Resource configuration method and network device thereof

Abstract

The application provides a resource configuration method in a cloud environment and a network device, where the method includes: determining M security zones of a target application and a first mapping relationship between the M security zones and N modules of the target application; sending a first request message to an infrastructure as a service IaaS layer device, to request the IaaS layer device to create one IaaS tenant corresponding to each security zone of the M security zones; receiving a first response message sent by the IaaS layer device; determining a third mapping relationship between the N modules and the M IaaS tenants; and requesting the IaaS layer device to allocate a virtual machine resource to an imodule by using an IaaS tenant corresponding to the imodule of the N modules. The method can implement virtual resource isolation between different modules of an application.