SDN-based network access control method and device and computer equipment

Abstract

The application relates to an SDN-based network access control method and device, computer equipment and a storage medium. The method includes the following steps: controlling virtual machines to access SDN-based subnets, wherein the virtual machines that operate services of the same role access the same subnet; acquiring network access security requirement information between different subnets; generating network access rules among different subnets according to the network access security requirement information; and issuing the network access rules to physical equipment related to the virtual machine cross-subnet communication, wherein the network access rules are used to indicate the physical equipment to verify cross-subnet network access requests initiated by the virtual machines. Byadopting the method, the network access efficiency of the services operated on the virtual machines can be improved.

Description

technical field [0001] The present application relates to the field of network technology, in particular to an SDN-based network access control method, device and computer equipment. Background technique [0002] With the development of network technology, SDN (Software Defined Network, software-defined network) technology has emerged. SDN is a new innovative network architecture and a way to realize network virtualization. SDN technology is more and more widely used due to the advantages of flexible control of network traffic. At present, a virtual machine is often connected to a software-defined network, and various business functions are realized by running services of different roles through the virtual machine. [0003] When traditionally performing network access control on communication between services running in a virtual machine, access control rules are usually deployed on the host machine for the virtual machine. However, with the expansion of the service scale...

AI Technical Summary

Problems solved by technology

However, with the expansion of the service scale, the number of virtual machines has increased rapidly, and the access control rules have also increased on a large scale, resulting in a sharp decline in the network performance of the host machine, making the network access to the service inefficient.

Images