| At present, m ore and m ore cloud com puting platform use virtualization technology. Along with the continuous expa nsion of the cloud com puting platform, the easy-to-use network virtualization and its security are increasingly becoming the focus of research.Because Xen virtual network environm ent is relatively s imple. Only Linux Bridge is u sed to im plement m ultiple virtu al network ca rds to sh are the phy sical network card. Although the basic requirement of virtualization has been met, but there are som e shortcom ings, such as: the lack of easy configuration m ethod and management interface in the virtualization applications, the unitary function of virtual switch and security policies can not be achieved with a virtual switch.In this paper, a detailed analysis of the virtual switch technology is first provided. Based on this, a xen-based virtual switch technology with security policy is put forward after in-depth research. This virtual switch technology is not designed for the simulation switch device in sim ulation environment, but is designed especially for virtual m achines in Xen virtual e nvironments to comm unicate with the ex ternal network environment. The technology has the closer relationship with Xen, as it is a key sub-function of Xen virtualization. It has the visual management interface and can be configured, safely migrated and is ARP attacks proof, etc. So it provides a reliable security protection for the virtual applianc es. In addition, the virtual m achine safely migration has also been im proved to ensure the virtual m achines can be m igrated between the servers with the running services on the virtual machines uninterrupted. |