Distributed Firewall (DFW): Network security at the host level at LinkedIn

Co-authors: Matthew Davidson, Walter Marchuk, Andreas Zaugg, Michael Garate, and William Buenzle In traditional network design, hardware firewalls are used to provide isolation of network segments. As a network increases in size and complexity, an increasing number of firewall rules are required to provide necessary access, but the number of rules a hardware firewall can support is limited by memory capacity. LinkedIn currently maintains a private cloud composed of hundreds of thousands of hosts...

Submit