VXLAN-based method for triggering a dynamic secure channel, user side and central control board
A central console and dynamic security technology, applied in the cluster field, can solve problems such as cracked, tampered, and attacked tunnel IDs, and achieve the effect of avoiding intranet data leakage
Active Publication Date: 2021-11-19
北京网聚云联科技有限公司
View PDF10 Cites 3 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
From the perspective of zero trust, static tunnel identifiers still face security problems such as being cracked, tampered, and attacked
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0045] The embodiment of the present application provides a VXLAN-based triggered dynamic security channel method, a user terminal, a central console, and a storage medium for establishing a temporary channel between the target node and the user terminal, and performing data transfer on the temporary channel. Transmission, the entire communication process is carried out in a temporary virtual channel, which can largely avoid security issues such as data leakage, tampering, and attacks on the intranet.
[0046] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiment of the application will be described below in conjunction with the drawings in the embodiment of the application. Obviously, the described embodiment is only a part of the application Examples, but not all examples. Based on the embodiments in this application, all should belong to the protection scope of this application.
...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The embodiment of the invention discloses a VXLAN-based method for triggering a dynamic secure channel, a user side and a central control board, which are used for carrying out data transmission in an established temporary channel and can avoid the security problems of internal network data leakage, tampering, attacking and the like to a great extent. The method provided by the embodiment of the invention comprises the following steps: a user side sends a first access request to a central control board, wherein the first access request is a domain name DNS resolution request for accessing a target service; the user side receives an analysis result sent by the central control board, wherein the analysis result comprises an address transferred to a website; the user side sends a second access request to the transfer-in branch according to the analysis result, access control information of the second access request comprises quintuple information, and the access control information of the second access request is used for establishing a temporary channel between the transfer-in branch and a target node; and the user side performs data transmission with the target node through the temporary channel.
Description
technical field [0001] The present application relates to the field of clusters, and in particular to a VXLAN-based triggered dynamic security channel method, a user terminal, a central console, and a storage medium. Background technique [0002] The establishment of the virtual channel of the existing VXLAN (Virtual eXtensible Local Area Network, Virtual Extended Local Area Network) is static. When the user is not transmitting data, the virtual channel still occupies the resources of the VXLAN Network Identifier (VNI). From the perspective of zero trust, static tunnel identifiers still face security problems such as cracking, tampering, and attacking. Contents of the invention [0003] The embodiment of the present application provides a VXLAN-based triggered dynamic security channel method, a user terminal, a central console, and a storage medium for establishing a temporary channel between the target node and the user terminal, and performing data transfer on the tempor...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/46H04L29/06H04L29/08H04L29/12
CPCH04L12/4641H04L63/0236H04L61/10H04L63/10H04L67/141H04L61/4511
Inventor 余端敏王林潘胜武志鹏杨柳张驰欣
Owner 北京网聚云联科技有限公司