世界粮食计划署的子层 [英] WFP Sublayers

问题描述

 

配置过滤器时，某些Microsoft示例使用FWPM_SUBLAYER_UNIVERSAL作为subLayerKey，而其他人使用自己的GUID。

 

While configuring filters, some Microsoft samples use FWPM_SUBLAYER_UNIVERSAL as the subLayerKey while others use their own GUID.

什么是
功能或行为的差异？

What's the difference in the functionality or behavior ?

谢谢

Thanks

推荐答案

UNIVERSAL是默认子图层一个未指定。 子图层用于仲裁来自不同提供者的过滤器。

UNIVERSAL is the default sublayer if one is not specified.  Sublayers are used to arbitrate filters from various providers.

如果每个人都坐在一个子层上，那么每个人都会争取过滤器加权最高，因为他们的决定在他们看来更可靠而不是他们不知道的提供者。 让人们使用他们自己的子层，意味着他们只需要
来担心他们应用了什么过滤器，并且知道他们在决定该层的最终结果时有发言权。

If everyone sat at a single sublayer, then everyone would be fighting to be the filter weighted highest, because their decision is more reliable in their view than a provider they do not know.  Having people use their own sublayer, means they only have to worry about what filters they apply, and know that they had a say in the decision for the ultimate outcome of that layer.

仲裁基本上是：

从最高加权子层开始，找到该子层内的所有匹配过滤器，并从最高到最低进行仲裁，直到作出终止决定（PERMIT / BLOCK） ）。

Starting with the highest weighted sublayer, find all matching filters within that sublayer, and arbitrate from highest to lowest until a terminating decision is made (PERMIT / BLOCK).

注意终止决定并仲裁下一个子图层。

Note the terminating decision and arbitrate the next sublayer.

这种情况发生在所有子图层都有决定权之后。 然后，过滤引擎根据仲裁强制执行最终决定。

This happens until all sublayers have their say in the decision.  The filtering engine then enforces the final decision based off the arbitration.

这允许SUBLAYER A的某个人说PERMIT和SUBLAYER B说BLOCK并让数据包实际被阻止。 然而，如果他们都坐在同一个子层中，则最高权重做出决定，而另一个过滤器没有发言权。

This allows someone at SUBLAYER A to say PERMIT and SUBLAYER B to say BLOCK and have the packet actually blocked.  Whereas if they were both sitting in the same sublayer, then the highest weighted makes the decision, and the other filter has no say.

这是一个非常高级，直截了当的概述这个过程。 还有其他因素可能涉及（如ABSORB标志）等。 要获得更全面的视图，以下链接应该有所帮助：

This was a very high-level, straight forward overview of the process.  There are other factors that can be involved (like the ABSORB flag) etc.  For a more comprehensive view, the following link should help:

http://msdn.microsoft.com/en-us/library/windows/desktop/aa364008（v = vs.85）.aspx

希望这会有所帮助，

这篇关于世界粮食计划署的子层的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！