Openflow based virtual firewall transmission control method and system

Abstract

The invention discloses an Openflow based virtual firewall transmission control method and system. The Openflow based virtual firewall transmission control method comprises the steps of after a data packet is sent from a host, extracting key information of the data packet by a firewall core module through a virtual network card configured on a virtual firewall, and performing basic mapping for the key information of the data packet by the virtual firewall through a firewall definition rule; and after a rule document is filtered by the firewall and the data packet reaches to a port, intercepting the data packet and performing grammatical analysis for the packet header, and extracting a packaging protocol, an IP source address, an IP destination address, an Mac address, and information of a packet input port and a packet output port; and forwarding and matching. According to the Openflow based virtual firewall transmission control method and system, flexibility and controllability of a network are improved, the bottleneck problems of high implementation cost and low processing efficiency of massive data are solved, safety of an internal network and a terminal is guaranteed, scanning and monitoring for transmission data of multiple networks, monitoring management of a specific service port and access control of a special website are realized, and the whole network can be protected.

Description

technical field [0001] The invention belongs to the technical field of network resource virtualization, and in particular relates to an Openflow-based virtual firewall transmission control method and system. Background technique [0002] Today, due to the increasing demand for network resources, network hardware due to multiple factors such as high-intensity computing requirements and high energy consumption, the load of a single physical hardware is too heavy, and it is difficult to meet the current network resource requirements. At the same time, due to the interconnection of networks with different distances, speeds and topological structures, the topology is complex and changeable, and lacks unified abstraction. The distributed network architecture leads to data traffic patterns that need to be adjusted in real time for dynamic changes in horizontal data flow. As the router at the core of the network, its performance and functions are overwhelmed by the continuous expan...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide an Openflow-based virtual firewall transmission control method and system, aiming at solving the problems of high implementation cost of current firewalls and bottlenecks in massive data processing efficiency

Images