Safety management and control method, device and equipment of cluster system and storage medium

Abstract

The invention provides a security management and control method and device for a cluster system, electronic equipment and a storage medium. The cluster system comprises at least two sub-clusters usedfor supporting a network application, and the method comprises the steps that each node in each sub-cluster in the at least two sub-clusters obtains a node list of the sub-cluster to which the node belongs; a firewall rule of the sub-clusters are generated according to the security policies of the nodes and the node list; and the firewall rule is applied to construct a firewall between the sub-cluster to which the node belongs and an external sub-cluster, and an intercommunication permission between the node and the node in the node list is opened. Through adoption of the method and the device, fine-grained isolation of the sub-cluster in the cluster system can be realized, and automatic management of a security policy is realized.

Description

technical field [0001] The present invention relates to network security technology, in particular to a security management and control method, device, electronic equipment and storage medium of a cluster system. Background technique [0002] With the continuous development of modern information technology, the scale of data computing, processing and storage is also increasing, and the requirements for network security management capabilities are also getting higher and higher. It is becoming more and more stretched, and a distributed cluster architecture built by various emerging technologies is gradually emerging. A complete set of services often consists of different clusters composed of server applications with different functions. The clusters interact with each other through the network. At the same time, it is necessary to solve the problem of cluster network security through well-designed firewall rules and hardware. In actual production activities, with the continuo...

AI Technical Summary

Problems solved by technology

[0002] With the continuous development of modern information technology, the scale of data computing, processing and storage is also increasing, and the requirements for network security management capabilities are also getting higher and higher. It is becoming more and more stretched, and a distributed cluster architecture built by various emerging technologies is gradually emerging. A complete set of services often consists of different clusters composed of server applications with different functions. The clusters interact with each other through the network. At the same time, it is necessary to solve cluster network security problems through well-designed firewall rules and hardware. In actual production activities, with the continuous increase of cluster types and scale, network security management becomes more and more complicated and difficult.

Images