Skip to content

Commit 969fddf

Browse files
Merge pull request #124379 from juanandmsft/patch-65
Update to rule processing example
2 parents e76241e + 5071ef7 commit 969fddf

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/firewall/rule-processing.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ Here's an example policy:
4545
Assuming BaseRCG1 is a rule collection group priority (200) that contains the rule collections: DNATRC1, DNATRC3,NetworkRC1.\
4646
BaseRCG2 is a rule collection group priority (300) that contains the rule collections: AppRC2, NetworkRC2.\
4747
ChildRCG1 is a rule collection group priority (300) that contains the rule collections: ChNetRC1, ChAppRC1.\
48-
ChildRCG2 is a rule collection group that contains the rule collections: ChNetRC2, ChAppRC2,ChDNATRC3.
48+
ChildRCG2 is a rule collection group priority (650) that contains the rule collections: ChNetRC2, ChAppRC2,ChDNATRC3.
4949

5050
As per following table:
5151

@@ -66,14 +66,14 @@ As per following table:
6666
|ChAppRC2 | Application rule collection |2000 |7 |-|
6767
|ChDNATRC3 | DNAT rule collection | 3000 | 2 |-|
6868

69-
Initial Processing:
69+
Initial Iteration for DNAT Rules:
7070

7171
The process begins by examining the rule collection group (RCG) with the lowest number, which is BaseRCG1 with a priority of 200. Within this group, it searches for DNAT rule collections and evaluates them according to their priorities. In this case, DNATRC1 (priority 600) and DNATRC3 (priority 610) are found and processed accordingly.\
72-
Next, it moves to the next RCG, BaseRCG2 (priority 200), but finds no DNAT rule collection.\
72+
Next, it moves to the next RCG, BaseRCG2 (priority 300), but finds no DNAT rule collection.\
7373
Following that, it proceeds to ChildRCG1 (priority 300), also without a DNAT rule collection.\
7474
Finally, it checks ChildRCG2 (priority 650) and finds the ChDNATRC3 rule collection (priority 3000).
7575

76-
Iteration Within Rule Collection Groups:
76+
Iteration for NETWORK Rules:
7777

7878
Returning to BaseRCG1, the iteration continues, this time for NETWORK rules. Only NetworkRC1 (priority 800) is found.\
7979
Then, it moves to BaseRCG2, where NetworkRC2 (priority 1300) is located.\

0 commit comments

Comments
 (0)