CN103685235A - Three-tier network virtualization realization method and system on the basis of firewall - Google Patents
Three-tier network virtualization realization method and system on the basis of firewall Download PDFInfo
- Publication number
- CN103685235A CN103685235A CN201310580732.8A CN201310580732A CN103685235A CN 103685235 A CN103685235 A CN 103685235A CN 201310580732 A CN201310580732 A CN 201310580732A CN 103685235 A CN103685235 A CN 103685235A
- Authority
- CN
- China
- Prior art keywords
- virtual machine
- bag
- physical machine
- compartment wall
- fire compartment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a three-tier network virtualization realization method and a system on the basis of a firewall. The method comprises the following steps: multiple virtual machines operate on at least one physical machine; the firewall is operated on at least one physical machine; IP packet exchange of the virtual machines is controlled via the firewall; and a virtualized three-tier network is formed by the virtual machines, the physical machines and networks between the physical machines so that the number of VLAN breaks limitation of 4096 in the prior art, and real-time and dynamic change can be performed according to requirements.
Description
Technical field
The present invention relates to cloud computing technology field, relate in particular to the virtual implementation method of a kind of three-layer network based on fire compartment wall and system.
Background technology
With virtual, turn to the field technology revolution that basic cloud computing technology is IT industry, become the direction of IT industry future development, this trend makes the operation degree of specialization of IT infrastructure constantly concentrate and improve, thereby to architecture aspect, particularly network level is had higher requirement.One of them requirement is exactly how to realize efficient between a large-scale virtual machine, and network safely interconnects.
Processing method of the prior art is to go out a virtual machine switch at server internal virtual, and virtual switch provides the interconnected of a plurality of network interface cards and set different VLAN label functions for different network interface cards in main frame inside.Between virtual switch and physical switches, cascade up again and form a complete network environment.But VLAN ID has 4096 number restriction, at cloud computing environment, conventionally have hundreds of millions of equipment, the quantity of this VLAN is obviously inadequate, and after virtual machine switch configuration VLAN, in physical switches, also need to do just associated working after corresponding configuration change, this is contradiction with desired dynamically the change in real time of cloud computing.
Summary of the invention
The object of this invention is to provide the virtual implementation method of a kind of three-layer network based on fire compartment wall and system, the method comprising the steps of: a plurality of virtual machines operate at least one physical machine; In described at least one physical machine, move fire compartment wall; By fire compartment wall, control the IP packet switch of virtual machine; By the network between described virtual machine, physical machine and physical machine, form virtual three-layer network, make the quantity of VLAN break through in prior art the restriction of 4096, and dynamic change in real time as required.
According to an aspect of the present invention, provide a kind of three-layer network based on fire compartment wall the virtual system that realizes, comprising:
Virtual machine control unit, for controlling the operation of virtual machine and being virtual machine distributing IP address, sends IP bag and/or receives IP bag;
Fire compartment wall, for controlling the IP packet switch of each virtual machine;
Physical machine control unit, for controlling the operation of physical machine and being physical machine distributing IP address, processes IP bag according to the control of fire compartment wall;
By the network between described virtual machine, physical machine and physical machine, form virtual three-layer network.
In said system, the IP packet switch that described fire compartment wall is controlled each virtual machine comprises:
Physical machine control unit is each physical machine distributing IP address;
Virtual machine control unit is each virtual machine distributing IP address;
Fire compartment wall is controlled the send mode of the IP bag sending out from the IP address of each virtual machine;
Fire compartment wall is controlled the send mode of IP bag that each destination address is the IP address of particular virtual machine;
When described physical machine receives after IP bag, according to the data source address of this IP bag and destination address, by fire compartment wall, control the send mode of this IP bag.
In said system, the send mode of described IP bag comprises: at least one in transmission, inner forwarding, prevention.
In said system, when the state of described virtual machine and/or physical machine changes, by described fire compartment wall, dynamically revise and control the IP packet switch of each virtual machine.
According to another aspect of the present invention, provide a kind of three-layer network based on fire compartment wall virtual implementation method, comprise step:
S1, a plurality of virtual machine operate at least one physical machine;
S2, in described at least one physical machine, move fire compartment wall;
S3, by fire compartment wall, control the IP packet switch of each virtual machine;
S4, by the network between described virtual machine, physical machine and physical machine, form virtual three-layer network.
