CN103905283B

CN103905283B - Communication means and device based on expansible VLAN

Info

Publication number: CN103905283B
Application number: CN201210570461.3A
Authority: CN
Inventors: 冯江平; 朱旭琪
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Cloud Computing Technologies Co Ltd
Priority date: 2012-12-25
Filing date: 2012-12-25
Publication date: 2017-12-15
Anticipated expiration: 2032-12-25
Also published as: CN103905283A

Abstract

The present invention relates to a kind of communication means and device based on expansible VLAN, methods described includes：Receive the first message that source node is sent；Extract the purpose IP address in first message；According to the purpose IP address in first message, the VLAN that the destination node belongs to is determined；First message is broadcasted in the system to the destination node；The response message for first message that the destination node is sent is received, the response message of first message carries purpose addressable address；The response message of first message is sent to the source node so that the source node gets the purpose addressable address carried in the response message of first message.The present invention is eliminated the problem of increasing additional networks equipment or modification conventional network equipment in a network.

Description

Communication means and device based on expansible VLAN

Technical field

The present invention relates to computer network communication technology field, more particularly to one kind to be based on expansible VLAN VXLAN communication means and device.

Background technology

VLAN（Virtual Local Area Network, VLAN）, be it is a kind of by lan device from logic On be divided into the network segment one by one, so as to realize the Data Interchange Technology of virtual workgroup.VLAN allows to be in different physical locations Computer logically form a LAN（Local Area Network, LAN）, a VLAN is a broadcast Domain.Keeper is logically divided into the different user in same physical LAN different broadcast according to practical application request Domain, each VLAN include one group of computer workstation for having same requirements, have phase with the LAN physically formed Same attribute.Broadcast and unicast traffic inside one VLAN is all without being forwarded in other VLAN, so as to contribute to controlling stream Amount, equipment investment is reduced, simplify network management, improve the security of network.

Expansible VLAN（Virtual eXtensible Local Area Network, VXLAN）Basic think of Road is similar with VLAN, but with better function.VXLAN is a kind of technology for being packaged two layer message with three layer protocols, can be right Double layer network is extended in three layers of scope.It is applied to inside data center, allows virtual machine in three layers interconnected Migrated in network range, without changing IP（Internet Protocol, Internet protocol）Address and MAC（Medium Access Control, medium access control）Address, ensure the continuity of business.VXLAN VNI（VXLAN Network Identifier, VXLAN network sequence number）To identify each broadcast domain（VXLAN subnets）, VNI shares 24, is at best able to carry For nearly 16M broadcast domain, 4K broadcast domain can only be provided compared to VLAN.

VXLAN is a kind of emerging important network virtualization technology, also in the starting stage.Therefore, in VXLAN Virtual machine（Virtual Machine, VM）For, it has to suffer from a problem that be how with existing without disposing VXLAN other internal or external PM（Physical Machine, physical machine）/ VM carries out intercommunication.Existing solution It is using software or hardware deployment VXLAN Gateway in the equipment such as interchanger（Gateway）, existed by VXLAN Gateway The forwarding of packet is carried out between VXLAN and VLAN.

Fig. 1 is a kind of system block diagram of existing VXLAN Gateway deployment, as shown in figure 1, being serviced including VXLAN Device, gateway Gateway and VLAN server, VXLAN servers are communicated by Gateway with VLAN servers.Specifically Ground, when from VXLAN interface input data frames, Gateway can peel off VXLAN heads and be decapsulated, and by inside Ethernet frames are forwarded to corresponding physical port according to internal purpose MAC.Frame after decapsulation is if there is internal VLAN ID, clearly configured unless having been done on corresponding output interface, otherwise should abandon the VLAN ID.Inputted when from VLAN interface During data frame, Gateway then maps that to specific VXLAN networks based on the VLAN ID in frame.

It is existing it is this by the way of VXLAN Gateway, it is necessary to increase the extra network equipment or in existing network Equipment（Interchanger）On modify, add the deployment and maintenance cost of network.Moreover, VXLAN Gateway need to safeguard Numerous information such as administrative all VXLAN VNI, virtual machine VM IP and VXLAN and VLAN corresponding relation, are easily caused VXLAN Gateway realization and safeguard that more complicated, cost is higher, it is possible to as the performance bottleneck in intercommunication, applicable net Network environment is limited；Also so that VXLAN Gateway to the change of network topology or configuration respond underaction, scalability by Limit.

The content of the invention

In view of this, the embodiments of the invention provide a kind of communication means based on expansible VLAN VXLAN and Device, the problem of eliminating increase additional networks equipment in a network or change conventional network equipment.

To achieve the above object, first aspect present invention provides a kind of communication party based on expansible VLAN Method, methods described are applied to dummy machine system, and the system includes multiple physical servers, included on each physical server more Individual virtual machine, the multiple virtual robot arm include at least one expansible void into multiple VLANs, the VLAN Intend LAN VXLAN, including：

First port corresponding to first VXLAN receives the first message that source node is sent, wherein, first message carries Originator internet protocol address, originator addressable address and purpose IP address, the original IP address that first message carries are The IP address of the source node, originator addressable address are the addressable address of the source node, and purpose IP address is purpose node IP address；

The first port extracts the purpose IP address in first message；

Purpose IP address of the first port in first message, determine that the destination node belongs to virtual LAN；

If the VLAN that the destination node belongs to belongs to different VLANs from the first VXLAN, institute State first port and first message is broadcasted in the system so that the destination node receives first message and obtained Get the original IP address and originator addressable address in first message；

The first port receives the response message for first message that the destination node is sent, first message Response message carry purpose addressable address, the purpose addressable address that the response message of first message carries is the purpose The addressable address of second port corresponding to the addressable address of node or the VLAN belonged to for the destination node；

The response message of first message is sent to the source node by the first port so that the source node obtains Get the purpose addressable address carried in the response message of first message.

With reference in a first aspect, in the first possible embodiment of first aspect, methods described also includes：

Establish database, the IP address of the virtual machine in system described in the database purchase is corresponding with VLAN Relation；

Then purpose IP address of the first port in first message, determine the void that the destination node belongs to Intending LAN includes：

The IP address of the virtual machine stored and the corresponding relation of VLAN are inquired about in the database, determines the mesh The VLAN that belongs to of node.

With reference in a first aspect, in second of possible embodiment of first aspect, the first port is in the system In system before broadcast first message, in addition to：

The first port is replaced the originator addressable address in first message by the addressable address of the source node For the addressable address of the first port.

It is possible with reference to first aspect or second of possible embodiment of first aspect, the third in first aspect In embodiment, when the VLAN that the destination node belongs to is two VXLAN, the first port is in the system Interior broadcast first message so that the destination node receives first message and obtains the hair in first message IP address and originator addressable address are held, including：

The first port broadcasts first message in the system；

Second port corresponding to 2nd VXLAN receives first message, is carried according in first message Purpose IP address first message is sent to the destination node, the destination node receives first message Afterwards, original IP address and originator addressable address that first message carries are recorded.

With reference to the third possible embodiment of first aspect, in the 4th kind of possible embodiment of first aspect In, before the first port receives the response message for first message that the destination node is sent, in addition to：

The destination node sends the according to the original IP address in first message of record and originator addressable address The response message of one message, after the second port receives the response message of first message, by first message Response message is sent to the first port.

With reference to the 4th kind of possible embodiment of first aspect, in the 5th kind of possible embodiment of first aspect In, before the response message of first message is sent to the first port by the second port, in addition to：

The second port is by the purpose addressable address in the response message of first message by the destination node Addressable address replaces with the addressable address of the second port；

Then the source node gets the purpose addressable address that is carried in the response message of first message as described the The addressable address of Two-port netwerk.

With reference in a first aspect, in the 6th kind of possible embodiment of first aspect, belong to when the destination node When VLAN is two VLAN, the first port broadcasts first message in the system so that the purpose Node receives first message and obtains the IP address and addressable address of the source node, including：

The first port broadcasts first message in the system；

The destination node receives first message, after the destination node receives first message, record The original IP address and originator addressable address that first message carries.

