OpenStack encryption link implementation method and system

Abstract

The invention discloses an OpenStack encrypted link implementation method and system, and the method comprises the steps: enabling a network node management program in an OpenStack cluster to start aVPN service that a VPN client is connected with a first intermediate node, and providing a key to complete the authentication; after the connection between the network node and the first intermediatenode is established, the management program instructs a VPN service that the first intermediate node is connected to the second intermediate node through SSH remote control, and provides a key of thesecond intermediate node to complete authentication; and so on until all the intermediate nodes complete connection and authentication, and a plurality of formed encryption tunnels are connected in series to form a whole encryption link. When all virtual machines in the cluster access the target site, the virtual machines are connected with the Internet through an encryption link formed by the network node and the plurality of intermediate nodes in sequence. According to the method, an encryption link can be set for each virtual machine of the whole cluster with the minimum configuration, andthe links are complicated through a plurality of intermediate nodes, so that the traceability difficulty is increased, and the exposure risk is reduced.

Description

technical field [0001] The invention relates to a method for realizing an OpenStack encrypted link and an OpenStack cluster network access control system based on the method, belonging to the technical field of information processing. Background technique [0002] With the rapid development of new technologies such as big data, cloud computing, artificial intelligence, and the Internet of Things, the universality and complexity of Internet information systems and various network applications are becoming higher and higher, and various network information security incidents that follow usually. [0003] Public security departments face the following challenges that need to be resolved urgently when performing their tasks: [0004] ·Long tool preparation period [0005] · There are traceability risks in the execution of tasks [0006] ·Facing the network environment with monitoring, it is necessary to protect the network behavior, so as to freely access the target site. ...

AI Technical Summary

Problems solved by technology

However, each virtual machine template needs to be installed and configured, and the configuration of the virtual machines generated by the template is the same, which lacks flexibility. Multiple virtual machines use the same encrypted link, which is easily detected by the traffic analysis system.

And let users configure their own encrypted links for each virtual machine, the workload will increase exponentially

In addition, if the encrypted link composed of a traditional single intermediate node is compromised, the address of the operating machine will be directly exposed. This risk is unacceptable

Images