Research and design of multi-tenant scheme for Kubernetes container cloud platform

Danchi HUANG; Zhenwei HE; Liyun YAN; Yuanzhi LIN; Xinzhang YANG

doi:10.11959/j.issn.1000-0801.2020187

您当前的位置：

首页 >

文章列表页 >

Research and design of multi-tenant scheme for Kubernetes container cloud platform

Operation Technology | 更新时间：2024-06-05

- Research and design of multi-tenant scheme for Kubernetes container cloud platform
- Telecommunications Science Vol. 36, Issue 9, Pages: 102-111(2020)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2020187
  CLC： TN929.5
- Published Online：2020-09，
  
  Published：20 September 2020
- 稿件说明：
移动端阅览
Danchi HUANG, Zhenwei HE, Liyun YAN, et al. Research and design of multi-tenant scheme for Kubernetes container cloud platform[J]. Telecommunications science, 2020, 36(9): 102-111.
DOI：

Danchi HUANG, Zhenwei HE, Liyun YAN, et al. Research and design of multi-tenant scheme for Kubernetes container cloud platform[J]. Telecommunications science, 2020, 36(9): 102-111. DOI： 10.11959/j.issn.1000-0801.2020187.

摘要

在容器云平台中，租户共享底层的计算、存储、网络等资源，存在租户容器运行和数据安全问题。分析了 Kubernetes 访问控制和资源隔离实现方案基础上，提出了一种基于多租户访问控制模型的容器云平台多租户方案，涵盖多租户管理模型、多租户访问控制、计算资源隔离和网络资源隔离等，可切实提升基于Kubernetes的容器云平台的资源隔离能力，有效降低数据安全隐患。

Abstract

In the container cloud platform

tenants share the underlying computing

storage

network and other resources

and there are problems with the operation of the tenant container and data security.Based on the analysis of Kubernetes scheme based on access control and resource isolation

a multi-tenant cloud platform was proposed

which covers multi-tenancy management model

multi-tenant access control

computing resources isolated and network resources

etc.The proposed model can be practically improving resource isolation capability based on containers of Kubernetes cloud platform

effectively reduce the data security hidden danger.

关键词

Keywords

references

李伟东 , 杨小虎 . 基于Kubernetes的容器云平台强多租户模型关键技术研究 [D ] . 杭州:浙江大学 , 2019 ： 1 - 63 .

LI W D , YANG X H . Key techniques of hard multi tenancy model in Kubernetes based container cloud [D ] . Hangzhou:Zhe-jiang University , 2019 ： 1 - 63 .

袁雪波 , 丁旭阳 . 基于 OpenStack 的多租户数据安全保护技术研究 [D ] . 成都:电子科技大学 , 2017 ： 1 - 58 .

YUAN X B , DING X Y . Research on multi-tenant data securui-ty protection technology based on OpenStack [D ] . Chengdu:School of Computer Science and Engineering , 2017 ： 1 - 58 .

BobKillen,Liggitt.Authenticating [EB ] . 2020 .

Egernst,Nitkon,Jodh-intel,GabyCT.Kata containers architecture [EB ] . 2019 .

Rastislavszabo.Contiv/VPP Kubernetes network Plugin [EB ] . 2019 .

Rastislavszabo,Milanlenco,Jmedved.Kubernetes network policies in Contiv/VPP [EB ] . 2019 .

朱瑜坚 , 马俊明 . 一种面向多租户的 Linux 容器集群组网方法 [J ] . 计算机科学 , 2018 ( 9 ): 46 - 51 .

ZHU Y J , MA J M . Linux container cluster networking approach for multiple-tenants [J ] . Computer Science , 2018 ( 9 ): 46 - 51 .

杨约社 , 戴元顺 . 云环境下多租户的网络隔离的研究与实现 [D ] . 成都:电子科技大学 , 2019 : 1 - 53 .

YANG Y S , DAI Y S . Research and implementation of mul-ti-tenant network isolation in cloud environment [D ] . Chengdu:School of Computer Science and Engineering , 2019 : 1 - 53 .

Views

1148

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Kubernetes based converged cloud native infrastructure solution and key technologies

Containerizing solution based on Kubernetes of database and its cluster

Cost optimization model for multi-cloud network based on Kubernetes

Cloud native intelligent operation and maintenance technology

Service platform architecture reconstruction based on microservices

Related Author

Zhenwei HE

Danchi HUANG

Liyun YAN

Yuanzhi LIN

Xinzhang YANG

Liyun YAN

Shaoxin HOU

Ling ZHANG

Related Institution

Guangzhou Research Institute of China Telecom Co., Ltd.

China Mobile South Base

Research Institute of China Telecom Co., Ltd.

China Mobile Communication Group Southern Base

China Mobile Group South Base Co.,Ltd.

⁰