Peripheral Firewall System for Application Protection in Cloud Computing Environments

摘要

User input including an application profile is received. The profile specifies a first server group, a second server group, and computing flows between the first and second server groups. User input identifying at least the first server group to include in a cloud chamber is received. Internet Protocol (IP) addresses assigned to virtual machines provisioned into the first and second server groups are obtained. Based on the computing flows specified in the application profile and the IP addresses assigned to the virtual machines, a set of firewall rules are generated for each virtual machine in the cloud chamber.

主权项

1. A method comprising:
receiving user input comprising an application profile for deployment of an application in a cloud-computing environment, the application profile specifying a first server group, a second server group, and a computing flow between the first and second server groups; receiving user input identifying at least one of the first or second server groups to include in a cloud chamber; obtaining Internet Protocol (IP) addresses assigned to virtual machines provisioned into the first and second server groups; based on the computing flow specified in the application profile and the IP addresses assigned to the virtual machines, generating a plurality of firewall rules for each virtual machine in the at least one first or second server groups included in the cloud chamber; and distributing the firewall rules to each virtual machine in the at least one first or second server groups included in the cloud chamber.