High reliability WEB safety protection realization method under cloud calculation mode

Abstract

The high reliability WEB safety protection realization method under a cloud calculation mode comprises steps of deploying WAs on a cloud platform in order to create a cloud WAF, performing dual-monitoring through a cloud end intelligent monitoring mechanism combining with a WAF manager, performing cloud WAF intelligent migration on a failed server, performing dynamic reconstruction after a cloud WAF process is failed, and performing an uninterrupted service of the failed cloud WAF. The high reliability WEB safety protection realization method under the cloud calculation mode can migrate the safety protection service to a suitable physical server through a migration capability of the cloud platform when the physical server where the WAF is arranged is failed, continuously provides a safety protection capability, can quickly starts a new cloud WAF with same capabilities in a resource pool, afresh issues a configuration or shares the configuration, and can accelerate to create a new WAF. The cloud WAF can work in an HA mode, a master WAF and a backup WAF can realize seamless switching so as to guarantee that an upper level service cannot be interrupted.

Description

technical field [0001] The invention relates to the technical field of Internet applications, in particular to a method for realizing high-reliability WEB security protection under a cloud computing mode. Background technique [0002] Traditional WEB application firewall (WAF for short), the software implementation is closely coupled with the hardware entity, and the physical deployment relationship with the back-end protection WEB site is very fixed. The reliability of WAF depends on the special equipment integrated with hardware. When the special equipment fails, the overall WEB protection fails, and the WEB protection can only be restored after the maintenance personnel reinstall, deploy and configure, which has poor reliability and flexibility. With the development of cloud computing and virtualization technology, more and more security vendors have packaged security protection software functions and dependent operating systems into mirror images, and WAF can be flexibly...

AI Technical Summary

Problems solved by technology

The existing cloud platforms have corresponding monitoring methods. When a virtual machine failure or a problem with a physical server is detected, the virtual machine on the physical server can be manually migrated (cold migration / hot migration) to other normal working physical servers. , cannot be automated

During the entire migration and configuration process, the protection function fails, and it is impossible to achieve uninterrupted protection

[0004] Therefore, the current so-called cloud WAF cannot achieve timely automatic fault detection, migration of protection capabilities, and uninterrupted WAF protection capabilities

Images