Design and study of network isolation between hosts in data centers based on Private VLANs
Bo Liu, Wei Kongpeng, Liming Zheng, Xiaolong Li · 2024
Traditional data centers are divided into VLANs according to certain needs, so there is a two-layer interoperability between some servers, and once one of them is infiltrated and boosted, it can be used as a springboard machine to carry out horizontal attacks. In this paper, we utilize Private VLAN technology to realize the two-layer isolation of servers, which can flexibly design the blocking and interworking between servers in the same network segment, so as to maintain the independence of the servers and guarantee the security of regional servers.