VLAN (Virtual Local Area Network) isolation method

Abstract

The invention relates to the technical field of cloud computing, in particular to a VLAN (Virtual Local Area Network) isolation method. The VLAN isolation method comprises the steps of firstly, installing and starting virtual switch modules on all host computers of a cloud platform, establishing a tunnel network bridge and an intranet network bridge, and connecting the tunnel network bridge with the intranet network bridge through an interface; then, establishing tunnel connection between every two host computers, and assigning a basic Flow rule to control the data flow direction; then, selecting network nodes to create virtual network space and to provide network service, and selecting compute nodes to create virtual computers and to access each virtual network; further, respectively defining a Flow rule on the network nodes and the compute nodes, carrying out conversion between tunnel ID (Identification) and VLAN tags, and realizing VLAN normal communication; finally, flexibly extending VLAN on the network nodes and newly adding a host computer to the cloud platform according to needs. According to the VLAN isolation method disclosed by the invention, the problems that VLAN isolation in the cloud platform is not strong in universality, the network connection is uncontrollable, and the like are solved; the VLAN isolation method can be used for the VLAN isolation.

Description

technical field

[0001] The invention relates to the technical field of cloud computing, in particular to a virtual network isolation method. Background technique

[0002] In a virtualization platform, especially in a public cloud platform, considering security issues and user data privacy issues, it is generally necessary to isolate the virtual network. Generally, the isolation of the virtual network requires the support of the physical network. Three Layer switches divide VLANs in advance and add corresponding routing rules. The implementation is as follows:

[0003] 1. Configure the trunk mode for the network card of the host, and create a bridge for each VLAN on the host;

[0004] 2. When creating a virtual machine, bridge the network card of the virtual machine to the network bridge corresponding to the VLAN to which the virtual machine belongs;

[0005] 3. The isolation between virtual networks can be realized through the isolation between VLANs, and the correspondin...

Images