US 12,463,941 B2
Providing a network firewall between a virtualized environment and a host processing system
Keith Edgar Horton, North Bend, WA (US); Alan Thomas Gavin Jowett, Eagle MT, UT (US); Andrew Mario Beltrano, Colorado Springs, CO (US); Catalin-Emil Fetoiu, Redmond, WA (US); Guillaume Philippe Adrien Hetier, Redmond, WA (US); Matthew Yutaka Ige, Seattle, WA (US); Mitchell James Schmidt, Bellevue, WA (US); and Randy Joseph Miller, Newcastle, WA (US)
Assigned to MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed by MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed on Dec. 20, 2022, as Appl. No. 18/068,865.
Claims priority of provisional application 63/342,604, filed on May 16, 2022.
Prior Publication US 2023/0370427 A1, Nov. 16, 2023
Int. Cl. H04L 9/40 (2022.01); G06F 9/455 (2018.01)
CPC H04L 63/0254 (2013.01) [G06F 9/45558 (2013.01); H04L 63/0209 (2013.01); H04L 63/0263 (2013.01); H04L 63/0272 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45595 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
executing a network firewall between a virtualized environment and a host providing the virtualized environment;
retrieving, by way of the network firewall, at least a portion of a firewall policy shared with a host network firewall that filters first network traffic between a physical network and a host program component executing outside the virtualized environment;
assigning a port number to a program component executing in the virtualized environment based on a port binding request made by the program component executing in the virtualized environment being forwarded to the host by a message forwarding software component in response to the message forwarding software component intercepting the port binding request;
receiving, at the network firewall, second network traffic originating from or destined for the program component executing in the virtualized environment;
filtering, via the port number assigned to the program component executing in the virtualized environment, the second network traffic, by way of the network firewall, based on the at least the portion of the firewall policy shared with the host network firewall; and
providing the filtered second network traffic to a network destination or the program component.