CN107306215B

CN107306215B - Data processing method, system and node

Info

Publication number: CN107306215B
Application number: CN201610242776.3A
Authority: CN
Inventors: 龚纯
Original assignee: China Mobile Group Jiangxi Co Ltd
Current assignee: China Mobile Group Jiangxi Co Ltd
Priority date: 2016-04-18
Filing date: 2016-04-18
Publication date: 2020-07-17
Anticipated expiration: 2036-04-18
Also published as: CN107306215A

Abstract

The embodiment of the invention discloses a data processing method, a system and nodes, wherein the method comprises the steps that a virtual extensible local area network (VX L AN) aggregation gateway (VAGW) node establishes tunnel connection with a plurality of VX L AN tunnel nodes VTEP through a Software Defined Network (SDN) controller, and the VAGW node receives a message of a first VTEP and forwards the message to a corresponding second VTEP node through the established tunnel connection.

Description

Data processing method, system and node

Technical Field

The present invention relates to data service technologies, and in particular, to a data processing method, system, and node.

Background

Data center uses VX L AN in two ways, host Overlay and Network Overlay, host Overlay is to support VX L AN in vSwitch in each host Virtual machine monitor (Hypervisor), Network Overlay is to support VX L AN on data center Network equipment.

The tunnel node (VTEP, VX L AN Tunneling End Point) of VX L AN, the vSwitch of host Overlay, and the device of network Overlay that initiated VX L AN are both VTEPs.

Therefore, in the worst condition, the connection relationship is of a size of N × N-1, which can be specifically shown in fig. 1, the above scheme brings the following problems:

1. the number of tunnel connections in the network increases dramatically as the size of the network increases, so that the edge VTEP node manages and maintains all tunnels.

2. When the VTEP is positioned in different data centers, Overlay traffic between the data centers cannot be finely operated, and at the outlet of the data centers, the subdivision traffic inside the Overlay cannot be measured.

Disclosure of Invention

In order to solve the existing technical problem, embodiments of the present invention provide a data processing method, system and node, which can reduce the number of tunnels accessing a VTEP, and implement identification and fine management of traffic.

In order to achieve the above purpose, the technical solution of the embodiment of the present invention is realized as follows:

the embodiment of the invention provides a data processing method, which comprises the following steps:

a VX L AN aggregation gateway (VAGW) node establishes tunnel connections with a plurality of VX L AN tunnel nodes VTEP through a Software Defined Network (SDN) controller;

through the established tunnel connection, the VAGW node receives the message of the first VTEP and forwards the message to the corresponding second VTEP node.

In the above scheme, the step of the VAGW node receiving the packet of the first VTEP node and forwarding the packet to the corresponding second VTEP node includes:

the VAGW node receives a message of a first VTEP node, and sends the message to the SDN controller when determining that the message is a first packet message;

obtaining forwarding information of the SDN controller;

and the VAGW node sends the message to a corresponding second VTEP node based on the forwarding information.

and when forwarding information of the SDN controller is not obtained but the message sent by the SDN controller is obtained, the VAGW node broadcasts the message at all virtual ports.

In the foregoing scheme, the receiving, by the VAGW node, the packet of the first VTEP includes:

the VAGW node receives a message of a first VTEP through a first virtual port corresponding to the first VTEP; and forwarding the virtual network information carried by the message to a corresponding virtual network.

The embodiment of the invention also provides a data processing method, which comprises the following steps:

when receiving a message of a first virtual machine, a first VTEP packages the message based on a forwarding strategy sent by an SDN controller; the packaged message carries destination information;

and the first VTEP sends a message to the VAGW node based on the tunnel connection between the first VTEP and the VAGW node.

In the foregoing solution, before the first VTEP receives the message of the first virtual machine, the method further includes:

the first VTEP senses the hooking action of the first virtual machine, generates first virtual machine forwarding information and sends the first virtual machine forwarding information to the SDN controller; the first virtual machine forwarding information comprises: the MAC address, VTEP port, and virtual network information of the first virtual machine.

In the foregoing solution, when the packet of the first virtual machine received by the first VTEP is the first packet, the method further includes: the first VTEP sends the message to the SDN controller;

the first VTEP receives a forwarding policy sent by the SDN controller.

the SDN controller controls the VAGW node to establish tunnel connection with a plurality of VTEPs;

when the SDN controller receives a first message of a first VTEP, a forwarding strategy is generated, and the forwarding strategy is sent to the first VTEP, so that the first VTEP sends the message based on the forwarding strategy.

In the foregoing solution, after the SDN controller establishes tunnel connections between the VAGW node and multiple VTEPs, the method further includes:

the SDN controller receives virtual machine forwarding information sent by a plurality of VTEPs; the virtual machine forwarding information comprises: the media access control MAC address, VTEP port, and virtual network information of the virtual machine.

In the above scheme, when the SDN controller receives the first packet of the first VTEP, generating a forwarding policy includes:

when the SDN controller receives a first message of a first VTEP, a forwarding strategy is generated based on global virtual machine information; the forwarding policy includes destination information corresponding to a first virtual machine of the first VTEP.

