Method and device for migrating virtual machine safety policy

Abstract

The invention discloses a virtual machine safety policy migrating device which is applied in a safety management server in a data center and comprises a migration sensing unit, a positioning unit and a safety policy management unit, wherein the migration sensing unit is used for receiving a virtual machine migration report from a virtual machine management device; the report contains location parameters of the virtual machine; the positioning unit is used for determining an original safety device to which the virtual machine belongs before the migration according to the location parameters of the virtual machine, and a new safety device to which the virtual machine belongs after the migration; the safety policy management unit is used for obtaining the safety policy of the virtual machine configured on the original safety device, and transmitting the safety policy to the new safety device. By utilizing the virtual machine safety policy migrating device, the automatic seamless migration of the safety policy of the safety device on the virtual machine along with the migration of the virtual migration is realized; and the manual configuration operation of a manager on the safety device because of the migration of the virtual machine is avoided, which means a lot for a large data center in which the virtual machine migrates often.

Description

technical field [0001] The invention relates to a data center virtualization technology, in particular to a data center virtual server security policy migration method and device. Background technique [0002] With the development of the Internet, virtualization technology has been widely used in data centers at all levels, especially server virtualization technology has been accepted and successfully implemented by the majority of users. Virtualization technology can virtualize multiple independent virtual machines (VMs, Virtual Machines) on a single physical server. These VMs can be regarded as an independent server and have their own IP address and MAC like the physical server. It has its own operating system and various applications; the popular virtualization software at this stage mainly includes VMware, Xen, Microsoft's Hypervisor-V and the open source KVM virtualization platform. The state of use. [0003] Mainstream virtualization technologies also support the mig...

AI Technical Summary

Problems solved by technology

However, the operation of the administrator faces many problems. The administrator first needs to know whether the migrated VM is managed by a new security device. For example, when migrating in the same data center, the VM may be in the same security device before and after migration protected, so no configuration adjustments are required on the security device

If the administrator judges that the VM will be protected by a new firewall in the new location, then the administrator needs to manually adjust the configuration on the new firewall, and also delete the configuration under the original firewall, which is slow to operate. And it may cause business service interruption for a long time, which makes the online migration of VM meaningless

In addition, because the security policy configuration of the firewall is relatively complicated and professional, a little carelessness may lead to greater security risks, so requiring the administrator to perform manual operations repeatedly may cause greater security risks

From this point of view, the current VM migration process has brought great trouble to the data center managers.

Images