A technique of using a plurality of nodes to provide network security functionality to a plurality of clients is presented. Each node stores a set of operational data required to accomplish the network security functionality. Each node of the plurality of nodes is allocated to at least two different replication groups of a plurality of replication groups of nodes. The number of nodes in each replication group of the plurality of replication groups is equal to or below a predetermined limit. Each replication group of the plurality of replication groups has allocated at least two nodes of the plurality of nodes. Further, each node of the plurality of nodes has its set of operational data synchronized within its allocated replication groups only. This allows the plurality of nodes to be linearly scaled with the number of clients to which the network security functionality is to be provided.
展开▼