Safety domain control method and system based on virtual network

Abstract

The invention provides a safety domain control method based on a virtual network. The safety domain control method and system based on the virtual network comprises the steps that a safety domain controller receives a data package head which is based on a virtual exchange standard OVS and is transmitted by an OVS exchanger, wherein the date package head is a data package head of a data package in a data stream flowing into the OVS exchanger; the safety domain controller indicates the OVS exchanger to release the data stream when the safety domain controller confirms that the data stream received by the OVS is a safe data stream according to information carried by the data package head and a preset white list in a safety domain. In addition, the invention further provides a safety domain control system based on the virtual network.

Description

technical field [0001] The present invention relates to the field of computer technology, and more specifically, to a virtual network-based security domain control method and a virtual network-based security domain control system. Background technique [0002] A security domain is a collection of network elements that have the same or similar security protection requirements and protection strategies, trust each other, and are interrelated in the same network. In a traditional network, the general implementation method is to deploy a firewall at the border. Through the firewall policy, it is controlled which IPs are allowed to access this domain, which IPs are not allowed to access this domain, which IPs / network segments are allowed to be accessed by this domain, and which are not allowed. Which IPs / network segments to visit. [0003] In an actual environment, many computers that should be in the same security domain are distributed in various subnets, and they cannot be gr...

AI Technical Summary

Problems solved by technology

[0003] In the actual environment, many computers that should be in the same security domain are distributed in various subnets, and they cannot be grouped into the same network segment to set boundaries for control

Moreover, in the virtual network environment, the network is scalable and dynamically changing, so it is difficult to use the traditional way of deploying firewalls to build the function of the security domain, and it is difficult to solve the problem of following the security domain after the migration of the virtual machine

[0004] For the problems in related technologies, no effective solutions have been proposed yet

Images