Adjusting firewall parameters based on node characteristics
AssigneeInternational Business Machines Corporation
InventorsMonica J. Lemay, Todd Tosseth, Jacob M. Tick, Christina Lara
Life of this patent
Estimating the term…
Abstract
A computer-implemented method according to one embodiment includes identifying a node within a clustered system, determining a role of the node, based on one or more characteristics of the node, and setting one or more firewall parameters for the node within the clustered system, based on the role of the node.
Claims19
A computer-implemented method, comprising:
- identifying a node within a clustered system;
- comparing processes, services, and applications currently running on the node to predetermined processes, services, and applications that are associated with predetermined roles within the clustered system;
- assigning one of the predetermined roles to the node in response to determining that the processes, services, and applications currently running on the node match a predetermined number of predetermined processes, services, and applications linked to the one of the predetermined roles,
- wherein the predetermined role is assigned to the node in response to an initial deployment of the clustered system,
- wherein the predetermined role assigned to the node is stored as metadata within the node;
- and
- setting one or more firewall parameters for the node within the clustered system, based on the predetermined role assigned to the node,
- wherein the one or more firewall parameters include one or more limitations imposed by the firewall.
A computer program product comprising one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions comprising instructions configured to cause one or more processors to perform a method comprising:
- identifying, by the one or more processors, a node within a clustered system;
- comparing, by the one or more processors, processes, services, and applications currently running on the node to predetermined processes, services, and applications that are associated with predetermined roles within the clustered system;
- assigning, by the one or more processors, one of the predetermined roles to the node in response to determining that the processes, services, and applications currently running on the node match a predetermined number of predetermined processes, services, and applications linked to the one of the predetermined roles,
- wherein the predetermined role assigned to the node is stored as metadata within the node;
- and
- setting, by the one or more processors, multiple firewall parameters for the node within the clustered system, based on the predetermined role assigned to the node,
- wherein the firewall parameters include allowing only read access through one or more predetermined ports within the clustered system, and allowing access through one or more additional predetermined ports to only a predetermined set of internet addresses listed in a table.
A system, comprising:
- a hardware processor;
- and
- logic integrated with the processor, executable by the processor, or integrated with and executable by the processor, the logic being configured to:
- identify a node within a clustered system;
- compare processes, services, and applications currently running on the node to predetermined processes, services, and applications that are associated with predetermined roles within the clustered system;
- assign one of the predetermined roles to the node in response to determining that the processes, services, and applications currently running on the node match a predetermined number of predetermined processes, services, and applications linked to the one of the predetermined roles,
- wherein the predetermined role is assigned to the node in response to an initial deployment of the clustered system,
- wherein the predetermined role assigned to the node is stored as metadata within the node;
- and
- set one or more firewall parameters for the node within the clustered system, based on the predetermined role assigned to the node.
Dependencies are inferred from the claim text.