Message processing method and system and storage medium

Abstract

The invention relates to the field of computer technology, and discloses a message processing method and system and a storage medium, which solves the isolation protection problem which exists in theprior art and is that communication between virtual machines (VMs) in the same port group cannot be realized. The method is applied to the message processing system, and includes: acquiring a message,and extracting a destination mac address and a source mac address in the message; judging whether the destination mac address exists in an isolation virtual-machine information table; when the same exists, acquiring an isolation vlan identifier corresponding to the destination mac address, modifying a vlan identifier, which is carried by the message, as the isolation vlan identifier, and sendingthe message through an internal interface of the message processing system; when the same does not exist, judging whether the source mac address exists in the isolation virtual-machine information table; and when the same exists, acquiring an original vlan identifier corresponding to the source mac address, modifying a vlan identifier, which is carried by the message, as the original vlan identifier, and sending the message through an external interface of the message processing system. The embodiment of the invention is suitable for use in message processing between isolated virtual machines.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a message processing method, system and storage medium. Background technique [0002] To implement network layer security protection for virtual machines in the cloud environment, generally all traffic of virtual machines passes through network security devices, but for communication between virtual machines under the same port group, since they are all assigned to the same physical For server nodes, the business traffic between them is directly forwarded by the virtual switch in the node, and the isolation and protection of communication between virtual machines under the same port group cannot be realized. Contents of the invention [0003] The purpose of the present invention is to overcome the problem of isolation and protection of communication between virtual machines in the same port group that cannot be realized in the prior art, and to provide a message proce...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to overcome the problem of isolation and protection of communication between virtual machines in the same port group that cannot be realized in the prior art, and to provide a message processing method, system and storage medium that do not depend on the cloud computing platform In this case, the isolation protection of communication between virtual machines in the same port group is realized

Images