A method and system for sdn-based virtual tenant network isolation

Abstract

The invention discloses an SDN-based virtual tenant network isolation method and system. The isolation system is a cloud-oriented platform and includes an SDN controller, a virtual switch, and a virtual machine; wherein, the SDN controller includes a topology management module and an initialization module. , a flow table management module, and a tenant network mapping module; the virtual switch completes the forwarding of data packets according to the flow table delivered by the SDN controller, and only one virtual switch is configured on each physical host or node; the virtual machine passes the virtual Network interfaces are connected to virtual switches, and the virtual switches are connected through tunnels. This method realizes the isolation of the tenant network by designing the flow table of the virtual switch. The realization of isolation does not depend on information such as the MAC address of the tenant virtual machine, the label of the VLAN to which the virtual machine belongs, the vxlan number or the GRE tunnel number, and allows the tenant MAC to be used freely. Tenants need to flexibly build virtual networks.

Description

technical field [0001] The invention belongs to the field of cloud management, and in particular relates to an SDN-based virtual tenant network isolation method. Background technique [0002] Tenant network isolation is a very important requirement for implementing cloud computing services. On the premise of ensuring the security of tenant networks and tenant virtual machines, the cloud platform should try not to reduce the efficiency of network management and configuration. [0003] In the cloud platform environment, the same tenant uses at least one virtual machine, there is at least one tenant network in the same tenant, and a single virtual machine is equipped with at least one network card; the tenant's virtual machine can be used as a normal business processing device or configured by the user as Network devices, such as bridges, routers, application gateways, etc., are used to implement customized networks. In order to meet various user requirements, tenant networks ...

AI Technical Summary

Problems solved by technology

This method allows the tenant's virtual machine to freely use the MAC address, but this method requires an additional ARP agent, and there will be a one-to-one mapping problem when there are multiple network cards or virtual machines are used to simulate switching devices

Images