For service access, a physical address of a specified application service corresponding to a specified IP segment is acquired by a user mode component in accordance with an IP-segment information of the specified IP segment, which is included in a virtual network interface card configured in a system container, and an address information including the physical address is transmitted to a router module of a machine kernel. A routing table is established by the router module in accordance with the address information. Then a network data packet is acquired and forwarded to a destination service site by the router module in accordance with the routing table.