Method and device for secure message forwarding

Abstract

The present invention discloses a message security forwarding method, which is applied to a virtual firewall VFW. The method includes: the VFW notifies the virtual switch to establish a corresponding flow diversion strategy according to the security strategy configured by itself, and the flow diversion strategy is used to instruct the virtual switch to After receiving the packet sent by the source virtual machine that matches the traffic diversion policy, the VFW guides it to the VFW; when the VFW receives the packet forwarded by the virtual switch, it performs security processing on the packet based on its own configured security policy, and sends the processed The message of the security policy is forwarded to the destination virtual machine through the virtual switch; wherein, the VFW and the virtual switch are built in the same physical machine based on the virtualization platform. The invention also discloses a message security forwarding device. Adopting the present invention can prevent the flow from being forwarded to external processing.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a message security forwarding method and device. Background technique [0002] With the rapid development of cloud computing technology, data center virtualization has gradually become popular among the people. Facing the virtualization of resources, its security issues have also attracted more and more attention. Traditional firewall devices can provide security protection and business isolation for traffic in the network, but in a virtual environment, the traffic between multiple virtual machines (Virtual Machine, VM) inside the server usually exists inside the server and will not be transmitted to the server. In the external physical firewall, the physical firewall cannot protect it. [0003] In order to solve the problem of security protection of the traffic between virtual machines in the server, the existing technology mainly uses the "extracorporeal circulat...

AI Technical Summary

Problems solved by technology

In the implementation process of the existing technology, the internal traffic of the server needs to be guided to the external processing, which increases the load of traffic processing and affects the performance of the server and the switch; at the same time, the traffic guidance requires the cooperation of the external access switch, which requires a dedicated physical switching device

Images