Patent ID: 8370897
Filing Date: 2013-02-05
Classification: G06F,H04L

Abstract:
1. A network device comprising: a plurality of modules, wherein each of the modules provides an operating environment for performing a network service on network traffic; and a control unit that receives first subscriber configuration parameters that define a first virtual security device of the network device by governing operation of the modules for applying respective network services to network traffic associated with a first subscriber, wherein the control unit receives second subscriber configuration parameters that define a second virtual security device of the network device by governing operation of the modules for applying respective network services to network traffic associated with a second subscriber, wherein the control unit receives first configuration information that specifies first individual weight values for each of the modules and a threshold value for the first virtual security device, wherein the control unit receives second configuration information that specifies second individual weight values for each of the modules and a threshold value for the second virtual security device; a failure detection module that detects a newly failed one of the modules; and a failover module that transfers, from the first virtual security device, primary responsibility for performing network services on network traffic associated with the first subscriber when the threshold value for the first virtual security device is exceeded by a combination of the first individual weight values for failed modules of the plurality of modules, wherein the failover module transfers, from the second virtual security device, primary responsibility for performing network services on network traffic associated with the second subscriber when the threshold value for the second virtual security device is exceeded by a combination of the second individual weight values for the failed modules of the plurality of modules.