Multi-level resource dynamic allocation method in VPN environment

Abstract

The invention discloses a multi-level resource dynamic allocation method in a VPN environment, and the method comprises the steps: obtaining a tenant level and a service type corresponding to the tenant level, and determining differential service code points based on the tenant level and the service type; carrying out transparent transmission on the differential service code points in a tunnel mode, and determining outer-layer differential service code points; and performing bandwidth allocation and flow control on the port of the IPSEC VPN based on the outer-layer differential service code points. According to the scheme, the requirement for network transmission in the VPN environment of a cloud data center is met, bandwidth allocation and flow control of IPSEC VPN at an entrance and an exit of the cloud data center are achieved through multi-level resource allocation and identification of the service flow and identification in a VPN network, the network resource utilization rate in the VPN environment of the cloud data center is increased, and the network transmission quality is improved.

Description

technical field [0001] The present application relates to the technical field of network transmission in a cloud data center VPN environment, and specifically relates to a multi-level resource dynamic allocation method in a VPN environment. Background technique [0002] With the rapid development of computer information computing and the advent of the era of big data, cloud computing technology has been rapidly developed and applied in the military field. The military cloud centrally manages infrastructure, shares basic physical resources through virtualization technology, and provides application services for multi-tenants on demand. Since multi-tenants share the same physical and network resources based on virtualization technology, the boundary of the tenant system is blurred. Therefore, network, security, and trustworthiness are combined with cryptographic technology reinforcement to achieve logical isolation, thereby achieving security isolation at the boundary. The IP...

AI Technical Summary

Problems solved by technology

However, after the service flow is encrypted, the identification information of tenants and services will be hidden, making it impossible to identify the tenant level and service category at the egress of the IPSEC VPN, and thus making it impossible for the IPSEC VPN to allocate network resources according to tenants and services

However, the cloud data center has many tenants, various business types, and frequent changes. If dynamic allocation cannot be flexibly performed, it will directly affect the network transmission quality of the cloud data center.

Images