工业防火墙高可用保障技术综述  

Overview of High Availability Guarantee Technology for Industrial Firewalls

作　　者：王智民 李冬生 Wang Zhimin;Li Dongsheng(Beijing 6cloudtech Information Technology Co.,Ltd,Beijing,100185)

机构地区：[1]北京六方云信息技术有限公司,北京100185

出　　处：《工业信息安全》2023年第6期39-57,共19页Industry Information Security

摘　　要：随着国家对工控安全重视程度的逐年提升,基于工控环境业务优先保障的特点,工控设备对高可用性提出了更严格的要求。为保证工业环境生产业务系统的安全稳定运行,产品的鲁棒性和健壮性至关重要,需要在设计之初就着重关注。因此,我们在相关高可用技术的基础上,运用对比与结合的方法,使用多项技术作为结合点,提出适合各工控场景的安全保障方案。本文内容包括冗余设计方案及模型概述,单体硬件结构及分布式硬件结构介绍,端口聚合、出口选路、虚拟网关、环网控制协议论述,整机冗余设计部署场景及基本原理,软件功能高可用性设计说明,旁路BYPASS设计思路等。With the increasing emphasis on industrial control safety by the country year by year,based on the priority of ensuring industrial control environment business,industrial control equipment has put forward stricter requirements for high availability.To ensure the safe and stable operation of industrial environment production business systems,the robustness and robustness of products are crucial and require special attention from the beginning of design.Therefore,based on relevant high availability technologies,we use a comparative and combined approach,using multiple technologies as a combination point,to propose safety assurance solutions suitable for various industrial control scenarios.This article includes an overview of redundant design schemes and models,an introduction to individual hardware structures and distributed hardware structures,a discussion of port aggregation,exit routing,virtual gateway,and ring network control protocols,deployment scenarios and basic principles of complete machine redundancy design,a description of software functional high availability design,and a design concept for bypass BYPASS.

关 键 词：高可用 环网技术 链路聚合 智能选路 虚拟网关 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]