Patent ID: 11895087
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 16:
17. The computer-implemented method of claim 1, wherein the firewall parameters include:
an opening and closing of one or more predetermined ports within the clustered system, where the predetermined ports that are opened include ports determined to be necessary for the processes, services, and applications associated with the predetermined role assigned to the node, and the ports that are closed include ports determined to be not necessary for the processes, services, and applications associated with the predetermined role assigned to the node, and
limitations including allowing only read access through one or more predetermined ports within the clustered system, and allowing access through one or more additional predetermined ports to only a predetermined set of internet addresses listed in a table;
wherein the predetermined role is assigned to the node in response to an initial deployment of the clustered system,
wherein the predetermined role assigned to the node is stored as metadata within the node, and further comprising:
identifying a change to the processes, services, and applications currently running on the node in response to a failure of another node within the clustered system, where the node is a backup node for the other node;
comparing the changed processes, services, and applications currently running on the node to the predetermined processes, services, and applications that are associated with the predetermined roles within the clustered system to determine a second predetermined role of the node; and
updating the one or more firewall parameters for the node within the clustered system, based on the second predetermined role of the node.