Implementation method of virtual firewall

Abstract

The invention discloses an implementation method of a virtual firewall. Over two different virtual machines in an identical network are positioned on an identical physical machine. The implementation method comprises the following steps that: 101, a virtualization security system is arranged in the identical network, the virtualization security system makes up a firewall rule, and a virtual firewall module is arranged on the identical physical machine; 102, the virtualization security system sets a virtual firewall strategy on the virtual machines according to the firewall rule, and notifies the virtual firewall module of the virtual firewall strategy; and 103, the virtual firewall module generates a physical firewall strategy according to the virtual firewall strategy notification, and the virtual firewall strategy is correlated with the physical firewall strategy in order to implement control of the virtual machines under a physical firewall during communication. Through adoption of the implementation method, secure communication among the virtual machines is implemented; installation of firewall software for the virtual machines is simplified; and the physical firewall is efficiently utilized.

Description

technical field [0001] The invention relates to the technical field of firewalls in computers, in particular to a method for realizing a virtual firewall. Background technique [0002] A firewall is a device that helps ensure information security. It allows or restricts the transmission of data according to specific rules. A firewall can be a piece of dedicated hardware or a set of software built on general hardware. [0003] XenServer is designed to efficiently manage virtual machine servers, providing cost-effective server consolidation and business continuity. XenServer provides all the functions needed to create and manage virtual infrastructure in a cloud computing environment, and is trusted by enterprises , but XenServer is blank in the field of computer technology related to firewalls. [0004] The current firewall is generally a physical firewall, which is a physical device and is generally used in a traditional network environment. Also some manufacturers have l...

AI Technical Summary

Problems solved by technology

The performance of this method is still a physical device, but one firewall can be used as multiple firewalls, but it cannot solve the network isolation and control between virtual machines on the same physical machine, because the virtual machines The communication is completely inside a server and will not flow to the physical firewall, so it cannot function as a firewall

Images