Firewall service system and method based on virtual network

Abstract

The invention provides a firewall service system based on a virtual network. The firewall service system based on the virtual network comprises a distributed type firewall manager and firewall service nodes, wherein the distributed type firewall manager is used for obtaining information of all virtual machine network interfaces in a user network according to the network identity of a user, determining the corresponding firewall service nodes according to the information of the virtual machine network interfaces, and distributing firewall configuration information and/or firewall security strategies of the user to the corresponding firework service nodes; the firewall service nodes are configured on an OVS switch based on OVS and are used for managing data flow passing through the OVS switch according to the received firewall configuration information and/or the received firewall security strategies of the user. The invention further provides a method for obtaining a virtual network firewall. By the adoption of the firewall service system based on the virtual network and the method for obtaining the virtual network firewall, through the deployment and the distributed management of the firewall service nodes, establishment of the distributed virtual network firewall is achieved.

Description

technical field [0001] The present invention relates to the field of computer technology, more specifically, to a virtual network-based firewall service system and a method for realizing a virtual network firewall. Background technique [0002] Traditional network firewalls are generally deployed at the border of the network, on links that can monitor all traffic in the network. Filter the data packets sent to the internal network, and refer to the set firewall security policy to forward or discard the data packets. [0003] In a virtualized network environment, physical network resources are shared by all virtual network users, but for users, the network is exclusive and isolated from other user networks. Each user or service flow network has different network security requirements according to its own network service characteristics, and has different requirements for firewall deployment and security policies. Due to the scalability of the virtual network, the user's net...

AI Technical Summary

Problems solved by technology

Therefore, traditional firewall technology is difficu

Images