Resource allocation method and network equipment

Abstract

The embodiment of the invention provides a resource allocation method in a cloud environment and network equipment. The method comprises the steps that M security domains of a target application and a first mapping relation of the M security domains and N modules of the target application are determined; a first request message is sent to a basic facility, namely, service IaaS layer equipment, the IaaS layer equipment is requested to create an IaaS tenant corresponding to each security domain in the M security domains, and M IaaS tenants are obtained; a first response message sent by the IaaS layer equipment is received, and the first response message carries a second mapping relation between the M security domains and the M IaaS tenants; a third mapping relation existing between the N modules and the M IaaS tenants is determined, the IaaS layer equipment is requested to use the IaaS tenant corresponding to the i module in the N modules to allocate virtual machine resources for the i module. By means of the method, isolation of the virtual machine resources among different modules of the application can be achieved.

Description

technical field [0001] The present invention relates to the communication field, and more specifically, to a resource configuration method in the cloud computing field and a network device thereof. Background technique [0002] With the development of technology, the application of cloud computing is becoming more and more common. A large number of applications need to be deployed on the virtual resources provided by cloud computing services to achieve the purpose of saving equipment costs and efficient operation and maintenance. [0003] For applications with complex topological structures, such as telecommunication service applications, etc., they are often composed of multiple functional modules, and each functional module is responsible for its own field of expertise. The information security requirements of each application module are often inconsistent, so in actual deployment, users will require each module to be deployed in different network security domains, and fir...

AI Technical Summary

Problems solved by technology

[0008] Since the virtual resource isolation mechanism provided by IaaS is between tenants, although VMs in different security groups under the same tenant can control the flow of network resources, VMs in a security group under the same tenant are still The interface of IaaS can be called through the management network to operate the virtual resources of other security groups under the same tenant. Therefore, there is a security risk of calling IaaS virtual resources

Images