A system for Internet access behavior management comprising: a mirror template for Internet access behavior management configured to create a mirror instance for Internet access behavior management corresponding to each of one or more tenants, to implement service of Internet access behavior management of the tenant by the mirror instance for Internet access behavior management corresponding to the tenant; a tenant distributor configured to receive Internet access data of the tenant, obtain a tenant identifier corresponding to the Internet access data, determine the mirror instance for Internet access behavior management corresponding to the tenant identifier, and distribute the Internet access data to the mirror instance for Internet access behavior management corresponding to the tenant identifier, wherein the tenant identifier comprises: at least one of an account number assigned by a tenant manager to the tenant, an IP address of the tenant, and an identifier of a tunnel through which the Internet access data of the tenant is sent; and the tenant manager configured to provide the tenant with, but not limited to, account opening service, dynamic expansion service, and account cancellation service; a diversion terminal configured to divert the Internet access data of the tenant to the tenant distributor according to a pre-configured diversion tunnel; wherein the diversion tunnel comprises a Layer Two Tunneling Protocol, L2TP, tunnel or a Generic Routing Encapsulation, GRE, tunnel; and the diversion terminal is further configured to distribute the Internet access data of the tenant to the L2TP tunnel or the GRE tunnel through Policy Based Routing, PBR, of a router, and divert the Internet access data of the tenant to the tenant distributor through the L2TP tunnel or the GRE tunnel. a mirror template for Internet access behavior management configured to create a mirror instance for Internet access behavior management corresponding to each of one or more tenants, to implement service of Internet access behavior management of the tenant by the mirror instance for Internet access behavior management corresponding to the tenant; a tenant distributor configured to receive Internet access data of the tenant, obtain a tenant identifier corresponding to the Internet access data, determine the mirror instance for Internet access behavior management corresponding to the tenant identifier, and distribute the Internet access data to the mirror instance for Internet access behavior management corresponding to the tenant identifier, wherein the tenant identifier comprises: at least one of an account number assigned by a tenant manager to the tenant, an IP address of the tenant, and an identifier of a tunnel through which the Internet access data of the tenant is sent; and the tenant manager configured to provide the tenant with, but not limited to, account opening service, dynamic expansion service, and account cancellation service; a diversion terminal configured to divert the Internet access data of the tenant to the tenant distributor according to a pre-configured diversion tunnel; wherein the diversion tunnel comprises a Layer Two Tunneling Protocol, L2TP, tunnel or a Generic Routing Encapsulation, GRE, tunnel; and the diversion terminal is further configured to distribute the Internet access data of the tenant to the L2TP tunnel or the GRE tunnel through Policy Based Routing, PBR, of a router, and divert the Internet access data of the tenant to the tenant distributor through the L2TP tunnel or the GRE tunnel.