基于SDN/NFV构建防火云平台

SDN/NFV based Firewall Cloud Platform

云WAF是一种基于云模式的Web应用防火墙。作为一种全新的信息安全产品模式,它不仅增强了应用的可用性和安全性,而且提升了网络的总体安全性。随着大数据、物联网、移动互联网的发展,云环境下的安全问题日益突出,而云WAF的应用面临业务急剧增加、多用户高并发连接和高流量管控的突出问题。因此,基于SDN/NFV、机器学习等技术的优势,设计和实现了一种新型防火云平台。该平台具有卓越的功能和性能,能满足现代云计算环境下大规模复杂系统的网络访问控制要求。

Cloud WAF is a Web application firewall based on cloud mode. As a completely-new information security product mode, could WAF enhance the usability and security of applications and improve the overall security of the network. With the development of big data, IoT （Internet of Things） and mobile Internet, cloud-computing security issue becomes increasingly prominent, while the application of cloud WAF（Web application firewall）would face the problems of dramatic increase of business, multi-user high concurrent-connectivity and high flow–control. Based on the advantages of SDN/NFV （Software defined networking/ Network function virtualization）, machine learning and other technologies, a novel firewall cloud platform is designed and implemented. The platform has excellent function and performance, and can meet the network-access-control requirements of large-scale complex system in modern cloud computing environment.