Help Center/ Cloud Firewall/ Service Overview/ Concepts Related to CFW
Updated on 2024-01-12 GMT+08:00
View PDF

Concepts Related to CFW

5-tuple

A 5-tuple (or quintuple) consists of a source IP address, a destination IP address, a protocol, a source port, and a destination port.

Internet Border Firewall

An Internet border firewall is a cluster firewall used to detect north-south traffic. It supports intrusion detection and prevention (IPS) and network antivirus based on EIPs.

VPC Border Firewall

A VPC border firewall is a distributed firewall used to detect communication traffic between two VPCs (east-west traffic), visualizing and protecting internal access activities.

IPS

An intrusion prevention system (IPS) is located between a firewall and a network device. It blocks attacks from suspicious communications before they are spread to other network devices.

Antivirus

The anti-virus function identifies and processes virus files through virus feature detection to prevent data damage, permission change, and system breakdown.

Internet Access

Internet access refers to the access from Internet IP addresses to cloud servers. Internet access protection helps you defend against intrusions from the outside in a timely manner.

Server Originated Access

Server originated access refers to the behavior that a cloud server proactively accesses an external IP address. Server originated access protection helps you manage and control outbound access behaviors.

VPC Peering Connection

A VPC peering connection is a networking connection between two VPCs It enables you to route traffic between them using private IP addresses. In the same resource pool, you can create a VPC peering connection between your own VPCs, or with a VPC of another tenant. However, you cannot create a VPC peering connection between VPCs in different resource pools.

CFW-associated Subnet

This is a parameter that can be configured for a VPC border firewall. After a CIDR block is configured, a CFW-associated subnet is automatically allocated to forward traffic from the firewall to an enterprise router.

Inspection VPC

An inspection VPC is used for a VPC border firewall to divert traffic. After a CIDR block is configured, CFW creates an inspection VPC by default to divert traffic from a service VPC to the firewall in VPC mode.