Virtualization platform east-west direction flow isolation protection method

Abstract

The present invention provides a virtualization platform east-west direction flow isolation protection method. In order to guarantee the flow safety between virtual machines in a cloud platform, the method employs SDN and VXLAN technologies to guide the flow of the cloud platform virtual machines requiring being protected to the outer portion of a server, the flow passes through safety protectionproducts such as FW, IPS and IDS to perform flow protection and then be returned to the other cloud platform virtual machine in the cloud platform so as to achieve isolation protection of the east-west direction flow. A stream guidance plug-in virtual machine and an independent vxlan tunnel are led to solve the problem that the east-west direction flow between the virtual machines in a traditionalcloud environment cannot be controlled and the problem of the safety protection, and therefore the virtualization platform east-west direction flow isolation protection method can be applied to a current mainstream cloud platform.

Description

technical field [0001] The invention relates to the field of network security of a virtualization platform, in particular to a safety protection method for east-west traffic between virtual machines inside a virtualization platform. Background technique [0002] With the development of computer network virtualization, traditional network security systems cannot meet the security prevention and control requirements of network virtualization. Since the cloud platforms are all closed, the security issues in the cloud system are particularly important. Since the communication between the virtual machines on the same network segment in the same host cannot reach the host, it is difficult for the traditional network security system to realize the east-west orientation of the cloud host. traffic protection. With the development of cloud computing, traditional network security protection solutions and existing cloud security solutions are more concerned with north-south security pr...

AI Technical Summary

Problems solved by technology

[0002] With the development of computer network virtualization, traditional network security systems cannot meet the security prevention and control requirements of network virtualization

Since the cloud platforms are all closed, the security issues in the cloud system are particularly important. Since the communication between the virtual machines on the same network segment in the same host cannot reach the host, it is difficult for the traditional network security system to realize the east-west direction of the cloud host. traffic protection

With the development of cloud computing, traditional network security protection solutions and existing cloud security solutions are more about solving north-south security protection issues, and rarely involve the isolation and protection of east-west traffic.

Images