A multi-tenant-oriented cloud network system

Abstract

The invention discloses a multi-tenant-oriented cloud network system. The cloud network system includes: a computing node, a virtual router cluster, and a cloud gateway. The virtual machine included in the computing node exchanges messages with the public server in the private network through the virtual router cluster; and, the virtual machine communicates with the virtual router cluster and The cloud gateway realizes message exchange with the public network; wherein, the virtual router cluster includes at least two virtual routers, and each of the virtual routers issues the same IP address to the private network switch; the cloud gateway includes at least two gateway nodes, each The gateway node publishes an equivalent default route to the private network switch, and each of the gateway nodes publishes the same floating IP address to the public network router or public network switch, so as to realize the cluster expansion of the cloud network system, and avoid the problem caused by a single node Failures affect the availability of the entire network, improving the network's attack defense capabilities.

Description

technical field [0001] Embodiments of the present invention relate to data transmission technologies, and in particular to a multi-tenant-oriented cloud network system. Background technique [0002] Network management and configuration is a very important function in cloud computing technology, and realizing a flexible, efficient and secure network system has always been the goal pursued by various cloud platforms. [0003] Most of the existing public cloud network systems or private cloud network systems are solutions based on the Openstack community, an open source cloud computing management platform, including flat network systems and network systems based on a cascading design overlay. The above-mentioned network system can meet the requirements of use in small-scale deployment or internal use. Then, as a commercial solution, there are obvious performance bottlenecks and security bottlenecks for large-scale tenants and Internet access. E.g, figure 1 Provides a flat ne...

AI Technical Summary

Problems solved by technology

Since the Network Node node directly faces the public network, the performance of a single node is poor, and it cannot be expanded in a cluster. Therefore, for a virtual machine user, the network node corresponding to the user is easily unable to serve due to distributed denial-of-service DDoS attacks.

At present, a single node of Network Node is easily paralyzed by syn flood or large bandwidth attack

Images