Traffic forwarding method and device based on virtualization cloud platform, and storage medium

Abstract

The invention provides a flow forwarding method and device based on a virtualization cloud platform, a storage medium and a processor. The method comprises the following steps: detecting whether a threat exists in virtual network traffic of a physical host; under the condition that threats exist in the virtual network flow, controlling the physical host to be switched from a flow mirror image modeto a flow serial mode; post threat mitigation, controlling the physical host to switch from a flow serial mode to a flow mirror image mode; according to the method, the switching of the method for forwarding the traffic in the virtualized cloud platform between the traffic mirroring mode and the traffic serial mode is realized; a threat can be detected based on the traffic mirroring mode, and packet loss and time delay of the traffic cannot be caused; based on the flow serial mode, flow forwarding and threat elimination can be realized, so that the method has dual advantages of a flow mirroring mode and a flow serial mode, and the flow forwarding effect based on the virtualization cloud platform is further improved.

Description

technical field [0001] The present application relates to the technical field of cloud security, in particular, to a method, device, storage medium and processor for forwarding traffic based on a virtualized cloud platform. Background technique [0002] In the existing virtualized cloud platform, a virtual machine forwards traffic through a virtual network. Generally, there are two methods, pure traffic mirroring technology and simple traffic cascading technology. [0003] The pure traffic mirroring technology itself is to copy the traffic of the virtualized cloud platform. The actual traffic is not processed by the mirroring device, so it cannot affect the forwarding path of the traffic. If a threat is found in the traffic, a corresponding policy cannot be applied to the traffic to block the threat. [0004] The pure traffic concatenation technology is to connect a specific virtual security device between the virtual machine and the virtual network. The traffic first enter...

AI Technical Summary

Problems solved by technology

[0006] The main purpose of this application is to provide a method, device, storage medium, and processor for forwarding traffic based on a virtualized cloud platform, so as to solve the problem of poor processing effect of virtual machines forwarding traffic through a virtual network in a virtualized cloud platform in the prior art. bad question

Images