Patent ID: 11895087
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 11:
12. A computer program product comprising one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions comprising instructions configured to cause one or more processors to perform a method comprising:
identifying, by the one or more processors, a node within a clustered system;
comparing, by the one or more processors, processes, services, and applications currently running on the node to predetermined processes, services, and applications that are associated with predetermined roles within the clustered system;
assigning, by the one or more processors, one of the predetermined roles to the node in response to determining that the processes, services, and applications currently running on the node match a predetermined number of predetermined processes, services, and applications linked to the one of the predetermined roles,
wherein the predetermined role assigned to the node is stored as metadata within the node; and
setting, by the one or more processors, multiple firewall parameters for the node within the clustered system, based on the predetermined role assigned to the node,
wherein the firewall parameters include allowing only read access through one or more predetermined ports within the clustered system, and allowing access through one or more additional predetermined ports to only a predetermined set of internet addresses listed in a table.