Method for controlling east-and-west data traffic of cloud platform

Abstract

The invention relates to the technical field of a cloud computing network, and particularly to a method for controlling an east-and-west data traffic of a cloud platform. The method comprises the steps of newly establishing a controlling virtual machine or container for the virtual machine, the container and the physical machine of the controlled east-and-west data traffic; establishing two virtual interfaces for the controlling virtual machine or container; connecting the back end of one virtual interface with a controlled network, and connecting the back end of the other virtual interface with a virtual switch for the east-and-west data traffic; and mounting a control module in the controlling virtual machine or container, thereby realizing controlling for the east-and-west data traffic. The method can satisfy different network safe transmission requirements in the cloud platform, and supplies safety functions in different types or different grades, such as anti-virus function and anti-SQL-injection function.

Description

technical field [0001] The invention relates to the technical field of cloud computing networks, in particular to a cloud platform east-west flow control method. Background technique [0002] With the development of the cloud platform, many application systems are migrated to the cloud management platform of virtual machines, containers, and physical machines. The traffic of the cloud platform is mainly divided into east-west traffic and north-south traffic. Most of the north-south traffic will be internally converted into traffic connecting storage, databases, and middleware, and these traffics are mainly east-west traffic; the traffic involves important data resources. Access, so east-west traffic in the cloud platform accounts for a high proportion of the entire platform, and its resources are more important. [0003] There are firewalls, intrusion detection and other related equipment on the external boundary of the cloud platform to ensure the security of the outside w...

AI Technical Summary

Problems solved by technology

The internal security of the cloud platform is generally realized through the virtual firewall on the host machine, but the function of this virtual firewall is relatively limited, and generally only the security access rule function can be set

[0004] As viruses penetrate into the cloud platform, if there are no virus detection tools for east-west traffic, the virus will spread faster inside the cloud platform. The traditional method is to install relevant anti-virus software inside the virtual machine, but this method is different from The virtual machine is too closely combined, which affects the normal use of the virtual machine to a certain extent

Images