With reference in a first aspect, in the 7th kind of possible embodiment of first aspect, in addition to：

The first port receives the second message that the source node is sent according to the purpose addressable address of acquisition, its In, second message carries source IP address, source addressable address, purpose IP address and purpose addressable address, second message The source IP address of carrying is the IP address of the source node, and source addressable address is the addressable address of the source node, purpose IP Location is the IP address of purpose node, and purpose addressable address is the purpose addressable address got；

Purpose addressable address of the first port in second message, second message is sent to the mesh Node or the VLAN that belongs to of the destination node corresponding to second port.

With reference to the 7th kind of possible embodiment of first aspect, in the 8th kind of possible embodiment of first aspect In, the first port before second message is sent, in addition to：

The first port is replaced with the source addressable address in second message by the addressable address of the source node The addressable address of the first port.

With reference to the 7th kind of possible embodiment or the 8th kind of possible embodiment of first aspect, in first aspect In 9th kind of possible embodiment, first message is ARP message, and second message is unicast report Text.

Second aspect, present invention also offers a kind of communicator based on expansible VLAN, described device should For dummy machine system, the system includes multiple physical servers, and multiple virtual machines are included on each physical server, described Multiple virtual robot arms include at least one expansible VLAN VXLAN into multiple VLANs, the VLAN, Including：Receiving unit, resolution unit, determining unit and transmitting element；

Receiving unit, for receiving the first message of source node transmission, wherein, first message carries originator internet Protocol IP address, originator addressable address and purpose IP address, the original IP address that first message carries is the source node IP address, originator addressable address be the source node addressable address, purpose IP address be purpose node IP address；

Resolution unit, the purpose IP address in first message for extracting the receiving unit reception；

Determining unit, for the purpose IP address in first message extracted in the resolution unit, it is determined that The VLAN that the destination node belongs to；

Transmitting element, VLAN that the destination node for being determined when the determining unit belongs to and described the When one VXLAN belongs to different VLANs, first message is broadcasted in the system so that the destination node connects Receive first message and get the original IP address in first message and originator addressable address；

The receiving unit is additionally operable to receive the response message for first message that the destination node is sent, and described the The response message of one message carries purpose addressable address, and the purpose addressable address that the response message of first message carries is institute State the addressable address of destination node or the VLAN that belongs to for the destination node corresponding to communicator addressing Location；

The response message for first message that the transmitting element is additionally operable to receive the receiving unit is sent to institute State source node so that the source node gets the purpose addressable address carried in the response message of first message.

With reference to second aspect, in the first possible embodiment of second aspect, described device also includes：

Memory cell, for establishing database, the IP addresses of the virtual machine in system described in the database purchase with it is empty Intend the corresponding relation of LAN；

The determining unit is with being specifically used for the IP for inquiring about in the database that the memory cell is established the virtual machine stored Location and the corresponding relation of VLAN, determine the VLAN that the destination node belongs to.

With reference to second aspect, in second of possible embodiment of second aspect, described device also includes：

Replacement unit, for the originator addressable address in first message that receives the receiving unit by described The addressable address of source node replaces with the addressable address of current communication devices.

With reference to second aspect, in the third possible embodiment of second aspect, the receiving unit is additionally operable to connect The second message that the source node is sent according to the purpose addressable address of acquisition is received, wherein, second message carries source IP address, source addressable address, purpose IP address and purpose addressable address, the source IP address that second message carries is the source The IP address of node, source addressable address be the source node addressable address, purpose IP address be purpose node IP address, mesh Addressable address be the purpose addressable address got；

The transmitting element is additionally operable to the purpose addressable address in second message, send second message to Second port corresponding to the VLAN that the destination node or the destination node belong to.

With reference to the third possible embodiment of second aspect, in the 4th kind of possible embodiment of second aspect In, described device also includes：

Replacement unit, for the source addressable address in second message that receives the receiving unit by the source The addressable address of node replaces with the addressable address of current communication devices.

With reference to the third possible embodiment of second aspect or the 4th kind of possible embodiment, in second aspect In 5th kind of possible embodiment, first message is ARP message, and second message is unicast report Text.

Communication means and device provided by the invention based on expansible VLAN VXLAN, by strengthening VXLAN portions The VTEP function on each server of administration, using the maintenance information for increasing database D B or memory table, to the message of transmission Data are analyzed judgement and simple message modification, you can are realized between VXLAN and VLAN and between different VXLAN Intercommunication, there is distributed implementation mode, it is simple and easy, do not limited by network topology, scale etc., using flexible, and without increasing Add the extra network equipment, the problem of eliminating increase additional networks equipment in a network or change conventional network equipment, save Network design and the cost safeguarded.

Brief description of the drawings

Fig. 1 is a kind of system block diagram of existing VXLAN Gateway deployment；

Fig. 2 is the schematic diagram of expansible VLAN VXLAN message formats；

Fig. 3 is a kind of virtual data center VDC system architecture diagram；

Fig. 4 is the VDC networkings and schematic diagram of a scenario that the embodiment of the present invention is based on；

Fig. 5 is a kind of method flow that ARP address learnings are carried out using ARP data messages provided in an embodiment of the present invention Figure；

Fig. 6 is a kind of flow chart of communication means provided in an embodiment of the present invention；

Fig. 7 be it is provided in an embodiment of the present invention another using ARP data messages progress ARP address learnings method flow Figure；

Fig. 8 is the flow chart of another communication means provided in an embodiment of the present invention；

Fig. 9 is VXLAN endpoint of a tunnels VTEP provided in an embodiment of the present invention high-level schematic functional block diagram；

Figure 10 carries out the timing diagram of ARP address learnings between VXLAN provided in an embodiment of the present invention and VLAN；

The timing diagram that Figure 11 communicates between VXLAN provided in an embodiment of the present invention and VLAN；

Figure 12 carries out the timing diagram of ARP address learnings between different VXLAN provided in an embodiment of the present invention；

The timing diagram that Figure 13 communicates between different VXLAN provided in an embodiment of the present invention；

Figure 14 is the communicator schematic diagram provided in an embodiment of the present invention based on VXLAN；

Figure 15 is the structure composition schematic diagram of the communicator provided in an embodiment of the present invention based on VXLAN.

Embodiment

Below by drawings and examples, technical scheme is described in further detail.

Expansible VLAN VXLAN is using MAC-in-UDP（User Datagram Protocol, number of users According to datagram protocol）Encapsulation mechanism, encapsulate VXLAN heads respectively from inside to outside on the basis of mac frame（VXLAN header）, UDP heads （UDP header）, IP heads（IP header）With ether net head（Ethernet header）, just as structure one tunnel, Mac frame is as the actual transmissions content in tunnel, the mark that outer enclosure part is transmitted as data in tunnel, ensures data Correctly arrive at.Fig. 2 is a kind of schematic diagram of expansible VLAN VXLAN message formats, as shown in Fig. 2 VXLAN Message is in original Ethernet frame（Original Ethernet Frame）In, increase VXLAN packed parts（VXLAN Encapsulation）.The end points in tunnel is referred to as VTEP in VXLAN（VXLAN Tunnel End Point, VXLAN tunnels End points）.Encapsulation header is added for it and send when VTEP major function is the Ethernet Ethernet frames that the local VM of reception is sent Go out；Receiving that long-range VTEP sends when carrying encapsulation header message, removing encapsulation header and be simultaneously transmitted to corresponding VM.

Communication means and device provided by the invention based on expansible VLAN VXLAN, can apply to dispose In dummy machine system, such as VXLAN virtual data center（Virtual Data Center, VDC）In, to build cloud computing Middle crucial computing resources shared pool, wherein resource include network, server, storage, application software and service etc..Virtualize skill Art mainly includes：Server virtualization, Storage Virtualization and network virtualization.VDC core technology is server virtualization, The physical resource of a physical machine is mainly invented into multiple virtual machines（Virtual Machine, VM）So that each VM Physical machine can be realized（Physical Machine, PM）Function.

