Hewlett Packard Enterprise Development LP

New H3c Technologies Co., Ltd.

Shufa Guan

Dong Xie

Guoliang Zheng

A Software Defined Network (SDN) controller monitors load of Virtual FireWall (vFW) nodes in a firewall cluster in real time. When detecting that load of one or more vFW nodes is higher than a predefined first threshold, the SDN controller creates a new vFW node. The SDN controller selects a first flow, which is to be migrated, from flows passing through the monitored vFW nodes, updates a first flow entry corresponding to the first flow, and sends the updated first flow entry to a switch. The updated first flow entry indicates the switch to send the first flow to the new vFW node.

Firewall cluster

According to an example, a virtual port is configured for a current virtual device (VD) to interconnect the current VD with other VDs. The virtual port may be a layer 3 port and route learning and advertising of port information may be performed through the virtual port.

Growing community of inventors

Beijing, China

Shufa Guan