Isolation of corporate local area networks using server virtualization

Secure enterprises have Local Area Networks (LANs) that store and process sensitive data that should not be accessed from outside. At the same time, no modern enterprise can successfully function without a LAN which provides the Internet access for the computers of the sales department, technical support service and E-mail server. In order to ensure information security, these two network segments are usually physically isolated from each other by means of exception of any cable interconnections. Enterprises with high demands for server uptime use server virtualization, which requires connecting physical servers to disk storage of virtual server image files. When highly reliable servers are needed only in one of two independent corporate network segments, the cost of creating such a server cluster is reasonable and fast paying off. But when a company encounters the need to place a small but highly reliable server into another network segment, the following problem arises: only server cluster with expensive components can provide the required reliability, but to solve the tasks assigned to the new server, the cluster computing capacity would be too high, and deploying of a cluster would be extremely costly and economically unjustified. On the other hand, the required computing capacity for a new server would be taken from the existing server cluster by creating a new virtual server without any expenses. However, in such case it is necessary to ensure isolation of the new virtual server from the network segment the physical hosts servers are connected to. The article examines the methods of configuring the LAN that allow to isolate virtual and physical servers at the network level. The authors also consider the episode when it is necessary to transfer files between the two computers located in the LAN segments isolated from each other and gives the appropriate solution.

local area network, LAN, virtualization, Hyper V, VirtualBox

1. Kirpichev, I.G. and Blagorazumov, A.K. (2012). Protection of data in the information analysis system for aircraft airworthiness monitoring. Scientific Herald of the State Research Institute of Civil Aviation, 2012, no.2, pp. 37–43. (in Russian)

2. Uvarov, A.S. Nastraivaem set v Hyper-V [Configuring the network in Hyper-V]. Available at: https://interface31.ru/tech_it/2014/01/nastraivaem-set--v-hyper-v.html (accessed 03.03.2019). (in Russian)

3. Shapoval, A. Virtualizatsiya seti v Hyper-V. Kontseptsiya [Network virtualization in Hyper-V. The Concept]. Available at: https://habr.com/company/microsoft/blog/173159/ (accessed 03.03.2019). (in Russian)

4. Shapoval, A. Virtualizatsiyaseti v Hyper-V. Chto novogo v Windows Server 2012 R2? [Network Virtualization in Hyper-V. What's new in Windows Server 2012 R2?]. Available at: https://habr.com/company/microsoft/blog/209684/ (accessed 03.03.2019). (in Russian)

5. Khabarov, D. Ponimanie virtualnykh setey v Microsoft Hyper-V Microsoft Tech Net [Understanding of Microsoft Hyper-V Virtual Networks Microsoft Tech Net]. Available at: https://blogs.technet.microsoft.com/ru_forum_support/2010/09/10/microsoft-hype/ (accessed 03.03.2019). (in Russian)

6. Cooley, S. Create a virtual network – Microsoft Docs. Available at: https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/quick-start/connect-to-network (accessed 03.03.2019).

7. Blagorazumov, A.K. and Kirpichev, I.G. (2011). Automation of Data Exchange in the Information Analysis System for Aircraft Airworthiness Monitoring. Nauchnyi Vestnik MGTU GA, no.163, pp. 204–209. (in Russian)

8. Siron, E. 4 ways to transfer files to a Linux hyper v guest. Available at: https://www.altaro.com/hyper-v/transfer-files-linux-hyper-v-guest/ (accessed 03.03.2019).

9. Semin, I. Kak sozdat obshchuyu papku mezhdu fizicheskim kompyuterom I virtualnoi mashinoi na V Mware workstation 1. [How to create a shared folder between a physical computer and a virtual machine on VMware workstation 11]. Available at: http://pyatilistnik.org/kak-sozdatobshhuyu-papku-mezhdu-fizicheskim-kompyuterom-i-virtualnoy-mashinoy-na-vmware-workstation11/ (accessed 03.03.2019). (in Russian)

10. Smeets, M. Virtual Box networking explained. Available at: https://technology.amis.nl/ 2018/07/27/virtualbox-networking-explained (accessed 03.03.2019).