CN109995636B

CN109995636B - Hybrid networking method, device, system, equipment and medium

Info

Publication number: CN109995636B
Application number: CN201711495154.2A
Authority: CN
Inventors: 龚纯
Original assignee: China Mobile Communications Group Co Ltd; China Mobile Group Jiangxi Co Ltd
Current assignee: China Mobile Communications Group Co Ltd; China Mobile Group Jiangxi Co Ltd
Priority date: 2017-12-31
Filing date: 2017-12-31
Publication date: 2021-06-04
Anticipated expiration: 2037-12-31
Also published as: CN109995636A

Abstract

The embodiment of the invention provides a hybrid networking method, a device, a system, equipment and a medium, wherein the method comprises the following steps: determining a first two-layer virtual interface according to a virtual local area network tag identifier in a message received by a physical input interface, and sending the message to the determined first two-layer virtual interface; the first two-layer virtual interface determines first interface information of the first two-layer virtual interface according to the message and searches for VSI; the first and second layer virtual interfaces determine a tunnel virtual interface according to the first interface information and the VSI, and forward the message to the determined tunnel virtual interface; the tunnel virtual interface determines a second layer virtual interface according to the message, and transmits the message to the determined second layer virtual interface after tunnel encapsulation; and the second layer virtual interface packages the message and then sends the message to the physical output interface. The improved VTEP device in the invention simultaneously provides a bridging function, supports different two-layer network access and forwarding, and realizes forward compatibility of the network.

Description

Hybrid networking method, device, system, equipment and medium

Technical Field

The present invention relates to the field of hybrid networking technologies, and in particular, to a hybrid networking method, apparatus, system, device, and medium.

Background

Currently, cloud computing and cloud services are developing vigorously. In order to better serve a large-scale data center and realize network virtualization, large-scale realization of an SDN framework in the existing network tends to become a trend, the SDN framework has the characteristics of super large scale, high expansibility, virtualization, on-demand service and the like, and new requirements under a cloud computing environment can be well met. SDN (Software Defined Network) is an effective method for solving Network virtualization or Network function virtualization.

Under a new SDN framework, the centralized control and automatic deployment of the network are realized, the problems of Virtual Machine (VM) migration and flow isolation which are necessarily faced by the network in data are solved, and the VXLAN protocol is generated. VXLAN (Virtual Extensible local area network) is an IEFT (internet engineering task force) draft commonly proposed in 2012 by VMware, Cisco, reddat, etc. Meanwhile, with the large deployment of a new generation of data centers, the application of a server cluster technology and a virtualization technology is wide, a large two-layer network is deployed among the data centers according to the technical requirements of dynamic migration of virtual machines and the like, and the VXLAN technology is used as a new large two-layer network technology and can meet the requirements of the new generation of data center networks.

The VXLAN technology is a technical scheme for realizing two-layer interconnection of a data center based on the IP technology. VXLAN protocols can create virtual layer two subnets across physical IP subnets using a "MAC in UDP" mechanism. The method is suitable for being applied to data center networking, and can span three-layer networks to realize two-layer interconnection of data centers in different places. VXLAN provides 24-bit network identifiers, can support 16M at most, can effectively solve the problem that the number of VLANs in the current data center is insufficient, and meets the requirement of service isolation in the current environment. The VXLAN technology can be based on the existing network providers and enterprise IP networks, not only enables the dispersed physical sites to realize two-layer interconnection, but also can provide service isolation for different tenants.

The VXLAN networking scheme needs to add VTEP equipment in the networking to realize the binding of a user network to a VXLAN tunnel, thereby realizing the intercommunication of a two-layer network. However, in an actual networking, a large number of existing two-layer network devices exist in an existing network, and an original two-layer network connection is realized. These devices are not immediately replaced by VTEP and they do not support VXLAN, but new VXLAN networks and devices want to be able to interwork with the original network environment.

Disclosure of Invention

The embodiment of the invention provides a hybrid networking method, a hybrid networking device, a hybrid networking system, hybrid networking equipment and a hybrid networking medium, which are used for solving the problem of incompatibility among different networks in the traditional networking mode.

