并行防火墙系统的容错加权散列调度算法

提出一种用于并行防火墙系统的容错加权散列调度算法，该算法在散列调度的基础上增加了加权处理和容错机制．加权处理根据防火墙组件的不同处理能力调度访问请求，保证处理能力强的防火墙组件处理更多的访问流量，提高了系统的整体效率；容错机制在防火墙组件失效或恢复正常时利用基于连接调度的过渡散列表记录不稳定连接，避免已有连接因算法参数改变而失效．算法性能分析表明：该算法综合了散列调度的高效性、低内存开销以及连接调度的稳定性等优点，为并行防火墙系统提供高效可靠的调度服务．

Scheduling of fault-tolerant weighted hashing in parallel firewall system

A novel load-balancing algorithm using in parallel firewall named fault-tolerant weighted hashing scheduling algorithm was proposed, based on hashing algorithm with improvement on weighted hashing and fault-tolerant mechanism. Weighted hashing could distribute appropriate flow according to enable firewall component, to improve overall efficiency. In the fault-tolerant mechanism, transition hashing table was used to record unstable connection when firewall component came into failure or came back to work, which could avoid existed connections broken due to the transformation of algorithm parameter. The experimental results showed that the algorithm combined the merit of hashing-based scheduling and connection-based scheduling, provided high-performance and reliable load-balancing for parallel firewall.