Cloud firewalls

[r00igev@@r]

What is the underlying engine for google, AWS, microsoft and cloudflare cloud firewalls?

Is is nftables?

 

[Guest 290922]

Firewalld?
UWF?
OS dependent.

 

[ubercal]

Microsoft is probably windows defender
/runs

haiboo ....... And its stupidly expensive to run the azure firewall service.Billed per hour

 

[r00igev@@r]

Firewalld?
UWF?
OS dependent.

UFW?

My suspicions as well but no collateral about the underlying libraries and software.

 

[r00igev@@r]

haiboo ....... And its stupidly expensive to run the azure firewall service.Billed per hour

And it chews the cr@p out of your CPU resources. $$$$$

 

[r00igev@@r]

Microsoft is probably windows defender
/runs

Any Windoze based agent from any vendor is as useful as the Johnny Castaway screensaver.

 

[ubercal]

UFW?

My suspicions as well but no collateral about the underlying libraries and software.

isnt the point of the cloud to hide the underlying infrastructure and automate as much as possible.Going to be difficult to find out whats under the hood.

 

[Guest 290922]

UFW?

My suspicions as well but no collateral about the underlying libraries and software.

“ The default firewall configuration tool for Ubuntu is ufw”

 

[r00igev@@r]

“ The default firewall configuration tool for Ubuntu is ufw”

You said uwf.

 

[r00igev@@r]

isnt the point of the cloud to hide the underlying infrastructure and automate as much as possible.Going to be difficult to find out whats under the hood.

Until it breaks

 

[Guest 290922]

You said uwf.

my bad

 

[My_King]

So what is the verdict people?

I would really like to know.

Not using Azure firewall, only NSGs and public IPs where needed. And of course only the ports that are needed are open.

 

[ubercal]

So what is the verdict people?

I would really like to know.

Not using Azure firewall, only NSGs and public IPs where needed. And of course only the ports that are needed are open.

NSG is more of a packet filter , doesnt do statefull traffic inspection. basic source destination ip and port numbers.Basically the same as the built in windows firewall.

 

[My_King]

NSG is more of a packet filter , doesnt do statefull traffic inspection. basic source destination ip and port numbers.Basically the same as the built in windows firewall.

Yes

The problem comes in with cost. So if you are running cheaply can one do without a firewall or is this frowned upon?

 

[Guest 290922]

UFW is not a firewall.

True.

 

[ubercal]

True.

so its a packet filter ?

 

[r00igev@@r]

No, it's a configuration script for IPtables

Splitting hairs but it can also be used with nftables.

But goes back to my original question about something like the Azure or Magic Firewall. I doubt they coded those from scratch. Would be easy to just fork nftables.

 

[Guest 290922]

so its a packet filter ?

It's a tool to configure the Ubuntu system firewall.

 

[Guest 290922]

While on this subject does anyone know how to increase the speeds of WireGaurd? Is my ISP (rain) throttling the default port 51820?

 

[r00igev@@r]

While on this subject does anyone know how to increase the speeds of WireGaurd? Is my ISP (rain) throttling the default port 51820?

Most probably as they run everything through a central set of Huawei firewalls,

What do you notice? I see rain just slows down for no bloody reason (no packet loss - increased latency) and then it picks up again.