Firewall security configuration method and device

Abstract

The invention provides a firewall security configuration method and device, electronic equipment and a computer readable medium. The method comprises the following steps: a cloud platform configures security rules into a plurality of firewalls; generating a firewall rule state table according to the state return information of the plurality of firewalls; after the security rules are issued, determining a target firewall based on the firewall rule state table and the firewalls in a preset state; and performing configuration recovery on the security rule of the target firewall based on the firewall rule state table. According to the firewall security configuration method and device, the electronic equipment and the computer readable medium, firewall abnormal conditions caused by security rule configuration can be reduced, so that service faults are reduced, the operation cost is reduced, and good user experience is improved.

Description

technical field [0001] The present application relates to the field of computer information processing, and in particular, to a firewall security configuration method, apparatus, electronic device, and computer-readable medium. Background technique [0002] OpenStack covers all aspects of networking, virtualization, operating systems, servers, etc. Among them, the Neutron project provides network connection services for other services of OpenStack. The core services are Network, Subnet, and Router, and the extended services are FWaaS, etc. Because the FWaaS function implemented by software cannot meet the needs of users due to insufficient performance, hardware FW is used to implement the FWaaS function. The transfer of FWaaS functions is realized by distributing configuration to devices, and the distribution of security rules will be the top priority of transferring security functions. [0003] To create a new security rule, you need to add the newly configured security r...

AI Technical Summary

Problems solved by technology

Under normal circumstances, the security rules of the cloud platform can be delivered to the hardware device normally, but in some cases, due to some dependent configurations that do not exist on the hardware device or other reasons, the security rules are not delivered to the device

[0004] If a certain security rule of the cloud platform fails to be delivered to the hardware device, it will cause the cloud platform to fail to deliver the security rules related to this rule to the hardware device in the future, which will seriously affect the business.

Images