Abstract: In an example, a security service providing system receives a service request for requesting security service for a target flow, determine a security device for providing security service for the target flow and first service configuration information and next-hop information of the security device according to security service information carried in the service request, and configure the first service configuration information and the next-hop information of the security device onto the security device, so that the security device provides security service to the target flow according to the first service configuration information and forwards the target flow according to the next-hop information

Abstract: According to an example, in a method for redirecting virtual machine traffic a virtual switch may be implemented in a physical server. In addition, a packet sent from a first virtual machine to a second virtual machine may be detected, in which the first virtual machine and the second virtual machine are in the same virtual local area network (VLAN), and in which the packet has a first VLAN label that identifies the VLAN. Moreover, the first VLAN label may be replaced with a second VLAN label in the packet, in which the second VLAN label differs from the first VLAN label, and the packet may be sent to an uplink switch, in which the uplink switch may send the packet to a network security module.

Abstract: According to an example, a service coordination apparatus may include a processor that is to determine whether each GLB node-pair in a node-pair state table is at a normal state after receiving a DNS request. If a GLB node-pair in the node-pair state table is not at the normal state, a second DNS response may be sent to a node sending the DNS request according to a DNS parsing list. If each GLB node-pair in the node-pair state table is at the normal state, a proximity list may be inquired. If a record corresponding to the DNS request is searched out from the proximity list, a first DNS response may be sent to the node sending the DNS request according to the searched out record. If not, a second DNS response may be sent to the node sending the DNS request according to the DNS parsing list.

Abstract: In an example of the present disclosure, a method for adjusting virtual machine resources is provided. A VIP for a virtual service is distributed, and a scheduling policy and virtual machines (VM) for the VIP may be configured. The VIP and the VMs corresponding to the VIP are configured on an underlying physical device. When status information of the VIP is received, a new VM may be added into the VMs corresponding to the VIP in response to the determination that the VIP is overloaded based on the status information of the VIP. The scheduling policy of the VIP may be used to distribute bearer services to the VMs corresponding to the VIP.

Abstract: According to an example, a service coordination apparatus may include a processor that is to determine whether each GLB node-pair in a node-pair state table is at a normal state after receiving a DNS request. If a GLB node-pair in the node-pair state table is not at the normal state, a second DNS response may be sent to a node sending the DNS request according to a DNS parsing list. If each GLB node-pair in the node-pair state table is at the normal state, a proximity list may be inquired. If a record corresponding to the DNS request is searched out from the proximity list, a first DNS response may be sent to the node sending the DNS request according to the searched out record. If not, a second DNS response may be sent to the node sending the DNS request according to the DNS parsing list.

Abstract: According to an example, in a method for redirecting virtual machine traffic a virtual switch may be implemented in a physical server. In addition, a packet sent from a first virtual machine to a second virtual machine may be detected, in which the first virtual machine and the second virtual machine are in the same virtual local area network (VLAN), and in which the packet has a first VLAN label that identifies the VLAN. Moreover, the first VLAN label may be replaced with a second VLAN label in the packet, in which the second VLAN label differs from the first VLAN label, and the packet may be sent to an uplink switch, in which the uplink switch may send the packet to a network security module.

Abstract: According to an example, in a method for load balancing among servers, the GLB device may receive detection results of performance of the servers sent by each SLB device, in which the detection results include a performance parameter and a corresponding IP address of each server of the servers. In addition, the GLB device may determine which server of the servers has a highest performance among the servers according to the performance parameters of the servers sent by the SLB devices, and the IP address of the determined server may be stored. Moreover, the GLB device may receive an access request from a client, obtain the stored IP address of the determined server, and send the IP address of the determined server to the client.

Abstract: According to an example, an apparatus for Virtual Machine (VM) security policy migration includes a migration detecting module, a locating module and a security policy managing module. The migration detecting module is to receive a VM migration report from a VM management apparatus, wherein the VM migration report includes a location parameter of a VM. The locating module is to determine, according to the location parameter of the VM and a locating function, an old security device and a new security device that the VM belongs to before and after the migration. If the old security device and the new security device are not the same security device, a notification is transmitted to the security policy managing module, and a security policy of the VM on the old security device is issued to the new security device.