Network access control device and method

Abstract

The invention provides a network access control method and a network access control device. The method is applied to a virtual switch in which at least two stages of flow tables are arranged, whereineach flow table comprises table items corresponding to at least one service characteristic. The method comprises the steps of in the current flow table, finding a first matched table item corresponding to current flow according to the service characteristics included by the current flow table; checking whether an action in the first matched table item indicates to perform the matching of the nextstage of flow table; if yes, in the next stage of flow table, finding a second matched table item corresponding to the current flow according to the service characteristics included by the next stageof flow table, and performing access control on the current flow according to the action in the second matched table item. According to the method and device provided by the invention, the network access control extendibility can be enhanced.

Description

technical field [0001] The present disclosure relates to the technical field of cloud computing, in particular to a network access control method and device. Background technique [0002] A virtual switch (Vswitch) is a switching component in the form of software, which realizes the Layer 2 network function of a physical switch through software; a more commonly used virtual switch is OVS (OpenVswitch, open source virtual switch). [0003] The virtual switch performs access control on traffic by querying the data forwarding flow table. In the flow table, multiple forwarding entries matching the user's network control requirements are stored. When the virtual switch receives traffic, it will match the traffic with the entries in the flow table one by one, and process the traffic according to the actions recorded in the matching entries. When the user needs to increase the demand, the flow table will be updated; every time a control function is added, the entries in the flow ...

AI Technical Summary

Problems solved by technology

When the user needs to increase the demand, the flow table will be updated; every time a control function is added, the entries in the flow table may need to be changed as a whole; as the user's demand increases, the flow table will become very lengthy , the readability is poor, and the workload of updating the flow table is increasing, resulting in poor subsequent optimization and scalability of the flow table

Images