In said method, the IP packet switch of controlling each virtual machine by fire compartment wall in described step S3 comprises step:
S301, be each physical machine distributing IP address;
S302, be each virtual machine distributing IP address;
S303, by fire compartment wall, control the send mode of the IP bag sending out from the IP address of each virtual machine;
S304, by fire compartment wall, control the send mode of IP bag that each destination address is the IP address of particular virtual machine;
S305, when described physical machine receives after IP bag, controls the send mode of this IP bag according to the data source address of this IP bag and destination address by fire compartment wall.
In said method, the send mode of described IP bag comprises: at least one in transmission, inner forwarding, prevention.
In said method, when the state of described virtual machine and/or physical machine changes, by described fire compartment wall, dynamically revise and control the IP packet switch of each virtual machine.
The invention provides the virtual implementation method of a kind of three-layer network based on fire compartment wall and system, the method comprising the steps of: a plurality of virtual machines operate at least one physical machine; In described at least one physical machine, move fire compartment wall; By fire compartment wall, control the IP packet switch of virtual machine; By the network between described virtual machine, physical machine and physical machine, form virtual three-layer network, make the quantity of VLAN break through in prior art the restriction of 4096, and dynamic change in real time as required.
Accompanying drawing explanation
Fig. 1 is the virtual schematic diagram of realizing system of the three-layer network based on fire compartment wall of the present invention;
Fig. 2 is the virtual system configuration schematic diagram of realizing system of the three-layer network based on fire compartment wall of the present invention;
Fig. 3 is the process chart of the virtual implementation method of three-layer network based on fire compartment wall of the present invention;
Fig. 4 is the sub-process figure of the virtual implementation method of three-layer network based on fire compartment wall of the present invention.
Embodiment
For making the object, technical solutions and advantages of the present invention more cheer and bright, below in conjunction with embodiment and with reference to accompanying drawing, the present invention is described in more detail.Should be appreciated that, these descriptions are exemplary, and do not really want to limit the scope of the invention.In addition, in the following description, omitted the description to known configurations and technology, to avoid unnecessarily obscuring concept of the present invention.
Processing method of the prior art is to go out a virtual machine switch at server internal virtual, and virtual switch provides the interconnected of a plurality of network interface cards and set different VLAN label functions for different network interface cards in main frame inside.Between virtual switch and physical switches, cascade up again and form a complete network environment.But VLAN ID has 4096 number restriction, at cloud computing environment, conventionally have hundreds of millions of equipment, the quantity of this VLAN is obviously inadequate, and after virtual machine switch configuration VLAN, in physical switches, also need to do just associated working after corresponding configuration change, this is contradiction with desired dynamically the change in real time of cloud computing.And the virtual implementation method of a kind of three-layer network based on fire compartment wall has been proposed in the present invention.
Execution mode one
Fig. 1 is the virtual schematic diagram of realizing system of a kind of three-layer network based on fire compartment wall in the present invention, and as shown in Figure 1, the virtual system that realizes of the three-layer network based on fire compartment wall of the present invention specifically comprises:
Virtual machine control unit 101, for controlling the operation of virtual machine and being virtual machine distributing IP address, sends IP bag and/or receives IP bag;
Physical machine control unit 103, for controlling the operation of physical machine and being physical machine distributing IP address, processes IP bag according to the control of fire compartment wall 102;
By the network between described virtual machine, physical machine and physical machine, form virtual three-layer network.
The control of the IP packet switch of each virtual machine being carried out about described fire compartment wall 102, below specifically describes.First, physical machine control unit 103 is each physical machine distributing IP address.Then, the IP address that virtual machine control unit 101 distributes for each virtual machine.Then, fire compartment wall 102 is controlled the send mode of the IP bag sending out from the IP address of each virtual machine.In the present invention, the send mode of IP bag comprises: at least one in transmission, inner forwarding, prevention.In addition, fire compartment wall 102 is controlled the send mode of the IP bag of the IP address that each destination address is particular virtual machine.
When described physical machine receives after IP bag, according to the data source address of this IP bag and destination address, by fire compartment wall 102, control the send mode of this IP bag.Same as above, in the present invention, the send mode of IP bag comprises: at least one in transmission, inner forwarding, prevention.
