Session record generation method and device and storage medium

Abstract

The invention discloses a session record generation method and apparatus, and a storage medium. The session record generation method comprises the steps of obtaining mirror image traffic of a servicedata flow; transmitting the mirror image traffic to a firewall, so that the firewall generates a session record based on the mirror image traffic, and a data packet in the mirror image traffic comprises quintuple information, wherein the firewall is used for generating a session record for a data packet when the data packet in the mirror image traffic is not hit by a session table and is allowed to pass through the firewall; and storing the session record into the session table. According to the invention, the firewall is triggered to generate the session record in a mirror image flow manner,so that even if the original service data flow corresponding to the mirror image flow does not pass through the firewall, the firewall can still obtain the adaptive session record for the service dataflow, session record synchronization is not needed. Session record sharing obstacles in the prior art are bypassed.

Description

technical field [0001] The invention relates to the field of communication security, in particular to a session record generation method, device and storage medium. Background technique [0002] With the rapid development of the industrial Internet and digitalization, internal data in all walks of life are facing security threats. Therefore, network security is becoming more and more important. Existing technologies usually require the deployment of firewalls at the network border to protect the company's internal network from being easily invaded by the outside world. . In order to adapt to scenarios with large business traffic, firewall clusters can be used in the prior art to increase the security isolation of the internal and external networks. Each firewall can filter the network traffic passing through the firewall based on the session table. If the data packets are recorded in If the session record in the session table is matched, the firewall allows the data packet ...

AI Technical Summary

Problems solved by technology

Data packet A flows through firewall A and a session record can be generated in the session table of firewall A, therefore, firewall A can quickly obtain the passage decision of other data packets with the same session record as data packet A according to the session record; but the firewall It is difficult for other firewalls in the cluster except firewall A to obtain the session record, so it is impossible to directly obtain the passage decision for other data packets with the same session record as data packet A based on the session table

[0004] Of course, in order to realize the sharing of session records, existing technologies can also exchange session records between different firewalls based on private protocols. here comes a new obstacle

Images