In another aspect, an embodiment of the present invention provides a hybrid networking method, where the method includes:

determining a first two-layer virtual interface according to a virtual local area network tag identifier in a message received by a physical input interface, and sending the message to the determined first two-layer virtual interface;

the first two-layer virtual interface determines first interface information of the first two-layer virtual interface according to the message and searches for VSI;

the first and second layer virtual interfaces determine a tunnel virtual interface according to the first interface information and the VSI, and forward the message to the determined tunnel virtual interface;

the tunnel virtual interface determines a second layer virtual interface according to the message, and transmits the message to the determined second layer virtual interface after tunnel encapsulation;

and the second layer virtual interface packages the message and then sends the message to the physical output interface.

In another aspect, an embodiment of the present invention provides a hybrid networking device, where the device includes:

the first second-layer virtual interface access module is used for determining a first second-layer virtual interface according to a virtual local area network tag identifier in a message received by the physical access interface and sending the message to the determined first second-layer virtual interface;

the first two-layer virtual interface determining module is used for determining first interface information of the first two-layer virtual interface according to the message and searching for the VSI;

the first and second layer virtual interface forwarding module is used for determining a tunnel virtual interface according to the first interface information and the VSI, and forwarding the message to the determined tunnel virtual interface;

the tunnel virtual interface sending module is used for determining a second layer virtual interface according to the message, and sending the message to the determined second layer virtual interface after tunnel encapsulation;

and the second layer virtual interface sending module is used for packaging the message and then sending the message to the physical output interface.

In another aspect, an embodiment of the present invention provides a hybrid networking system, including: an access network and a VTEP device, wherein the access network comprises at least one of the following three networks: VLAN networks, VXLAN networks, and GRE networks; the VTEP apparatus includes the hybrid networking device as described in the above embodiments.

In another aspect, an embodiment of the present invention provides a hybrid networking device, including: at least one processor, at least one memory, and computer program instructions stored in the memory, which when executed by the processor, implement the method of the first aspect of the embodiments described above.

In another aspect, an embodiment of the present invention provides a computer-readable storage medium, on which computer program instructions are stored, and when the computer program instructions are executed by a processor, the method of the first aspect in the foregoing embodiments is implemented.

The embodiment of the invention provides a hybrid networking method, a hybrid networking device and a hybrid networking medium, provides an improved VTEP device, simultaneously provides a bridging function, supports different two-layer network access and forwarding, and realizes forward compatibility of networks.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required to be used in the embodiments of the present invention will be briefly described below, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.

Fig. 1 shows a schematic diagram of a VXLAN network model;

fig. 2 shows a schematic diagram of a VXLAN message encapsulation format;

fig. 3 shows a schematic diagram of the binding of VXLAN layer two interfaces and VSIs;

FIG. 4 illustrates a flow diagram of a hybrid networking method of an embodiment of the present invention;

fig. 5 illustrates a layered hybrid bridging VXLAN networking architecture, according to an embodiment of the invention;

fig. 6 shows a two-layer bridging VXLAN tunnel schematic of a VTEP in accordance with an embodiment of the invention;

fig. 7 is a schematic diagram illustrating SDN network controller configuration delivery according to an embodiment of the present invention;

FIG. 8 is a diagram illustrating VLAN bridging access forwarding according to an embodiment of the present invention;

fig. 9 shows a schematic diagram of VXLAN virtual interface forwarding according to an embodiment of the invention;

fig. 10 shows a schematic diagram of VXLAN tunnel message IP forwarding according to an embodiment of the present invention;

FIG. 11 is a diagram illustrating VLAN bridging access forwarding according to an embodiment of the present invention;

FIG. 12 is a diagram illustrating VLAN bridge forwarding according to an embodiment of the present invention;

fig. 13 is a schematic diagram illustrating NVGRE bridging access forwarding according to an embodiment of the present invention;

fig. 14 shows a schematic diagram of VXLAN virtual interface forwarding according to an embodiment of the invention;

fig. 15 shows a schematic diagram of VXLAN tunnel message IP forwarding according to an embodiment of the present invention;

fig. 16 shows a schematic diagram of hybrid bridging VTEP device traffic policing according to an embodiment of the invention;

fig. 17 is a schematic diagram of a multi-data center VXLANer two-layer bridging hybrid network according to an embodiment of the present invention;

FIG. 18 illustrates a block diagram of a hybrid networking device, in accordance with an embodiment of the present invention;

fig. 19 is a schematic hardware structure diagram of a hybrid networking device according to an embodiment of the present invention.