Fig. 3 is virtual data center VDC system architecture diagram, as shown in figure 3, VDC typically uses layer architecture, most Bottom is each physical server Server, creates multiple VM in each Server, and by virtual switch vSwitch by this A little VM form small-sized Virtual Local Area Network in server internal.Each Server is also the end points in VXLAN tunnels, therefore is related to The VXLAN endpoint of a tunnels VTEP of application of the embodiment of the present invention（VXLAN Tunnel End Point）Exactly it is deployed in each On Server, and the gateway that VTEP communicates as VM inside Server with other PM/VM outside Server.VTEP can be with It is the stand-alone assembly in Server, deployment can also be combined with vSwitch.Network outside Server is then according to VDC scale Carry out layering networking.Server is firstly connected to access switch, usually ToR, and access switch ToR is connected into convergence and exchanged again Machine Switch, it is coupled to core switch L3Switch.Certainly, convergence-level and core layer can also merge, three layers of generally use （L3）Interchanger.Finally, VDC is connected by router with outer net Internet network.

The network site residing for the PM/VM of opposite end to be communicated according to needed for VM in Server, complete VXLAN and VLAN or The process of intercommunication between different VXLAN, ToR, L3Switch or Router may be passed through.Because VXLAN is not to these extranets Network equipment has an impact, i.e., these equipment work in a conventional manner, therefore outside network device can all be abstracted into table Show, to protrude the key technology of the embodiment of the present invention.

Fig. 4 is the VDC networkings and schematic diagram of a scenario that the embodiment of the present invention is based on, as shown in figure 4, being wrapped in the VDC networkings Include server S erver-1201, server S erver-2202, server S erver-3 203 and the network switch 204.Taking It is engaged in creating virtual machine VM-12011 in device Server-1201, server S erver-1201 deploys VXLAN, therefore void thereon Plan machine VM-12011 and other virtual machines will pass through VTEP-12012 and external network communication.Virtual machine VM-12011 is added VXLAN100 subnet, that is, the VNI of VXLAN corresponding to virtual machine VM-12011 is 100.When VM-12011 with it is same When VM in VXLAN communicates, VTEP-12012 is the packet encapsulation VXLAN heads that VM-12011 is sent；When VM-12011 with When VM in VLAN or different VXLAN is communicated, VTEP-1 2012 will repair to the packet that VM-12011 is sent Change, amended packet be then sent to the network switch 204, such as be sent on the network equipments such as ToR or Switch, Pass through the VTEP or VM that are forwarded to up to opposite end server of L2/L3 networks.The L2/L3 network equipments of the invention to specifically using It is not construed as limiting.

Present invention is generally directed to the scene that VM-12011 is communicated from the VM in VLAN or different VXLAN.That is, one is VM-32031 communication in VM-12011 and VLAN300, second, the communication of the VM-22021 in VM-12011 and VXLAN200, The VXLAN of the present invention and the scene of intercommunication between VLAN intercommunications and different VXLAN are corresponded to respectively.Server in VLAN Server-3203 does not dispose VTEP, when not considering other virtualization steps, it is believed that be transmitted to the packet of server Directly issue corresponding VM-32031.VM-22021 is created on Server-2201, belongs to VXLAN200, that is, VM- 22021 VNI is 200.The packet come from network equipment forwarding needs the processing such as to modify by VTEP-2 2022, then It is transmitted to VM-22021.The packet that same VM-12011, VM-22021 are sent is also required to the processing by VTEP-22022, then sends out Toward the network switch 204.

When communication starts between VM between VXLAN and VLAN or between different VXLAN, assisted first with address resolution View（Address Resolution Protocol, ARP）Data message carries out the ARP between the source node and destination node Address learning.

Fig. 5 is the method flow of the study for the addressable address that the present invention carries out ARP destination nodes using ARP data messages Figure, it is necessary first to explanation, the study of the addressable address of ARP destination nodes is carried out using ARP data messages, that is, obtains purpose The process of node address address, due to source node and the addressable address of destination node is unaware of, prior art is using Gateway's Mode realizes the communication between source node and destination node, and the embodiment of the present invention in networking in order to avoid increasing Gateway, then need to obtain the addressable address of destination node first, the embodiment of the present invention, which then employs, utilizes ARP data messages Broadcast transmission obtain the addressable address of destination node, may learn purpose section in the transmission process of ARP data messages The addressable address of point, in general addressable address be used for defining the position of the network equipment, including MAC (Media Access Control) address, or be MAC address, hardware address.

As shown in figure 5, the address learning process of the ARP destination nodes includes：Step S101, VTEP corresponding to source node （First port corresponding to source node）Receive the ARP request message that source node is sent.

The originator MAC of the source MACs of Ethernet Ethernet heads, ARP messages is carried in the ARP request message Location, original IP address and purpose IP address, wherein, the originating address in the ARP request message be the source node IP or MAC Address, the purpose IP addresses in the ARP request message are the IP address of destination node.

Step S102, VTEP corresponding to source node extracts the purpose IP address in the ARP request message, utilizes database DB inquires about to obtain the second virtual network where the purpose IP address, i.e. the 2nd VLAN or the 2nd VXLAN.

Specifically, VTEP corresponding to source node parses to the ARP request message received, first obtains source node The IP address and purpose IP address of MAC Address, source node.

Before the study of addressable address of ARP destination nodes is carried out, in addition to：The step of establishing database D B, data Storehouse DB stores the IP address of virtual machine and the corresponding relation of VLAN in the system.Database D B includes matching somebody with somebody in advance The IP of IP, affiliated VXLAN VNI and multicast address corresponding to the local VM put, VM corresponding to port information and whole VXLAN The local VM of address realm, also dynamic learning MAC Address, communicate VM MAC Address and place VTEP IP address.In source When VTEP corresponding to node is resolved to the MAC Address and IP address of source node, VTEP can be recorded in database D B, logarithm Enter Mobile state renewal according to storehouse DB.Certainly, the embodiment of the present invention is not limited to store those configuration informations and ground using database D B Location learning information, such as can also be stored by the way of the memory tables such as Hash tables.

Step S103, the ARP request message broadcasting is sent to the purpose IP address institute by VTEP corresponding to source node In the 2nd VLAN destination node, or second port corresponding to broadcast transmission ARP request message to the 2nd VXLAN, with It is transmitted to the destination node.

VLAN where ARP request message is directly sent to purpose IP address by VTEP corresponding to source node via Web broadcast Or VXLAN.If purpose IP address belongs to VLAN, it is believed that is directly forwarded to destination node.

If purpose IP address belongs to different VXLAN, ARP request message is sent to the VTEP of opposite end, i.e. purpose section VTEP corresponding to point.VTEP corresponding to destination node receives ARP request message, analyzes as ARP request message, is then broadcast to Destination node.

When belonging to VXLAN identical with VXLAN where source node for purpose IP address, the place with existing VXLAN agreements Reason mode is identical, VTEP where sending purpose IP after to original message addition VXLAN encapsulation, and its message format is as shown in Figure 2.

Step S104, VXLAN opposite end where VTEP corresponding to source node receives the destination node or destination node The arp reply message that VTEP is returned.

After destination node receives ARP request message, purpose IP is judged for itself, then learns and record in ARP messages Originator IP and originator MAC Address, that is, record the IP address of the source node and the MAC Address of source node, destination node also generate Arp reply message, the target MAC (Media Access Control) address of ARP messages is the MAC Address of the destination node in the arp reply message, purpose IP Address is the IP address of the destination node, and original IP address is the IP address of source node, and originator MAC Address is the MAC of source node Address, destination node send the arp reply message to VTEP corresponding to source node.

If destination node, in different VXLAN, destination node is first sent to purpose after arp reply message is generated VTEP corresponding to node, arp reply message is returned to VTEP corresponding to the source node by VTEP as corresponding to the destination node.

Step S105, VTEP corresponding to source node extracts the original IP address in the arp reply message.

Step S106, original IP address of the VTEP corresponding to source node in the arp reply message, described in judgement Whether arp reply message is sent to the source node of the machine, if it is, into step S107, otherwise into step S108, abandon the arp reply message.

Step S107, the arp reply message is forwarded to the source node by VTEP corresponding to source node, so that the source Node obtains and records carrying purpose addressable address, i.e., the addressable address of described destination node in the arp reply message.

VTEP corresponding to source node extracts original IP address in arp reply message, inquires about database D B, judges with starting IP Location is IP address corresponding to the source node of the machine, then arp reply message is forwarded into source node, and source node obtains arp reply report Target MAC (Media Access Control) address in text, complete the learning process to the MAC addresses of destination node.

