Data transmission method and device, and hybrid cloud system

Abstract

Embodiments of the invention disclose a data transmission method and device, and a hybrid cloud system. The method applied to a gateway server in the hybrid cloud system comprises the following stepsof receiving a first data packet sent by a first host, wherein the first data packet carries a first IP address of a target public cloud server in an overlay network; obtaining a network identifier ofa network to which the first host belongs; according to a preset access relationship between the network identifier and the target public cloud server, carrying out IP address conversion on the firstdata packet based on the first IP address and a preset mapping relation under the condition that permission is determined, wherein the mapping relation is a mapping relation between an IP address ofthe public cloud server in an underlay network and an IP address of the public cloud server in the overlay network; and sending the converted first data packet to the target public cloud server. By applying the embodiments of the invention, potential safety hazards are reduced.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a data transmission method, device and hybrid cloud system. Background technique [0002] Cloud Computing (Cloud Computing) is a computing method based on the Internet. In this way, shared hardware and software resources and information can be provided to computers and other devices on demand. Cloud is a metaphor for network, internet. The industry divides cloud computing into three categories according to the affiliation relationship between cloud computing providers and users, namely public cloud, private cloud and hybrid cloud. [0003] Public cloud usually refers to the cloud that can be used by third-party providers for tenants. Public cloud can generally be used through the Internet (network), which may be free or low-cost. The core attribute of public cloud is shared resource services. In public cloud Web-based remote access services can be deployed for tenants...

AI Technical Summary

Problems solved by technology

[0005] Because the information in the ACL mechanism needs to be maintained manually, when the information configured in the ACL needs to be changed, there may be a potential delay in the information modification operation. As a result, the IP addresses that should be moved to the IP address blacklist still exist in the IP address whitelist. As a result, the public cloud server should have discarded the received data packet and changed it to send a response packet to the received data packet, resulting in data leakage, so there is a high security risk

Images