The embodiment of the invention also provides a node which is a VX L AN aggregation gateway (VAGW) node, and is characterized in that the node comprises a first tunnel communication unit and a forwarding unit, wherein,

the first tunnel communication unit is used for establishing tunnel connection with a plurality of VX L AN tunnel nodes VTEP through the SDN controller;

and the forwarding unit is used for forwarding the message received by the first tunnel communication unit to the corresponding second VTEP node.

In the above solution, the node further includes a first communication unit;

the first tunnel communication unit is used for receiving a message of a first VTEP node and enabling the first communication unit when the message is determined to be a first packet message;

the first communication unit is configured to send the packet to the SDN controller; further configured to obtain forwarding information for the SDN controller;

and the forwarding unit is configured to send the packet to a corresponding second VTEP node based on the forwarding information obtained by the first tunnel unit.

In the above solution, the node further includes a first communication unit;

the first communication unit is configured to send the packet to the SDN controller;

the forwarding unit is configured to, when the first tunnel unit does not obtain forwarding information of the SDN controller but obtains the packet sent by the SDN controller, broadcast, by the VAGW node, the packet at all virtual ports.

In the foregoing solution, the first tunnel communication unit is configured to receive a packet of a first VTEP through a first virtual port corresponding to the first VTEP; and forwarding the virtual network information carried by the message to a corresponding virtual network.

The embodiment of the invention also provides a node, wherein the node is a first VTEP; characterized in that said node comprises: the system comprises a receiving unit, a first control unit and a second tunnel communication unit; wherein the content of the first and second substances,

the receiving unit is used for receiving a message of a first virtual machine;

the first control unit is configured to encapsulate the packet received by the receiving unit based on a forwarding policy sent by an SDN controller; the packaged message carries destination information;

and the second tunnel communication unit is used for sending the message encapsulated by the first control unit to the VAGW node based on the tunnel connection with the VAGW node.

In the above solution, the node further includes a second communication unit;

the first control unit is further configured to sense a hooking action of the first virtual machine before the receiving unit receives the message of the first virtual machine, and generate forwarding information of the first virtual machine; the first virtual machine forwarding information comprises: MAC address, VTEP port and virtual network information of the first virtual machine;

the second communication unit is configured to send the first virtual machine forwarding information generated by the first control unit to the SDN controller.

In the above scheme, the node further includes a second communication unit, configured to send the packet to the SDN controller when the packet of the first virtual machine received by the receiving unit is a first packet; and the SDN controller is further configured to receive a forwarding policy sent by the SDN controller.

The embodiment of the invention also provides a node, which is an SDN controller; characterized in that said node comprises: a second control unit and a third communication unit; wherein the content of the first and second substances,

the second control unit is used for controlling tunnel connection to be established between the VAGW node and the VTEPs; the third communication unit is further configured to generate a forwarding policy when receiving the first packet of the first VTEP;

the third communication unit is used for receiving a first message of the first VTEP; and the forwarding policy generated by the second control unit is sent to the first VTEP, so that the first VTEP sends a packet based on the forwarding policy.

In the above scheme, the third communication unit is further configured to receive virtual machine forwarding information sent by a plurality of VTEPs after tunnel connections between the VAGW node and the plurality of VTEPs are established; the virtual machine forwarding information comprises: the media access control MAC address, VTEP port, and virtual network information of the virtual machine.

In the above scheme, the third communication unit is further configured to generate a forwarding policy based on global virtual machine information when receiving a first packet of the first VTEP; the forwarding policy includes destination information corresponding to a first virtual machine of the first VTEP.

An embodiment of the present invention further provides a data processing system, where the system includes: at least two VAGW nodes, a plurality of VTEP and SDN controllers; the first VTEP is any VTEP in the plurality of VTEPs; the first VAGW node is a main VAGW node of the at least two VAGW nodes; wherein the content of the first and second substances,

the SDN controller is configured to control the plurality of VTEP nodes and establish tunnel connections with the at least two VAGW nodes, respectively;

the SDN controller comprises the SDN controller provided by the embodiment of the invention;

the first VTEP comprises the VTEP provided by the embodiment of the invention;

the first VAGW node includes the VAGW node according to the embodiment of the present invention.

According to the data processing method and device provided by the embodiment of the invention, the VAGW node establishes tunnel connection with the VTEPs through a Software Defined Network (SDN) controller, receives the message of the first VTEP through the established tunnel connection, and forwards the message to the corresponding second VTEP node.

In addition, the embodiment of the invention also provides a method for controlling tunnel connection between the VAGW node and the VTEPs by the SDN controller, wherein the SDN controller generates a forwarding strategy when receiving the first message of the first VTEP, and sends the forwarding strategy to the first VTEP so as to enable the first VTEP to send the message based on the forwarding strategy.

