Firewall port access rule generation
View Patent ↗A method includes generating firewall port access rules between a first cloud system a second cloud system for each tenant of a plurality of tenants. A unique IP address range is generated for each tenant. The firewall port access rules are applied to each IP address.
1. A method comprising:
generating firewall port access rules between a first cloud system a second cloud system for each tenant of a plurality of tenants;
generating a unique IP address range for each tenant, wherein generating the unique IP address range for each tenant includes generating a third IP address octet value for each tenant using a quotient function by:
dividing an IP integer for each tenant by a maximum IP octet value of a particular internet protocol; and
truncating, in response to a remainder from the quotient function occurring, the remainder; and
applying the firewall port access rules to each IP address.
2. The method of claim 1 , wherein the first cloud system is first type and the second cloud system is a second type different than the first type.
3. The method of claim 1 , wherein generating the firewall port access rules is based at least in part on:
the number of cloud systems for each tenant;
the total number of tenants; and
the number of ports required to access the cloud systems for each tenant.
4. The method of claim 1 , wherein generating IP addresses is a function of at least a unique tenant identifier and an IP quota for each tenant.
5. The method of claim 4 , wherein the IP quota for each tenant is variable.
6. The method of claim 1 , wherein generating IP addresses includes generating a fourth IP address octet value for each tenant as a remainder function of the IP addresses as a function of the IP integer for each tenant and the maximum IP value for the given internet protocol.
7. An apparatus comprising;
a non-transitory computer-readable medium containing instructions executable by a processor to cause the processor to:
generate port access rules between at least a first cloud system and a second cloud system for each tenant of a plurality of tenants;
generate a unique IP address range for each tenant, wherein generating the unique IP address range for each tenant includes generating a third IP address octet value for each tenant as a quotient function by:
dividing an IP integer for each tenant by a maximum IP octet value of a particular internet protocol for the IP address range; and
truncating, in response to a remainder from the quotient function occurring, the remainder; and
apply the port access rules to each IP address.
8. The apparatus of claim 7 , wherein the tangible non-transitory computer readable medium further includes instructions to generate the port access rules based at least in part on:
the number of cloud systems for each tenant;
the total number of tenants; and
the number of ports required to access the cloud systems for each tenant.
9. The apparatus of claim 7 , wherein the tangible non-transitory computer readable medium further includes instructions to generate the unique IP address range at least in part on a unique tenant identifier and an IP quota for each tenant.
10. The apparatus of claim 7 , wherein the tangible non-transitory computer readable medium further includes instructions to generate the ending third and fourth octet values and a starting IP address.
11. The apparatus of claim 10 , wherein the tangible non-transitory computer readable medium further includes instructions to generate a fourth IP address octet value as a remainder function of the IP addresses as a function of the IP integer for each tenant and the maximum IP value for the particular internet protocol.
12. A device for creating firewall port access rules comprising;
a processor; and
a non-transitory computer-readable medium operatively coupled to the processor, the computer readable medium having computer readable instructions stored thereon that, when executed by the processor, causes the device to:
generate firewall port access rules between at least a first cloud system and a second cloud system for each tenant of a plurality of tenants;
generate a unique IP address range for each tenant, wherein generating the unique IP address range for each tenant includes generating a third IP address octet value for each tenant as a quotient function by:
dividing an IP integer for each tenant by a maximum IP octet value of a particular internet protocol; and
truncating, in response to a remainder from the quotient function occurring, the remainder; and
apply the firewall port access rules to each IP address.
13. The device of claim 12 , wherein the tangible non-transitory computer readable medium further includes instructions to generate the firewall port access rules based at least in part on:
the number of cloud systems for each tenant;
the total number of tenants; and
the number of ports required to access the cloud systems for each tenant.
14. The device of claim 12 , wherein the tangible non-transitory computer readable medium further includes instructions to generate the unique IP address range at least in part on a unique tenant identifier and an IP quota for each tenant.
15. The device of claim 12 , wherein the tangible non-transitory computer readable medium further includes instructions to generate a fourth IP address octet value for each tenant as a remainder function of the IP addresses as a function of the IP integer for each tenant and the maximum IP value for the particular internet protocol.