High Availability support for the design of stateful networking equipments

Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006

Volumn 2006, Issue , 2006, Pages 254-261

  Neira, P ^a   Lefèvre, Laurent ^b   Gasca, R M ^a  

^a ETS Ingeniería Informatica ^*  (Spain)

^b UNIVERSITÉ DE LYON   (France)

Author keywords

Firewall; High availability; OpenSource; Security; Stateful

Indexed keywords

NETWORKING EQUIPMENTS; OPENSOURCE SOLUTIONS; OPERATIONAL NETWORKS;

COMPUTER ARCHITECTURE; COMPUTER SYSTEM FIREWALLS; COMPUTER SYSTEM RECOVERY; DATA TRANSFER; INFORMATION TECHNOLOGY; SECURITY OF DATA;

COMPUTER NETWORKS;

EID: 33750943656     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2006.71     Document Type: Conference Paper

References (17)

1. Firewall failover with pfsync and carp. http://www.countersiege.com/doc/ pfsync-carp/.
2. High-availability linux project, http://linux-ha.org/.
3. Openbsd project, http://www.openbsd.org/index.html.
4. N. Budhijara, K. Marzullo, F. B. Schneider, and S. Toueg. The primary-backup approach. In Distributed Systems, ACM Press, pp. 199-216, New York, USA, 1993.
5. T. Chou. Beyond fault tolerance. In IEEE Computer 30(4):31-36, 1997.
6. G. Dhandapani and A. Sundaresan. Netlink sockets overview. http://qos.ittc.ukans.edu/netlink/netlink.pdf, 1999.
7. T. Guang, J. Hai, and L. Pang. Layer 4 fault tolerance: Reliability techniques for cluster system in internet services. In Advanced Environments, Tools, and Applications for Cluster Computing, NATO Advanced Research Workshop, IWCC 2001, Mangalia, Romania, sep 2001.
8. J. Hadi Salim, R. Olsson, and A. Kuznetsov. Beyond softnet. In Proceedings of the 5th Annual Linux, USENIX, Oakland, California, USA, nov 2001.
9. R. Hinden. Rfc 3768: Virtual router redundancy protocol (vrrp), apr 2004.
10. T. Li, B. Cole, P. Morton, and D. Li. Rfc 2281: Cisco hot standby router protocol, mar 1998.
11. R. Perlman. Fault tolerant broadcasting of routing information. In Computer Networks, volume 7, dec 1983.
12. H. Roelle. A hot-failover state machine for gateway services and its application to a linux firewall. In Management Technologies for E-Commerce and E-Business Applications, 13th IFIP/IEEE International Workshop on Distributed Systems: Operations and Management, DSOM 2002, Montreal, Canada, oct 2002.
13. P. Russel and H. Welte. Netfilter hacking how-to. http://www.netfilter. org/documentation/HOWTO//netfilter-hacking-HOWTO.txt.
14. J. Salim, H. Khosravi, A. Kleen, and A. Kuznetsov. Rfc 3549 - linux netlink as an ip services protocol. http://www.faqs.org/rfcs/rfc3549.html, jul 2003.
15. L. Senner. Anatomy of a stateful firewall. In SANS Institute Information Security Reading Room, may 2001.
16. G. Van Rooij. Real stateful tcp packet filtering in ip filter. In 10th USENIX Security Symposium, Washington, D.C, USA, aug 2001.
17. H. Welte. How to replicate the fire - ha for netfilter based firewalls. In Ottawa Linux Symposium, 2002.