Virtual machine migration system and method

Abstract

The invention discloses a virtual machine migration system and method, and the method comprises the steps: an installation and management platform sends migration notification information for a target virtual machine to a first virtual firewall when the target virtual machine is migrated, the first virtual firewall generates a target key value pair according to the migration notification information, and adds the target key value pair to a preset global key value database, the second virtual firewall monitors a newly added target key value pair in the global key value database and establishes connection with the first virtual firewall according to the target key value pair, and the first virtual firewall synchronizes the policy and session information to the second virtual firewall; when the migration action of the target virtual machine is completed, the installation and management platform sends migration completion notification information to the first virtual firewall; and the first virtual firewall receives the migration completion notification information, and deletes the policy and session information in the first virtual firewall, so that the problem of policy redundancy of the virtual protection wall can be avoided, the performance of the virtual firewall is ensured, and meanwhile, the communication performance of the service of the virtual machine is not influenced.

Description

technical field [0001] The present application relates to the technical field of network security, in particular, to a virtual machine migration system and method. Background technique [0002] At present, service virtualization technology has been widely used in data centers at all levels. Through this technology, multiple independent VM virtual machines can be virtualized on a single physical server, and these VM virtual machines can be regarded as an independent physical server. , which has its own IP address and MAC address, its own operating system and various applications. Due to the need for safe operation, maintenance and management of the data center or other reasons such as server power failure, it is sometimes necessary to migrate the virtual machine, that is, to migrate to other server nodes in the cloud environment. The security policy management method issued by the management platform, the management platform issues all the security policies to each virtual p...

AI Technical Summary

Problems solved by technology

Due to the need for safe operation, maintenance and management of the data center or other reasons such as server power failure, it is sometimes necessary to migrate the virtual machine, that is, to migrate to other server nodes in the cloud environment. The security policy management method issued by the management platform, the management platform issues all the security policies to each virtual protection wall. When the virtual machine is migrated, no matter which node it is on, it will be able to match the security policy corresponding to the virtual machine. However, in practice, it is found that , all the security policies are sent to each virtual firewall, which will easily lead to redundancy of virtual firewall policies, resulting in low policy matching performance. At the same time, session information cannot be migrated at the same time when the virtual machine is migrated, thus affecting the business of the virtual machine communication performance

It can be seen that the existing virtual machine migration method easily leads to redundant virtual firewall policies, reduces policy matching performance, and also affects the communication performance of virtual machine services

Images