Method and system for achieving distributed network safety protection

Abstract

The invention discloses a method and system for achieving distributed network safety protection. The method comprises the steps that the side of a virtual firewall is hung on a virtual switch; whether data flow which is not from or sent to a physical firewall is filtered by the virtual firewall or not is judged through a service virtual machine, if yes, the data flow is forwarded, and otherwise, the data flow is sent to the virtual firewall; the received data flow is filtered through the virtual firewall, and after it is determined that the data flow is safe, the data flow is forwarded back to the service virtual switch, and otherwise the data flow is abandoned. According to the method and system, after the data flow which is not from or sent to the physical virtual wall is judged, the data flow needing to be filtered is sent to the side-hung virtual firewall to be filtered through the service virtual machine, and the data flow which does not need to be filtered is directly forwarded. Network topology is changed a little, it is guaranteed that all the data flow entering in a virtual machine system is filtered, and the resource consumed by the virtual firewall is reduced.

Description

technical field [0001] The present application relates to the technical field of information security, in particular to a method and system for realizing distributed network security protection. Background technique [0002] Cloud computing is another new revolution in computers and the Internet. It transfers computing and storage to the cloud, and users can use lightweight portable terminals to perform complex calculations and large-capacity storage. From a technical point of view, cloud computing is not just a new concept, parallel computing and virtualization are the main technical means to realize cloud computing applications. Due to the rapid development of hardware technology, the performance of an ordinary physical server far exceeds the hardware performance requirements of an ordinary single user. Therefore, virtualizing a physical server into multiple virtual machines and providing virtualization services through virtualization has become the technical basis for bu...

AI Technical Summary

Problems solved by technology

[0004] Virtual firewalls are usually deployed in virtual networks in the form of virtual machines, which share and use virtualized resources in the user's business environment; firewalls usually adopt transparent access methods, which also have great difficulties in network deployment , and connecting a virtual firewall in front of each virtual machine causes a great waste of resources

At present, in order to avoid the above problems, one approach is: connect all virtual machines to a virtual firewall, and filter all data traffic through the virtual firewall; however, when a network failure occurs in the virtual firewall, it will affect data Normal and reliable transmission of traffic, that is, there is a large potential single point of failure

Images