Network message transmission method and device

Abstract

The embodiment of the invention provides a network message transmission method and device, applied to the technical field of network security. The method comprises the following steps: obtaining a first network message sent by a first network node; converting address information of the first network node into virtual address information of the first network node, converting address information of a second network node into local address information of the second network node, converting the address information of the first network node into local address information of the first network node after the converted first network message pass the security analysis and detection, and converting the local address information of the second network node into virtual address information of the second network node to obtain a second network message; and converting the local address information of the first network node into the address information of the first network node, converting the virtual address information of the second network node into the address information of the second network node, and sending the converted second network message to the second network node. By adoption of the network message transmission method and device provided by the invention, the transparency of WAF equipment is realized.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network message transmission method and device. Background technique [0002] WAF (web Application Firewall, website application firewall), is a brand-new information security product model, which can implement security protection for websites. [0003] figure 1 It is a schematic diagram of using a WAF device in the prior art to realize client access to a website, such as figure 1 As shown, WAF devices generally use a reverse proxy mechanism to implement security protection for websites. Specifically, when the client accesses the WEB server through the domain name, the DNS (Domain Name Server, Domain Name Server) resolves the domain name to the address information of the WAF device, then the client sends an HTTP (Hyper Text Transfer Protocol, Hyper Text Transfer Protocol, Hyper Text Transfer Protocol) to the corresponding WAF device. The destination address informat...

AI Technical Summary

Problems solved by technology

When the WAF device is not on the network, the WAF device cannot forward the client's message to the WEB server through the reverse proxy function, thus causing the client to be unable to access the WEB server

On the other hand, when the client accesses the website in the WEB server, the address information of the WAF device is presented externally, which can easily lead to hackers attacking the WAF device through the address information of the WAF device, reducing the security of the WAF device

Images