Safety isolation method for virtual network and physical network of cloud computing

Abstract

The invention provides a safety isolation method for a virtual network and a physical network of cloud computing, wherein the isolation between the both layers of networks is realized by carrying out VLAN (Virtual Local Area Network) tagged and untagged operations on data frames, the access control of three layers is realized by a fire wall, the dynamic safety control is realized with the addition of IDS (Intrusion Detection System) software, so that not only can the communication between different VLANs be controlled, but also the access of other machines in the inner network to the cloud inner network can be controlled. Simultaneously, the network isolation can be performed between virtual machines or between virtual machines and physical machines by employing the VLAN, so that the physical machines and the virtual machines are divided in the different VLANs, namely, the isolation between the physical network and the virtual network can be realized.

Description

technical field [0001] The invention relates to the network technology security field of cloud computing technology, in particular to a method for isolating a cloud computing virtual network and a physical network for safety. Background technique [0002] Cloud computing provides IT resources through the network in the form of services. It has the advantages of paying on demand, reducing costs, anytime, anywhere, energy saving and consumption reduction. It is another industrial revolution after large computers, PCs and the Internet. [0003] Cloud computing will promote traditional equipment providers to enter the service field, promote the transformation of software companies to service, reintegrate the industrial chain, and give birth to emerging service formats that integrate across industries, which will have a positive and far-reaching impact on industrial upgrading and structural adjustment. [0004] Cloud computing is a new way of resource management. In this mode, mu...

AI Technical Summary

Problems solved by technology

[0007] like figure 1 As shown, the physical network and the virtual machine network of the current cloud computing platform are interoperable, which poses a major security risk to the security of the cloud computing network and restricts the maturity of cloud computing technology.

[0008] The physical network and the virtual network are not isolated, and the two networks will communicate with each other, causing great security risks; When a hacker invades any machine in the virtual network, it can infiltrate the physical network machine and invade the user's internal network, thus causing a great security risk

Images