Dear Alibaba Cloud users,
To improve the recognition rate of traffic applications for access control policies that are configured on virtual private cloud (VPC) firewalls, Cloud Firewall optimizes the Deep Packet Inspection (DPI) engine for access control policies by updating the VPC Firewall feature. The update task starts from December 6, 2023.
Update schedule
December 06, 2023 to January 31, 2024.
Impacts
This update optimizes recognition for the following types of applications: MySQL, MQTT, and MongoDB.
After the update, the recognition rate of the preceding types of applications will be improved. Therefore, the application recognition results of specific traffic may change. If you configured an access control policy, the traffic hit results of the policy may also change.
Suggestions
If you enabled VPC firewalls and configured access control policies, go to the Traffic Logs page to view the applications that are recently identified, the traffic hits of access control policies, and the impacts on your business.
If access errors occur, we recommend that you modify the access control policies. For example, if traffic was allowed before the update but is denied after the update, you can add an access control policy to allow the traffic and specify a higher priority for the new policy.
If you have other questions, you can submit a ticket to obtain technical support.