System framework and method for dynamically deploying network security service

Abstract

The invention relates to a system framework and a method for dynamically deploying a network security service. The framework comprises a service arranging layer for arranging a security service function link and sending; a service management layer used for receiving the security service function link sent by a service arranging layer, collecting physical resource information of a network link anda network service, building an overall service deployment path and sending a security service building linked list; and a service data layer used for receiving the security service building linked list sent by the service management layer and building a network security service link. According to the system framework and the method provided by the invention, the network security service can be deployed as required at a multi-domain data center, so as to meet individual requirements of different users.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a system architecture and a method for dynamically deploying network security services. Background technique [0002] The existing network adopts the "hourglass model", which has the characteristics of triple binding, that is, service resources and location binding, network control and data binding, identity and location binding. The tight coupling between network topology and physical resources makes the network service deployment model static and rigid, making it difficult for network services to be quickly deployed, dynamically adjusted, and migrated on demand. It is difficult to meet the diverse needs of today's operators and users in terms of scalability, security, and flexibility. . With the rapid development of the information industry, data services have become more and more important, and ensuring user data security has become an important factor in network design....

AI Technical Summary

Problems solved by technology

[0009] The cloud data center network environment is different from the traditional network environment. It integrates network resources to build a virtual service environment. The resources used by users come from the cloud rather than fixed network entities. Different users may share a physical computing or network resource. Network security solutions cannot be directly deployed on cloud data centers with multiple network domains

Images