白丝美女被狂躁免费视频网站,500av导航大全精品,yw.193.cnc爆乳尤物未满,97se亚洲综合色区,аⅴ天堂中文在线网官网

Firewall control device, method and firewall device

專利號(hào)
US10097515B2
公開日期
2018-10-09
申請(qǐng)人
FUJITSU LIMITED(JP Kawasaki)
發(fā)明人
Dai Suzuki
IPC分類
H04L29/06; G06F9/455
技術(shù)領(lǐng)域
fw,fwc,fws,entry,in,discarded,discarding,packets,address,packet
地域: Kawasaki-shi, Kanagawa

摘要

A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

說(shuō)明書

The first method is a method in which an administrator of one of the FWs 5 inputs setting information to the FWC 7, thereby setting, from the FWC 7, flow entries in the respective FWs 5. The administrator of one of the FWs 5 may be equal to an administrator of the FW system 1 or may be different therefrom. Note that the “administrator” may be called an “operator” or a “user”.

The administrator of, for example, one of the FWs 5 may specify, for the FWC 7, the FWs 5 to serve as flow entry setting targets and contents of flow entries to be set. The FWC 7 communicates with the specified FWs 5, thereby setting and registering the contents of flow entries in the relevant FWs 5.

An entry setting (or deletion) request message may be exemplarily used for the setting and registration (or deletion) of flow entries, performed on the FWs 5 by the FWC 7. The entry setting (or deletion) request message is an example of a control message transmitted and addressed to each of the relevant FWs 5. The “control message” is an example of a “control signal”.

FIG. 2 illustrates an example of a format of the entry setting (or deletion) request message. As exemplified in FIG. 2, the entry setting (or deletion) request message may include respective fields of a packet header, a transmission control protocol (TCP) header, and a payload.

In the payload, an identifier of the FW #x (may be called a “FW identifier”) to serve as a target of a setting (or deletion) of a flow entry and a content of the flow entry to be set (or deleted) may be set. It may be conveniently thought that “#x” corresponds to the FW identifier.

權(quán)利要求

1
微信群二維碼
意見反饋