A multi-tenant virtual network isolating method

Abstract

The invention relates to the technical field of cloud computing and particularly to a highly-flexible multi-tenant virtual network isolating method. In the invention, the method comprises: firstly creating two virtual switches OVS-A and OVS-B in an initialized process; then adding a physical interface eth1 connecting to an external network to the OVS-A; and then creating a VETH device to connect the OVS-A with the OVS-B. A process of creating a private network and starting a virtual machine comprises: (1) adding an internal port dhcp-N and setting an internal network VLAN-N; (2) creating private network space netns-N; (3) accessing the dhcp-N port to the netns-N; (4) setting an internal and external network VLAN converting rule at both ends of the VETH device connected to OVS-A and OVS-B of the network node and the computing node; (5) creating a linux network bridge at the computing node; (6) creating a VETH device to connect to the BR-N with the OVS-B; and (7) the virtual machine bridging to BR-N to be started and obtaining an IP through the dhcp service started at the step (3). The invention provides the highly flexible multi-tenant virtual network isolating method.

Description

technical field [0001] The invention relates to the technical field of cloud computing, in particular to a highly flexible multi-tenant virtual network isolation method. Background technique [0002] Network management and configuration is a very important function in cloud computing, and realizing a flexible, efficient and secure network virtualization has always been the goal pursued by various cloud platforms. For cloud platform tenants, it is the most important and necessary to ensure the security and availability of their virtual machine network. In this way, the virtual machine must first be required to access the external network, and secondly, the virtual machines of the same tenant can communicate with each other. Virtual machines created by different tenants cannot access each other. At present, the method of global VLAN isolation is generally used to set up the network for the virtual machine, and the method steps are as follows: [0003] 1. The cloud platform a...

AI Technical Summary

Problems solved by technology

[0007] 1. The flexibility is poor. The administrator must configure the physical network in advance to provide the tenants with it. However, the needs of the tenants often change, which makes it very inconvenient to frequently modify the global network configurations such as physical switches and routers.

[0008] 2. The user experience is not good. Tenants generally want to be able to control the network of their own virtual machines, such as creating and deleting a subnet at any time according to their own needs, and assigning the private IP they want. The above methods cannot be satisfied at all.

Images