Flow monitoring method and system

Abstract

The invention relates to a flow monitoring method and system. The method comprises the following steps: binding a flow label to a container / virtual machine in advance; classifying and filtering according to the labels of the data messages of the container / virtual machine; carrying out clustering analysis on the data messages with the same labels to obtain a flow data statistical result; further, obtaining the flow monitoring information of each container / virtual machine; and finally, according to the flow monitoring information, monitoring the flow of each container / virtual machine. The problem that flow monitoring of a container / virtual machine without an independent network card is difficult is solved, and meanwhile the technical effects of being high in monitoring accuracy, zero in system overhead, capable of meeting the important flow monitoring requirement of online services, guaranteeing the delivery quality of online services and facilitating rapid discovery and positioning of the problems are achieved.

Description

technical field [0001] The invention relates to the technical field of flow monitoring, in particular to a method and system for monitoring flow of a virtual machine or a container. Background technique [0002] With the popularity of cloud computing, more and more customers choose to deploy their applications on the virtual machines of the cloud platform, which puts forward higher requirements for the security performance of the cloud platform. In order to ensure the information security of the virtual machine, the cloud platform needs to monitor the network traffic of the virtual machine. The current commonly used monitoring method is to monitor the overall traffic of the virtual machine network card. This monitoring method is relatively simple to implement, but when the number of virtual machines is too large to allocate IP addresses, the existing traffic through the virtual machine network card The monitoring method will not be able to solve the problem of monitoring th...

AI Technical Summary

Problems solved by technology

[0008] The present invention proposes a method and system for traffic monitoring, which realizes marking, collection, statistics and monitoring of the traffic of each container / virtual machine from the kernel level, and solves the problem of difficult traffic monitoring of containers / virtual machines without an independent network card. Accurate monitoring of traffic can be achieved, greatly reducing system overhead, meeting the critical traffic monitoring needs of online businesses, ensuring the delivery quality of online services, facilitating quick discovery and location of problems, and improving the security of containers / virtual machines

Images