A flow control method and related device

Abstract

The embodiment of the present invention discloses a traffic control method and a related device, which are used to improve the intelligence of traffic control policy generation and the effectiveness of the traffic management policy. The method in the embodiment of the present invention includes: the management and control terminal obtains the basic information of the server; the management and control terminal receives the flow reported by the controlled device, and reports to each controlled device according to the basic information of the server Statistical analysis is performed on the flow of traffic to generate a flow control strategy for each controlled device; the control terminal sets a certain effective threshold for each flow control strategy; when the generation times of the same flow control strategy is greater than the corresponding effective threshold, the The control terminal sends the traffic control policy to the corresponding controlled device.

Description

technical field [0001] The present invention relates to the technical field of data security, and in particular, to a traffic control method and a related device. Background technique [0002] With the development of cloud platforms, many application systems have been migrated to cloud management platforms of virtual machines, containers, and physical machines. The traffic of the cloud platform is mainly divided into east-west traffic and north-south traffic. Most of the north-south traffic will be internally converted into traffic between the internal servers of the data center, and these traffic are mainly east-west traffic, and its traffic involves access to important data resources. Therefore, the proportion of east-west traffic in the cloud platform is very high in the entire platform, and its resources are also more important. [0003] In order to ensure the security of east-west traffic data, security groups, as a means of network security isolation, have the functio...

Images