Drawings

Fig. 1 is a schematic diagram of the connection relationship between VTEPs in a VX L AN solution of the prior art;

FIG. 2 is a schematic diagram of a network architecture of an Overlay;

FIG. 3 is a schematic diagram of a host Overlay;

fig. 4 is a schematic diagram of VX L AN packet encapsulation;

FIG. 5 is a flowchart illustrating a data processing method according to a first embodiment of the invention;

fig. 6 is a schematic diagram illustrating a configuration of a VAGW node according to an embodiment of the present invention;

FIG. 7 is a flowchart illustrating a data processing method according to a second embodiment of the present invention;

FIG. 8 is a flowchart illustrating a data processing method according to a third embodiment of the present invention;

FIG. 9 is an architectural diagram of a data processing system according to an embodiment of the present invention;

FIG. 10 is a block diagram of an alternative architecture of a data processing system in accordance with the present invention;

FIG. 11 is a diagram illustrating a specific connection relationship in a data processing system according to an embodiment of the present invention;

FIG. 12 is a schematic diagram of information interaction for generating/starting a virtual machine according to an embodiment of the present invention;

fig. 13-19 are schematic diagrams of data forwarding in an embodiment of the present invention;

FIG. 20 is a block diagram of an alternative architecture of a data processing system in accordance with an embodiment of the present invention;

fig. 21 is a schematic structural diagram of a VAGW node according to an embodiment of the present invention;

FIG. 22 is a schematic diagram of the VTEP's component structure according to an embodiment of the present invention;

fig. 23 is a schematic structural diagram of an SDN controller according to an embodiment of the present invention.

Detailed Description

Before describing embodiments of the present invention in detail, a virtualization technique is first described.

At present, with wide application of virtualization technologies, particularly wide migration application of Virtual Machines (VMs), Virtual migration needs a large two-layer technology support of a network, the technology of a data center network develops rapidly, and a new large two-layer network layer virtualization technology is used, namely, an Overlay network enters a trial stage.

Overlay in the field of network technology refers to a virtualization technology mode overlaid on a network architecture, and its general framework is to implement a bearer applied to a network without large-scale modification of an underlying network, and can be separated from other network services, and is based on an IP-based underlying network technology (as shown in fig. 2).

This mode is formed in an optimization of the conventional art. Early standards supported two-layer Overlay technology, such as RFC3378(Ethernet in IP), which was an early two-layer Overlay technology over IP. Based on the Ethernet over GRE technology, existing manufacturers have developed respective proprietary two-layer Overlay technologies on the basis of physical networks, such as Ethernet Virtual Interconnection (EVI) and Overlay Transport Virtualization (OTV). The EVI and the OTV are mainly used for solving the problems of two-layer interconnection and service expansion between data centers, and the basic requirement of a bearer network is IP accessibility, so that the deployment is simple and the expansion is convenient.

With the drive of cloud computing virtualization, an Overlay technology based on host virtualization appears, an IP-based two-layer Overlay technology is supported on a vSwitch in a Hypervisor of a server, and network virtualization service is provided from an edge closer to an application, so that the deployment and business activities of a virtual machine are separated from a physical network and the limitation of the physical network, and the network form of cloud computing is continuously improved. As shown in fig. 3, after the vSwitch of the host supports IP-based Overlay, the two-layer access of the virtual machine is directly built on the Overlay, and the physical network no longer perceives many characteristics of the virtual machine, so that the Overlay can be built in the data center or span between the data centers.

And the emerging VX L AN becomes the mainstream technology in various Overlay technologies.

VX L AN is a tunnel forwarding mode for encapsulating Ethernet messages on a User Datagram Protocol (UDP) transmission layer, the destination UDP port number is 4798, in order to enable VX L AN to fully utilize the balance of a load network route, VX L AN takes the HASH (HASH) value of AN original Ethernet data head (MAC, IP, four-layer port number and the like) as the number of the UDP, and 24 bits are adopted to identify two-layer network segments, namely VX L AN network identifiers (VNI, VX L AN network identifiers), which are similar to V L AN ID functions, such as the message encapsulation format shown in FIG. 4, network traffic of unknown purposes, broadcast, multicast and the like are all encapsulated as multicast forwarding, and a physical network requires to support Any Source Multicast (ASM).

There are two ways for the data center to use VX L AN, host Overlay, which supports VX L AN in vSwitch inside each host Hypervisor, and network Overlay, which supports VX L AN on the data center network devices.

The present invention will be described in further detail with reference to the accompanying drawings and specific embodiments.

Example one

The embodiment of the invention provides a data processing method which is applied to a VAGW node. FIG. 5 is a flowchart illustrating a data processing method according to a first embodiment of the invention; as shown in fig. 5, the method includes:

step 101, the VAGW node establishes tunnel connection with a plurality of VX L AN tunnel nodes VTEP through the SDN controller.

Step 102: through the established tunnel connection, the VAGW node receives the message of the first VTEP and forwards the message to the corresponding second VTEP node.

In this embodiment, the VAGW node is a newly added node, so that a tunnel connection is not established between all VTEPs, but a tunnel connection is established between each VTEP and the VAGW node.

Specifically, fig. 6 is a schematic diagram of a VAGW node according to AN embodiment of the present invention, where, as shown in fig. 6, the VAGW node includes a physical port, and the VAGW node is similar to a switch, and the physical port may be understood as a port of the switch, and the VAGW node further includes a plurality of Virtual ports, where the Virtual ports are ports virtually mapped within the physical port, and each Virtual port corresponds to a tunnel connection.

In this embodiment, as an implementation manner, the step of receiving, by the VAGW node, a packet of a first VTEP node and forwarding the packet to a corresponding second VTEP node includes: the VAGW node receives a message of a first VTEP node, and sends the message to the SDN controller when determining that the message is a first packet message; obtaining forwarding information of the SDN controller; and the VAGW node sends the message to a corresponding second VTEP node based on the forwarding information.

