Method, device and system for moving security policy

Abstract

The invention relates to a method, a device and a system for moving a security policy. A video data processor (VDP) correlation message transmitted by a server in which a virtual machine is moved is received by a data center access switch, and a VDP correlation state is set as a correlation state according to the VDP correlation message; configuration information of the virtual machine is acquired by the data center access switch, and a security policy is generated according to the configuration information; when the virtual machine is moved out of the server, a VDP disassociation message transmitted by the server is received by the data center access switch, and the VDP correlation state is set as a disassociation state according to the VDP disassociation message; and the security policy of the virtual machine is deleted by the data center access switch. Due to the adoption of the method, the device and the system, the problem that the security policy is moved along with the movement of the virtual machine can be solved.

Description

technical field [0001] The invention relates to the field of optical networks, in particular to a method, device and system for security policy migration. Background technique [0002] A virtualized data center is formed by the deep integration of computing, storage, and network resources. Therefore, the smooth implementation of host virtualization technology must be matched with appropriate network security policies, otherwise everything will be out of the question. The virtualized data center appeared earlier, mainly including cluster computing and other technologies to improve computing performance; while the host virtualization technology is mainly a technology that coexists with multiple operating systems on a physical X86 system in recent years. The main purpose is to shorten the service deployment time and improve resource utilization efficiency. Virtualized data centers bring some challenges to network security, especially the migration of virtual machines, and the ...

AI Technical Summary

Problems solved by technology

[0003] Under the traditional layer 2 network security technology, the network security policy cannot be automatically migrated with the migration of the virtual machine

In the currently common virtual machine migration solutions based on network management or virtual machine discovery and configuration protocol (English full name: Virtual Station Interface Discovery and Configuration Protocol, VDP for short), the migration of network security policies has certain limitations compared with the migration of virtual machines. Hysteresis

Images