Multi-tenant-oriented cloud network architecture

Abstract

The invention discloses a multi-tenant-oriented network architecture. The cloud network architecture comprises computing nodes, a virtual router cluster and a cloud gateway. Virtual machines which are included in the computing nodes perform message exchange with a public server in a private network through the virtual router cluster. Furthermore message exchange between the virtual machines and a public network is realized through the virtual router cluster and the cloud gateway, wherein the virtual router cluster comprises at least two virtual routers, and each virtual router transmits a same IP address to a private network switch. The cloud gateway comprises at least two gateway nodes. Each gateway node transmits an equivalent default router to the private network switch. Furthermore each gateway node transmits a same floating IP address to a public network router or a public network switch, thereby realizing cluster expansion of the cloud network architecture, preventing serviceability reduction of the whole network caused by fault of a single node and improving defensive capability of the network to attacks.

Description

Technical field [0001] The embodiment of the present invention relates to data transmission technology, in particular to a multi-tenant-oriented cloud network architecture. Background technique [0002] Network management and configuration is a very important function in cloud computing technology. Realizing a flexible, efficient and secure network architecture has always been the goal pursued by various cloud platforms. [0003] Most of the existing public cloud network architectures or private cloud network architectures are solutions based on the open source cloud computing management platform Openstack community, including flat network architectures and network architectures based on overlay design. The above network architecture can meet the needs of use when deployed on a small scale or used internally. Then, as a commercial solution, there are obvious performance and security bottlenecks when facing large-scale tenants and facing Internet access. E.g, figure 1 Provides a f...

AI Technical Summary

Problems solved by technology

Since the NetworkNode node directly faces the public network, its single node performance is poor, and it cannot be expanded in a cluster. Therefore, for a virtual machine user, the network node corresponding to the user is easily unable to serve due to distributed denial-of-service DDoS attacks.

At present, a single NetworkNode node is easily paralyzed due to flooding attack synflood or large bandwidth attack

Images