After the addressable address to destination node is learnt, the normal unicast of intercommunication can be started between two virtual machines Communication message, as shown in fig. 6, the communication process of intercommunication unicast message specifically includes between two virtual machines：

Step S201, VTEP corresponding to source node receives the first unicast message that source node is sent.

First unicast message is unicast communication message, carry source IP address, source addressable address, purpose IP address and Purpose addressable address.Wherein, source IP address be source node IP address, source addressable address be source node addressable address, purpose IP address is the IP address of purpose node, and purpose addressable address is the purpose addressable address that step S107 is got.

Step S202, VTEP corresponding to source node extracts the purpose IP address in first unicast message, and utilizes number Inquire about to obtain the second virtual network where the purpose IP address, i.e. the 2nd VLAN or the 2nd VXLAN according to storehouse DB.

Step S203, first unicast message is forwarded to where the purpose IP addresses by VTEP corresponding to source node 2nd VLAN destination node, or second port corresponding to forwarding unicast message to the 2nd VXLAN, it is described to be transmitted to Destination node.

VTEP corresponding to source node directly by the first unicast message via forwarded to VLAN where purpose IP address or VXLAN.If purpose IP address belongs to VLAN, it is believed that is directly forwarded to destination node.

If purpose IP address belongs to different VXLAN, VTEP corresponding to the first unicast message to destination node is sent, VTEP corresponding to destination node receives the first unicast message, analyzes as unicast communication message, then extracts purpose IP address, inquires about Database D B in VTEP corresponding to destination node, the node that purpose IP belongs to the machine is determined, then is forwarded to destination node. Destination node can then obtain the data that source node is sent.

For destination node after the unicast message of source node transmission is received, destination node can also send unicast to source node Message is communicated.It is specific as follows：

Step S204, VTEP corresponding to source node receives the destination node and sent out after first unicast message is received The second unicast message sent.

Second unicast message is specially unicast communication message, carry source IP address, source addressable address, purpose IP address and Purpose addressable address.Now, the second unicast message is sent by destination node, then for the purpose of the source IP address in the second unicast message The IP address of node, source addressable address are the addressable address of purpose node, and purpose IP address is the IP address of source node, and purpose is sought Location address is the addressable address of source node.

Step S205, VTEP corresponding to source node extracts the purpose IP address in second unicast message.

Step S206, VTEP corresponding to source node judges whether second unicast message is sent to the source section of the machine Point, if it is, into step S207, otherwise, into step S208, abandon second unicast message.

Step S207, second unicast message is transmitted to the source node by VTEP corresponding to source node.

VTEP corresponding to source node parses to the second unicast message received, obtain source node MAC Address, The IP address and purpose IP address and target MAC (Media Access Control) address of source node.According to purpose IP address, database D B is inquired about, judges purpose Whether IP address belongs to the node of the machine, is if it is transmitted to the source node, so that the source node obtains the purpose The data that node is sent.

So, the present invention is without using VXLAN Gateway, you can realize that VXLAN and VLAN's and different VXLAN is mutual It is logical.VTEP is not modified to the message information of transmitting-receiving in above-described embodiment so that VM MAC is exposed on the L2 network equipments. If VM MAC Address is exposed on the L2 network equipments, then there is ToR or interchanger in the scene for creating a large amount of VM for server It is upper need the MAC forward tables safeguarded cross greater than it is complicated the problem of, thus this method is applied to the mininet of VM scale is smallers.

And for large-scale VLAN, it is preferable that the message letter that the present invention receives and dispatches in VTEP corresponding to source node Breath is modified, and is carried out by VTEP MAC Address instead of its administrative VM MAC Address from VLAN and different VXLAN mutual It is logical, each VM MAC is not exposed on the L2 network equipments, reduce the difficulty of network equipment.

Specifically, Fig. 7 is the study that the present invention provides the addressable address that ARP destination nodes are carried out using ARP data messages Method flow diagram, similarly, the present embodiment is employed using the broadcast transmission of ARP data messages to obtain seeking for destination node Location address, the addressable address of destination node is may learn in the transmission process of ARP data messages.

As shown in fig. 7, the address learning process of the ARP destination nodes includes：

Step S301, VTEP corresponding to source node（First port corresponding to source node）The ARP that source node is sent is received to ask Seek message.

Step S302, VTEP corresponding to source node extracts the purpose IP address in the ARP request message, utilizes database DB inquires about to obtain the second virtual network where the purpose IP address, i.e. the 2nd VLAN or the 2nd VXLAN.

Specifically, VTEP corresponding to source node parses to the ARP request message received, first obtains source node The IP address and purpose IP address of MAC Address, source node, and record source node MAC addresses and IP address to the database In DB.

Step S303, VTEP corresponding to source node judges whether the purpose IP address of ARP request message request belongs to VLAN Or VXLAN, if VLAN, into step S304, if from source node in different VXLAN, into step S306, if It is in identical VXLAN, then identical with the processing mode of existing VXLAN agreements into step S309, encapsulation with source node VTEP where sending purpose IP after VXLAN.

Step S304, VTEP corresponding to source node is by the source addressable address of Ethernet Ethernet heads in ARP request message With originator addressable address VTEP as corresponding to the addressable address of source node replaces with source node of ARP messages addressable address.

That is, substitute internal virtual machine VM using VTEP MAC Address（Source node）MAC addresses and extranets Network is communicated.From the point of view of external network, the network switch and other VLANs are only capable of obtaining where the source node VXLAN VTEP MAC Address.It can so cause VM MAC addresses to be not exposed on the network equipment, be advantageous to network letter The maintenance of breath.

Step S305, the ARP request message after replacement is sent to purpose by VTEP corresponding to source node via Web broadcast Destination node in VLAN where IP address, the destination node in VLAN receive ARP request message.

ARP request message is received in destination node, judges purpose IP for itself, then learns and records in ARP messages Originator IP and originator MAC Address, that is, record the IP address of the source node and the MAC Address of source node, destination node also generate Arp reply message, the target MAC (Media Access Control) address of ARP messages is the MAC Address of the destination node in the arp reply message, purpose IP Address is the IP address of the destination node, and original IP address is the IP address of source node, and originator MAC Address is the MAC of source node Address, destination node sends VTEP of the arp reply message to VXLAN where source node, into step S310.

Step S306, VTEP corresponding to source node is by the source addressable address of Ethernet Ethernet heads in ARP request message With originator addressable address VTEP as corresponding to the addressable address of source node replaces with source node of ARP messages addressable address.

Step S307, the ARP request message after replacement is sent to purpose by VTEP corresponding to source node via Web broadcast VTEP corresponding to node（Second port）.

Step S308, VTEP corresponding to destination node is sent to destination node according to ARP request message.

VTEP corresponding to destination node receives ARP request message, analyzes as ARP request message, is then broadcast to purpose section Point.

After destination node receives ARP request message, purpose IP is judged for itself, then learns and record in ARP messages Originator IP and originator MAC Address, that is, record the IP address of the source node and the MAC Address of source node, destination node also generate Arp reply message, the target MAC (Media Access Control) address of ARP messages is the MAC Address of the destination node in the arp reply message, purpose IP Address is the IP address of the destination node, and original IP address is the IP address of source node, and originator MAC Address is the MAC of source node Address, destination node send the arp reply message to VTEP corresponding to destination node.

VTEP corresponding to destination node, can also be by ARP before arp reply message is sent into VTEP corresponding to source node Target MAC (Media Access Control) address replaces with the MAC of the opposite end VTEP in source MAC and ARP messages in Ethernet heads in response message Address, the arp reply message after replacement is then sent to VTEP corresponding to source node again, into step S310.

Step S310, VTEP corresponding to source node receives the destination node and sent out after the ARP request message is received The arp reply message sent.

Step S311, VTEP corresponding to source node extracts the original IP address in the arp reply message.

Step S312, original IP address of the VTEP corresponding to source node in the arp reply message, judge that ARP should Answer the source node whether message is sent to the machine, if it is, into step S313, otherwise into step S315, abandon the ARP Response message.

