Research on Docker Container Network Isolation and Security Management for Multi-Tenant Environments
Weijie Zeng, Rui Fan, Zhi Wang, Yu Jie Xiao, Rui Huang, Mouhai Liu · 2023
This paper establishes a portal middleware platform for multi-tenant environments that can support higher tenant density and reduce the cost of software management and maintenance. It analyzes the advantages of Docker containers compared with traditional virtual machines in running applications, and introduces the whole architecture of Docker containers. By virtue of the multi-level security container isolation mechanism to achieve effective isolation and management of resources, it can effectively protect the security and integrity of the shared data between containers, and establish a configuration file-based shared data volume security isolation scheme CMAC. realize the fine-grained access control and isolation of the shared data volume. Experimental results show that the defense posture assessment accuracy of the multilevel security container isolation method proposed in this paper reaches more than 92%, and the efficiency of network security defense posture assessment, is always above 87%. It shows that the proposed method can isolate the script virus in a timely and effective manner.