Network traffic synchronization mechanism
View Patent ↗Methods, apparatuses and systems directed to a network traffic synchronization mechanism facilitating the deployment of network devices in redundant network topologies. In certain embodiments, when a first network device directly receives network traffic, it copies the network traffic and transmits it to at least one partner network device. The partner network device processes the copied network traffic, just as if it had received it directly, but, in one embodiment, discards the traffic before forwarding it on to its destination. In one embodiment, the partner network devices are operative to exchange directly received network traffic. As a result, the present invention provides enhanced reliability and seamless failover. Each unit, for example, is ready at any time to take over for the other unit should a failure occur. As discussed below, the network traffic synchronization mechanism can be applied to a variety of network devices, such as firewalls, gateways, network routers, and bandwidth management devices.
1. An apparatus enabling synchronization of network traffic with at least one network device, comprising
a first network interface for communication with a first network device;
a second network interface for communication with a second network device;
at least a third network interface for exchange of synchronization packets with a partner network device;
a control module operative to
receive data packets on the first network interface;
receive data packets on the second network interface, wherein the data packets received on the first and second network interfaces are addressed to destination hosts;
receive synchronization packets on the at least a third network interface from the partner network device;
transmit, on the at least a third network interface, the data packets received on the first network interface as synchronization packets to the partner network device;
transmit, on the at least a third network interface, the data packets received on the second network interface as synchronization packets to the partner network device;
process the received data packets and the synchronization packets to adjust one or more data objects that include state information for data flows corresponding to the received data packets and synchronization packets;
forward the data packets received on the first network interface from the second network interface to the respective destination hosts; and
forward the data packets received on the second network interface from the first network interface to the respective destination hosts.
2. The apparatus of claim 1 wherein the control module is further operative to discard the received synchronization packets before transmitting the data packets to the destination hosts.
3. The apparatus of claim 1 further comprising a fourth network interface for exchange of synchronization packets with the partner network device; and wherein the control module is operative to
transmit, on the third network interface, the data packets received on the first network interface as synchronization packets to the partner network device;
transmit, on the fourth network interface, the data packets received on the second network interface as synchronization packets to the partner network device.
4. The apparatus of claim 1 wherein the control module is further operative to
encapsulate the data packets received on the first and second network interfaces with synchronization headers before transmitting the data packets on the at least a third network interface, and
decapsulate the synchronization packets received from the partner network device on the at least a third network interface network interface.
5. The apparatus of claim 4 wherein the control module is further operative to
include meta information relating to the data packets in the synchronization header.
6. The apparatus of claim 1 wherein the first network interface is a wired network interface.
7. The apparatus of claim 1 wherein the first network interface is a wireless network interface.
8. The apparatus of claim 1 wherein the at least a third network interface is a wireless network interface.
9. The apparatus of claim 3 wherein the fourth network interface is a wireless network interface.
10. The apparatus of claim 1 wherein the control module is further operative to verify the packets received on the at least a third network interface.
11. The apparatus of claim 10 wherein the synchronization packets include a magic identifier, and wherein the control module is operative to verify the packets received on the at least a third network interface by validating the magic identifier.
12. The apparatus of claim 10 wherein the control module is further operative to include magic identifiers to synchronization packets transmitted on the at least a third network interface.
13. A method directed to synchronization of network traffic with at least one partner network device, comprising
receiving data packets on first and second network interfaces, wherein the data packets are addressed to destination hosts;
receiving synchronization packets on at least a third network interface from at least one partner network device;
transmitting, on the at least a third network interface, the data packets received on the first network interface as synchronization packets to at least one partner network device;
transmitting, on the at least a third network interface, the data packets received on the second network interface as synchronization packets to the at least one partner network device;
processing the received data packets and the received synchronization packets to adjust one or more data objects that include state information for data flows corresponding to the received data packets and synchronization packets;
discarding the received synchronization packets after processing;
forwarding the data packets received on the first network interface from the second network interface to the respective destination hosts; and
forwarding the data packets received on the second network interface from the first network interface to the respective destination hosts.
14. A system, comprising
a first network device operably connected to a first communication path in a computer network,
a second network device operably connected to a second communication path in the computer network,
wherein the first network device is operably connected to the second network device to transmit and receive synchronization packets,
wherein the first and second network devices each comprise
a first network interface;
a second network interface;
a control module operative to
receive data packets on the first and second network interfaces, wherein the data packets are addressed to destination hosts;
receive synchronization packets from a partner network device;
transmit the data packets received on the first network interface as synchronization packets to the partner network device;
transmit the data packets received on the second network interface as synchronization packets to the partner network device;
process the received data packets and the received synchronization packets to adjust one or more data objects that include state information for data flows corresponding to the received data packets and synchronization packets;
discard the received synchronization packets;
forward the data packets received on the first network interface from the second network interface to the respective destination hosts; and
forward the data packets received on the second network interface from the first network interface to the respective destination hosts.
15. The system of claim 14 wherein the first and second network devices are each further operative to
encapsulate the data packets received on the communications path with synchronization headers before transmitting the data packets to the at least one partner network device, and
decapsulate the synchronization packets received from the at least one partner network device.
16. The system of claim 15 wherein the first and second network devices are each further operative to
include meta information relating to the data packets in the synchronization header.
17. The system of claim 14 wherein the first and second network devices each comprise
at least a third network interface for exchange of synchronization packets with the partner network device.
18. The system of claim 17 wherein the first and second network devices further comprise a fourth network interface for exchange of synchronization packets with the partner network device; and wherein the control module is operative to
transmit, on the third network interface, the data packets received on the first network interface as synchronization packets to the partner network device;
transmit, on the fourth network interface, the data packets received on the second network interface as synchronization packets to the partner network device.
19. The system of claim 17 wherein the control module is further operative to
encapsulate the data packets received on the first and second network interfaces with synchronization headers before transmitting the data packets on the at least a third network interface, and
decapsulate the synchronization packets received on the at least a third network interface network interface.
20. The system of claim 19 wherein the control module is further operative to
include meta information relating to the data packets in the synchronization header.