白丝美女被狂躁免费视频网站,500av导航大全精品,yw.193.cnc爆乳尤物未满,97se亚洲综合色区,аⅴ天堂中文在线网官网

Firewall control device, method and firewall device

專利號(hào)
US10097515B2
公開日期
2018-10-09
申請(qǐng)人
FUJITSU LIMITED（JP Kawasaki）
發(fā)明人
Dai Suzuki
IPC分類
H04L29/06; G06F9/455
技術(shù)領(lǐng)域
fw,fwc,fws,entry,in,discarded,discarding,packets,address,packet
地域： Kawasaki-shi, Kanagawa

摘要

A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

說明書

Furthermore, within the all-FW entry table 721, the FWC 7 searches for an entry to compete with the corresponding discarding entry #2, for example, an entry for permitting transfer of a packet corresponding to all or part of the corresponding discarding entry #2. If, in the relevant search, a competing entry is hit, the FWC 7 exemplarily adds the relevant entry to the entry candidate list B in order to generate an entry list for resolving or avoiding the competition (processing operation P55 in FIG. 18).

In the example of FIG. 16, as illustrated in, for example, FIG. 21B, 3 entries of 2 discarding entries #2 for discarding the respective flows A and B and 1 entry that competes with the discarding entries #2 and that is set in the FW #4 are registered in the entry candidate list B.

The FWC 7 compares the number of entries of the entry candidate list A with the number of entries of the entry candidate list B, thereby performing size determination (processing operation P56 in FIG. 18).

If the number of entries of the entry candidate list A is smaller than the number of entries of the entry candidate list B (processing operation P56 in FIG. 18: YES), the FWC 7 may generate the entry list A, based on the entry candidate list A (processing operation P57 in FIG. 18). The entry list A is exemplarily a list of flow entries to be set in the FW #1 corresponding to the transmission source sub-network #1 of the flow A (and the flow B).

權(quán)利要求

1
微信群二維碼
意見反饋