As another embodiment, the step of the VAGW node receiving the packet of the first VTEP node and forwarding the packet to the corresponding second VTEP node includes: the VAGW node receives a message of a first VTEP node, and sends the message to the SDN controller when determining that the message is a first packet message; and when forwarding information of the SDN controller is not obtained but the message sent by the SDN controller is obtained, the VAGW node broadcasts the message at all virtual ports.

In this embodiment, the receiving, by the VAGW node, the packet of the first VTEP includes: the VAGW node receives a message of a first VTEP through a first virtual port corresponding to the first VTEP; and forwarding the virtual network information carried by the message to a corresponding virtual network.

By adopting the technical scheme of the embodiment of the invention, the newly added VAGW nodes are respectively connected with a plurality of VTEPs in a tunnel manner, so that tunnel connection is not established between all the VTEPs any more, and a layered VX L AN structure is formed, the tunnel pressure and the neighbor number of the VTEPs are greatly reduced, and on the other hand, the VAGW nodes are connected with all the VTEPs in the tunnel manner, thereby realizing fine management of flow and safety control.

Example two

The embodiment of the invention also provides a data processing method which is applied to the VTEP. FIG. 6 is a flowchart illustrating a data processing method according to a second embodiment of the present invention; as shown in fig. 6, the method includes:

step 201: when receiving a message of a first virtual machine, a first VTEP packages the message based on a forwarding strategy sent by an SDN controller; the encapsulated packet carries destination information.

Step 202: and the first VTEP sends a message to the VAGW node based on the tunnel connection between the first VTEP and the VAGW node.

As an embodiment, before the first VTEP receives the packet of the first virtual machine, the method further includes: the first VTEP senses the hooking action of the first virtual machine, generates first virtual machine forwarding information and sends the first virtual machine forwarding information to the SDN controller; the first virtual machine forwarding information comprises: the MAC address, VTEP port, and virtual network information of the first virtual machine.

In this embodiment, when the packet of the first virtual machine received by the first VTEP is the first packet, the method further includes: the first VTEP sends the message to the SDN controller; the first VTEP receives a forwarding policy sent by the SDN controller.

EXAMPLE III

The embodiment of the invention also provides a data processing method which is applied to the SDN controller. FIG. 7 is a flowchart illustrating a data processing method according to a third embodiment of the present invention; as shown in fig. 7, the method includes:

step 301: and the SDN controller controls the VAGW node to establish tunnel connection with the VTEPs.

Step 302: when the SDN controller receives a first message of a first VTEP, a forwarding strategy is generated, and the forwarding strategy is sent to the first VTEP, so that the first VTEP sends the message based on the forwarding strategy.

In this embodiment, tunnel connections established between the VAGW node and multiple VTEPs are managed and controlled by the SDN controller, all the VTEPs and VAGW nodes are controlled by the SDN controller, and the control protocol is implemented by an Openflow/OVSDB combination. The Openflow is an SDN control protocol defined by an Open Network Foundation (ONF) and is used for controlling forwarding of an actual data flow. Ovsdb (open vSwitch database) is an ovs (openvswitch) configuration management protocol defined in RFC7047, and can be used for basic configuration management of VTEP and VAGW nodes.

In this embodiment, after the SDN controller establishes tunnel connections between the VAGW node and a plurality of VTEPs, the method further includes: the SDN controller receives virtual machine forwarding information sent by a plurality of VTEPs; the virtual machine forwarding information comprises: the media access control MAC address, VTEP port, and virtual network information of the virtual machine.

In this embodiment, when the SDN controller receives the first packet of the first VTEP, generating a forwarding policy includes: when the SDN controller receives a first message of a first VTEP, a forwarding strategy is generated based on global virtual machine information; the forwarding policy includes destination information corresponding to a first virtual machine of the first VTEP.

By adopting the technical scheme of the embodiment of the invention, the layered VX L AN is realized by adopting the SDN architecture, including tunnel connection establishment, topology management, service control and the like, the tunnel pressure and the neighbor number of VTEP are greatly reduced, a data center VX L AN overlay network can be established in a large scale, two-layer communication of a plurality of data centers can be realized, the flow management among the refined data centers is realized, and the effects of efficient flow operation and high-density virtual machine management of a cloud computing environment are achieved.

Example four

The embodiment of the invention also provides a data processing method and a data processing system, and the data processing method is applied to the data processing system. FIG. 9 is a block diagram of a data processing system according to an embodiment of the present invention; as shown in fig. 9, the system includes: at least two VAGW nodes, a plurality of VTEP and SDN controllers; the first VTEP is any VTEP in the plurality of VTEPs; the first VAGW node is a main VAGW node of the at least two VAGW nodes; wherein the content of the first and second substances,

the SDN controller is configured to generate a forwarding policy when receiving a first packet of a first VTEP, and send the forwarding policy to the first VTEP;

the first VTEP is used for encapsulating the message based on a forwarding strategy sent by an SDN controller when receiving the message of the first virtual machine; the packaged message carries destination information; sending a message to the VAGW node based on the tunnel connection between the VAGW node and the message;

the first VAGW node is configured to receive a packet of the first VTEP through the established tunnel connection, and forward the packet to a corresponding second VTEP node.

