Network traffic acquisition method and system based on clouded environment

According to the network flow collection method and system based on the cloud environment, the problems that existing flow collection has invasiveness to a monitored system, has system and software dependence requirements, is not high in adaptability and occupies a large number of computing resources and network transmission resources are solved. A mirror image virtual switch and a virtualization instance agent node are created at a computing node, monitoring node data are guided to the mirror image virtual switch through a mode of mirror image traffic of a patch port of the virtual switch, then the monitoring node data are forwarded to the virtualization instance agent node through the mirror image virtual switch, and network traffic data are transferred to be in a file format and forwarded to a data security monitoring platform. Virtualized instance events are monitored in real time, and when the events change, the virtual switch flow table is adjusted according to the monitoring strategy. Traffic monitorin