Dynamic safety strategy migration method and device

Abstract

The invention discloses a dynamic safety strategy migration method and device. The method comprises that a target network safety device receives a safety strategy migration instruction issued by a safety management device, and obtains safety strategy information of a migration virtual machine, and the migration virtual machine needs to be migrated to a target data center protected by the target network safety device; and the target network safety device disposes safety strategy for the migration virtual machine according to safety strategy information of the migration virtual machine. The efficiency of safety strategy migration of the network safety device can be improved, and the service recovery time is shortened.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a method and device for dynamically migrating security policies. Background technique [0002] With the development of the Internet, virtualization technology has been widely used in data centers at all levels, especially server virtualization technology has been accepted and successfully implemented by the majority of users. Virtualization technology can virtualize multiple independent virtual machines (VM, Virtual Machine) on a single physical server. These VMs can be regarded as an independent server and have their own IP address and MAC address just like the physical server. , has its own operating system and various applications. Live migration (LiveMigration) technology is a hot spot among virtualization technologies. Live migration technology refers to the ability to migrate a virtual machine from one physical server to another. This technology adjusts the physical ...

AI Technical Summary

Problems solved by technology

[0003] However, it has been found in practice that when a VM is migrated from a physical server in one physical data center (source data center) to a physical server in another physical data center (destination data center), the configuration information and device information on the VM and memory information can be migrated through the management platform, but the security policy information deployed on the network security device (such as a physical firewall) used to protect the migrated VM can only be manually configured and adjusted, that is, the destination data center bound Add the configuration for the migrated VM on the network security device, and delete the configuration for the migrated VM on the source network security device bound to the source data center

The entire process for administrators to manually configure security policy information on network security devices is complicated and slow, which is likely to cause long-term interruption of business services

Images