WAF flow guide device, system and method

A diversion device, legal technology, applied in the direction of transmission system, electrical components, etc., can solve the problems of low performance of wafclient, consume a lot of CPU resources, block wafclient, etc., to improve data diversion ability, realize logical separation, and improve reception Effect

Inactive Publication Date: 2019-04-19
SF TECH
View PDF5 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] like image 3 As shown, the general approach is to integrate the waf rules into the waf client (that is, the WAF access layer), but this will lead to poor performance of the waf client, because waf rule matching calculations consume a lot of CPU resources and block the wafclient ( That is, the access layer mentioned below) provides external services

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • WAF flow guide device, system and method
  • WAF flow guide device, system and method
  • WAF flow guide device, system and method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0050] This embodiment provides a WAF diversion device including a WAF computing cluster module and a WAF access layer module, where the WAF computing cluster module and the WAF access layer module are located in different servers.

[0051] WAF computing cluster module, configured for:

[0052] Receive the forwarded access request, analyze and judge the access request based on the preset WAF judgment rule, and send the analysis and judgment result;

[0053] Obtain the upper limit range of the calculation amount. If the upper limit range of the calculation amount is reached, the forwarded access request will be stopped. The upper limit range of the calculation amount is determined by the configuration of the WAF computing cluster module;

[0054] WAF access layer module, configured for:

[0055]Provide access request service externally, access requests include HTTP network access requests commonly used by front-end users, HTTPS network access requests, etc. After receiving the...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a WAF flow guide device, system and method. The WAF flow guide device comprises a WAF computing cluster module, configured to: receive a forwarded access request, perform analysis and judgment on the access request based on a preset WAF judgment rule, and send an analysis and judgment result; and a WAF access layer module, configured to: receive the access request of a client, forward the access request to the WAF computing cluster module, receive and judge the validity of the analysis and judgment result and execute a corresponding operation according to the judgmentresult, wherein the WAF computing cluster module and the WAF access layer module are located at different servers. By separating the WAF judgment rule that occupies a large amount of CPU resources from a WAF access layer and calculating the WAF judgment rule singly in a computing cluster mode, access and computational logic are separated to ensure the concurrency of the WAF access layer.

Description

technical field [0001] The present invention relates to the field of middleware, in particular to a WAF diversion device, system and method. Background technique [0002] As Web applications become more and more abundant, traditional firewall-based security measures will have many problems in actual use. As a result, WAF (Web Application Firewall, Web Application Firewall), which implements a series of security policies for HTTP / HTTPS, is a product that provides security assurance for Web applications. [0003] Such as image 3 As shown, the general approach is to integrate the waf rules into the waf client (that is, the WAF access layer), but this will lead to poor performance of the waf client, because waf rule matching calculations consume a lot of CPU resources and block the wafclient ( That is, the access layer mentioned below) provides external services. Contents of the invention [0004] In order to solve the above-mentioned technical problems, the purpose of the ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06H04L29/08
CPCH04L63/0263H04L63/20H04L67/02H04L67/1055
Inventor 林国峰胡明杰万国圣曾宪成
Owner SF TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap