È»¶ø£¬Ëæ×ÅÎÞÈË»úÓ¦ÓõÄÈÕÒæ¹ã·º£¬°²È«ÎÊÌâÒ²ÈÕÒæÍ¹ÏÔ
ΪÁ˱£ÕÏÎÞÈË»úϵͳµÄÎȶ¨ÔËÐкÍÊý¾Ý°²È«£¬ÒýÈëWebÓ¦Ó÷À»ðǽ£¨WAF£©¼¼Êõ³ÉΪÁËÒ»ÖÖÓÐЧµÄ½â¾ö·½°¸
±¾ÎĽ«ÉîÈë̽ÌÖArduPilot WAFÔÚLinux»·¾³ÏµÄ׿Խ±íÏÖÓëÓ¦Óã¬Õ¹Ê¾ÆäÈçºÎΪÎÞÈË»úϵͳÌṩǿ´óµÄ°²È«·À»¤
Ò»¡¢ArduPilotÓëWAFµÄ½áºÏ±³¾° ArduPilot×÷Ϊһ¿î¿ªÔ´µÄ·ÉÐпØÖÆÏµÍ³£¬Ö§³Ö¶àÖÖÎÞÈË»úƽ̨£¬°üÀ¨¶àÐýÒí¡¢¹Ì¶¨Òí¡¢Ö±Éý»úÒÔ¼°ÎÞÈ˳µµÈ
ÆäÇ¿´óµÄ×Ô¶¯·ÉÐй¦ÄÜ¡¢¾«×¼µÄµ¼º½¶¨Î»ÒÔ¼°·á¸»µÄ´«¸ÐÆ÷½Ó¿Ú£¬Ê¹µÃArduPilotÔÚÎÞÈË»úÁìÓò¾ßÓм«¸ßµÄÓ¦ÓüÛÖµ
È»¶ø£¬Ëæ×ÅÎÞÈË»ú¼¼ÊõµÄÆÕ¼°£¬Ô½À´Ô½¶àµÄÎÞÈË»úϵͳ¿ªÊ¼½ÓÈ뻥ÁªÍø£¬½øÐÐÔ¶³Ì¿ØÖƺÍÊý¾Ý´«Êä
ÕâÒ»Ç÷ÊÆÔÚ´øÀ´±ãÀûµÄͬʱ£¬Ò²±©Â¶ÁËÎÞÈË»úÏµÍ³ÃæÁٵݲȫ·çÏÕ
WAF£¨Web Application Firewall£©ÊÇÒ»ÖÖרÃÅÓÃÓÚ±£»¤WebÓ¦ÓÃÃâÊܶñÒâ¹¥»÷µÄ°²È«É豸»òÈí¼þ
ͨ¹ý¼à¿Ø¡¢¹ýÂ˺ͼǼHTTP/HTTPSÁ÷Á¿£¬WAFÄܹ»ÓÐЧʶ±ð²¢×èÖ¹¸÷ÖÖWeb¹¥»÷£¬ÈçSQL×¢Èë¡¢¿çÕ¾½Å±¾£¨XSS£©¡¢¿çÕ¾ÇëÇóαÔ죨CSRF£©µÈ
½«WAF¼¼ÊõÓ¦ÓÃÓÚArduPilotϵͳ£¬¿ÉÒÔÏÔÖøÌáÉýÎÞÈË»úϵͳµÄ°²È«·À»¤ÄÜÁ¦£¬È·±£ÎÞÈË»úÔÚÔ¶³Ì¿ØÖƺÍÊý¾Ý´«Êä¹ý³ÌÖеݲȫÐÔ
¶þ¡¢ArduPilot WAFÔÚLinux»·¾³ÏµÄÓÅÊÆ Linux×÷Ϊһ¿î¿ªÔ´¡¢Îȶ¨ÇÒ°²È«µÄ²Ù×÷ϵͳ£¬¹ã·ºÓ¦ÓÃÓÚ·þÎñÆ÷¡¢Ç¶ÈëʽϵͳÒÔ¼°ÎÞÈË»úµÈÁìÓò
ÔÚLinux»·¾³Ï²¿ÊðArduPilot WAF£¬¾ßÓÐÒÔÏÂÏÔÖøÓÅÊÆ£º 1.Ç¿´óµÄ¼æÈÝÐÔ£ºLinux²Ù×÷ϵͳÒÔÆä¹ã·ºµÄÓ²¼þÖ§³ÖºÍ·á¸»µÄÈí¼þ×ÊÔ´£¬ÎªArduPilot WAFµÄ²¿ÊðÌṩÁ˼áʵµÄ»ù´¡
ÎÞÂÛÊǸßÐÔÄܵķþÎñÆ÷»¹ÊÇ×ÊÔ´ÊÜÏÞµÄǶÈëʽÉ豸£¬Linux¶¼ÄܺܺõØÖ§³ÖArduPilot WAFµÄÔËÐÐ
2.¸ßЧµÄÐÔÄÜ£ºLinuxÄں˵ÄÓÅ»¯ºÍÇ¿´óµÄÍøÂç´¦ÀíÄÜÁ¦£¬Ê¹µÃArduPilot WAFÔÚLinux»·¾³ÏÂÄܹ»¸ßЧµØ´¦Àí´óÁ¿HTTP/HTTPSÁ÷Á¿£¬È·±£ÎÞÈË»úϵͳµÄʵʱÐÔºÍÎȶ¨ÐÔ
3.Áé»îµÄÅäÖãºLinuxϵͳµÄÁé»îÐÔʹµÃArduPilot WAF¿ÉÒÔ¸ù¾Ýʵ¼ÊÐèÇó½øÐж¨ÖÆ»¯µÄÅäÖÃ
¿ª·¢Õß¿ÉÒÔ¸ù¾ÝÎÞÈË»úµÄÓ¦Óó¡¾°ºÍ°²È«ÐèÇó£¬Áé»îµ÷ÕûWAFµÄ²ßÂԺ͹æÔò£¬ÊµÏÖ¾«×¼µÄ°²È«·À»¤
4.·á¸»µÄ°²È«¹¤¾ß£ºLinuxÉú̬ϵͳÖÐÓµÓзḻµÄ°²È«¹¤¾ßºÍ×ÊÔ´£¬ÈçSELinux¡¢AppArmorµÈ£¬ÕâЩ¹¤¾ß¿ÉÒÔÓëArduPilot WAFÐͬ¹¤×÷£¬½øÒ»²½ÌáÉýÎÞÈË»úϵͳµÄ°²È«·À»¤Ë®Æ½
Èý¡¢ArduPilot WAFÔÚLinux»·¾³ÏµÄÓ¦ÓÃʵ¼ù ÔÚLinux»·¾³Ï²¿ÊðArduPilot WAF£¬ÐèÒª×ۺϿ¼ÂÇÎÞÈË»úµÄÓ¦Óó¡¾°¡¢°²È«ÐèÇóÒÔ¼°ÏµÍ³×ÊÔ´µÈÒòËØ
ÒÔÏÂÊÇÒ»¸öµäÐ͵ÄÓ¦ÓÃʵ¼ù°¸Àý£º 1. »·¾³×¼±¸ Ê×ÏÈ£¬ÐèҪ׼±¸Ò»Ì¨ÔËÐÐLinux²Ù×÷ϵͳµÄ·þÎñÆ÷»òǶÈëʽÉ豸£¬ÓÃÓÚ²¿ÊðArduPilot WAF
È·±£É豸¾ß±¸×ã¹»µÄ¼ÆËãÄÜÁ¦ºÍ´æ´¢¿Õ¼ä£¬ÒÔÂú×ãWAFµÄÔËÐÐÐèÇó
ͬʱ£¬ÐèÒª°²×°²¢ÅäÖúÃWeb·þÎñÆ÷£¨ÈçApache»òNginx£©ºÍÊý¾Ý¿â£¨ÈçMySQL»òPostgreSQL£©£¬ÒÔÖ§³ÖArduPilotϵͳµÄÔ¶³Ì¿ØÖƺÍÊý¾Ý´«Êä
2. WAFÑ¡ÐÍÓë°²×° ¸ù¾Ýʵ¼ÊÐèÇó£¬Ñ¡ÔñºÏÊʵÄWAF²úÆ·
ÊÐÃæÉÏÓÐÐí¶à³ÉÊìµÄWAF½â¾ö·½°¸£¬ÈçModSecurity¡¢WAF-FlexµÈ
ÕâЩ²úÆ·¶¼ÌṩÁ˷ḻµÄ¹¦ÄܺÍÁé»îµÄÅäÖÃÑ¡ÏÄܹ»Âú×㲻ͬ³¡¾°Ïµİ²È«·À»¤ÐèÇó
ÔÚÑ¡¶¨WAF²úÆ·ºó£¬°´ÕÕ¹Ù·½Îĵµ½øÐа²×°ºÍÅäÖÃ
ͨ³££¬WAFµÄ°²×°¹ý³Ì°üÀ¨ÏÂÔØÈí¼þ°ü¡¢±àÒë°²×°¡¢ÅäÖòßÂԵȲ½Öè
3. ²ßÂÔÅäÖÃÓë²âÊÔ °²×°Íê³Éºó£¬ÐèÒª¸ù¾ÝÎÞÈË»úµÄÓ¦Óó¡¾°ºÍ°²È«ÐèÇó£¬ÅäÖÃWAFµÄ²ßÂԺ͹æÔò
Õâ°üÀ¨¶¨ÒåÔÊÐíµÄHTTPÇëÇó·½·¨¡¢ÏÞÖÆÇëÇóµÄËÙÂʺʹóС¡¢ÉèÖÃÃô¸ÐÐÅÏ¢µÄ¹ýÂ˹æÔòµÈ
