Virtual gateway protection method, virtual security gateway and system for server virtualization

Abstract

The invention provides a virtual gateway protection method, a virtual security gateway and a system for server virtualization. The method comprises the following steps that: the virtual security gateway is established on a server virtualization platform and accessed to virtual sub-networks to be protected; the virtual security gateway isolates and monitors the communication traffic between the virtual sub-networks, when the communication traffic is against a preset security strategy, the virtual security gateway makes an unexpected response, and when the communication traffic conforms to the security strategy, the virtual security gateway makes a normal response. The method disclosed by the invention establishes the virtual security gateway on the server virtualization platform so as to isolate and monitor the communication traffic between virtual machines, so that the virtual security gateway can make a response in time when the security of the protected virtual machines is threatened, and the virtual machines in a whole virtual network are protected from being influenced.

Description

technical field [0001] The invention relates to the computer field, in particular to a virtual gateway protection method, a security gateway and a system for server virtualization. Background technique [0002] Server virtualization refers to the implementation of a virtualization layer so that multiple virtual servers can run on a single physical server. The biggest change brought about by server virtualization is the change of network architecture. In the traditional mode, each physical machine or server is protected by a set of independent security protection methods, and security protection products such as firewalls are deployed on the periphery. , even if the server is attacked, the harm is only limited to one isolated area, and the scope of influence will not be too large. [0003] However, due to the new network architecture adopted in the virtualized data center, dozens of operating systems or application programs are deployed on the physical server in the form of ...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the present invention provides a virtual gateway protection method, security gateway and system for server virtualization, with the purpose of solving the problem of lack of security protection among virtual machines during server virtualization

Images