the work after one device fails, it is necessary to ensure that all information of the two devices in the same group can be consistent in real time. [0003] The configuration informa...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/08H04L29/06
CPCH04L63/0272H04L63/0485H04L67/1095
Inventor 傅勇王炯
Owner 中电科网络安全科技股份有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products