System and method for providing an integrated firewall for secure network communication in a multi-tenant environment

A system providing network security in a multi-tenant environment, the system comprising:

• a plurality of application servers each comprising a microprocessor, a memory, and a host channel adapter;
• a plurality of database services providing access to data of each of a plurality of tenants;
• a connection-based switched fabric connecting the plurality of application servers and the plurality of database services;
• a subnet manager in the connection-based switched fabric;
• wherein the subnet manager configures the host channel adapter of each of the plurality of application servers to associate each of a plurality of database service consumers hosted on said application server with a unique database service consumer identity, such that each of the plurality of database service consumers cannot modify or spoof the unique database service identity associated with said each of the plurality of database service consumers;
• wherein the subnet manager configures the host channel adapter of each of the plurality of application servers to include the database service consumer identity associated with each of the plurality of database service consumers hosted on said application server in each communication packet transmitted from said database service consumer towards said plurality of database services;
• an access control list which identifies said plurality of data services and one or more database service consumer identities associated with one or more database service consumers allowed to access said each of said plurality of database services;
• and
• wherein the system controls access to the plurality of database services by the plurality of database service consumers using the access control list and the database service consumer identity included in each communication packet transmitted from said plurality of database service consumers towards said plurality of database services.

A non-transitory computer readable medium including instructions stored thereon for providing network security in a multi-tenant environment, which instructions, when executed, causes components of said multi-tenant environment to perform steps comprising:

• providing a subnet manager in the connection-based switched fabric;
• using the subnet manager to configure a host channel adapter of each of the plurality of application servers to associate each of a plurality of database service consumers hosted on said application server with a unique database service consumer identity, such that each of the plurality of database service consumers cannot modify or spoof the unique database service identity associated with said each of the plurality of database service consumers;
• using the subnet manager to configure the host channel adapter of each of the plurality of application servers to include the database service consumer identity associated with each of the plurality of database service consumers hosted on said application server in each communication packet transmitted from said database service consumer towards said plurality of database services;
• maintaining an access control list which identifies said plurality of data services and one or more database service consumer identities associated with one or more database service consumers allowed to access said each of said plurality of database services;
• and
• controlling access to the plurality of database services by the plurality of database service consumers using the access control list and the database service consumer identity included in each communication packet transmitted from said plurality of database service consumers towards said plurality of database services.