Local agent method of WEB firewall

Abstract

The invention discloses a local agent method of a WEB firewall. First connection is established between a client side and an agent engine of the WEB firewall, second connection is established between the agent engine of the WEB firewall and a server, and the agent engine of the WEB firewall sends quadruple information connected for two times to a protocol stack of the WEB firewall; the protocol stack of the WEB firewall records a request data package which receives the first connection, the agent engine performs rule detection, and, when the request data package is a non-attack package, connection is established between the web engine and a server side, and data package sending is performed; and, after the protocol stack of the WEB firewall determines that the data package transmitted back by the server side is a response data package of the second connection, and the response data package is directly sent to the client side after the response data package is modification check. The local agent method can effectively improve great concurrent access lower agent engine performance, and effectively reduce a load of the gent engine.

Description

technical field [0001] The invention belongs to the technical field of web proxy, in particular to a local proxy method of a WEB firewall. Background technique [0002] With the abundance of Web applications, various attack tools continue to be common and powerful, and there are more and more security risks on the Internet. As the customer's core business systems become more reliant on the network, the number of Web application attack incidents will continue to grow, and the severity of losses will also increase sharply. Therefore, all kinds of organizations such as governments and enterprises must have measures to protect their investments, profits and services. [0003] Under normal circumstances, when using a web browser to directly connect to other Internet sites to obtain network information, it directly contacts the destination site server, and then the destination site server sends the information back. The proxy server is another server between the client and the w...

AI Technical Summary

Problems solved by technology

[0004] In the web application firewall, the web proxy engine is the core of web protection. When the amount of concurrent visits is large, the memory of the web application firewall may increase sharply, and at the same time, the load of the proxy engine is very heavy, which in turn leads to a sharp drop in proxy performance. Seriously affect the normal access of the website, so the support for large concurrent access is the key to the current web firewall

Images