A method and device for selecting a service node

Abstract

The invention, which belongs to the technical field of communication, discloses a method and device for selecting a service node. The method comprises: a first switch receives a first service message carrying a first message type, a first source host identifier and a first destination host identifier; according to the first message type as well as a distribution strategy, a host identifier is selected from the first source host identifier and the first destination host identifier, wherein the host identifier is identical with a host identifier that is selected by a second switch when receiving a second service message and the second service identifier and the first service identifier belongs to a same session; and on the basis of the host identifier, a service node corresponding to the host identifier is selected from a service node set. In addition, the device consists of a receiving module, a first selection module, and a second selection module. The service nodes that are selected by the first service message and the second service message that are belong to the same session are identical; and successful transmission of the first service message and the second service message can be guaranteed.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and device for selecting a service node. Background technique [0002] In the existing network, a set of service nodes is usually deployed between two network areas with different security level requirements. The set of service nodes includes multiple service nodes. Security filtering is performed. For example, the service node can be a firewall, which is used to filter unsafe content in service messages; another example, the service node can be an anti-virus device, which is used to filter viruses in service messages. [0003] For example, a specific example is used to describe the process that a service node performs security filtering on service packets between two network areas. For the convenience of description, the two network areas are respectively referred to as the first network area and the second network area. When When the first host in the first net...

AI Technical Summary

Problems solved by technology

[0006] The service request message and the service response message belong to the same session; the service message of the same session needs to pass through the same service node. The service response is processed; since the hash value obtained by the first switch is different from the hash value obtained by the second switch, the first service node and the second service node are different. Therefore, when the second service node receives the service response report The service response message will not be processed when the file is sent, resulting in the failure of the service response message transmission

Images