Firewall setting method, apparatus and device, and storage medium

Abstract

The invention discloses a firewall setting method, apparatus and device, and a storage medium, and supports a user to call a firewall service interface through a client, create a firewall model containing logic firewall information, translate the logic firewall information into logic flow table information, and send the logic flow table information to the client. The logic flow table information is logic firewall information recorded in a flow table form, the logic flow table information is translated into an instruction which can be executed by the switch, and the instruction is executed by the switch so as to realize a firewall function. The logic firewall information is realized by adopting the flow table, and the firewall function can be realized through the flow table by only needingfew resources, so that the resource occupancy rate is greatly reduced compared with the existing general software firewall. Moreover, when a new firewall rule appears, only a piece of new flow table information needs to be added for the newly-added rule, and the new flow table information can be executed by the switch after translation, and the existing firewall does not need to be redeployed, sothat the firewall is simpler and quicker to update.

Description

technical field [0001] The present application relates to the technical field of Internet security, and more specifically, relates to a firewall setting method, device, equipment and storage medium. Background technique [0002] A firewall is a security device that is at the egress or ingress of a network. All traffic from the internal network to the external network or from the external network to the internal network must pass through the firewall. The firewall decides whether to release data packets according to its own configuration rules. Therefore, the firewall can filter data packets to protect the intranet. [0003] Existing firewalls are generally general-purpose software firewalls based on software programming, such as iptables, ipfire, clearOS, etc. This kind of software firewall formed by code through software programming will occupy a large amount of computing resources and memory resources when deployed. Moreover, the firewall function is fixed. When new fire...

AI Technical Summary

Problems solved by technology

[0004] In view of the above problems, this application is proposed to provide a firewall setting method, device, equipment and storage medium to solve the problems of existing general software firewalls that occupy a large amount of resources for deployment and have complicated update methods

Images