Message processing method, system and storage medium

Abstract

The invention relates to the technical field of computers, and discloses a message processing method, a system and a storage medium, which solve the problem of isolation protection in the prior art that cannot realize communication between virtual machines in the same port group. The method is applied to a message processing system, including: acquiring a message, extracting a destination mac address and a source mac address in the message; judging whether the destination mac address exists in the isolation virtual machine information table; when it exists, acquiring the destination mac address The isolated vlan identifier corresponding to the address, and the vlan identifier carried in the packet is changed to the isolated vlan identifier, and the packet is sent through the inbound interface of the packet processing system; if it does not exist, it is judged whether the source mac address exists in the isolated virtual machine information In the table; if it exists, obtain the original vlan identifier corresponding to the source mac address, change the vlan identifier carried in the packet to the original vlan identifier, and send the packet through the external interface of the packet processing system. The embodiments of the present invention are suitable for packet processing between isolated virtual machines.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a message processing method, system and storage medium. Background technique [0002] To implement network layer security protection for virtual machines in the cloud environment, generally all traffic of virtual machines passes through network security devices, but for communication between virtual machines under the same port group, since they are all assigned to the same physical For server nodes, the business traffic between them is directly forwarded by the virtual switch in the node, and the isolation and protection of communication between virtual machines under the same port group cannot be realized. Contents of the invention [0003] The purpose of the present invention is to overcome the problem of isolation and protection of communication between virtual machines in the same port group that cannot be realized in the prior art, and to provide a message proce...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to overcome the problem of isolation and protection of communication between virtual machines in the same port group that cannot be realized in the prior art, and to provide a message processing method, system and storage medium that do not depend on the cloud computing platform In this case, the isolation protection of communication between virtual machines in the same port group is realized

Images