A virtual machine traffic monitoring method and system

Abstract

The invention discloses a virtual machine traffic monitoring method and system. Firstly, a virtual machine including a monitoring module is started; a data packet capture module and a data cache module are deployed in the kernel of a virtual machine monitor; The data packets of the TCP / IP protocol stack are stored in the cache of the data cache module; the data cache module forwards the data packets in the cache to the monitoring module; the monitoring module performs statistical analysis on the data packets to realize the traffic monitoring of the virtual machine. It solves the problem of loss of monitoring of communication between virtual machines caused by server virtualization, and realizes unified monitoring of communication between virtual machines on the same physical server and communication between virtual machines and the external network of the server.

Description

technical field [0001] The invention relates to server virtualization virtual machine flow monitoring, in particular to a virtual machine flow monitoring method and system on a physical server. Background technique [0002] Server virtualization can improve the utilization of computing resources and enhance the management flexibility of IT resources. Therefore, this technology has become an important technology in current data centers. However, after server virtualization, there are multiple virtual machines on the same physical server, and the communication between these virtual machines cannot be sensed by the monitoring system deployed outside the physical server. [0003] Existing methods are implemented through traffic redirection strategies, including two types, one is to redirect virtual machine traffic to a network device outside the server for monitoring and processing. Another type is to redirect the traffic of the virtual machine to a virtual machine on a virtual...

AI Technical Summary

Problems solved by technology

The advantage of the first method is that the existing monitoring resources can be used, but it is necessary to modify the network protocol driver or add new network hardware devices

The second type of method is relatively common, but relies on the configurability of virtual switches and lacks performance optimization capabilities. At the same time, the monitoring of communication traffic between virtual machines and the outside world can only be handled by external monitoring devices, lacking unified monitoring management capabilities

Images