ÅäÖÃÍê³Éºó£¬ÐèÒª½øÐгä·ÖµÄ²âÊÔ£¬È·±£WAFÄܹ»Õýȷʶ±ð²¢×èÖ¹¶ñÒâ¹¥»÷£¬Í¬Ê±²»Ó°ÏìÎÞÈË»úϵͳµÄÕý³£ÔËÐÐ
4. ¼à¿ØÓëÈÕÖ¾·ÖÎö WAFµÄ¼à¿ØºÍÈÕÖ¾·ÖÎöÊDZ£ÕÏÆäÓÐЧÐÔµÄÖØÒªÊÖ¶Î
ͨ¹ý¼à¿ØWAFµÄÔËÐÐ״̬£¬¿ÉÒÔ¼°Ê±·¢ÏÖ²¢´¦ÀíDZÔڵݲȫÎÊÌâ
ͬʱ£¬Í¨¹ý·ÖÎöWAFµÄÈÕÖ¾ÐÅÏ¢£¬¿ÉÒÔÁ˽⹥»÷µÄÀ´Ô´¡¢ÀàÐÍºÍÆµÂÊ£¬ÎªºóÐøµÄ°²È«·À»¤ÌṩÓÐÁ¦µÄÊý¾ÝÖ§³Ö
ËÄ¡¢ArduPilot WAFµÄδÀ´·¢Õ¹ÓëÌôÕ½ Ëæ×ÅÎÞÈË»ú¼¼ÊõµÄ²»¶Ï·¢Õ¹ºÍ°²È«ÐèÇóµÄÈÕÒæÌáÉý£¬ArduPilot WAFµÄδÀ´·¢Õ¹½«³ÊÏÖÒÔÏÂÇ÷ÊÆ£º 1.ÖÇÄÜ»¯£ºÎ´À´µÄWAF½«¸ü¼ÓÖÇÄÜ»¯£¬Äܹ»×Ô¶¯Ñ§Ï°²¢ÊÊÓ¦ÎÞÈË»úµÄÓ¦Óó¡¾°ºÍ°²È«ÐèÇó£¬ÊµÏÖ¸ü¼Ó¾«×¼µÄ°²È«·À»¤
2.¼¯³É»¯£ºWAF½«ÓëArduPilotϵͳ¸ü¼Ó½ôÃܵؼ¯³É£¬ÐγÉÒ»Ì廯µÄ°²È«·À»¤½â¾ö·½°¸£¬ÌáÉýÎÞÈË»úϵͳµÄÕûÌ尲ȫÐԺͿɿ¿ÐÔ
3.ÔÆ»¯£ºËæ×ÅÔÆ¼ÆËã¼¼ÊõµÄ·¢Õ¹£¬WAF½«Öð½¥ÏòÔÆ¶ËÇ¨ÒÆ£¬ÐγÉÔÆWAF½â¾ö·½°¸
Õ⽫ʹµÃWAFµÄ²¿ÊðºÍ¹ÜÀí¸ü¼Ó±ã½Ý£¬Í¬Ê±Äܹ»ÀûÓÃÔÆ¶ËµÄÇ¿´ó¼ÆËãÄÜÁ¦ºÍ·á¸»µÄ°²È«×ÊÔ´£¬ÌáÉý°²È«·À»¤µÄЧÂʺÍЧ¹û
È»¶ø£¬ArduPilot WAFµÄ·¢Õ¹Ò²ÃæÁÙ×ÅÖî¶àÌôÕ½£¬Èç¹¥»÷ÊֶεIJ»¶ÏÉý¼¶¡¢ÏµÍ³×ÊÔ´µÄÏÞÖÆÒÔ¼°°²È«·À»¤ÓëÐÔÄÜÖ®¼äµÄƽºâµÈ
Òò´Ë£¬ÐèÒª³ÖÐøÍ¶ÈëÑз¢Á¦Á¿£¬²»¶ÏÓÅ»¯WAFµÄ¼¼Êõ¼Ü¹¹ºÍËã·¨£¬ÒÔÊÊÓ¦²»¶Ï±ä»¯µÄ°²È«»·¾³
Îå¡¢½áÓï ×ÛÉÏËùÊö£¬ArduPilot WAFÔÚLinux»·¾³ÏµÄ׿Խ±íÏÖÓëÓ¦Óã¬ÎªÎÞÈË»úϵͳÌṩÁËÇ¿´óµÄ°²È«·À»¤
ͨ¹ý³ä·Ö·¢»ÓLinux²Ù×÷ϵͳµÄÓÅÊÆ£¬½áºÏWAF¼¼ÊõµÄÌØµã£¬¿ÉÒÔʵÏÖ¶ÔÎÞÈË»úϵͳµÄÈ«Ãæ±£»¤£¬È·±£ÆäÔÚÔ¶³Ì¿ØÖƺÍÊý¾Ý´«Êä¹ý³ÌÖеݲȫÐÔ
δÀ´£¬Ëæ×ż¼ÊõµÄ²»¶Ï½ø²½ºÍÓ¦Óó¡¾°µÄ²»¶ÏÍØÕ¹£¬ArduPilot WAF½«ÔÚÎÞÈË»úÁìÓò·¢»Ó¸ü¼ÓÖØÒªµÄ×÷Óã¬ÎªÎÞÈË»ú¼¼ÊõµÄ·¢Õ¹ºÍÓ¦ÓÃÌṩ¸ü¼Ó¼áʵµÄ°²È«±£ÕÏ