TIMING MANAGEMENT IN A LARGE FIREWALL CLUSTER

摘要

A non-transitory computer readable medium comprising computer executable instructions stored thereon that when executed cause one or more processing units to initialize a firewall cluster comprising a plurality of nodes, each node operable to selectively permit or block traffic flowing between the firewall cluster and an external network, receive a report from a first node of the firewall cluster that the first node is ineligible to be a primary node, receive a report from a second node of the firewall cluster that the second node is eligible to be a primary node, responsive to a predetermined period of time expiring after startup of the second node without the second node receiving notice that another node has been designated as the primary node, designate the second node as the primary node, and notify the remaining nodes of the firewall cluster that the second node is the primary node for the firewall cluster.