Juniper Networks, Inc.

Weimin Ji

John E Drake

Jeffrey M Haas

Subbiah Kandasamy

Weibin Chen

Zheng Chang

Qilin Xue

Jeffery M Haas

Example security systems for use between at least one upstream router and at least one downstream router, are described. A group or pool of security devices can be used to provide stateful security to bidirectional packet flows between upstream and downstream routers. The packets of the bidirectional flows are forwarded to particular security devices based on a consistent hash ring process. For a given flow, bidirectional state information is synchronized among some, but not all, of the security devices. The security devices among which such bidirectional flow state information is shared are determined using the same consistent hash ring process.

Intelligent flow state synchronization to improve resiliency, availability, and/or performance of redundant network security devices

A first network device may establish connectivity with a second network device. The first network device may determine information that identifies a cluster identifier based on establishing connectivity with the second network device. The first network device may compare a first software version of the first network device and a second software version of the second network device. The first network device may selectively obtain and install a system image of the second network device based on comparing the first software version and the second software version. The first network device may receive, from the second network device, configuration information and user session information based on selectively obtaining the system image. The first network device and the second network device may form a high-availability cluster.

Automatic configuration of a replacement network device in a high-availability cluster

Growing community of inventors

San Jose, CA, United States of America

Weimin Ji