Security resource dynamic scheduling system and method based on multi-mode load balancing

Abstract

A security resource dynamic scheduling system based on multi-mode load balancing comprises an application layer, a control layer and a physical layer, a user issues an equipment use demand through the application layer, and the application layer sends the equipment use demand to the control layer; and the control layer analyzes the parameters of the user equipment use demand after receiving the user equipment use demand, acquires the load information of the equipment in the physical layer, performs resource scheduling calculation by using the analyzed parameters and the equipment load information, and sends a resource scheduling calculation result to the physical layer. According to the invention, matching can be carried out according to the load resources required by the security component, so that the problem of overall performance reduction caused by overweight load and overlong queuing time of individual equipment is avoided, a distributed scheduling algorithm for load balancing of the underlying security resource pool is realized, load balancing can be realized, and a higher scanning speed can be provided.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to a security resource dynamic scheduling system and method based on multi-mode load balancing. Background technique [0002] Network security service is an indispensable function in the current network. The traditional security protection strategy is to notify the security device of the address of the protected entity object, and the security device establishes a connection with it through the traditional network protection, while in the existing network, due to various network devices and network virtualization functions, the security Services are no longer simply an entity protecting a device, but complex internal cloud tenants, virtual machines, and other objects. The current security architecture is difficult to meet the development requirements of the network, and cannot make enough progress in the current network protection requirements with characteristics of...

AI Technical Summary

Problems solved by technology

Although building a security service chain based on SDN and NFV technology can effectively improve the efficiency of security protection and reduce the cost and complexity of network management, there are still major defects in the existing security service chain mechanism, mainly in how to schedule security resources. Effectively balance the load of various virtual security devices, improve the efficiency of security service chain security resource scheduling, and then improve the resource utilization of the physical server it carries

Images