Detailed Description

Features and exemplary embodiments of various aspects of the present invention will be described in detail below, and in order to make objects, technical solutions and advantages of the present invention more apparent, the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not to be construed as limiting the invention. It will be apparent to one skilled in the art that the present invention may be practiced without some of these specific details. The following description of the embodiments is merely intended to provide a better understanding of the present invention by illustrating examples of the present invention.

It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

Fig. 1 is a schematic diagram of a VXLAN network model. As shown in fig. 1, the main advantages of VXLAN networks are: the VXLAN network does not need to deploy equipment supporting VXLAN functions on a core IP network, only needs network edge equipment supporting VXLAN functions, and does not need to be upgraded in the existing IP core network, so that the cost is greatly saved. VXLAN provides two-layer interconnection among sites, so that a basic network scheme of tenants on a cloud computing data center can be greatly simplified, and a foundation is provided for migration of virtual machines on the cloud computing data center. The VXLAN network provides 16M tenant isolation number, and compared with the 4K isolation number of the VLAN, the number can better meet the requirement of a future large-scale cloud data center. By realizing centralized control and automatic deployment of the VXLAN network under the SDN architecture, the cost can be greatly reduced, the efficiency is improved, and operators and data centers have advantages in the cloud computing environment. Based on the above advantages, the application solution of VXLAN in data center networks becomes the key point of operators and network equipment vendors.

A typical VXLAN network model includes the following sections:

VM (Virtual Machine): multiple virtual machines can be created on the same physical server, which can be subordinate to different VXLAN networks. Two layers of VMs belonging to the same VXLAN communicate with each other; VM two-level isolation belonging to different VXLANs. The different VXLANs are distinguished and identified by VXLAN IDs, i.e., VNIs (VXLAN Network Identifier), which is 24 bits long.

VTEP device (VXLAN Tunnel End Point ): the specific message processing of VXLAN is performed on VTEP, for example, to identify VXLAN to which the message belongs, to perform two-layer forwarding on the message, and to encapsulate/decapsulate the message.

VXLAN tunnel: a logical tunnel is established between the two VTEP devices. It transfers the encapsulated data message from the VTEP device at one end to the VTEP device at the other end.

And VSI: a VSI is provided on the VTEP device for a VXLAN. This VSI has similar functionality to a VSI with L2VPN technology, and is a layer two forwarding virtual switch. VSI corresponds to VXLAN-one.

Fig. 2 shows a schematic diagram of a VXLAN packet encapsulation format, and as shown in fig. 2, an 8-byte VXLAN header and an 8-byte UDP header are added outside an original two-layer data frame, followed by a normal 20-byte IP header. Wherein, the destination port number of the UDP is defaulted to 4789. The 8 byte VXLAN header consists essentially of two parts: marking position: the "I" bit is 1, indicating that the VXLAN ID in the VXLAN header is valid; the "I" bit is 0, indicating that the VXLAN ID is invalid. The other bits remain unused and are set to 0. VXLAN ID: for identifying a VXLAN network, 24 bits in length.

In existing VXLAN solutions, the three-layer interface or ethernet service instance associated with the VSI is referred to as the AC. Wherein the ethernet service instance is created on a layer two ethernet interface that defines a series of matching rules for matching data frames received from the layer two ethernet interface.

Fig. 3 shows a schematic diagram of binding of a VXLAN two-layer interface and a VSI, as shown in fig. 3, a message sent by a VM-a is provided with a VLAN 30, an ethernet service instance is configured on a VTEP device to match the message of the VLAN 30, an ethernet service instance 1 is bound to the VSI-a, and VXLAN 1 is created in the VSI-a, so that after receiving a daA frame sent by the VM-a, the VTEP device can recognize that the daA frame belongs to VXLAN 1.

The VTEP equipment receives the data message from the local site through the AC, and finds the VSI and VXLAN corresponding to the message. And the VXLAN message received from the VXLAN tunnel indicates the VXLAN to which the message belongs by the VXLAN ID carried in the message.

Fig. 4 is a flowchart illustrating a hybrid networking method according to an embodiment of the present invention, and as shown in fig. 4, the method includes:

step S10, determining a first two-layer virtual interface according to the label identification of the virtual local area network in the message received by the physical input interface, and sending the message to the determined first two-layer virtual interface.

Step S20, the first two-layer virtual interface determines the first interface information of the first two-layer virtual interface according to the message and searches for the VSI.

Step S30, the first and second layer virtual interfaces determine a tunnel virtual interface according to the first interface information and the VSI, and forward the packet to the determined tunnel virtual interface.

