Abstract: A computer implemented method includes receiving partially created software defined network (SDN) policy state information at a backup software defined network (SDN) appliance in response to the sending of a synchronize packet to establish a connection. The state information corresponds to a state of the connection between two endpoints that include a first active SDN appliance and a second active SDN appliance. A replica of the SDN policy state information is saved at the backup SDN appliance. An update to the SDN policy state information is received in response to the sending of an acknowledgement packet. The replica of the SDN policy state information updated at the backup SDN appliance to enable the backup SDN to transition to active.

Abstract: Various aspects of the subject technology relate to methods, systems, and machine-readable media for scaling a network security policy manager. The method includes receiving a stream comprising replication logs at a subscriber node, the replication logs comprising changes made to a publisher node that publishes contents to a plurality of subscriber nodes including the subscriber node, the replication logs streamed in response to changes being made to the publisher node. The method also includes replaying the replication logs at the subscriber node to update the subscriber node, wherein a replication lag is lower than a replay lag by a predefined threshold. The method also includes storing the replication logs on at least one remote server separately from the subscriber node to increase the scalability of updating the plurality of subscriber nodes, at least one remote server located geographically proximate to the subscriber node.

Abstract: Various aspects of the subject technology relate to methods, systems, and machine-readable media for scaling a network security policy manager. The method includes receiving a stream comprising replication logs at a subscriber node, the replication logs comprising changes made to a publisher node that publishes contents to a plurality of subscriber nodes including the subscriber node, the replication logs streamed in response to changes being made to the publisher node. The method also includes replaying the replication logs at the subscriber node to update the subscriber node, wherein a replication lag is lower than a replay lag by a predefined threshold. The method also includes storing the replication logs on at least one remote server separately from the subscriber node to increase the scalability of updating the plurality of subscriber nodes, at least one remote server located geographically proximate to the subscriber node.