高性能公有云WAF安全方案

High Performance WAF Security Scheme in Cloud Computing

高性能云化WAF方案在WAF流量防护监测上设计了各个处理流程之间的协同调整处理能力以及同步机制,实现了处理步骤之间的能力相互感知,动态变化能力高效协同,解决了传统方案防护效率低的问题.另一方面高性能云化WAF方案在防护引流拓扑上设计了SDN牵引流量和策略下发分离,实现了WAF的并发防护调用,解决了传统方案防护吞吐量低的问题.实验表明高性能云化WAF方案对比传统云WAF防护方案有较高的防护效率,较高的防护吞吐量.

By introducing an efficient statistical scheme for WAF traffic analysis processing which provides a mechanism for each processing Flow to dynamically adjust the processing capability,realizes dynamic adjustment processing capability,and realizes coordination adjustment processing capability and the synchronization mechanism between the various processing.On the other hand,in the traditional topology,drainage is started by the virtual network of the host machine or started by a stream serial thread with SDN.By introducing the high concurrent traction scheme in this study,the SDN traction Flow,strategy downward separation,and the concurrent protection of WAF are realized.Experimental results show that the scheme improves the accuracy of WAF protection and improves the WAF throughput.