基于多租户虚拟环境的云平台网络安全设计与应用  

Network Security Design and Application of Cloud Platform Based on Multi-tenant Virtual Environment

作　　者：顾潇腾 张治华 徐宝剑 王禄 GU Xiaoteng;ZHANG Zhihua;XU Baojian;WANG Lu(The 28th Reasearch Institute of China Electronics Technology Group Corporation,Nanjing 210000,China)

机构地区：[1]中国电子科技集团公司第二十八研究所,江苏南京210000

出　　处：《智能物联技术》2024年第4期69-72,共4页Technology of Io T& AI

摘　　要：介绍云平台安全整体架构设计,针对多租户虚拟网络环境下租户与租户之间、租户内部和租户对外访问等多种安全访问需求,围绕云网络安全设计具体说明虚拟扩展局域网(Virtual Extensible Local Area Network,VXLAN)、安全组、虚拟防火墙等方面的安全防护技术,重点探讨分布式虚拟防火墙和安全虚拟组件两种安全防护系统的特点与优势,为云平台安全防护提供新的思路和解决方案。This article introduces the overall architecture design of cloud plaform security,and then focuses on multiple security access requirements such as between tenants,within tenants,and external access in a multi-tenant virtual network environment.It specifically explains security protection technologies such as Virtual Extensible Local Area Network(VXLAN),security groups,and virtual firewalls around cloud network security design,and focuses on exploring the characteristics and advantages of distributed virtual firewalls and secure virtual components as two security protection systems,providing new ideas and solutions for cloud platform security protection.

关 键 词：云网络安全 多租户虚拟网络 分布式虚拟防火墙 安全虚拟组件 

分 类 号：TN915.08[电子电信—通信与信息系统]