Specifically, as an implementation manner, the first VAGW node is configured to receive a packet of a first VTEP node, and send the packet to the SDN controller when determining that the packet is a first packet of the packet; obtaining forwarding information of the SDN controller; sending the message to a corresponding second VTEP node based on the forwarding information;

the SDN controller is used for judging whether forwarding information corresponding to the message exists or not after receiving the message; when forwarding information corresponding to the message exists, sending the forwarding information to the first VAGW node; and when the destination information corresponding to the message does not exist, discarding the message.

As another embodiment, the first VAGW node is configured to receive a packet from a first VTEP node, and send the packet to the SDN controller when determining that the packet is a first packet; the VAGW node is further configured to broadcast the packet at all virtual ports when forwarding information of the SDN controller is not obtained but the packet sent by the SDN controller is obtained;

the SDN controller is used for judging whether forwarding information corresponding to the message exists or not after receiving the message; and when the destination information corresponding to the message does not exist but the destination information corresponding to the message exists, sending the message to the first VAGW node.

In this embodiment, the VAGW node is specifically configured to receive a packet of the first VTEP through the first virtual port corresponding to the first VTEP; and forwarding the virtual network information carried by the message to a corresponding virtual network.

In this embodiment, the first VTEP is configured to sense an attach action of the first virtual machine, generate first virtual machine forwarding information, and send the first virtual machine forwarding information to the SDN controller; the first virtual machine forwarding information comprises: MAC address, VTEP port and virtual network information of the first virtual machine;

the SDN controller is used for receiving virtual machine forwarding information sent by a plurality of VTEPs.

In this embodiment, the first VTEP is configured to send, when the received packet of the first virtual machine is a first packet, the packet to the SDN controller; the SDN controller is further used for receiving a forwarding strategy sent by the SDN controller;

the SDN controller is used for generating a forwarding strategy based on global virtual machine information when receiving a first message of a first VTEP; the forwarding policy includes destination information corresponding to a first virtual machine of the first VTEP.

In this embodiment, based on the SDN network, in the SDN network, information interaction processes such as online and data interaction of a virtual machine all trigger the SDN controller to perceive the virtual machine, that is, data interaction in the SDN network is completed under overall control of the SDN controller, the SDN controller has information and topology relationships of network-wide device nodes, and network-wide virtual machine information and location information, and the embodiment of the present invention implements layered VX L AN by using a control mode of the SDN.

In this embodiment, the SDN controller has topology information of the whole network, including all VTEP information and VAGW information of the overlay network, and VX L AN configuration information, VNI, virtual port, tunnel, and the like of the whole network, so that related network configuration and tunnel establishment are issued by the SDN controller, and this process follows the conventional OVSDB configuration and Openflow table issuing processes.

In the layered VX L AN scheme, a tunnel connection from a VTEP to a VAGW is established by AN SDN, so that a direct tunnel relation does not exist between all VTEPs, each VTEP only has one tunnel neighbor, namely the VAGW, the tunnel connection is established between the VAGW and all VTEPs, and data forwarding between all VTEPs is transferred through the VAGW to form a two-layer architecture.

Fig. 11 is a specific connection relationship under a data processing system according to AN embodiment of the present invention, as shown in fig. 11, a VX L AN tunnel connection is established between a VTEP and a VAGW, and a VX L AN tunnel connection is marked by using AN IP address pair of the VTEP and the VAGW, for a tunnel using the same IP on the VAGW, a virtual port (vPort) is created on the VAGW for termination, the virtual port is a unique identifier in the VAGW, has a port number inside the VAGW, one virtual port can be connected to a plurality of VTEPs, tunnels are distinguished by IP pairs, one tunnel is bound to one virtual port, and virtual ports can be connected to different VNIs, since a tunnel can carry a plurality of virtual networks, and isolation is distinguished by VNIs.

As shown in fig. 10, the data streams sent by all virtual machines are original ethernet packets (ETH packets in the figure), and are encapsulated by VTEP and loaded with overlay packet headers, where the tunnel information of VTEP and VAGW is encapsulated. All VTEP messages are sent to VAGW, the messages are forwarded in the VAGW, and enter a corresponding virtual network VN forwarding domain through VNI; and in the VN forwarding domain, the message header is stripped, the message is forwarded according to the information of the original Ethernet message, the correct virtual port is selected, the message header is encapsulated again and forwarded to the corresponding VTEP through the network, and finally the message header reaches the destination virtual machine. And the SDN controller globally senses and transmits the forwarding information of the whole process to guide data flow.

Based on the above system architecture description, a detailed description of a specific forwarding process is provided below.

First, after the virtual machine is generated/started, the VTEP senses an attach action generated/started by the virtual machine, locally generates virtual machine forwarding information (including a MAC address, a corresponding local VTEP port, and a located VN), and sends the virtual machine forwarding information to the SDN controller, as shown in fig. 12.