Step S313, VTEP corresponding to source node is by the purpose addressable address and ARP of Ethernet heads in arp reply message Originator addressable address VTEP addressable address as corresponding to source node of message replaces with the addressable address of source node.

Step S314, the arp reply message is forwarded to the source node by VTEP corresponding to source node.

VTEP corresponding to source node extracts original IP address from the arp reply message received, inquires about database D B, sentences Disconnected original IP address is IP address corresponding to the source node of the machine, then arp reply message is forwarded into source node, and source node obtains Target MAC (Media Access Control) address in arp reply message, complete the learning process to the MAC Address of destination node.

Similarly, after the addressable address to destination node is learnt, intercommunication can started just between two virtual machines Normal unicast communication message, as shown in figure 8, the communication process of intercommunication unicast message specifically includes between two virtual machines：

Step S401, VTEP corresponding to source node receives the first unicast message that source node is sent.

First unicast message is unicast communication message, carries source IP address, source MAC, purpose IP address and mesh MAC Address.Wherein, source IP address is the IP address of source node, and source addressable address is the addressable address of source node, purpose IP Location is the IP address of purpose node, and purpose addressable address is the purpose addressable address that step S314 is got.

Step S402, VTEP corresponding to source node extracts the purpose I P addresses in first unicast message, and utilizes number Inquire about to obtain the second virtual network where the purpose IP address, i.e. the 2nd VLAN or the 2nd VXLAN according to storehouse DB.

VTEP corresponding to source node parses to the first unicast message received, obtain source node MAC Address, The IP address and purpose IP address and target MAC (Media Access Control) address of source node.

Step S403, VTEP corresponding to source node judges whether the purpose IP address of the first unicast message request belongs to VLAN Or VXLAN, if VLAN, into step S404, if from source node in different VXLAN, into step S406, if Be with source node in identical VXLAN, then it is identical with the processing mode of existing VXLAN agreements into step S409, by first VTEP where purpose IP is sent to after unicast message packaging V XLAN.

Step S404, VTEP corresponding to source node is saved the source addressable address of Ethernet heads in the first unicast message by source The addressable address of point replaces with the addressable address of VTEP corresponding to source node.

Step S405, VTEP corresponding to source node by the first unicast message after replacement via forwarded to purpose IP Destination node in VLAN where location, the destination node in VLAN receive the first unicast message, obtain what source node was sent Data.

Step S406, VTEP corresponding to source node is saved the source addressable address of Ethernet heads in the first unicast message by source The addressable address of point replaces with the addressable address of VTEP corresponding to source node.

Step S407, VTEP corresponding to source node by the first unicast message after replacement via forwarded to destination node Corresponding VTEP.

Step S408, purpose IP address of the VTEP corresponding to destination node in the first unicast message, inquiry obtain institute The addressable address of destination node is stated, the first unicast message is sent to destination node.

VTEP corresponding to destination node receives the first unicast message, extracts purpose IP, inquires about corresponding to destination node DB in VTEP, the MAC Address of destination node is obtained, by the target MAC (Media Access Control) address of Ethernet heads in the first unicast message by mesh Node corresponding to VTEP MAC Address replace with the MAC addresses of destination node, and by the first unicast report after replacing again Text is sent to destination node.Destination node obtains the data sent from source node.

After the data that destination node obtains that source node is sent, destination node can also send unicast report to source node Text is communicated, into step S410.

If destination node is in the VXLAN different from source node, the second unicast message that destination node returns first is sent out VTEP corresponding to destination node is given, the second unicast message is returned to the source node pair by VTEP as corresponding to the destination node The VTEP answered.Similarly, the second unicast message is being returned to VTEP corresponding to the source node by VTEP corresponding to destination node Before, also the source MAC of Ethernet heads in the second message of the destination node can be replaced with the destination node pair The VTEP answered MAC Address, the second unicast message is then sent to VTEP corresponding to source node again, into step S410.

Step S410, VTEP corresponding to source node receives the destination node and sent out after first unicast message is received The second unicast message sent.

Step S411, VTEP corresponding to source node extracts the purpose IP address in second unicast message.

Step S412, VTEP corresponding to source node judges whether the second unicast message is sent to the source node of the machine, if Be, then into step S413, otherwise into step S415, abandon second unicast message.

Step S413, VTEP corresponding to source node replaces the purpose MAC addresses of Ethernet heads in the second unicast message For the MAC Address of source node.

Step S414, second unicast message is forwarded to the source node by VTEP corresponding to source node.

VTEP corresponding to source node parses to the second unicast message received, obtain source node MAC Address, The IP address and purpose IP address and target MAC (Media Access Control) address of source node.According to purpose IP address, database D B is inquired about, judges purpose Whether IP address belongs to the node of the machine, if it is, the target MAC (Media Access Control) address of Ethernet heads in the second message is replaced with into source The MAC Address of node, the source node is transmitted to, so that the source node obtains the data that the destination node is sent.

The present invention reaches by carrying out function enhancing to the VTEP being deployed in VXLAN on each server and realizes VXLAN The purpose of intercommunication between VLAN and different VXLAN.Fig. 9 is VXLAN endpoint of a tunnels VTEP provided by the invention functional module Schematic diagram, as shown in figure 9, the VTEP30 includes：Bag analysis（Packet Analysis, PA）Module 301, database （DataBase, DB）Module 302 and bag processing（Packet Process, PP）Module 303.

Packet analysis module PA301 is used for received data packet, including the packet received from physical network card and VM both directions. PA301 is analyzed the message header received, according to different agreement type, is extracted from heading or message load Source/destination IP information.PA301 is inquired about using this source/destination IP as key assignments to DB302, whether to judge current message It is sent to the local VM or VM whether being sent in VLAN or different VXLAN.Message and judged result are issued PP303 and entered by PA301 Row processing.After the completion of PP303 handles message, PA301 or PP303 can forward the packet to corresponding port, in the present invention In illustrated so that PA301 is forwarded as an example.

Database module DB302 is used for storage configuration information and address learning information, specifically includes the local being pre-configured with The IP address model of IP, affiliated VXLAN VNI and multicast address corresponding to VM, VM corresponding to port information and whole VXLAN Enclose, also the local VM of dynamic learning IP and MAC, communication VM MAC Address and its place VTEP IP address.The present invention The storage form of configuration information and address learning information is not construed as limiting, the modes such as Hash tables can also be used.

Packet handing module PP303 is used to handle message, according to the message and judged result transmitted from PA312, The information needed for modification is obtained from DB311, the modification of corresponding field is carried out to heading or load.

When the VM-32031 in the VM-12011 and VLAN300 in VXLAN100 carries out intercommunication, because VM is not perceived VXLAN presence, therefore it sends message according to proper communication flow.When VM-3 and VM-1 belong to same IP network section, VM-1 The MAC Address by sending ARP broadcast requests study VM-3 is needed, unicast message then could be sent and carry out intercommunication.

When VM-3 and VM-1 be not in the same network segment, data message will be sent to L3 gateway by VM-1, be assisted by routeing View forwarding.This process can be decomposed into VM-1 to the ARP study of gateway MAC ARP study, gateway to VM-3 MAC, VM-1 Unicast message is sent out to gateway and gateway forwards unicast message to this Four processes of VM-3.Gateway is regarded as to the PM in VLAN, this Four processes are the equal of VXLAN and VLAN intercommunications（VM-1 and gateway）With one group of VLAN intercommunication（Gateway and VM-3）Intercommunication, Used method is consistent with the intercommunication of same network segment, therefore individually analysis does not add the feelings of the different segment intercommunication of gateway here Condition.Similarly, when VM is in different segment in different VXLAN, such as VM-2 and VM-1 be in the same network segment, its processing procedure with This is similar, does not also analyze the situation of different segment intercommunication individually in this.

Figure 10 is the timing diagram of ARP address learnings between VM-1 and VM-3, as shown in Figure 10, is comprised the following steps：

S51, VM-1 send ARP request message, and specific ARP request message format is as shown in table 1：

Table 1

S52, ARP message reach VTEP-1, analyze message by PA-1, extract the purpose IP in ARP request message, access DB-1 is inquired about, and the purpose IP for judging its request is the node belonged in VLAN.DB-1 records VM-1 IP and MAC simultaneously.

