基于NSX网络虚拟化的微分段机制探讨及应用  

Discussion andapplication of Micro-segmentation based on NSX network virtualization

作　　者：朱洪武 ZHU Hong-wu(Center for Information and Educational Technology,Southwest Minzu University,Chengdu 610041,China)

机构地区：[1]西南民族大学信息与教育技术中心,四川成都610041

出　　处：《西南民族大学学报（自然科学版）》2022年第4期428-432,共5页Journal of Southwest Minzu University(Natural Science Edition)

摘　　要：传统数据中心很难解决数据中心内部服务器之间的边界问题,处于同一个VLAN下的服务器,存在巨大的安全隐患.基于VMware虚拟化技术的虚拟服务器,可以利用NSX提供的微分段,管控数据中心东西向流量,现实单个虚拟服务器之间的网络隔离,保障数据中心内每一台服务器的安全.It is difficult for traditional data centers to solve the boundary problem between servers in the data center.Servers under the same VLAN have huge security risks.The virtual servers based on VMware virtualization technology can use the micro-segment based on NSX to control the East-West flows of the data center, so as to realize the network isolation between single virtual servers and ensure the security of each server in the data center.

关 键 词：网络虚拟化 微分段 隔离 安全标记 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术]