For the ease of understanding, in conjunction with Fig. 2, be further described below.Fig. 2 is the system configuration schematic diagram of embodiments of the invention one.
As shown in Figure 2, physical machine 1 inside is provided with virtual machine 1, virtual machine 2, physical machine 2 inside are provided with virtual machine 3, virtual machine 4, between physical machine 1 and physical machine 2, by Wide Area Network, connect, in physical machine 1 and physical machine 2, move respectively fire compartment wall 102, when controlling IP between virtual machine 1, virtual machine 2, virtual machine 3, virtual machine 4, wrap when mutual, first physical machine control unit 103 need to arrange as follows:
One, be physical machine 1 configuration of IP address IPA;
Two, be physical machine 2 configuration of IP address IPB.
Then, virtual machine control unit 101 is each virtual machine distributing IP address., above-mentioned virtual machine 3, virtual machine 4 in Fig. 2 arrange as follows:
Three, be virtual machine 1 configuration of IP address IP1;
Four, be virtual machine 2 configuration of IP address IP2;
Five, be virtual machine 3 configuration of IP address IP3;
Six, be virtual machine 4 configuration of IP address IP4.
Thus, the ground floor that virtual machine 1, virtual machine 2, virtual machine 3, virtual machine 4 form in L 3 virtual network; The second layer that physical machine 1 and physical machine 2 form in L 3 virtual network, forms the 3rd layer in L 3 virtual network by Wide Area Network between physical machine 1 and physical machine 2.
In Fig. 2, after completing setting in the manner described above, the fire compartment wall 102 in physical machine 1 is controlled the mutual of IP bag in the following manner:
A) all data sources are that the bag of IP1 or IP2 all allows to send out from physical machine 1;
B) all data sources are that the bag of IP3 or IP4 all allows to be dealt in physical machine 1;
C) data source be IP1 target be IP2 wrap in the interior forwarding of physical machine 1;
D) data source be IP2 target be IP1 wrap in the interior forwarding of physical machine 1;
And the fire compartment wall 102 in physical machine 2 is controlled the mutual of IP bag in the following manner:
A) all data sources are that the bag of IP3 or IP4 all allows to send out from physical machine 2;
B) all data sources are that the bag of IP1 or IP2 all allows to be dealt in physical machine 2;
C) data source be IP3 target be IP4 wrap in the interior forwarding of physical machine 2;
D) data source be IP4 target be IP3 wrap in the interior forwarding of physical machine 2;
In said system, when the state of described virtual machine and/or physical machine changes, by described fire compartment wall 102, dynamically revise and control the IP packet switch of each virtual machine.About these, will in the second execution mode, describe.
Below, the concrete handling process of the virtual implementation method of three-layer network based on fire compartment wall of the present invention is described.
Fig. 3 is the process chart of a kind of virtual implementation method of three-layer network based on fire compartment wall of the present invention, and concrete steps are as follows:
In step S1, a plurality of virtual machines operate at least one physical machine;
In step S2, in described at least one physical machine, move fire compartment wall;
In step S3, by fire compartment wall, control the IP packet switch of each virtual machine;
In step S4, by the network between described virtual machine, physical machine and physical machine, form virtual three-layer network.
About above-mentioned steps S3, below be further specifically described.
Fig. 4 is the sub-process figure that above-mentioned steps S3 of the present invention is specifically described, and as shown in Figure 4, further carries out following steps:
First, in S301, be each physical machine distributing IP address.Below in conjunction with Fig. 2, be specifically described.
As mentioned above, Fig. 2 is a kind of system configuration schematic diagram of the present invention.As shown in Figure 2, physical machine 1 inside is provided with virtual machine 1, virtual machine 2, physical machine 2 inside are provided with virtual machine 3, virtual machine 4, between physical machine 1 and physical machine 2, by Wide Area Network, connect, in physical machine 1 and physical machine 2, move respectively fire compartment wall, when controlling IP between virtual machine 1, virtual machine 2, virtual machine 3, virtual machine 4, wrap when mutual, first need to arrange as follows:
One, be physical machine 1 configuration of IP address IPA;
Two, be physical machine 2 configuration of IP address IPB.
