The Research presents a virtualization-based method and system for establishing network security services. It includes the following steps: acquiring host devices and computing node sets. Based on the host's equipment, determine the link bandwidth; the set of host devices and computing nodes is used to build the computing resource model. The service function chain is implemented using the computing resource model to create network security services. This paper presents a strategy that leverages the features of container-borne network functions for quick deployment, and it suggests several dynamic function deployment techniques. Based on the concept of integer programming optimization problem modeling, the overall problem is broken down into separate subproblems, the optimization problem's scale is reasonably constrained, and quick container deployment is used to guarantee that service request response times are minimal while, to some extent, retaining the performance advantages of simple optimization methods. © 2024 Elsevier B.V., All rights reserved.