ARP messages and judgement conclusion are issued PP-1 processing by S53, PA-1, and PP-1 carries out message modification.

Specifically, the source MAC in the Ethernet heads of ARP request is replaced with to current VTEP MAC；By ARP request report Originator MAC in text replaces with current VTEP MAC.Amended ARP request message is as shown in table 2：

Table 2

Amended ARP request message is sent to the service being forwarded in network L2 equipment where VM-3 by S54, PA-1 Device.

S55, VM-3 receive ARP request message, judge purpose IP for itself, learn to MAC Address corresponding to VM-1IP For VTEP-1 MAC, that is, the MAC for thinking VTEP-1 is exactly VM-1 MAC.VM-3 is using the MAC Address of itself as ARP messages Purpose MAC, generate arp reply message.

The arp reply message that VM-3 is sent is as shown in table 3：

Table 3

S56, arp reply message are forwarded to VTEP-1 through the L2 network equipments.

S57, VTEP-1 PA-1 are received and are analyzed arp reply message, extraction originator IP, are inquired about DB-1, are judged the IP that starts For the VM-1 of the machine IP.

S58, PA-1 give the arp reply message and judged result of reception to PP-1 processing.PP-1 is according to originator IP VM-1 MAC is obtained from DB-1, and changes message.

Specifically, the purpose MAC in the Ethernet heads of arp reply message is replaced with the originator IP VM's matched MAC；Originator MAC in arp reply message is replaced with into the MAC with the originator IP VM matched.Amended arp reply message As shown in table 4：

Table 4

Amended arp reply message is transmitted to VM-1 by S59, PA-1, completes MAC address learnings of the VM-1 to VM-3.

, can be to start the normal unicast communication message of intercommunication after VM-1 learns VM-3 MAC Address.

Figure 11 is the timing diagram that unicast communication is carried out between VM-1 and VM-3, as shown in figure 11, is comprised the following steps：

S61, VM-1 send unicast message to VTEP-1 to VM-3, and the form of specific unicast message is as shown in table 5：

Table 5

After S62, VTEP-1 PA-1 receive unicast message, analysis obtains purpose IP, inquires about DB-1, judges that purpose VM is in In VLAN.

Unicast message and judged result are issued PP-1 by S63, PA-1, and PP-1 modifies.

Specifically, the source MAC in Ethernet heads is replaced with to current VTEP MAC.Amended unicast message such as table 6 It is shown：

Table 6

Amended unicast message is sent in network L2 equipment and is forwarded to VM-3 by S64, PA-1.VM-3 receives modification Unicast message afterwards, receive the data sent from VM-1.

S65, VM-3 send unicast message to VM-1, and the unicast message form of transmission is as shown in table 7：

Table 7

S66, through network L2 device forwards, VTEP-1 receives message, PA-1 analysis messages, obtains purpose IP, inquires about DB- 1, judge that message is destined to the VM-1 of the machine.

Message and judged result are sent to PP-1 by S67, PA-1, and PP-1 modifies to message.

Specifically, the purpose MAC in Ethernet heads is replaced into the MAC for VM corresponding to purpose IP.Amended unicast Message is as shown in table 8：

Table 8

Amended unicast message is transmitted to VM-1 by S68, PA-1, and VM-1 receives the data that VM-3 is sent.So, i.e., it is real The intercommunication between VXLAN and VLAN is showed.

When the VM-22021 in the VM-12011 and VXLAN200 in VXLAN100 carries out intercommunication, with VXLAN and VLAN Intercommunication is similar, and the present invention illustrates when only belonging to same IP network section with VM-1 and VM-2.Similarly, VM-1 is firstly the need of logical Cross the MAC Address for sending ARP request study VM-2.

Figure 12 is the timing diagram of ARP address learnings between VM-1 and VM-2, as shown in figure 12, is comprised the following steps：

S71, VM-1 send ARP request message, and specific ARP request message is as shown in table 9：

Table 9

S72, ARP request message reach VTEP-1, analyze message by PA-1, extract the purpose IP in ARP messages, access DB-1 is inquired about, and the purpose IP for judging its request is the node belonged in different VXLAN.Simultaneously DB-1 record VM-1 IP and MAC。

ARP messages and judgement conclusion are issued PP-1 processing by S73, PA-1, and PP-1 modifies to message, amended ARP request message is as shown in table 10：

Table 10

Amended ARP request message is sent to the service being forwarded in network L2 equipment where VM-2 by S74, PA-1 The VTEP-2 of device.

S75, VTEP-2 receive amended ARP request message, and PA-2 analysis messages are ARP request message, are broadcast to VM-2。

S76, VM-2 receive ARP request message, judge purpose IP for itself, learn be to MAC Address corresponding to VM-1IP VTEP-1 MAC, that is, the MAC for thinking VTEP-1 are exactly VM-1 MAC.

It is as shown in table 11 that VM-2 sends arp reply message：

Table 11

S77, VTEP-2 receive the arp reply message that VM-2 is sent, and PA-2 analysis messages, obtain originator IP and purpose IP, DB-2 is inquired about, it is the VM for replying to different VXLAN to judge the response message.DB-2 records VM-2 IP and MAC simultaneously.

Arp reply message and judged result are issued PP-2 by S78, PA-2, and PP-2 modifies to arp reply message.

Specifically, the source MAC in the Ethernet heads in arp reply is replaced with to current VTEP MAC；By arp reply Purpose MAC in message replaces with current VTEP MAC.Amended arp reply message is as shown in table 12：

Table 12

Amended arp reply message is sent to network L2 equipment by S79, PA-2, is forwarded to VTEP-1.

S710, VTEP-1 PA-1 are received and are analyzed amended arp reply message, extraction originator IP, are inquired about DB-1, are sentenced Disconnected originator IP is the VM-1 of the machine IP.

S711, PA-1 give amended arp reply message and judged result to PP-1 processing.PP-1 is according to hair End IP obtains VM-1 MAC from DB-1, changes message again, amended ARP response messages are as shown in table 13 again：

Table 13

S712, PA-1 will be transmitted to VM-1 by amended arp reply message again.VM-1 study to VM-2 MAC is actual For VTEP-2 MAC.Complete MAC address learnings of the VM-1 to VM-2.

, can be to start the normal unicast communication message of intercommunication after VM-1 learns VM-2 MAC Address.

Figure 13 is the timing diagram that unicast communication is carried out between VM-1 and VM-3, as shown in figure 13, is comprised the following steps：

S81, VM-1 send unicast message to VTEP-1 to VM-2, and the form of specific unicast message is as shown in table 14：

Table 14

After S82, VTEP-1 PA-1 receive message, analysis obtains purpose IP, inquires about DB-1, and it is in not to judge purpose VM With in VXLAN.

Message and judged result are issued PP-1 by S83, PA-1, and PP-1 modifies to message, amended unicast message As shown in Table 15：

Table 15

Amended unicast message is sent in network L2 equipment and is forwarded to VTEP-2 by S84, PA-1.

S85, PA-2 receive amended unicast message, extract purpose IP, inquire about DB-2, judge that purpose IP belongs to the machine VM-2.

Message and judged result are issued PP-2 by S86, PA-2, and PP-2 inquires about DB-2 according to purpose IP, obtains VM-2's MAC, message is changed again, amended unicast message is as shown in table 16 again：

Table 16

S87, PA-2 amended unicast message will be transmitted to VM-2 again, and VM-2 receives the data that VM-1 is sent.

The method that unicast message is sent from VM-2 to VM-1 is consistent with the method that VM-1 is sent to VM-2, no longer superfluous in this State.So, the present invention realizes the intercommunication between different VXLAN.

It should be noted that the VTEP of the present invention is also not necessarily the service of a complete independent component form deployment On device, it may be combined exploitation, with DB is enjoyed with softwares such as virtual switch vSwitch, and the present invention does not realize shape to VTEP State is defined.

Above is the detailed description carried out to the communication means provided by the present invention based on VXLAN, below to the present invention The communicator based on VXLAN provided is described in detail.

Figure 14 is the communicator schematic diagram based on VXLAN that the present embodiment provides, and as shown in Figure 14, of the invention is logical T unit includes：Receiving unit 401, resolution unit 402, memory cell 403, determining unit 404, transmitting element 405 and replacement Unit 406.

