Kubernetes容器云平台多租户方案研究与设计

doi:10.11959/j.issn.1000-0801.2020187

Abstract

Abstract:

In the container cloud platform,tenants share the underlying computing,storage,network and other resources,and there are problems with the operation of the tenant container and data security.Based on the analysis of Kubernetes scheme based on access control and resource isolation,a multi-tenant cloud platform was proposed,which covers multi-tenancy management model,multi-tenant access control,computing resources isolated and network resources,etc.The proposed model can be practically improving resource isolation capability based on containers of Kubernetes cloud platform,effectively reduce the data security hidden danger.

Key words: multi-tenant, Kubernetes, container

CLC Number:

TN929.5

Danchi HUANG,Zhenwei HE,Liyun YAN,Yuanzhi LIN,Xinzhang YANG. Research and design of multi-tenant scheme for Kubernetes container cloud platform[J]. Telecommunications Science, 2020, 36(9): 102-111.

Figures/Tables 8

References 8

[1]	李伟东, 杨小虎 . 基于Kubernetes的容器云平台强多租户模型关键技术研究[D]. 杭州:浙江大学, 2019： 1-63.
	LI W D , YANG X H . Key techniques of hard multi tenancy model in Kubernetes based container cloud[D]. Hangzhou:Zhe-jiang University, 2019： 1-63.
[2]	袁雪波, 丁旭阳 . 基于 OpenStack 的多租户数据安全保护技术研究[D]. 成都:电子科技大学, 2017： 1-58.
	YUAN X B , DING X Y . Research on multi-tenant data securui-ty protection technology based on OpenStack[D]. Chengdu:School of Computer Science and Engineering, 2017： 1-58.
[3]	BobKillen,Liggitt.Authenticating[EB]. 2020.
[4]	Egernst,Nitkon,Jodh-intel,GabyCT.Kata containers architecture[EB]. 2019.
[5]	Rastislavszabo.Contiv/VPP Kubernetes network Plugin[EB]. 2019.
[6]	Rastislavszabo,Milanlenco,Jmedved.Kubernetes network policies in Contiv/VPP[EB]. 2019.
[7]	朱瑜坚, 马俊明 . 一种面向多租户的 Linux 容器集群组网方法[J]. 计算机科学, 2018(9): 46-51.
	ZHU Y J , MA J M . Linux container cluster networking approach for multiple-tenants[J]. Computer Science, 2018(9): 46-51.
[8]	杨约社, 戴元顺 . 云环境下多租户的网络隔离的研究与实现[D]. 成都:电子科技大学, 2019: 1-53.
	YANG Y S , DAI Y S . Research and implementation of mul-ti-tenant network isolation in cloud environment[D]. Chengdu:School of Computer Science and Engineering, 2019: 1-53.

Metrics

Recommended 0

No Suggested Reading articles found!

[1]	Ming GAO, Ming LIU, Yangting CHEN, Weiming WANG. Cost optimization model for multi-cloud network based on Kubernetes [J]. Telecommunications Science, 2023, 39(2): 71-82.
[2]	Yuting WU, Xuliang WANG, Shuo QUAN. KubeTelecom: a multi-cloud multi-container cluster management and operation engine for 5G network slicing [J]. Telecommunications Science, 2021, 37(12): 72-83.
[3]	Gang LU,Changyi CHEN,Zelong HUANG,Zeyuan HUANG. Research on intelligent cloud native architecture and key technologies for cloud and network integration [J]. Telecommunications Science, 2020, 36(9): 67-74.
[4]	Dongliang GUAN. Service platform architecture reconstruction based on microservices [J]. Telecommunications Science, 2020, 36(9): 75-83.
[5]	Liyun YAN,Xinzhang YANG,Zhenwei HE,Yuanzhi LIN,Shaoxin HOU. Service mesh technology evaluation and integration scheme based on telecom operator perspective [J]. Telecommunications Science, 2020, 36(6): 144-153.
[6]	Zhenwei HE,Danchi HUANG,Liyun YAN,Yuanzhi LIN,Xinzhang YANG. Kubernetes based converged cloud native infrastructure solution and key technologies [J]. Telecommunications Science, 2020, 36(12): 77-88.
[7]	Long XUE,Gang LU,Qi ZHOU,Huiyan ZHANG,Tingjun WAN. Cloud native intelligent operation and maintenance technology [J]. Telecommunications Science, 2020, 36(12): 105-112.
[8]	Huazhang LV,Dan CHEN,Youxiang WANG. Construction and typical cases analysis of edge cloud platform for telecom operators [J]. Telecommunications Science, 2019, 35(3): 7-17.
[9]	Di YANG. Microservice system based on container cloud [J]. Telecommunications Science, 2018, 34(9): 169-178.
[10]	Jian SU. Evolution strategy of 5G network based on cloud-native computing [J]. Telecommunications Science, 2018, 34(6): 147-152.
[11]	Xun ZHANG,Chengyu ZHANG,Jinwu WEI. Design and implementation of a resource operation and maintenance system based on container arrangement technology [J]. Telecommunications Science, 2018, 34(6): 162-170.
[12]	Liyun YAN,Zhenwei HE,Xinzhang YANG,Ling ZHANG,Shaoxin HOU. Containerizing solution based on Kubernetes of database and its cluster [J]. Telecommunications Science, 2018, 34(12): 163-171.
[13]	Liyun YAN,Xinzhang YANG,Zhenwei HE,Ling ZHANG,Shaoxin HOU. Micro-service solution of operator’s business platform [J]. Telecommunications Science, 2018, 34(11): 166-174.
[14]	Gang LU,Zhe WANG,Honghui OU,Zhenwei HE. Design and analysis of telecom service platform reconstruction based on open source software [J]. Telecommunications Science, 2017, 33(5): 99-105.
[15]	Lei QI,Haifeng ZHANG,Tianxiao ZHANG,Hao ZHU,Xu CHEN. PaaS cloud platform based on container technology [J]. Telecommunications Science, 2017, 33(4): 177-182.

Research and design of multi-tenant scheme for Kubernetes container cloud platform

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 8

References 8

Related Articles 15

Metrics

Recommended 0