openstack encrypted link management method and system

Abstract

The invention discloses an openstack encrypted link management method and system. The method of the present invention first layers the intermediate nodes between the network nodes and the target site according to the number of tunnels on the encrypted link; then the node sends a request to obtain the network delay between itself and all adjacent nodes, and obtains the The number of encrypted tunnels; and then take the network node as the starting point and the target site as the end point, and use the A star algorithm to select the entire encrypted link The connectable intermediate node with the smallest distance above is used as the intermediate node for the encrypted link. The invention can automatically select the encrypted link composed of the optimal intermediate nodes in terms of network delay and load balancing, and improves the success rate and availability of the encrypted link establishment.

Description

technical field [0001] The invention relates to an openstack encrypted link management method and system, belonging to the technical fields of network security and information processing. Background technique [0002] In order to enhance the anti-tracking and anti-source capabilities of virtual machines in the openstack cluster, patent CN110191105B provides an openstack encrypted link implementation method and system. like figure 1 As shown, the openstack virtual machine accesses the target site through an encrypted link. The encrypted link is composed of network nodes and several intermediate nodes; which intermediate nodes are used in an encrypted link and the connection order of the intermediate nodes needs to be pre-established before the encrypted link is established. Set and notify the network node management program. The patent pre-sets that the encrypted link is formed by connecting intermediate nodes 1, intermediate nodes 2, ..., intermediate nodes N in sequence; ...

AI Technical Summary

Problems solved by technology

With the expansion of the scale of use, the solution has the following points to be improved: 1. It lacks the method of selecting and managing specific link intermediate nodes; 2. Before all nodes complete the connection establishment, the network node management program cannot know in advance Whether the encrypted link can be established, that is, whether all the intermediate nodes can be connected; 3. When freely selecting the intermediate node, the network delay of the intermediate node and the number of encrypted tunnels established on it are not considered, which leads to the uneven traffic load of the intermediate node. Balanced, unable to make full use of the bandwidth transmission capacity of intermediate nodes

Images