The forwarding of data is described in detail below. Taking the data forwarding from the first virtual machine (denoted as VM-1) to the third virtual machine (denoted as VM-3) as an example, where VM-1 is attached to the first VTEP (denoted as VTEP-1), and VM-3 is attached to the third VTEP (denoted as VTEP-3), the data forwarding process includes:

2.1, firstly, a VM-1 data message reaches VTEP-1, if the first data message is determined, VTEP-1 sends the first data message to AN SDN controller, the SDN generates and sends AN openflow flow table to VTEP-1 according to global VM information, the VTEP-1 obtains a forwarding policy of VM-1- > VM-3, the VTEP-1 performs VX L AN encapsulation on the data message, the encapsulation comprises a tunnel destination VAGW, the source address is VTEP-1, and the encapsulated data message is sent to VAGW by the VTEP-1, as shown in FIG. 13.

2.2, a data message corresponding to VM-1 reaches a VAGW and is forwarded to a first virtual port (vPort-1) of a tunnel through the tunnel, the VAGW forwards the data message to a corresponding network domain VNI1 according to VNI information while removing VX L AN encapsulation, the VAGW sends the data message to AN SDN controller when determining that the data message is a first data message corresponding to VM-1, the SDN controller judges whether destination information (namely VM-3 information) corresponding to the data message exists, discards the data message when determining that the VM-3 information does not exist, forwards information (for example, forwarding information) to the VAGW when determining that the forwarding information corresponding to VM-3 exists, the VAGW forwards the data message based on the forwarding information, and the SDN controller sends the data message back to the VAGW, and the VAGW broadcasts the data message through each virtual port in 1 when determining that the VM-3 information exists but the forwarding information corresponding to VM-3 is not formed, and specific forwarding information (VNI-1, VNI1, MAC-1, VNI-1) is formed on the vavn.

2.3, for example, a packet broadcast at each virtual port of VNI1 in the VAGW is sent out from vPort-3, and is encapsulated into a VX L AN data packet to enter a virtual network corresponding to VNI1, and the VX L AN data packet is sent to VTEP-3, where a packet header carries fields including that the source IP is the VAGW and the destination IP is IP-3 of VTEP-3, as shown in fig. 15.

2.4: the VTEP-3 of the VAGW receives the data packet, strips off the header, and forwards the data packet to the local according to the VNI, and since the MAC-3 table entry is already generated locally at the time of virtual startup, the packet (ETH packet in the figure) is directly forwarded to the VM-3, as shown in fig. 16.

2.5, the data message returned to VM-1 by VM-3 is encapsulated into a VX L AN message on VTEP-3 to reach VAGW, as shown in FIG. 17.

2.6, when the data packets from VM-3 to VM-1 reach the VAGW, the packet header is stripped at vPort-3, and meanwhile, forwarding tables of MAC-3, vPort-3 and VNI1 are formed in VNI1 of the VAGW, and at this time, the MAC table of VM-1 can be searched as MAC-1, vPort-1 and VNI1 in VNI1, the VAGW directly forwards the data packets to vPort-1, and encapsulates the data packets to VTEP-1 by using VNI1 as VX L AN information of the data packets, as shown in FIG. 18.

2.7: VTEP-1 receives the data packet, strips the header, and forwards to local VM-1 according to VNI as shown in FIG. 19.

2.8: and subsequent forwarding, wherein the SDN controller does not participate in the control of the forwarding process any more before the table entry is aged based on the table entry generated by the network.

In the above forwarding description, the VAGW may serve as a switch device, and connect the virtual port vPort to the VNI, so that all traffic passing through the vPort may be monitored and counted.

AN end-to-end two-layer overlay forwarding in the data center is separated into two sections of VX L ANs which are connected through a VAGW in the implementation of a layered VX L AN.

The above described hierarchical VX L AN scheme can be applied across multiple data centers, such as the network architecture shown in fig. 20.

Taking two data centers as AN example, two VAGWs are respectively deployed at each side, VTEPs of the data centers are all connected with local VAGWs to establish a layered VX L AN, and the two VAGWs establish a VX L AN layered connection, so that a two-layer VX L AN domain of the two data centers is divided into three segments by the two VAGWs, but in the same VNI domain, the two-layer network domain is still a two-layer network domain.

By the implementation scheme, the two-layer traffic between the data centers can be monitored and managed based on VNI and vPort, and the traffic can be monitored and managed more finely by taking the virtual machine as granularity.

EXAMPLE five

The embodiment of the invention also provides a node, which is a VAGW node. Fig. 21 is a schematic structural diagram of a VAGW node according to an embodiment of the present invention; as shown in fig. 21, the node includes: a first tunneling unit 411 and a forwarding unit 412; wherein the content of the first and second substances,

the first tunnel communication unit 411 is configured to establish tunnel connections with a plurality of VX L AN tunnel nodes VTEP through AN SDN controller;

the forwarding unit 412 is configured to forward the packet received by the first tunnel communication unit 411 to a corresponding second VTEP node.

In this embodiment, as an implementation manner, the node further includes a first communication unit;

the first tunnel communication unit 411 is configured to receive a packet from a first VTEP node, and enable the first communication unit when determining that the packet is a first packet;

the forwarding unit 412 is configured to send the packet to a corresponding second VTEP node based on the forwarding information obtained by the first tunnel unit.

As another embodiment, the node further comprises a first communication unit;

the forwarding unit 412 is configured to, when the first tunnel unit does not obtain forwarding information of the SDN controller but obtains the packet sent by the SDN controller, broadcast the packet at all virtual ports by the VAGW node.

