云数据中心的安全虚拟网络

虚拟网络安全是云计算安全的重要组成。为了保障虚拟网络流量的可控性和安全性,文中提出了一种基于Ethsec加密压缩技术的安全虚拟网络解决方案。该方案设计了虚拟化安全层、虚拟化安全交换机、安全虚拟网络管理平台和安全虚拟网络密钥分发系统等组件,通过文中提出的Ethsec技术,采用国产商用密码算法SM2和SM4算法,对虚拟机的以太网MAC帧进行压缩和解密,实现虚拟化安全交换机对所有虚拟网络流量的监控和分析。

Security Virtual Network of Cloud Data Center

The virtual network security is an important component of cloud computing security. In order to control and protect the virtual network traffic,a virtual network security solution based on Ethsec encrypted compression technology is proposed,and in this solution,virtual security layer,virtual security switch,security virtual network management platform and security virtual network key distribution center are designed. By the Ethsec technology,SM2 and SM4 algorithm,the Ethernet MAC frame transferred among between the virtual machines is compressed and encrypted,thus to realize the monitoring and analysis of all the virtual network traffic by virtual security switch.