Then, in S302, be each virtual machine distributing IP address, that is, above-mentioned virtual machine 3, virtual machine 4 in Fig. 2 arrange as follows:
Three, be virtual machine 1 configuration of IP address IP1;
Four, be virtual machine 2 configuration of IP address IP2;
Five, be virtual machine 3 configuration of IP address IP3;
Six, be virtual machine 4 configuration of IP address IP4.
Thus, the ground floor that virtual machine 1, virtual machine 2, virtual machine 3, virtual machine 4 form in L 3 virtual network; The second layer that physical machine 1 and physical machine 2 form in L 3 virtual network, forms the 3rd layer in L 3 virtual network by Wide Area Network between physical machine 1 and physical machine 2.
Then,, in S303, by fire compartment wall, control the send mode of the IP bag sending out from the IP address of each virtual machine.The send mode of IP bag for example comprises: at least one in transmission, inner forwarding, prevention.
Then, in S304, by fire compartment wall, control the send mode of IP bag that each destination address is the IP address of particular virtual machine.The same, the send mode of IP bag for example comprises: at least one in transmission, inner forwarding, prevention.
Then, in S305, when described physical machine receives after IP bag, according to the data source address of this IP bag and destination address, by fire compartment wall, control the send mode of this IP bag.The same, the send mode of IP bag for example comprises: at least one in transmission, inner forwarding, prevention.
Particularly, for example, in Fig. 2, the fire compartment wall in physical machine 1 is controlled the mutual of IP bag in the following manner:
A) all data sources are that the bag of IP1 or IP2 all allows to send out from physical machine 1;
B) all data sources are that the bag of IP3 or IP4 all allows to be dealt in physical machine 1;
C) data source be IP1 target be IP2 wrap in the interior forwarding of physical machine 1;
D) data source be IP2 target be IP1 wrap in the interior forwarding of physical machine 1;
Then, the fire compartment wall in physical machine 2 is controlled the mutual of IP bag in the following manner:
A) all data sources are that the bag of IP3 or IP4 all allows to send out from physical machine 2;
B) all data sources are that the bag of IP1 or IP2 all allows to be dealt in physical machine 2;
C) data source be IP3 target be IP4 wrap in the interior forwarding of physical machine 2;
D) data source be IP4 target be IP3 wrap in the interior forwarding of physical machine 2;
When the state of described virtual machine and/or physical machine changes, by described fire compartment wall, dynamically revise and control the IP packet switch of each virtual machine.Below, for the ease of understanding, an example is simply shown and describes.
The second execution mode:
Interaction mode in virtual three-layer network as shown in Figure 2 between virtual machine 1 and virtual machine 4 needs to change, for example, from being interconnected, become when obstructed, and the fire compartment wall in the physical machine 1,2 in above-mentioned execution mode is controlled respectively the mutual of IP bag in the following manner:
Fire compartment wall in physical machine 1 becomes controls the mutual of IP bag in the following manner:
A) all data sources are that the bag of IP1 or IP2 all allows to send out from physical machine 1;
B) all data sources are that the bag of IP3 or IP4 all allows to be dealt in physical machine 1;
C) data source be IP1 target be IP2 wrap in the interior forwarding of physical machine 1;
D) data source be IP2 target be IP1 wrap in the interior forwarding of physical machine 1;
E) data source is that IP1 target is that the bag of IP4 does not allow to send out;
Fire compartment wall in physical machine 2 becomes controls the mutual of IP bag in the following manner:
A) all data sources are that the bag of IP3 or IP4 all allows to send out from physical machine 2;
B) all data sources are that the bag of IP1 or IP2 all allows to be dealt in physical machine 2;
C) data source be IP3 target be IP4 wrap in the interior forwarding of physical machine 2;
D) data source be IP4 target be IP3 wrap in the interior forwarding of physical machine 2;
E) data source is that IP4 target is that the bag of IP1 does not allow to send out.
Thus, the present invention forms virtual three-layer network by the network by between described virtual machine, physical machine and physical machine, makes the quantity of VLAN break through in prior art the restriction of 4096, and dynamic change in real time as required.
Should be understood that, above-mentioned embodiment of the present invention is only for exemplary illustration or explain principle of the present invention, and is not construed as limiting the invention.Therefore any modification of, making, be equal to replacement, improvement etc., within protection scope of the present invention all should be included in without departing from the spirit and scope of the present invention in the situation that.In addition, claims of the present invention are intended to contain whole variations and the modification in the equivalents that falls into claims scope and border or this scope and border.
