白丝美女被狂躁免费视频网站,500av导航大全精品,yw.193.cnc爆乳尤物未满,97se亚洲综合色区,аⅴ天堂中文在线网官网

Firewall control device, method and firewall device

專利號
US10097515B2
公開日期
2018-10-09
申請人
FUJITSU LIMITED(JP Kawasaki)
發(fā)明人
Dai Suzuki
IPC分類
H04L29/06; G06F9/455
技術(shù)領(lǐng)域
fw,fwc,fws,entry,in,discarded,discarding,packets,address,packet
地域: Kawasaki-shi, Kanagawa

摘要

A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

說明書

Upon receiving the alarm message from, for example, the FW #1, the FWC 7 may generate 1 or more additional FW #m (“m” is an integer greater than or equal to 2) and load distribution functions #1 and #2, as VMs, as schematically illustrated in FIG. 22.

The FWs 5 including the additional FWs #m may be exemplarily coupled in parallel to the load distribution functions #1 and #2 between the load distribution functions #1 and #2. Note that the FWs 5 coupled in parallel to the load distribution functions #1 and #2 may be conveniently called “parallel FWs” 5.

The first load distribution function #1 exemplarily sorts reception packets into the FWs 5 including the additional FWs #m.

In addition, the second load distribution function #2 receives packets transmitted in a direction opposite to that of packets input to the first load distribution function #1 and sorts the reception packets into the FWs 5 including the additional FWs #m.

In the entry table 54 in each of the additional FWs #m, flow entries having the same contents as those of the entry table 54 in the FW #1 that transmits the alarm message may be set.

From this, packets input to one of the load distribution functions #1 and #2 are sorted into the parallel FWs 5 each having the same entry table 54. Therefore, it is possible to realize the load distribution of the FWs 5.

Note that addresses assigned to the FWs 5 and load distribution functions added by the auto-scaling may be set in a form of not influencing an existing address setting in the FW system 1.

權(quán)利要求

1
微信群二維碼
意見反饋