Securely virtualizating network services

摘要

Services in a network device are added through providing virtual environments. Virtualization allows services based on other platforms or architectures to be run with minimum modification and in a secure manner. Connecting services to the host through a stateful firewall allows dynamic integration, and passes only traffic of interest to the service. Virtualization allows services written for different instruction architectures to be supported. Multiple virtualized environments each supporting a service may be run.

主权项

1. A method of adding a network service to a host device comprising:
providing a virtual environment to support a service that are not native to the host device, executing the service in the virtual environment, and connecting the service to the host device through a firewall so that only data needed by the service is passed through the firewall to the service.