User demand-oriented security function service network system and implementation method thereof

Abstract

The invention discloses a user demand-oriented security function service network system and an implementation method thereof, and the method comprises the steps: carrying out the statistical analysis of resources in a cluster to obtain global information; establishing a plurality of virtual network function resource pools in a cloud environment, and processing a virtual network function Pod; selecting a corresponding virtual network function resource pool, and generating a security policy ordered set; selecting a virtual network function Pod in the corresponding virtual network function resource pool, and dynamically adjusting the security policy ordered set to generate a deployment policy; transmitting the deployment strategy to an SDN controller of the cloud environment; issuing a corresponding flow table by the SDN controller according to the security policy ordered set; and forwarding data flow from the outside of the cloud environment and among the nodes of the service function network according to the flow table. The security is improved, the network defense efficiency is improved, and the method can be widely applied to the technical field of network security.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a user-oriented security function service network system and an implementation method thereof. Background technique [0002] In recent years, with the rapid development of Internet business and the diversification of network applications, the traditional data center network architecture has been increasingly unable to keep up with the pace of network expansion due to its shortcomings such as slow deployment and difficult expansion. With its reliability, high scalability, and on-demand services, the new system architecture of cloud computing data centers has rapidly grown into a solution for many enterprises to carry network services. However, the wide application of cloud computing services has also brought a series of problems. While computing, storage, network and other resources are decoupled from physical devices, the traditional network security boundary of the clou...

AI Technical Summary

Problems solved by technology

[0004] However, the network security situation in the cloud environment is complex and changeable. Network attacks may come from various directions in the cloud environment, and the types of attacks are also varied. It is difficult for the traditional functional service chain to efficiently and effectively monitor the complex network security situation in the cloud environment handling and defense

Images