Design And Implementation Of Firewall High Availability Based On VRRP

Nowadays the security and availability of networked service is becoming more and more important for much business and it is extremely important that failure of one network component (such as firewall) does not prevent the normal usage of all other service. Virtual Router Redundancy Protocol which is a clustering technique is used in this paper. That can be used for deploying route reduandancy. When one firewall is down, the other can take over the "work", will not bring the user any burthen, and impove the quality of network.Firstly I intruduce some basic knowledge of High Availability, then analysis the common deploy way of the Firewall High Availability and the VRRP protocal. The analysis of VRRP includes many sub-aspects again such as concepts definition, parameters choice, protocol mechanism, and master router's election policies and so on.VRRP instance sysnchronic is focused mainly. I point out possible error and give the feasible solution. With a testing program, I validate the high availability of firewall based on modified VRRP and get the expectable result.The implementations of the high avalibility firewall based on modified VRRP, which including modules partition, modules realization and configure synchronic realization. Finally, the results of test indicate that the functions of VRRP were realized better. Conclusions and advices are also given finally.