The Design And Implementation Of A Secure And Efficient Virtual Network Architecture

Internet-based cloud computing can provide to users dynamic and scalable virtualized resources, and its services are based on a dynamic architecture, which cuts the connection between the software and the application environment, so that time can be saved from the management headaches of computing resources. The flexible demand for resources is a key characteristic of cloud computing, because different users need different resources during different time periods, which requires the cloud computing system to support the self-adaptive management mechanism of service resources and to allocate virtual resources to different users during different time periods in a dynamic way. In the traditional mode of cloud computing, the virtual computing resources for users usually take up the public physical resources in the cloud, which greatly saves the cost of platform construction for cloud computing. However, it also exposes all the users’data to the public environment and threatens the data security. Today, data encryption is widely used to ensure its security, but such methods still have problems with security and performance. Therefore, in order to solve the above-mentioned problems, this paper designs and constructs a safe and efficient virtual network architecture, which divides the system platform into different security domains according to the usage of virtual resources. While separating the information in different security domains from interactions, the architecture ensures that the virtual resources belonging to the same security domain can make information exchanges. Also, the virtual network architecture realizes a communication mechanism based on shared memory while ensuring security. This enables the virtual resources to choose different communication mechanisms according to the resources’real-time distribution on the physical platform and greatly improves the communication between the virtual resources.The main work of this paper is as follows:1) It designs and constructs a secure virtual network architecture. The architecture divides the system platform into different security domains according to the usage of virtual resources. These security domains are isolated from each other and can’t exchange information between different security domains. While separating the information in different security domains from interactions, it ensures that the virtual resources belonging to the same security domain can make information exchanges. It also ensures that the data in a certain security domain can only be shared by virtual resources of the same domain instead of being leaked to others. Meanwhile, the security domain can span multiple physical hosts. This not only expands the scope of security domains to ensure that the virtual resources from different physical hosts can be distributed and shared in the same security domain, but also facilitates the allocation of virtual resources to different security domains in a convenient way. Moreover, it can improve the reliability of the system platform via the real-time migration of virtual resources.2) It designs and constructs a new mechanism of communication according to the real-time distribution of virtual resources on the system platform. Based on shared memory, this kind of communication mechanism enables higher communication efficiency than the traditional ones, so as to meet the demand of high-performance communication on the system platform.