And step S40, the tunnel virtual interface determines a second layer virtual interface according to the message, and sends the message to the determined second layer virtual interface after tunnel encapsulation.

And step S50, the second layer virtual interface packages the message and sends the message to the physical output interface.

Specifically, the embodiment provides a VXLAN architecture SDN implementation scheme under hybrid networking, and a VXLAN hybrid bridge device, which implement virtual connection of a hierarchical network through hybrid networking. The existing VXLAN network one-layer flat architecture is changed into a two-layer or multi-layer mixed layered architecture, a virtual interface for VXLAN tunnel termination and a virtual interface for two-layer network connection are defined in the network, mutual access and transparent transmission of the two-layer virtual interface and the tunnel virtual interface are realized, connection of the tunnel virtual interface and different two-layer domains VSI is realized, and the VTEP device simultaneously provides a bridging function and supports two-layer network access and forwarding. Under the bridge scheme, the VTEP device supports the mixed networking of a local VLAN two-layer tunnel and a VXLAN tunnel and the access of a heterogeneous two-layer network. Thus, the VTEP of the data center establishes a layered VXLAN network, including a localized large two-layer VLAN access layer and a tunneled network layer between different data centers. Meanwhile, the embodiment redefines the VTEP equipment, distinguishes VXLAN bridge interfaces and VXLAN tunnel virtual interfaces, realizes hybrid layered networking, realizes the layered network topology structure and the layered network management of the entity, manages the layered QOS, and does not care about the supporting condition of the old equipment.

In a possible implementation manner, the tunnel virtual interface determines a second layer virtual interface according to the packet, and sends the packet to the determined second layer virtual interface after tunnel encapsulation, including:

the tunnel virtual interface determines second interface information of the first two-layer virtual interface and searches for the VSI according to the message;

and determining a second layer virtual interface according to the second interface information and the VSI, and forwarding the message to the second layer virtual interface after tunnel encapsulation.

In a possible implementation manner, the determining, by the first and second virtual interfaces, a virtual tunnel interface according to the first interface information and the VSI, and forwarding the packet to the determined virtual tunnel interface includes:

and when the message is a multicast message, the first and second layer virtual interfaces look up a multicast table, and determine the tunnel virtual interface corresponding to each multicast member according to the search result.

In a possible implementation manner, the determining, by the tunnel virtual interface, a second layer virtual interface according to the packet, and sending the packet to the determined second layer virtual interface includes:

the tunnel virtual interface determines second interface information of the first two-layer virtual interface and searches for the VNI according to the message;

and determining a second layer virtual interface according to the second interface information and the VNI, and forwarding the message to the second layer virtual interface after tunnel encapsulation.

In one possible implementation, the method further includes:

and the virtual tunnel interface performs tunnel encapsulation on the message and then sends the message to a physical output interface.

In a possible implementation manner, the message includes any one of the following three messages:

the forwarding message from the VLAN network to the VXLAN network, the forwarding message from the VLAN network to the VLAN network and the forwarding message from the NVGER to the VXLAN network.

In one possible implementation, the method further includes:

and the SDN controller creates a first two-layer virtual interface, a tunnel virtual interface and a second two-layer virtual interface in the VTEP device according to the network topology structure.

Specifically, the invention changes the single forwarding architecture of the existing VXLAN network into a heterogeneous hybrid layered architecture, defines the virtual interface for terminating the VXLAN tunnel and the virtual interface for connecting the two-layer network in the network, realizes the mutual access and transparent transmission of the two-layer virtual interface and the tunnel virtual interface, and realizes the connection of the tunnel virtual interface and the VSI of different two-layer domains.

The improved VTEP device simultaneously provides a bridging function, supports different two-layer network access and forwarding and realizes the forward compatibility of the network. Meanwhile, the network virtualization technology supported by the data center network hardware equipment and the heterogeneity of the virtual network platform are realized through the hybrid bridging of various two-layer tunnel protocols. Under the bridge scheme, the VTEP device supports the mixed networking of a local VLAN two-layer network and a VXLAN tunnel and the access of a heterogeneous two-layer network, such as a VPLS and the like. Thus, the VTEP of the data center establishes a layered VXLAN network, including a localized large two-layer VLAN access layer and a tunneled network layer between different data centers. Redefining the VTEP equipment, distinguishing VXLAN bridge interfaces and VXLAN tunnel virtual interfaces, and realizing hybrid layered networking, entity layered network topology structure and layered network management. The method realizes the layered and layered QOS management of a two-layer network, realizes the QOS management of different two-layer sub-interfaces, VXLAN bridge interfaces and VXLAN tunnel virtual interfaces, and realizes the fine management and safety control of the flow between user services and different networks.