When communicating beginning, communicator of the invention needs establish the action of communication, that is, utilizes ARP datagrams Text carries out ARP address learnings, in the process, is specially：

Receiving unit 401 is used to receive the ARP request message that the source node is sent.

Resolution unit 402 is used to extract the purpose IP address in the ARP request message of the reception of receiving unit 401.

Specifically, resolution unit 402 parses to the ARP request message that receiving unit 401 receives, and first obtains source section The MAC Address of point, the IP address and purpose IP address of source node.

Determining unit 403 is used for the purpose IP address extracted according to resolution unit 402, determines what the destination node belonged to VLAN.

Memory cell 404 is used to establish database D B, the database D B with storing the IP of the virtual machine in the system Location and the corresponding relation of VLAN.

Database D B includes IP, affiliated VXLAN VNI and multicast address, port corresponding to the local VM that is pre-configured with VM IP address range corresponding to information and whole VXLAN, the also local VM of dynamic learning MAC Address, communication VM The IP address of MAC Address and place VTEP.When resolution unit 402 is resolved to the MAC Address and IP address of source node, storage is single Member 404 can be recorded in database D B, and Mobile state renewal is entered to database DB.

The database D B that determining unit 403 is established using memory cell 404, inquiry obtain the purpose IP address institute VLAN or VXLAN.

Transmitting element 405 is used for the VLAN and described first belonged to when the destination node that determining unit 403 determines When VXLAN belongs to different VLANs, the ARP request message broadcasting is sent to the purpose IP address place second VLAN destination node, or second port corresponding to broadcast transmission ARP request message to the 2nd VXLAN, to be transmitted to The destination node.

If it is determined that unit 403 judges that the purpose IP address of ARP request message request belongs to VLAN, then transmitting element is triggered 405 by the ARP request message via Web broadcast to the destination node in VLAN where the purpose IP address.

If resolution unit 402 judges that the purpose IP address of ARP request message request belongs to and source node place VXLAN different VXLAN, then transmitting element 405 is triggered by the ARP request message via Web broadcast to the destination node Corresponding VTEP.

If destination node, in different VXLAN, destination node is first sent to purpose after arp reply message is generated VTEP corresponding to node, arp reply message is returned to the source node by VTEP as corresponding to the destination node.

When destination node sends arp reply message, receiving unit 401 receives arp reply message.Resolution unit 402 carries Take the original IP address in the arp reply message, originator IP of the determining unit 403 in the arp reply message Location, judges whether the arp reply message is sent to the source node of the machine, if it is, triggering transmitting element 405 by institute State arp reply message and be forwarded to the source node, so that the source node, which is obtained and recorded in the arp reply message, carries mesh Addressable address, i.e., the addressable address of described destination node.

Preferably, communicator of the present invention also includes replacement unit 406, for being modified to ARP request message, specifically , replacement unit 406 is by the originator MAC of the source MAC addresses of Ethernet Ethernet heads in ARP request message and ARP messages Location VTEP as corresponding to the MAC Address of the source node replaces with source node MAC Address；Transmitting element 405 is by replacement unit Port corresponding to VLAN or VXLAN where ARP request message after 406 replacements is forwarded to the purpose IP address.

Correspondingly, replacement unit 406, also can be to arp reply message when receiving unit 401 receives arp reply message Modify, specifically, replacement unit 406 reports the target MAC (Media Access Control) address of Ethernet heads in the arp reply message and ARP Originator MAC Address VTEP MAC addresses as corresponding to the source node of text replace with MAC corresponding to the original IP address Address, i.e., the MAC Address of described source node；Arp reply message after transmitting element 405 replaces replacement unit 406 is forwarded to The source node.

After communication is established, communicator of the invention is then used to handle the unicast message between source node and destination node Transmission.

Specifically, receiving unit 401 is used for the first unicast message for receiving source node transmission.

First unicast message includes：Source IP address, the source addressable address of source node, destination node purpose IP address, Purpose addressable address, and the data of transmission.Wherein, source IP address is the IP address of source node, and source addressable address is source node Addressable address, purpose IP address is the IP address of purpose node, and purpose addressable address is that the purposes that get of step S107 are sought Location address.

Resolution unit 402 is used to extract the purpose internet protocol address in first unicast message.

Resolution unit 402 parses to the first unicast message that receiving unit 401 receives, and obtains the MAC of source node Address, the IP address of source node and purpose IP address and target MAC (Media Access Control) address.

The database D B that determining unit 403 is established using memory cell 404 inquires about to obtain where the purpose IP addresses VLAN or VXLAN.

Determining unit 403 is according to purpose IP address, the data in inquiry database D B, where obtaining purpose IP addresses VLAN or VXLAN, and send result to transmitting element 405.

Transmitting element 405 is used for VLAN or VXLAN where first unicast message is forwarded into the purpose IP address Corresponding port, to be transmitted to the destination node, destination node is set to obtain the data of source node.

When the purpose IP address that determining unit 403 determines the first unicast message request belongs to VLAN, triggering hair Send unit 405 by first unicast message via the destination node in VLAN where forwarded to the purpose IP address. The purpose IP address that the first unicast message request is determined when determining unit 403 belongs to and VXLAN where the source node Different VXLAN, triggering transmitting element 405 is by first unicast message via where forwarded to the purpose IP address VXLAN opposite end VTEP.

Preferably, the first unicast message that replacement unit 406 can also be sent to the source node received is modified, and is had Body, replacement unit 406 replaces with the source medium access control MAC Address of Ethernet Ethernet heads in the first unicast message The MAC Address of VTEP corresponding to source node.Amended first unicast message of replacement unit 406 is forwarded to by transmitting element 405 Port corresponding to VLAN or VXLAN where the purpose IP address.

Accordingly, replacement unit 406 also can when receiving unit 401 receives destination node and sends the second unicast message Second unicast message is modified, specifically, replacement unit 406 is by the purpose MAC of Ethernet heads in the second unicast message Address replaces with the MAC Address of node corresponding to purpose IP address in second unicast message, i.e., the MAC of described source node Location.Amended second unicast message of replacement unit 406 is transmitted to the source node by transmitting element 405 so that source node obtains Obtain the data that destination node is sent.

Figure 15 is the structure composition schematic diagram of the communicator based on expansible VLAN of the embodiment of the present invention.This The communicator based on expansible VLAN of inventive embodiments is deployed in dummy machine system, and the dummy machine system is more Individual physical server, includes multiple virtual machines on each physical server, the multiple virtual robot arm into multiple VLANs, The VLAN includes at least one expansible VLAN VXLAN；

The communicator based on expansible VLAN may include：

Processor 501, memory 502, system bus 503 and communication interface 504.Processor 501, memory 502 and logical Connected between letter interface 504 by system bus 503 and complete mutual communication.

Processor 501 may be monokaryon or multinuclear CPU（Central Processing Unit, CPU）, Or it is specific integrated circuit（Application Specific Integrated Circuit, ASIC）, or for by with It is set to the one or more integrated circuits for implementing the embodiment of the present invention.

Memory 502 can be high-speed RAM memory, or nonvolatile memory（non-volatile memory）, a for example, at least magnetic disk storage.

Memory 502 is used to deposit program 505.Specifically, program code, described program generation can be included in program 505 Code includes computer executed instructions.

When based on expansible VLAN communicator operation when, the operation program 505 of processor 501, with perform with Give an order：

The first port extracts the purpose IP address in first message；

Specifically, the communicator based on expansible VLAN performs above-mentioned Fig. 5-8,10- always according to the instruction Communication means shown in 13, specifically will not be repeated here.

Communication means and device provided by the invention based on VXLAN, without using VXLAN Gateway, pass through enhancing The VTEP function on each server of VXLAN deployment, using the maintenance information for increasing database D B, to the message number of transmission Judge and the modification of simple message according to being analyzed, you can realize between VXLAN and VLAN and between different VXLAN Intercommunication, there is distributed implementation mode, it is simple and easy, do not limited by network topology, scale etc., using flexible, and without increasing Add the extra network equipment, the problem of eliminating increase additional networks equipment in a network or change conventional network equipment, save Network design and the cost safeguarded.

