Design and study of network isolation between hosts in data centers based on Private VLANs

Design and study of network isolation between hosts in data centers based on Private VLANs

연구 분야: Cryptography

학회: CNSCT '24: Proceedings of the 2024 3rd International Conference on Cryptography, Network Security and Communication Technology

Traditional data centers are divided into VLANs according to certain needs, so there is a two-layer interoperability between some servers, and once one of them is infiltrated and boosted, it can be used as a springboard machine to carry out horizontal attacks. In this paper, we utilize Private VLAN technology to realize the two-layer isolation of servers, which can flexibly design the blocking and interworking between servers in the same network segment, so as to maintain the independence of the servers and guarantee the security of regional servers.