白丝美女被狂躁免费视频网站,500av导航大全精品,yw.193.cnc爆乳尤物未满,97se亚洲综合色区,аⅴ天堂中文在线网官网

Firewall control device, method and firewall device

專利號(hào)
US10097515B2
公開日期
2018-10-09
申請人
FUJITSU LIMITED（JP Kawasaki）
發(fā)明人
Dai Suzuki
IPC分類
H04L29/06; G06F9/455
技術(shù)領(lǐng)域
fw,fwc,fws,entry,in,discarded,discarding,packets,address,packet
地域： Kawasaki-shi, Kanagawa

摘要

A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

說明書

Therefore, the FW #4 may cause the transmission source address, the destination address, the protocol type, and the port number of the flow A to be included in an entry setting request message and may address, to the FWC 7, and transmit the entry setting request message (processing operation P44).

Note that in response to the transmission of the entry setting request message, the FW #4 may delete the discarded-packet information and the totalization result. Therefore, it is possible to reduce a capacity prepared by the FW #x for storing the discarded-packet information and the totalization result.

Upon receiving the entry setting request message from the FW #4, the FWC 7 identifies the transmission source FW #1 serving as a discarding entry setting target, based on a transmission source address of discarded packets, included in the relevant message. The identification of the transmission source FW #1 may be performed based on the FW configuration information 741, as described in, for example, FIG. 7.

In addition, the FWC 7 addresses, to the identified transmission source FW #1, and transmits an entry setting request message including the information of the discarding entry received from the reception FW #4 of the flow A.

If the relevant entry setting request message is received by the transmission source FW #1 and the discarding entry is registered in the entry table 54 in the FW #1, packets of the flow A are discarded by the FW #1 after that.

權(quán)利要求

1
微信群二維碼
意見反饋