Skip to content

Commit 3cca4e7

Browse files
authored
Update rule-processing.md
1 parent 49722bc commit 3cca4e7

File tree

1 file changed

+10
-11
lines changed

1 file changed

+10
-11
lines changed

articles/firewall/rule-processing.md

Lines changed: 10 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -57,31 +57,30 @@ As per following table:
5757

5858
Initial Processing:
5959

60-
The process begins by examining the rule collection group (RCG) with the lowest number, which is BaseRCG1 with a priority of 200. Within this group, it searches for DNAT rule collections and evaluates them according to their priorities. In this case, DNATRC1 (priority 600) and DNATRC3 (priority 610) are found and processed accordingly.
61-
Next, it moves to the next RCG, BaseRCG2 (priority 200), but finds no DNAT rule collection.
62-
Following that, it proceeds to ChildRCG1 (priority 300), also without a DNAT rule collection.
60+
The process begins by examining the rule collection group (RCG) with the lowest number, which is BaseRCG1 with a priority of 200. Within this group, it searches for DNAT rule collections and evaluates them according to their priorities. In this case, DNATRC1 (priority 600) and DNATRC3 (priority 610) are found and processed accordingly.\
61+
Next, it moves to the next RCG, BaseRCG2 (priority 200), but finds no DNAT rule collection.\
62+
Following that, it proceeds to ChildRCG1 (priority 300), also without a DNAT rule collection.\
6363
Finally, it checks ChildRCG2 (priority 650) and finds the ChDNATRC3 rule collection (priority 3000).
6464

6565
Iteration Within Rule Collection Groups:
6666

67-
Returning to BaseRCG1, the iteration continues, this time for NETWORK rules. Only NetworkRC1 (priority 800) is found.
68-
Then, it moves to BaseRCG2, where NetworkRC2 (priority 1300) is located.
69-
Moving on to ChildRCG1, it discovers ChNetRC1 (priority 700) as the NETWORK rule.
67+
Returning to BaseRCG1, the iteration continues, this time for NETWORK rules. Only NetworkRC1 (priority 800) is found.\
68+
Then, it moves to BaseRCG2, where NetworkRC2 (priority 1300) is located.\
69+
Moving on to ChildRCG1, it discovers ChNetRC1 (priority 700) as the NETWORK rule.\
7070
Lastly, in ChildRCG2, it finds ChNetRC2 (priority 1100) as the NETWORK rule collection.
7171

7272
Final Iteration for APPLICATION Rules:
7373

74-
Returning to BaseRCG1, the process iterates for APPLICATION rules, but none are found.
75-
In BaseRCG2, it identifies AppRC2 (priority 1200) as the APPLICATION rule.
76-
In ChildRCG1, ChAppRC1 (priority 900) is found as the APPLICATION rule.
74+
Returning to BaseRCG1, the process iterates for APPLICATION rules, but none are found.\
75+
In BaseRCG2, it identifies AppRC2 (priority 1200) as the APPLICATION rule.\
76+
In ChildRCG1, ChAppRC1 (priority 900) is found as the APPLICATION rule.\
7777
Finally, in ChildRCG2, it locates ChAppRC2 (priority 2000) as the APPLICATION rule.
7878

7979
**In summary, the rule processing sequence is as follows: DNATRC1, DNATRC3, ChDNATRC3, NetworkRC1, NetworkRC2, ChNetRC1, ChNetRC2, AppRC2, ChAppRC1, ChAppRC2.**
8080

8181
This process involves analyzing rule collection groups by priority, and within each group, ordering the rules according to their priorities for each rule type (DNAT, NETWORK, and APPLICATION).
8282

83-
So first all the DNAT rules are processed from all the rule collection groups, analysing the rule collection groups by order of priority and ordering the DNAT rules within each rule collection group by order of priority.
84-
Then the same process for NETWORK rules, and finally for APPLICATION rules.
83+
So first all the DNAT rules are processed from all the rule collection groups, analysing the rule collection groups by order of priority and ordering the DNAT rules within each rule collection group by order of priority. Then the same process for NETWORK rules, and finally for APPLICATION rules.
8584

8685
For more information about Firewall Policy rule sets, see [Azure Firewall Policy rule sets](policy-rule-sets.md).
8786

0 commit comments

Comments
 (0)