System for providing network security as a service in cloud computing environment

Abstract

The embodiment of the invention provides a system for providing network security as a service in a cloud computing environment. The system comprises a cloud computing management platform, security applications corresponding to virtual nodes in a virtual network, virtual security switches and a target security detection containers. The virtual security switches process a plurality of tunnel packets in target virtual network traffic corresponding to the virtual nodes, thereby obtaining a transmission layer packet, and transmits the transmission layer packet to each target security detection container for security detection. After the security detection of the transmission layer packet is successful, the transmission layer packet is processed and transmitted, so security service is provided for the virtual network, and the security of the virtual network is improved. In a mode that the plurality of tunnel packets are combined into one transmission layer packet and the transmission layer packet is transmitted to each target security detection container for security detection, the transmission speed is improved, the number of the data packets on the target security detection containers is reduced, the data packet processing performance of the target security detection containers is improved, and the energy consumption of the whole system is reduced.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a system for providing network security as a service under a cloud computing environment. Background technique [0002] A virtual network is a computer network that contains at least some virtual network links. A virtual network link does not involve a physical connection between two computing devices, but is implemented through network virtualization. [0003] In the cloud computing environment, for the virtual network, the cloud computing environment does not provide security service functions for the virtual network. Therefore, the virtual network is usually vulnerable to attacks, thereby causing various security problems. [0004] In view of this, it is an urgent problem to be solved to provide a network security-as-a-service system in a cloud computing environment to provide security services for virtual networks and improve the security of virtual networks. Cont...

AI Technical Summary

Problems solved by technology

[0003] In the cloud computing environment, as far as the virtual network is concerned, the cloud computing environment does not provide security services for the virtual network. Therefore, the virtual network is usually vulnerable to attacks, which in turn causes various security problems.

Images