Firewall system with application identifier based rules

1. A method comprising:

receiving, by a computing device and from a first firewall service, a data packet comprising a source application identifier and a destination application identifier;

verifying that the data packet originates from a source application indicated by the source application identifier;

after verifying that the data packet originates from the source application, determining a firewall rule for processing the data packet;

configuring the first firewall service to execute the firewall rule to process the data packet from the source application based on the source application identifier; and

sending, by the computing device, the firewall rule to a second firewall service that is associated with a destination application identified by the destination application identifier.

2. The method of claim 1 , wherein processing the data packet comprises sending, based on the firewall rule and via the first firewall service, the data packet.

3. The method of claim 1 , wherein verifying that the data packet originates from the source application comprises:

generating a hash value from a network location identifier associated with a source device.

4. The method of claim 1 , wherein the data packet further comprises an identification token associated with a source device of the data packet, and

wherein verifying that the data packet originates from the source application comprises:

comparing the identification token to a stored identification token associated with the source application identifier.

5. The method of claim 1 , wherein the data packet further comprises an identification token associated with a source device of the data packet, and

wherein the method further comprises:

determining, by the computing device, an expiration status of the identification token by comparing a time stamp associated with the identification token to a current time.

6. The method of claim 1 , further comprising:

receiving, by the computing device, a request for the source application identifier, the request comprising a universally unique identifier (UUID) associated with the source application; and

generating, based on the UUID, the source application identifier.

7. The method of claim 1 , further comprising:

receiving, by the computing device, a request for an identification token, the request comprising a network location identifier of a source device of the data packet;

generating a hash value from the network location identifier;

setting the hash value as the identification token; and

sending the identification token to the source application.

8. The method of claim 1 , wherein the data packet further comprises:

a destination identification token associated with a destination device of the data packet, and

wherein the method further comprises:

verifying, based on the destination identification token, that the data packet is destined for the destination application.

9. A method comprising:

receiving, from a sending device, a data packet;

determining, from the data packet:

a source application identifier associated with a source application, and

a destination application identifier associated with a destination application;

sending the source application identifier and the destination application identifier to a firewall controller;

receiving, from the firewall controller, a firewall rule for processing the data packet, wherein the firewall rule comprises:

a processing action for processing the data packet, and

a condition for executing the processing action, wherein the condition comprises the source application identifier and the destination application identifier; and

sending, via a firewall service and based on the firewall rule, the data packet to the destination application.

10. The method of claim 9 , wherein the data packet further comprises:

the destination application identifier associated with the destination application, and

an identification token associated with the sending device.

11. The method of claim 9 , wherein the source application is a virtualized application at least partially deployed on the sending device.

12. The method of claim 9 ,

wherein the method further comprises:

receiving, from a second sending device, a second data packet comprising the source application identifier and the destination application identifier; and

sending, via the firewall service and based on the firewall rule, the second data packet to the destination application.

13. A method comprising:

receiving, by a firewall controller and from a first firewall service, a source application identifier and a destination application identifier;

determining a firewall rule for processing a data packet based on the source application identifier and the destination application identifier; and

sending the firewall rule to a plurality of firewall services, wherein the plurality of firewall services comprise the first firewall service.

14. The method of claim 13 , further comprising:

receiving, by the firewall controller and from the first firewall service, an identification token; and

verifying that the identification token is associated with a source application indicated by the source application identifier.

15. The method of claim 14 , wherein verifying that the identification token is associated with the source application comprises:

generating a hash value based on a network location identifier associated with a source device, which originated the source application identifier and the destination application identifier.

16. The method of claim 14 , wherein verifying that the identification token is associated with the source application comprises:

comparing the identification token to a stored identification token associated with the source application identifier.

17. The method of claim 13 , wherein the plurality of firewall services comprise a second firewall service associated with a second application indicated by the destination application identifier.

18. The method of claim 13 , wherein processing the data packet comprises discarding, based on at least one of the source application identifier or the destination application identifier, the data packet.

19. The method of claim 13 , further comprising:

receiving, by the firewall controller and from the first firewall service, an identification token; and

determining an expiration status of the identification token by comparing a time stamp associated with the identification token to a current time.