IP address reduction method under transparent reverse proxy mode

An IP address and reverse proxy technology, applied in the field of network security, can solve the problems of WAF proxy mode business server opacity, WEB application cannot see the real source address of visitors, etc., to improve deployment convenience, business transparency, and high protection Capabilities, Simplified Deployment Effects

Active Publication Date: 2017-02-22
WEBRAY TECH BEIJING CO LTD
View PDF5 Cites 11 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0009] 3. The WAF proxy mode is opaque to the network environment and business servers, and the WEB application cannot see the real source address of the visitor

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • IP address reduction method under transparent reverse proxy mode
  • IP address reduction method under transparent reverse proxy mode
  • IP address reduction method under transparent reverse proxy mode

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0035] Embodiments of the present invention are described in detail below, and examples of the embodiments are shown in the drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below by referring to the figures are exemplary and are intended to explain the present invention and should not be construed as limiting the present invention.

[0036] Such as figure 2 As shown, the IP address restoration method under the transparent reverse proxy mode of the embodiment of the present invention comprises the following steps:

[0037] Step S1, deploying the WAF protection system for web application protection, including: configuring the server address, port and domain name to be protected, and establishing the connection relationship between the WAF protection system, the server and the client. It should be noted that for the WAF protection system, there is n...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides an IP address reduction method and system under a transparent reverse proxy mode. The method comprises the following steps: deploying a WAF protection system; when the WAF protection system receives a server access request from a client, performing target address conversion on a target IP address to generate a corresponding internal use address; using the internal use address to act for a requested server by the WAF protection system to receive the access request from the client, and detecting whether the access request comprises an attack behavior; restoring the internal use address corresponding to the access request excluding the attack behavior as the target IP address by the WAF protection system, and forwarding the access request to a server corresponding to the target IP address. The transparence of the WAF proxy mode to the network environment and the business server is realized, the proxy address is unnecessary to be configured in the network deployment, the deployment is transparent through the tracking conversion on a source IP on the basis of the connection tracking technology.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an IP address restoration method in a transparent reverse proxy mode. Background technique [0002] The reverse proxy (Reverse Proxy) method refers to using a proxy server to accept the connection request on the Internet, then forward the request to the server on the internal network, and return the result obtained from the server to the client requesting the connection on the Internet. At this time, the proxy server acts as a reverse proxy server externally. [0003] Web Application Firewall (WAF) works at the application layer, so it has inherent technical advantages for WEB application protection. Based on a deep understanding of WEB application business and logic, WAF detects and verifies the content of various requests from WEB application clients to ensure their security and legitimacy, and blocks illegal requests in real time, thus protecting various websites Th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06H04L29/12
CPCH04L61/2514H04L63/0227H04L63/0281
Inventor 陈四强刘天翔权晓文
Owner WEBRAY TECH BEIJING CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products