Network safety service architecture based on safety service chain and realization method thereof

Abstract

The invention relates to a network safety service architecture based on a safety service chain, and a realization method thereof. The architecture comprises a safety service management platform for receiving a user safety request, extracting safety service chain information and transmitting the same to a safety function compiling engine and a traffic traction engine; the safety function compilingengine for selecting a service node for bearing instances according to the safety service chain information, forming a safety function instance deployment view, and delivering the safety function instance deployment view to the traffic traction engine; the traffic traction engine for acquiring a routing path between the safety function instances according to the safety service chain information and the safety function instance deployment view, and guiding the creation of the safety service chain according to the routing path information. By flexibly combining the instances, precisely segmenting the traffic and selecting the optimal service node of the bearing instances and establishing the multi-path routing between the service nodes, the customizable safety service is provided by sufficiently utilizing the network safety resource, and the delay of the safety service is reduced.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a network security service framework based on a security service chain and an implementation method thereof. Background technique [0002] With the increasing scale of the network and the diversified development of network services, the disadvantages of the traditional network security service model are becoming more and more prominent. First, the way of providing security services is static and rigid. Most security services are provided by deploying security devices such as hardware firewalls and IDSs at key locations on the network. The topology is heavily dependent, and it is difficult to implement customizable security services based on the security needs of individual users or businesses; Second, it is difficult to update security services. When the network status or security requirements change, it is necessary to manually adjust the deployment loca...

AI Technical Summary

Problems solved by technology

However, due to limited network resources, how to convert abstract security requests into specific and optimized security function instance deployment numbers, locations, and traffic routing paths, so as to achieve the goal of reducing security service delay while making full use of network resources, That is, the network security service model based on the security service chain and its implementation problems need to be solved urgently

Images