In this embodiment, the first tunnel communication unit 411 is configured to receive a packet of a first VTEP through a first virtual port corresponding to the first VTEP; and forwarding the virtual network information carried by the message to a corresponding virtual network.

It should be understood by those skilled in the art that, the functions of each processing unit in the node according to the embodiment of the present invention may be understood by referring to the related description of the foregoing data processing method, and each processing unit in the node according to the embodiment of the present invention may be implemented by an analog circuit that implements the functions described in the embodiment of the present invention, or may be implemented by running software that performs the functions described in the embodiment of the present invention on an intelligent terminal.

In the embodiment of the present invention, in practical applications, the first tunnel communication Unit 411 and the forwarding Unit 412 in the VAGW node may be implemented by a communication module (including a basic communication suite, an operating system, a communication module, a standardized interface, a protocol, and the like) in the VAGW node in combination with a Central Processing Unit (CPU), a Digital Signal Processor (DSP), a Micro Control Unit (MCU) or a Programmable Gate Array (FPGA).

EXAMPLE six

The embodiment of the invention also provides a node, and the node is VTEP. FIG. 22 is a schematic diagram of the VTEP's component structure according to an embodiment of the present invention; as shown in fig. 22, the node includes: a receiving unit 421, a first control unit 422, and a second tunnel communication unit 423; wherein the content of the first and second substances,

the receiving unit 421 is configured to receive a message of a first virtual machine;

the first control unit 422 is configured to encapsulate the packet received by the receiving unit 421 based on a forwarding policy sent by an SDN controller; the packaged message carries destination information;

the second tunnel communication unit 423 is configured to send the packet encapsulated by the first control unit 422 to the VAGW node based on the tunnel connection with the VAGW node.

As an embodiment, the node further includes a second communication unit;

the first control unit 422 is further configured to, before the receiving unit 421 receives the message of the first virtual machine, sense a hooking action of the first virtual machine, and generate forwarding information of the first virtual machine; the first virtual machine forwarding information comprises: MAC address, VTEP port and virtual network information of the first virtual machine;

the second communication unit is configured to send the first virtual machine forwarding information generated by the first control unit 422 to the SDN controller.

As an implementation manner, the node further includes a second communication unit, configured to send, when the packet of the first virtual machine received by the receiving unit 421 is a first packet, the packet to the SDN controller; and the SDN controller is further configured to receive a forwarding policy sent by the SDN controller.

In the embodiment of the present invention, the receiving Unit 421 and the second tunnel communication Unit 423 in the VTEP may be implemented by a communication module (including a basic communication suite, an operating system, a communication module, a standardized interface, a protocol, and the like) in the VTEP in practical application, and the first control Unit 422 in the VTEP in practical application may be implemented by a Central Processing Unit (CPU), a Digital Signal Processor (DSP), a Micro Control Unit (MCU), or a Programmable gate array (FPGA).

EXAMPLE seven

The embodiment of the invention also provides a node, which is an SDN controller. Fig. 23 is a schematic structural diagram of an SDN controller according to an embodiment of the present invention; as shown in fig. 23, the node includes: a second control unit 431 and a third communication unit 432; wherein the content of the first and second substances,

the second control unit 431 is configured to control establishment of tunnel connections between the VAGW node and multiple VTEPs; the third communication unit 432 is further configured to generate a forwarding policy when receiving the first packet of the first VTEP;

the third communication unit 432 is configured to receive a first message of the first VTEP; and is further configured to send the forwarding policy generated by the second control unit 431 to the first VTEP, so that the first VTEP sends a packet based on the forwarding policy.

In an embodiment, the third communication unit 432 is further configured to, after establishing tunnel connections between the VAGW node and multiple VTEPs, receive virtual machine forwarding information sent by multiple VTEPs; the virtual machine forwarding information comprises: the media access control MAC address, VTEP port, and virtual network information of the virtual machine.

As an implementation manner, the third communication unit 432 is further configured to generate a forwarding policy based on global virtual machine information when receiving a first packet of the first VTEP; the forwarding policy includes destination information corresponding to a first virtual machine of the first VTEP.

In this embodiment of the present invention, the third communication Unit 432 in the SDN controller may be implemented by a communication module (including a basic communication suite, an operating system, a communication module, a standardized interface, a protocol, and the like) in the SDN controller in an actual application, and the second control Unit 431 in the SDN controller may be implemented by a Central Processing Unit (CPU), a Digital Signal Processor (DSP), a Micro Control Unit (MCU), or a Programmable Gate Array (FPGA) in an actual application.

In the several embodiments provided in the present application, it should be understood that the disclosed apparatus and method may be implemented in other ways. The above-described device embodiments are merely illustrative, for example, the division of the unit is only a logical functional division, and there may be other division ways in actual implementation, such as: multiple units or components may be combined, or may be integrated into another system, or some features may be omitted, or not implemented. In addition, the coupling, direct coupling or communication connection between the components shown or discussed may be through some interfaces, and the indirect coupling or communication connection between the devices or units may be electrical, mechanical or other forms.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed on a plurality of network units; some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, all the functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately regarded as one unit, or two or more units may be integrated into one unit; the integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.