Claims (8)
1. the virtual system that realizes of the three-layer network based on fire compartment wall, is characterized in that, comprising:
Virtual machine control unit, for controlling the operation of virtual machine and being virtual machine distributing IP address, sends IP bag and/or receives IP bag;
Fire compartment wall, for controlling the IP packet switch of each virtual machine;
Physical machine control unit, for controlling the operation of physical machine and being physical machine distributing IP address, processes IP bag according to the control of fire compartment wall;
By the network between described virtual machine, physical machine and physical machine, form virtual three-layer network.
2. system according to claim 1, is characterized in that,
Described fire compartment wall is controlled the IP packet switch of described each virtual machine in the following manner:
Described physical machine control unit is each physical machine distributing IP address;
Described virtual machine control unit is each virtual machine distributing IP address;
Described fire compartment wall is controlled the send mode of the IP bag sending out from the IP address of each virtual machine;
Described fire compartment wall is controlled the send mode of IP bag that each destination address is the IP address of particular virtual machine;
When described physical machine receives after IP bag, according to the data source address of this IP bag and destination address, by described fire compartment wall, control the send mode of this IP bag.
3. system according to claim 2, is characterized in that,
The send mode of described IP bag comprises: at least one in transmission, inner forwarding, prevention.
4. according to the system described in claims 1 to 3 any one, it is characterized in that,
When the state of described virtual machine and/or physical machine changes, by described fire compartment wall, dynamically revise and control the IP packet switch of each virtual machine.
5. the virtual implementation method of the three-layer network based on fire compartment wall, is characterized in that, comprises step:
Step S1, a plurality of virtual machine operate at least one physical machine;
Step S2, in described at least one physical machine, move fire compartment wall;
Step S3, by fire compartment wall, control the IP packet switch of each virtual machine;
Step S4, by the network between described virtual machine, physical machine and physical machine, form virtual three-layer network.
6. method according to claim 5, is characterized in that,
Described step S3 further comprises the steps:
Step S301, be each physical machine distributing IP address;
Step S302, be each virtual machine distributing IP address;
Step S303, by fire compartment wall, control the send mode of the IP bag sending out from the IP address of each virtual machine;
Step S304, by fire compartment wall, control the send mode of IP bag that each destination address is the IP address of particular virtual machine;
Step S305, when described physical machine receives after IP bag, controls the send mode of this IP bag according to the data source address of this IP bag and destination address by fire compartment wall.
7. method according to claim 6, is characterized in that,
The send mode of described IP bag comprises: at least one in transmission, inner forwarding, prevention.
8. according to the method described in claim 5 to 7 any one, it is characterized in that,
When the state of described virtual machine and/or physical machine changes, by described fire compartment wall, dynamically revise and control the IP packet switch of each virtual machine.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310580732.8A CN103685235A (en) | 2013-11-18 | 2013-11-18 | Three-tier network virtualization realization method and system on the basis of firewall |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310580732.8A CN103685235A (en) | 2013-11-18 | 2013-11-18 | Three-tier network virtualization realization method and system on the basis of firewall |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN103685235A true CN103685235A (en) | 2014-03-26 |
Family
ID=50321550
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310580732.8A Pending CN103685235A (en) | 2013-11-18 | 2013-11-18 | Three-tier network virtualization realization method and system on the basis of firewall |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103685235A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104601428A (en) * | 2014-12-23 | 2015-05-06 | 广州亦云信息技术有限公司 | Communication method of virtual machines |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP1674965A2 (en) * | 2004-12-21 | 2006-06-28 | Microsoft Corporation | Computer security management, such as in a virtual machine or hardened operating system |