Professional should further appreciate that, each example described with reference to the embodiments described herein Unit and algorithm steps, it can be realized with electronic hardware, computer software or the combination of the two, it is hard in order to clearly demonstrate The interchangeability of part and software, the composition and step of each example are generally described according to function in the above description. These functions are performed with hardware or software mode actually, application-specific and design constraint depending on technical scheme. Professional and technical personnel can realize described function using distinct methods to each specific application, but this realization It is it is not considered that beyond the scope of this invention.

The method that is described with reference to the embodiments described herein can use hardware, computing device the step of algorithm Software module, or the two combination are implemented.Software module can be placed in random access memory（RAM）, internal memory, read-only storage （ROM）, electrically programmable ROM, electrically erasable ROM, register, hard disk, moveable magnetic disc, CD-ROM or technical field In any other form of storage medium well known to interior.

Above-described embodiment, the purpose of the present invention, technical scheme and beneficial effect are carried out further Describe in detail, should be understood that the embodiment that the foregoing is only the present invention, be not intended to limit the present invention Protection domain, within the spirit and principles of the invention, any modification, equivalent substitution and improvements done etc., all should include Within protection scope of the present invention.

Claims

A kind of 1. communication means based on expansible VLAN, it is characterised in that methods described is applied to dummy machine system, The system includes multiple physical servers, includes multiple virtual machines on each physical server, the multiple virtual robot arm into Multiple VLANs, the VLAN include at least one expansible VLAN VXLAN, including：

First port corresponding to first VXLAN receives the first message that source node is sent, wherein, first message carries originator Internet protocol address, originator addressable address and purpose IP address, the original IP address that first message carries is described The IP address of source node, originator addressable address are the addressable address of the source node, purpose IP address for purpose node IP Location；

The first port extracts the purpose IP address in first message；

Purpose IP address of the first port in first message, determines the virtual local area that the destination node belongs to Net；

If the VLAN that the destination node belongs to and the first VXLAN belong to different VLANs, described Single port broadcasts first message in the system so that the destination node receives first message and got Original IP address and originator addressable address in first message；

The first port receives the response message for first message that the destination node is sent, and first message is answered Answer message and carry purpose addressable address, the purpose addressable address that the response message of first message carries is the destination node Addressable address or the VLAN that belongs to for the destination node corresponding to second port addressable address；

The response message of first message is sent to the source node by the first port so that the source node is got The purpose addressable address carried in the response message of first message.
2. communication means according to claim 1, it is characterised in that methods described also includes：

Establish database, the IP address of the virtual machine in system described in the database purchase is corresponding with VLAN to close System；

Then purpose IP address of the first port in first message, determine the virtual office that the destination node belongs to Domain net includes：

The IP address of the virtual machine stored and the corresponding relation of VLAN are inquired about in the database, determines the purpose section The VLAN that point belongs to.
3. communication means according to claim 1, it is characterised in that described in the first port is broadcasted in the system Before first message, in addition to：

Originator addressable address in first message is replaced with institute by the first port by the addressable address of the source node State the addressable address of first port.
4. the communication means according to claim 1 or 3, it is characterised in that when the virtual local area that the destination node belongs to When net is two VXLAN, the first port broadcasts first message in the system so that the destination node receives To first message and the original IP address in first message and originator addressable address are obtained, including：

The first port broadcasts first message in the system；

Second port corresponding to 2nd VXLAN receives first message, according to the mesh carried in first message IP address first message is sent to the destination node, after the destination node receives first message, note Record original IP address and originator addressable address that first message carries.
5. communication means according to claim 4, it is characterised in that the first port receives the destination node and sent First message response message before, in addition to：

The destination node sends the first report according to the original IP address in first message of record and originator addressable address The response message of text, after the second port receives the response message of first message, by the response of first message Message is sent to the first port.
6. communication means according to claim 5, it is characterised in that the second port is by the response of first message Message is sent to before the first port, in addition to：

Addressing of the second port by the purpose addressable address in the response message of first message by the destination node Address replaces with the addressable address of the second port；

It is second end that then the source node, which gets the purpose addressable address carried in the response message of first message, The addressable address of mouth.
7. communication means according to claim 1, it is characterised in that when the VLAN that the destination node belongs to is During two VLAN, the first port broadcasts first message in the system so that the destination node receives institute State the first message and obtain the IP address and addressable address of the source node, including：

The first port broadcasts first message in the system；

The destination node receives first message, after the destination node receives first message, described in record The original IP address and originator addressable address that first message carries.
8. communication means according to claim 1, it is characterised in that also include：

The first port receives the second message that the source node is sent according to the purpose addressable address of acquisition, wherein, Second message carries source IP address, source addressable address, purpose IP address and purpose addressable address, and second message carries Source IP address be the source node IP address, source addressable address is the addressable address of the source node, and purpose IP address is The IP address of destination node, purpose addressable address are the purpose addressable address got；

Purpose addressable address of the first port in second message, second message is sent to the purpose section Second port corresponding to the VLAN that point or the destination node belong to.
9. communication means according to claim 8, it is characterised in that the first port send second message it Before, in addition to：

The first port is replaced with the source addressable address in second message by the addressable address of the source node described The addressable address of first port.
10. communication means according to claim 8 or claim 9, it is characterised in that first message is address resolution protocol ARP messages, second message are unicast message.
11. a kind of communicator based on expansible VLAN, it is characterised in that described device is applied to virtual machine system System, the system include multiple physical servers, include multiple virtual machines, the multiple virtual robot arm on each physical server Into multiple VLANs, the VLAN includes at least one expansible VLAN VXLAN, including：

Receiving unit, for receiving the first message of source node transmission, wherein, first message carries originator Internet protocol IP address, originator addressable address and purpose IP address, the original IP address that first message carries are the IP of the source node Address, originator addressable address are the addressable address of the source node, and purpose IP address is the IP address of purpose node；

Resolution unit, the purpose IP address in first message for extracting the receiving unit reception；

Determining unit, for the purpose IP address in first message extracted in the resolution unit, it is determined that described The VLAN that destination node belongs to；

Transmitting element, the VLAN and the first VXLAN that the destination node for being determined when the determining unit belongs to When belonging to different VLANs, first message is broadcasted in the system so that the destination node receives institute State the first message and get the original IP address in first message and originator addressable address；

The receiving unit is additionally operable to receive the response message for first message that the destination node is sent, first report The response message of text carries purpose addressable address, and the purpose addressable address that the response message of first message carries is the mesh Node addressable address or the VLAN that belongs to for the destination node corresponding to communicator addressable address；

The response message for first message that the transmitting element is additionally operable to receive the receiving unit is sent to the source Node so that the source node gets the purpose addressable address carried in the response message of first message.
12. communicator according to claim 11, it is characterised in that described device also includes：

Memory cell, for establishing database, the IP address and virtual office of the virtual machine in system described in the database purchase The corresponding relation of domain net；

The determining unit be specifically used for inquiring about in the database that the memory cell is established the IP address of the virtual machine stored with The corresponding relation of VLAN, determine the VLAN that the destination node belongs to.
13. communicator according to claim 11, it is characterised in that described device also includes：

Replacement unit, saved for the originator addressable address in first message that receives the receiving unit by the source The addressable address of point replaces with the addressable address of current communication devices.
14. communicator according to claim 11, it is characterised in that the receiving unit is additionally operable to receive the source section The second message that point is sent according to the purpose addressable address of acquisition, wherein, second message carries source IP address, source is sought Location address, purpose IP address and purpose addressable address, source IP address that second message carries for the source node IP Location, source addressable address be the source node addressable address, purpose IP address be purpose node IP address, purpose addressable address For the purpose addressable address got；

The transmitting element is additionally operable to the purpose addressable address in second message, sends second message described in Second port corresponding to the VLAN that destination node or the destination node belong to.
15. communicator according to claim 14, it is characterised in that described device also includes：

Replacement unit, for the source addressable address in second message that receives the receiving unit by the source node Addressable address replace with the addressable address of current communication devices.
16. the communicator according to claims 14 or 15, it is characterised in that first message is address resolution protocol ARP messages, second message are unicast message.