Method and device for managing virtual machine ip address

Abstract

This application discloses a method and device for managing the IP address of a virtual machine; the above-mentioned management method includes: after receiving a command issued by the virtualization platform, obtaining the name of the virtual switch, the MAC address, the IP address of the virtual machine, and the name of the network card of the virtual machine And bind parameters, and issue the OVS command; update the binding relationship between the MAC address and the virtual machine IP address based on the virtual switch name, MAC address, virtual machine IP address, virtual machine network card name and binding parameters , and update the corresponding relationship between the virtual machine NIC name and the port number recorded in the database. The application can effectively prevent the IP address of the virtual machine from being stolen, thereby improving the network security of the virtualization platform.

Description

technical field [0001] The present application relates to but not limited to the technical field of virtualization, in particular to a method and device for managing Internet Protocol (IP, Internet Protocol) addresses of virtual machines. Background technique [0002] At present, there are many factors affecting network security, among which IP (IP, Internet Protocol) address theft or address spoofing is a common and extremely harmful factor. Many network application operations (for example, traffic statistics, account control, etc.) use the IP address as an important parameter to identify the user. If someone steals a legitimate IP address and pretends to be a legitimate user, the data transmitted on the network may be destroyed, eavesdropped, or even embezzled, resulting in irreparable losses. [0003] Because network interconnection devices such as routers generally set the IP address range that passes through each port, packets that do not belong to this range will not ...

AI Technical Summary

Problems solved by technology

If someone steals a legitimate IP address and pretends to be a legitimate user, the data transmitted on the network may be destroyed, eavesdropped, or even embezzled, causing irreparable losses

[0003] Because network interconnection devices such as routers generally set the IP address range that passes through each port, packets that do not belong to this range will not be able to pass through these network interconnection devices. There are no effective preventive measures in case of misappropriation

Moreover, with the development of cloud computing networks, there are no effective preventive measures against the theft or malicious tampering of virtual machine IP addresses, which seriously affects the network security of virtualization platforms.

Images