| CN101409714A (en) * | 2008-11-18 | 2009-04-15 | 华南理工大学 | Firewall system based on virtual machine |
| CN102299929A (en) * | 2011-09-15 | 2011-12-28 | 北京天地云箱科技有限公司 | Access control method, system and device for virtual machine |
| CN202127422U (en) * | 2011-06-29 | 2012-01-25 | 上海地面通信息网络有限公司 | Fire wall virtualization treatment device |
| CN102469004A (en) * | 2010-10-29 | 2012-05-23 | 中国科学院计算技术研究所 | Virtual machine network system and creation method thereof |
| CN102523215A (en) * | 2011-12-15 | 2012-06-27 | 北京海云捷迅科技有限公司 | Virtual machine (VM) online antivirus system based on KVM virtualization platform |
| CN102710669A (en) * | 2012-06-29 | 2012-10-03 | 杭州华三通信技术有限公司 | Firewall strategic control method and device |
| CN102857475A (en) * | 2011-06-29 | 2013-01-02 | 上海地面通信息网络有限公司 | Firewall virtualization processing system |
-
2013
- 2013-11-18 CN CN201310580732.8A patent/CN103685235A/en active Pending
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP1674965A2 (en) * | 2004-12-21 | 2006-06-28 | Microsoft Corporation | Computer security management, such as in a virtual machine or hardened operating system |
| CN101409714A (en) * | 2008-11-18 | 2009-04-15 | 华南理工大学 | Firewall system based on virtual machine |
| CN102469004A (en) * | 2010-10-29 | 2012-05-23 | 中国科学院计算技术研究所 | Virtual machine network system and creation method thereof |
| CN202127422U (en) * | 2011-06-29 | 2012-01-25 | 上海地面通信息网络有限公司 | Fire wall virtualization treatment device |
| CN102857475A (en) * | 2011-06-29 | 2013-01-02 | 上海地面通信息网络有限公司 | Firewall virtualization processing system |
| CN102299929A (en) * | 2011-09-15 | 2011-12-28 | 北京天地云箱科技有限公司 | Access control method, system and device for virtual machine |
| CN102523215A (en) * | 2011-12-15 | 2012-06-27 | 北京海云捷迅科技有限公司 | Virtual machine (VM) online antivirus system based on KVM virtualization platform |
| CN102710669A (en) * | 2012-06-29 | 2012-10-03 | 杭州华三通信技术有限公司 | Firewall strategic control method and device |
Non-Patent Citations (1)
| Title |
|---|
| 苏翔: "《基于虚拟机技术的网络设备共享与访问控制的研究与实现》", 《NSTL国家科技图书文献中心》 * |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104601428A (en) * | 2014-12-23 | 2015-05-06 | 广州亦云信息技术有限公司 | Communication method of virtual machines |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112217746B (en) | Message processing method, host and system in cloud computing system | |
| CN114363021B (en) | Network target range system, virtual network implementation method and device of network target range system | |
| CN107077579B (en) | Method, apparatus, and medium for providing stateful services on stateless cluster edges | |
| US20140250220A1 (en) | Optimizing Handling of Virtual Machine Mobility in Data Center Environments | |
| CN104869058A (en) | Method and device for transmitting data message | |
| WO2017160605A1 (en) | Network virtualization of containers in computing systems | |
| US11586575B2 (en) | System decoder for training accelerators | |
| CN106533890A (en) | Message processing method, device and system | |
| CN105577548A (en) | Software definition network message processing method and device | |
| CN104980361A (en) | Load balancing method, device, and system | |
| CN103544043A (en) | Hierarchical system for managing a plurality of virtual machines, method and computer program | |
| WO2016107594A1 (en) | Accessing external network from virtual network | |
| CN103973578A (en) | Virtual machine traffic redirection method and device | |
| CN103763135A (en) | PE traffic scheduling method and device | |
| CN107409097A (en) | Utilize the load balance mobility of automatic structure framework | |
| CN105429811A (en) | Network management system and method | |
| JP2014027655A (en) | Method and device for manufacturing network device | |
| CN105635190A (en) | Service execution method and device for data center network | |
| CN105791402A (en) | Network virtualization realization method of cloud computing platform and corresponding plug-in and agent | |
| CN104468304A (en) | Method for synchronizing pool element status information, pool registrator and pool elements | |
| CN111371608A (en) | Method, device and medium for deploying SFC service chain | |
| JP2013141227A (en) | Dynamic virtual lans to segregate data | |
| US9692723B2 (en) | Network management of devices residing behind a network device | |
| JP7056555B2 (en) | Network system, its management method and equipment, and server | |
| CN103685235A (en) | Three-tier network virtualization realization method and system on the basis of firewall |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20140326 |
|
| WD01 | Invention patent application deemed withdrawn after publication |