Design of virtual firewall assembly acting on cloud computing data center security domain

Abstract

Provided is a design of a virtual firewall assembly acting on a cloud computing data center security domain. The invention relates to Web direction network security production, and particular relates to a network security technology under a cloud computing environment. The technical scheme is that the firewall assembly is operated via a distributed deployment security gateway so that customized and distributed security protection of the overall data center is completed. A new firewall system structure comprises the following parts: the unified security gateway, the network firewall assembly and central management. The firewall assembly based on a data packet filtering technology is realized. The assembly operates in the unified security gateway. Network traffic is controlled by using the data packet filtering technology, distributed deployment is used and customized security protection of the overall data center is completed.

Description

technical field [0001] The invention relates to network security protection in the direction of Web, in particular to the network security technology under the cloud computing environment. Background technique [0002] With the rapid development of cloud computing, the environment of cloud computing platforms is becoming increasingly complex, including high-speed network facilities, high-performance computing facilities, large-capacity storage facilities, high-reliability energy management, efficient security protection and resources. Management and other related infrastructure, as well as the virtualized environment built on these infrastructures, the traditional security protection model that used various hardware devices to protect the network computing environment can no longer meet the fine-grained security protection requirements of today's cloud computing platforms. Require. [0003] As a mature and effective security technology in network security protection, firewa...

AI Technical Summary

Problems solved by technology

[0005]1. Web application is structurally limited

[0006] There are a large number of virtual hosts deployed in the cloud computing data center, and the boundaries between the virtual host networks are relatively blurred, forming a dynamic network boundary. Traditional border firewalls aim at traditional static Network structure design, the application of traditional border firewalls in a network environment with blurred network borders is subject to structural restrictions

[0007]2. Internal network security risks still exist

These border firewalls will filter and review traffic from the external network to the internal network, however, they cannot ensure secure access between users of the internal network

[0009]3. Low efficiency and high failure rate

[0010]Because the boundary firewall concentrates the inspection mechanism on a single point at the network boundary, it creates a network bottleneck and a single point of failure

Therefore, it is difficult for the wall border firewall to balance the contradiction between network efficiency and security settings, and it cannot customize rules for each server in the network. It can only use a compromise rule to approximately meet the needs of all protected servers. Therefore, Either loss of efficiency, or loss of security

Images