Distributed firewall security system that extends across different cloud computing networks

A method comprising:

• providing an application profile to manage security of an application deployed across a first cloud computing network, and a second cloud computing network, the first and second cloud computing networks being connected by the Internet;
• allowing a user to define in the application profile a first server group, a second server group, a cloud chamber as including the first and second server groups, and a computing flow from the cloud chamber;
• generating a firewall rule based on the computing flow from the cloud chamber;
• distributing the firewall rule to the first server group of the cloud chamber;
• and
• distributing a copy of the firewall rule to the second server group of the cloud chamber, wherein the first server group is in the first cloud computing network, and the first cloud computing network belongs to a first cloud provider, and
• wherein the second server group is in the second cloud computing network, and the second cloud computing network belongs to a second cloud provider, different from the first cloud provider.

A method comprising:

• storing an application profile to manage security of an application deployed across a first cloud computing network, and a second cloud computing network, the first and second cloud computing networks being connected by the Internet;
• allowing a user to define in the application profile a first server group as being in the first cloud computing network, a second server group as being in the second cloud computing network, a cloud chamber as including the first and second server groups, a first computing flow to the cloud chamber, and a second computing flow from the cloud chamber;
• generating a first firewall rule based on the first computing flow to the cloud chamber;
• transmitting the first firewall rule to the first server group;
• transmitting a copy of the first firewall rule to the second server group;
• generating a second firewall rule based on the second computing flow from the cloud chamber;
• transmitting the second firewall rule to the first server group;
• and
• transmitting a copy of the second firewall rule to the second server group, wherein the first cloud computing network is owned by a first cloud provider, and the second cloud computing network is owned by a second cloud provider, different from the first cloud provider.