Virtualization platform safety protection method, device and system based on virtual switch

Abstract

The embodiment of the invention provides a virtualization platform safety protection method, device and system based on a virtual switch. A first interface in the virtual switch intercepts a data packet on a communication link of the virtual switch, wherein the data packet is transmitted to second equipment by first equipment; characteristic information corresponding to a network security strategy in a data feature library is adopted to detect whether the data packet is safe, if so, then a second interface in the virtual switch transmits the data packet to the second equipment. According to the virtualization platform safety protection method, device and system based on the virtual switch provided by the invention, the communication traffic in the virtual switch can be avoided from being led into an external system to perform security detection, so that the processing efficiency of the security detection can be improved and the time delay of communication interaction can be reduced.

Description

Technical field [0001] The present invention relates to the field of communication technology, in particular to a virtual switch-based security protection method, device and system for a virtualization platform. Background technique [0002] The devices on the virtualization platform communicate and interact through at least one virtual switch. These communication interactions include: communication interaction from physical machine to virtual machine, communication interaction from virtual machine to physical machine, and communication interaction between virtual machines . [0003] In order to ensure the communication security of the virtualization platform, it is necessary to perform security inspection on the communication traffic in the communication interaction process described above. The prior art mainly reconfigures the ports of the communication devices involved in the communication interaction process, and redirects all communication traffic passing through all virtual ...

AI Technical Summary

Problems solved by technology

[0004] It can be seen that the existing technology needs to import all communication traffic to the external security system for detection. With the increase of communication traffic, the import and export of massive data reduces the communication efficiency, and the external security system is prone to processing bottlenecks. Processing efficiency

Images