Packet filtering test method and device for firewall

Abstract

The invention relates to a packet filtering test method and device of a firewall, electronic equipment and a computer readable medium. The method comprises the following steps: acquiring a packet filtering strategy list for a firewall; generating a firewall command and a three-layer forwarding command based on the packet filtering strategy list; issuing the firewall command and the three-layer forwarding command to firewall equipment to be tested; writing the packet filtering strategy list into test equipment; and controlling the test equipment to generate flow data according to the packet filtering strategy list, and sending the flow data to the firewall equipment so as to test the firewall equipment. According to the packet filtering test method and device of the firewall, the electronic equipment and the computer readable medium disclosed by the invention, the ideal random packet filtering strategy can be directly generated based on the current network data, so that the matching effective condition of a large number of random packet filtering strategies in the current network is tested, and the packet filtering effective condition of the current network can be directly simulated and tested in a one-to-one manner.

Description

technical field [0001] The present disclosure relates to the field of computer information processing, in particular, to a firewall packet filtering test method, device, electronic equipment and computer readable medium. Background technique [0002] In the use of the hardware firewall in the live network, the most commonly used is the packet filtering function, which controls the blocking and letting of various traffic based on the quintuple of the message. Each has different five-tuple forms, such as single, multi-source ip, and multi-port protocols. Because of the strong randomness of the strategy, it often happens that some of the strategies cannot be matched normally, resulting in serious online problems. In the traditional internal testing of the above situation, generally only a large number of strategies can be established regularly, and the filtering function of a large number of strategies can only be traversed, and the filtering function of randomly combined strat...

AI Technical Summary

Problems solved by technology

This solution can only verify the matching and a large number of policies, but it cannot be traversed for various random combinations of policies, such as a policy with 3 source IPs and 1 destination IP, etc. For the filtering policy of the live network That said, there will be a lot of randomness, and there is currently no effective test method for this kind of random packet filtering strategy

Images