Bastion machine egress link optimization system and method

Abstract

The invention provides a bastion host export link optimization system and method. The system comprises a bastion host and an export cluster, wherein the export cluster comprises a plurality of export servers neighboring one another; the export servers are distributed in different operators, and each export server is configured with an operator server address owned by the corresponding operator; and the bastion host logs in to operator servers through the operator server addresses with which the export servers are configured. The system and method provided by the invention has the advantage that the safety and the working efficiency of the bastion host are improved.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a system and method for optimizing egress links of a bastion machine. Background technique [0002] In order to centralize management of remote logins to massive servers, many enterprises use bastion hosts. The bastion host, that is, in a specific network environment, in order to protect the network and data from intrusion and damage from external and internal users, various technical means are used to collect and monitor the system status of each component in the network environment in real time, Security incidents and network activities for centralized alarm, timely processing and audit determination. [0003] The bastion host is deployed inside the computer room, and operators in the office need to log in to the bastion host to access the servers in the production environment. The bastion host can control the authority of operators and record their operations. If the o...

AI Technical Summary

Problems solved by technology

The bastion host has an external network ip, and anyone on the public network can sniff out the existence of the bastion host. If there are loopholes in the operating system or application software of the bastion host, hackers can directly attack the bastion host. Once the bastion host is attacked Intrusion, the server under the bastion host will be subject to a great security threat

[0006] Second, a large number of operator servers are located in various provinces and cities across the country, and each operator. The bastion host only has one internal network exit and one external network exit, and there is no optimization on the link

For example, if the bastion host is inside the China Unicom network and the production server is inside the education network, then China Unicom will access the education network, and the connection will be slow or fail, resulting in a decrease in work efficiency

Images