Virtual firewall configuration method based on OVS, electronic equipment and storage medium

Abstract

The invention discloses a virtual firewall configuration method based a OVS. The method comprises the following steps: enabling all virtual machines under each physical host to be isolated or connected in pairs, and writing a MAC address of a virtual machine into an openflow table; establishing a white list flow table rule or a blacklist flow table rule according to the MAC address, issuing the white list flow table rule or the blacklist flow table rule to the OVS of the homed physical host; judging whether the attribute of a data packet flowing through the OVS is matched with the white list flow table rule with the highest priority; if the attribute of the data packet flowing through the OVS is matched with the white list flow table rule with the highest priority, enabling the data packetto pass through a bridge on the physical host OVS; or abandoning the data packet. The function of the virtual firewall can be realized by configuring a network traffic filtering rule based on the openflow table of the OVS, the situation that the traditional virtual firewall configuration needs a firewall controller or firewall software is avoided, thereby achieving the aim of evading the defectsof the traditional virtual firewall, and the configuration policy is abundant and flexible.

Description

technical field [0001] The present invention relates to a firewall security technology, in particular to an OVS-based virtual firewall configuration method. Background technique [0002] At present, the cloud resource management platform is a virtualization platform for unified management of physical resources, virtual resources, and business resources through the network. The virtual machine is an important node of cloud computing virtual network communication. The security of the virtual machine can be configured by the firewall service of the virtual machine system itself, such as the iptables service of the linux system. For virtual network network traffic control firewall solutions, it can be divided into two types: virtual machine switch-based configuration access control list control strategy and virtual machine firewall software running in virtual machines. [0003] Chinese patent application 201410252561.0 discloses a distributed virtual firewall device and method,...

Images