Openstack encryption link management method and system

Abstract

The invention discloses an openstack encryption link management method and system. The method comprises the following steps: firstly, layering intermediate nodes between a network node and a target site according to the number of tunnels on an encrypted link; then the node sending a request to obtain network delay between the node and all adjacent nodes, and obtaining the number of encrypted tunnels established on an intermediate node; and taking the network node as a starting point, taking the target station as an end point, integrating network delay and the number of encrypted tunnels established on the intermediate node as the distance between adjacent nodes, and selecting a connectable intermediate node which enables the distance to be minimum on the whole encrypted link as the intermediate node used by the encrypted link by applying an A star algorithm. According to the method, the encryption link composed of the intermediate nodes which are comprehensively optimal in the aspects of network delay and load balancing can be automatically selected, and the success rate and availability of establishment of the encryption link are improved.

Description

technical field [0001] The invention relates to an openstack encrypted link management method and system, belonging to the technical fields of network security and information processing. Background technique [0002] In order to enhance the anti-tracking and anti-source capabilities of virtual machines in the openstack cluster, patent CN110191105B provides an openstack encrypted link implementation method and system. Such as figure 1 As shown, the openstack virtual machine accesses the target site through an encrypted link. The encrypted link is composed of network nodes and several intermediate nodes; which intermediate nodes are used in an encrypted link and the connection order of the intermediate nodes needs to be pre-established before the encrypted link is established. Set and notify the network node management program. The patent pre-sets that the encrypted link is formed by connecting intermediate nodes 1, intermediate nodes 2, ..., intermediate nodes N in sequenc...

AI Technical Summary

Problems solved by technology

With the expansion of the scale of use, the solution has the following points to be improved: 1. It lacks the method of selecting and managing specific link intermediate nodes; 2. Before all nodes complete the connection establishment, the network node management program cannot know in advance Whether the encrypted link can be established, that is, whether all the intermediate nodes can be connected; 3. When freely selecting the intermediate node, the network delay of the intermediate node and the number of encrypted tunnels established on it are not considered, which leads to the uneven traffic load of the intermediate node. Balanced, unable to make full use of the bandwidth transmission capacity of intermediate nodes

Images