A system and method for composing a DMZ zone

Abstract

The invention discloses a system for forming a DMZ area, including: a programmable switch, which is used to receive and process traffic from an external network, and forward the processed traffic to a server cluster; a server cluster, which is used to receive and cleaning the processed traffic, and forwarding the cleaned traffic to the programmable switch, wherein the programmable switch is also used to forward the cleaned traffic to a service area.

Description

technical field [0001] The invention relates to the field of computer networks, in particular to a system and method for forming a DMZ area. Background technique [0002] The DMZ (Demilitarized Zone) area is an important area in the computer network system adopted by the financial industry. Its function is to isolate the network traffic between the untrusted external network and the trusted internal network (also known as " flow"). A trusted intranet refers to an internal network of a financial institution with a relatively high degree of trust. The untrusted external network refers to the network outside the financial institution relative to the trusted internal network, for example, the networks of various banks, third-party institutions, and the Internet. [0003] figure 1 A system schematic diagram of a traditional DMZ zone is shown. The current solution for building a DMZ area is to use expensive F5 load balancing equipment, dozens of traditional switches, and thous...

AI Technical Summary

Problems solved by technology

Therefore, this solution suffers from high cost, insufficient throughput, and difficulty in scaling

Images