Network isolation method and device based on user-mode protocol stack virtual router

Abstract

The invention discloses a network isolation method and device based on a user-mode protocol stack virtual router, and belongs to the technical field of cloud computing. The method includes: when the virtual router is initialized, setting a plurality of isolation spaces for each user mode protocol stack running in the system based on the configuration file of the virtual router, and setting an independent private table entry of the isolation space for each isolation space, and the isolation space The private entry includes at least the routing table; for each isolation space, the data packet corresponding to the isolation space is processed through the isolation space private entry of the isolation space. The present invention can reduce system resource consumption.

Description

technical field [0001] The invention relates to the technical field of cloud computing, in particular to a network isolation method and device based on a user-mode protocol stack virtual router. Background technique [0002] In cloud computing systems, network isolation technology can be used to set up an isolation space for multiple users in a network device, and the data of each user is stored in the corresponding isolation space, and the isolation space provides users with various isolation spaces. kind of service. [0003] The virtual router is used to forward data packets between the intranet or between the intranet and the public network. After receiving the data packet, the virtual router can select the corresponding routing table from the preset routing table according to the destination IP of the data packet. Routing rules to forward data packets. In the process of providing services, virtual routers can implement network isolation of different users through LXC, ...

AI Technical Summary

Problems solved by technology

In the process of providing services, the virtual router can implement network isolation of different users through methods such as LXC and Jail, but the above methods cannot be applied to user-mode protocol stacks based on technologies such as DPDK

When faced with a large number of different users, it is necessary to run a virtual router for each user separately, however, starting and running multiple virtual routers at the same time consumes a lot of system resources

Images