Those of ordinary skill in the art will understand that: all or part of the steps for implementing the method embodiments may be implemented by hardware related to program instructions, and the program may be stored in a computer readable storage medium, and when executed, the program performs the steps including the method embodiments; and the aforementioned storage medium includes: a mobile storage device, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.

Alternatively, the integrated unit of the present invention may be stored in a computer-readable storage medium if it is implemented in the form of a software functional module and sold or used as a separate product. Based on such understanding, the technical solutions of the embodiments of the present invention may be essentially implemented or a part contributing to the prior art may be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the methods described in the embodiments of the present invention. And the aforementioned storage medium includes: a removable storage device, a ROM, a RAM, a magnetic or optical disk, or various other media that can store program code.

The above description is only for the specific embodiments of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present invention, and all the changes or substitutions should be covered within the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the appended claims.

Claims

1. A method of data processing, the method comprising:

a virtual extensible local area network VX L AN aggregation gateway (VAGW) node establishes tunnel connection with a plurality of VX L AN tunnel nodes VTEP through a Software Defined Network (SDN) controller;

through the established tunnel connection, the VAGW node receives the message of the first VTEP and forwards the message to the corresponding second VTEP.

2. The method according to claim 1, wherein the VAGW node receives a packet of a first VTEP and forwards the packet to a corresponding second VTEP, comprising:

the VAGW node receives a message of a first VTEP, and sends the message to the SDN controller when determining that the message is a first packet message;

obtaining forwarding information of the SDN controller;

and the VAGW node sends the message to a corresponding second VTEP based on the forwarding information.

3. The method according to claim 1, wherein the VAGW node receives a packet of a first VTEP and forwards the packet to a corresponding second VTEP, comprising:

4. The method of claim 1, wherein the receiving, by the VAGW node, the message of the first VTEP comprises:

5. A method of data processing, the method comprising:

6. The method according to claim 5, wherein before the first VTEP receives the message of the first virtual machine, the method further comprises:

7. The method according to claim 6, wherein when the first virtual machine packet received by the first VTEP is a first packet, the method further comprises: the first VTEP sends the message to the SDN controller;

the first VTEP receives a forwarding policy sent by the SDN controller.

8. A method of data processing, the method comprising:

9. The method of claim 8, wherein after the SDN controller establishes a tunnel connection between a VAGW node and a plurality of VTEPs, the method further comprises:

10. The method of claim 8, wherein generating a forwarding policy when the SDN controller receives the first packet of the first VTEP comprises:

11. A node, which is a VX L AN aggregation gateway (VAGW) node, is characterized in that the node comprises a first tunneling unit and a forwarding unit,

the first tunnel communication unit is used for establishing tunnel connection with a plurality of VX L AN tunnel nodes VTEP through a software defined network SDN controller;

and the forwarding unit is used for forwarding the message received by the first tunnel communication unit to the corresponding second VTEP.

12. The node of claim 11, further comprising a first communication unit;

the first tunnel communication unit is used for receiving a message of a first VTEP and enabling the first communication unit when the message is determined to be a first packet message;

and the forwarding unit is configured to send the packet to a corresponding second VTEP based on the forwarding information obtained by the first tunnel unit.

13. The node of claim 11, further comprising a first communication unit;

14. The node according to claim 11, wherein the first tunneling unit is configured to receive a packet of a first VTEP through a first virtual port corresponding to the first VTEP; and forwarding the virtual network information carried by the message to a corresponding virtual network.

15. A node that is a first VTEP; characterized in that said node comprises: the system comprises a receiving unit, a first control unit and a second tunnel communication unit; wherein the content of the first and second substances,

the receiving unit is used for receiving a message of a first virtual machine;

16. The node according to claim 15, characterized in that the node further comprises a second communication unit;

17. The node according to claim 15, wherein the node further comprises a second communication unit, configured to send the packet to the SDN controller when the packet of the first virtual machine received by the receiving unit is a first packet; and the SDN controller is further configured to receive a forwarding policy sent by the SDN controller.

18. A node, the node being an SDN controller; characterized in that said node comprises: a second control unit and a third communication unit; wherein the content of the first and second substances,

19. The node according to claim 18, wherein the third communication unit is further configured to receive virtual machine forwarding information sent by a plurality of VTEPs after establishing tunnel connections between the VAGW node and the plurality of VTEPs; the virtual machine forwarding information comprises: the media access control MAC address, VTEP port, and virtual network information of the virtual machine.

20. The node according to claim 18, wherein the third communication unit is further configured to generate a forwarding policy based on global virtual machine information when receiving a first packet of the first VTEP; the forwarding policy includes destination information corresponding to a first virtual machine of the first VTEP.

21. A data processing system, characterized in that the system comprises: at least two VAGW nodes, a plurality of VTEP and SDN controllers; the first VTEP is any VTEP in the plurality of VTEPs; the first VAGW node is any one of the at least two VAGW nodes; wherein the content of the first and second substances,

the SDN controller is configured to control the plurality of VTEPs and establish tunnel connections with the at least two VAGW nodes, respectively;

the SDN controller comprises the node of any one of claim 18 to claim 20;

the first VTEP comprises the node of any one of claim 15 to claim 17;

the first VAGW node comprises the node of any one of claim 11 to claim 14.