File:OHSNAP-Firewall-MQTT-flow-2022-09-12.svg

Size of this PNG preview of this SVG file: 545 × 599 pixels. Other resolution: 1,862 × 2,048 pixels.

Original file (SVG file, nominally 1,632 × 1,795 pixels, file size: 35 KB)

Summary

Initial draft of MQTT message flow for OHSNAP Firewall software

File history

Click on a date/time to view the file as it appeared at that time.

	Date/Time	Thumbnail	Dimensions	User	Comment
current	18:27, 9 March 2023		1,632 × 1,795 (35 KB)	Pion (talk \| contribs)	Initial draft of MQTT message flow for OHSNAP Firewall software

You cannot overwrite this file.

File usage

There are no pages that use this file.

Metadata

This file contains additional information, probably added from the digital camera or scanner used to create or digitize it.

If the file has been modified from its original state, some details may not fully reflect the modified file.

Image title	title%20MQTT%20message%20flow%0A%0Aactor%20Client%0Aentryspacing%200.8%0Afirewall-%3Emsg_queue%3Apublish%20%2Fevents%20topic%0Aadmin-%3Efirewall%3ARequest%20MQTT%20client%20cert%0Afirewall-%3Eadmin%3AProvision%20MQTT%20client%20cert%0Aadmin%3C%3C%23red%3A3--msg_queue%3ASend%20MQTT%20client%20cert%20and%20username%2Fpass%5Cnand%20subscribe%20to%20%2Fevents%20topic%0Aadminx%23red%3A3-msg_queue%3Areject%20invalid%20cert%20or%20username%20pass%0Aadmin%3C-%2300ff00%3A2%3Emsg_queue%3AStart%20TLS%0Aadmin-%3Emsg_queue%3Asubscribe%20%2Fevents%20topic%0A%0A%0A%0Aentity%20WWW%0AClient--%3EWWW%3AVisit%20xyz.com%20on%20port%201234233%0A%0Afirewall--%3A4%3Efirewall%3AExisting%20saved%20rule%20to%20deny%20xyz.com%3F%0Afirewall-%23red%3A2xClient%3AReject%20xyz.com%20not%20allowed%0Afirewall--%3A4%3Efirewall%3ADefault%20deny%20rule%20for%20xyz.com%3F%0Afirewall--%3Efirewall%3ASign%20msg%20%22Allow%20xyz.com%20on%20port%201234%20%2B%20%24timestamp%22%3F%0Afirewall--%3A4%3Emsg_queue%3ASend%20signed%20%22Allow%20xyz.com%20on%20port%201234%3F%22%0Amsg_queue--%3A4%3Eadmin%3ASend%20signed%20%22Allow%20xyz.com%20on%20port%201234%3F%22%0Aadmin--%3Eadmin%3ADoes%20message%20signature%20match%20firewall's%20identity%3F%0A%0Aadmin-%23red%3A2xfirewall%3AReject%20signature%20mismatch%0Aadmin-%23red%3A2%3Eadmin%3AAlert%20on%20admin%20device%20UI%20signature%20mismatch%0Amsg_queue%3C%23red%3A2-admin%3AAlert%20other%20%22admin%22%20devices%20of%20signature%20mismatch%0Amsg_queue-%23red%3A2xfirewall%3AAlert%20signature%20mismatch%2C%20initiate%20protective%20measures%3F%0A%0A%0Aadmin--%3Eadmin%3ASign%20msg%20%22Yes%2C%20allow%20xyz.com%20%20%2B%20%24timestamp%22%3F%0Aadmin--%2300ff00%3A2%3Emsg_queue%3ASend%20signed%20%22Yes%2C%20allow%20xyz.com%22%0Amsg_queue--%2300ff00%3A2%3Efirewall%3ASend%20signed%20%22Yes%2C%20allow%20xyz.com%22%0Afirewall--%3Efirewall%3ADoes%20message%20signature%20match%20admin's%20identity%3F%0A%0A%0Afirewall-%23red%3A2xadmin%3AReject%20signature%20mismatch%0Afirewall-%23red%3A2%3Emsg_queue%3AAlert%20other%20%22admin%22%20devices%20of%20signature%20mismatch%0Afirewall--%23red%3A2%3Efirewall%3ABlock%20admin%20device%20or%20other%20mitigations%3F%0A%0AClient-%2300ff00%3A2%3EWWW%3AVisit%20xyz.com%0Anote%20over%20WWW%3ATODO%3Awhat%20happens%20is%20admin%20is%20pwned%3F%5Cn%0A
Width	1632
Height	1795

File:OHSNAP-Firewall-MQTT-flow-2022-09-12.svg

Summary

File history

File usage

Metadata

Navigation menu

Search