Virtual network isolation system established on virtual machine and implementation method thereof

Abstract

The invention discloses a virtual network isolation system established on a virtual machine, which comprises a router / a firewall, a physical server and a plurality of clients, wherein the physical server comprises a plurality of virtual machines and is also provided with an isolation wall, and the virtual machine is internally provided with a port communication limitation module. The invention further discloses a virtual network isolation method established on the virtual machine, which comprises the following steps: (1) establishing the isolation wall between virtual machines firstly; (2) arranging a virtual hub and a Tunnel virtual network card in the virtual machine, accessing the Tunnel virtual card of the virtual machine into the virtual hub, and establishing port communication limitation; (3) setting port mapping corresponding to the virtual machine; and (4) arranging the Tunnel virtual network card on each client, configuring Internet IP address and accessing to the virtual hub.The invention provides a safe, low-cost, rapid and conveniently-maintained network environment.

Description

technical field [0001] The invention relates to the technical field of virtual network security access, in particular to a virtual network isolation system built on a virtual machine and an implementation method thereof. Background technique [0002] At present, in order to save costs and facilitate management, enterprises have begun to use virtual machine (Virtual Machine) technology to build virtual machine network systems, such as figure 1 As shown, this technology simulates multiple complete computer systems with complete hardware system functions on a physical machine through software, and these virtual machines work exactly like real computers. The VM (Virtual Machine, virtual machine) virtual network card in the virtual machine and the real network card of the physical machine adopt bridging (Bridging) mode, the IP address of the virtual system and the IP address of the real system belong to the same network segment, and the virtual system is equivalent to An indepen...

AI Technical Summary

Problems solved by technology

This solution saves costs, facilitates management, and ensures the security of client data transmission. However, there are the following disadvantages: 1. Due to the bridging mode between the VM virtual network card in the virtual machine and the real network card of the physical machine, each virtual machine Can access each other, even physical machines; this may cause data leakage between virtual machines in different departments

2. Although the client uses VPN access for identity verification to ensure the security of client data transmission, the security of the data itself cannot be verified; if the client passes in a file with a virus, the virtual machine and its connected The network will be infected, and this security risk will even affect the physical server

3. The cost of hardware VPN equipment is high, and the configuration of software VPN server is troublesome

Images