Configuration method, device for virtual firewall, and computer readable storage medium

Abstract

The invention discloses a configuration method, a device for a virtual firewall, and a computer readable storage medium, relates to the technical field of computers. The method comprises the followingsteps: finding a first security policy set of a first virtual firewall on a first physical machine before the migration according to the migration information of a virtual machine; extracting a security policy of the virtual machine from the first security policy set; migrating the security policy of the virtual machine to a second security policy set of a second virtual firewall on a second physical machine after the virtual machine is migrated; and deleting the security policy of the virtual machine in the first security policy set. According to the method of the invention, the security policy follows the virtual machine for migration, different security policy sets are configured on different physical machines, and the security policy set of the physical machine before the migration nolonger saves the security policy of the migrated virtual machine, which reduces the number of redundant security policies in the virtual firewall and improves the performance of the virtual firewalland the virtual machine.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a virtual firewall configuration method, device and computer-readable storage medium. Background technique [0002] The distributed virtual firewall is a solution to realize the security protection of east-west traffic in the cloud resource pool. [0003] Distributed virtual firewalls generally adopt the form of virtual machines, embedded in the Hypervisor (system management program) level, and run on the same physical machine as the protected virtual machines. [0004] In order to solve the problem of following the security policy when the virtual machine is migrated, the current distributed virtual firewall in the industry adopts the solution of configuring the same global policy, that is, each distributed firewall not only loads the security policy of the virtual machine on the physical machine where it is located, but also loads other physical The security policy o...

AI Technical Summary

Problems solved by technology

Therefore, the virtual firewall adopts the solution of configuring the same global policy to solve the problem of security policy following when the virtual machine is migrated, resulting in a large number of redundant security policy entries in each virtual firewall, which affects the performance of the virtual firewall, thus affecting the virtual machine on the same physical machine. The performance of the virtual machine

Images