Fig. 5 shows a layered hybrid bridging VXLAN networking architecture according to an embodiment of the present invention, and as shown in fig. 5, in a layered hybrid bridging VXLAN network topology, a VTEP device is used as an access device of a VXLAN tunnel of a local two-layer network, and is also used as a two-layer network bridging device, so as to implement interworking of different two-layer networks. Fig. 5 shows that two different two-layer networks, VLAN two-layer networking and NVGRE networking exist locally, and the improved VTEP device realizes access of a VXLAN tunnel, and can be used as a two-layer bridge device to realize bridging of different two-layer networks, thereby realizing intercommunication of two layers.

Virtual Local Area Network (VLAN) is the most widely used protocol in traditional data centers, and uses VLAN tags as identification bits to distinguish data packets belonging to different users. However, the VLAN configuration overhead is high, and the scalability bottleneck of 4094 virtual networks is provided, which cannot meet the requirements of the cloud computing environment.

The application mainly aims at the condition of a two-layer networking of an original data center and accesses different equipment types, so that the influence of the maximum reduction on the existing network is realized, the replacement of old equipment is reduced, the old equipment of the old network adopts an original networking mode, new equipment of the new network adopts new VXLAN networking, and forward compatibility of the network is realized. The SDN controller realizes the access of the original network and the layered flow and QOS management by acquiring the original networking information and configuring a two-layer virtual interface on the VTEP device.

Besides the above two-layer network protocol, the VTEP device of the present application can also provide support for other two-layer networks, such as NVGRE supported by microsoft hyper-V platform, so as to implement hybrid bridging of multiple two-layer protocols, thereby implementing a network virtualization technology supported by data center network hardware devices and heterogeneous virtual network platforms.

Fig. 6 shows a schematic diagram of a two-layer bridging VXLAN tunnel of a VTEP according to an embodiment of the present invention, as shown in fig. 6, the VTEP terminates a protocol tunnel by creating a virtual interface for different protocols, and simultaneously creates a tunnel virtual interface inside to obtain egress protocol information, and obtains a protocol tunnel ingress virtual interface through egress forwarding lookup.

Meanwhile, fig. 6 shows a simple flow of a forwarding process of a VTEP two-layer bridged VXLAN tunnel, where a VLAN network packet obtains VSI information by looking up an ingress virtual interface table, terminates a VLAN tunnel, obtains an internal tunnel virtual interface by a VSI forwarding table, further obtains VXLAN VNI by looking up a tunnel virtual interface table, obtains a VXLAN egress virtual interface by looking up a VNI table, and finally implements VXLAN encapsulation of the packet. And the SDN controller globally senses and transmits the forwarding information of the whole process to guide data flow. Data forwarding between other protocols is similar.

A layered hybrid bridging implementation is illustrated in fig. 6. The VTEP layer realizes the intercommunication between different tunnel protocols, namely, the termination of the access tunnel protocol is realized through the internal virtual interface of the tunnel, and the access of the exit tunnel protocol is realized through the internal virtual interface. By the method, the isomerism among different protocols is easier to realize, the forwarding, the access and the termination of different tunnels are finished through respective interface tables and forwarding tables, and meanwhile, the address learning of two layers is finished on different protocol layers.

Fig. 7 shows a schematic diagram of configuration issue of an SDN network controller according to an embodiment of the present invention, and as shown in fig. 7, the SDN controller has topology information of a whole network, information of all VTEP of the network, and information of VXLAN configuration, VNI, virtual port, tunnel, and the like of the whole network. The SDN controller acquires topology information of other protocol networks from control planes of other protocol networking networks to realize information of corresponding virtual interfaces, VSIs, tunnels and the like of VTEPs. Therefore, related network configuration and tunnel establishment are issued through the SDN controller, and the process follows the conventional OVSDB configuration and Openflow flow table issuing process. And the SDN controller acquires virtual machine life cycle information from the virtual machine management system, wherein the virtual machine life cycle information comprises a virtual machine network address, an operating state, a migration state and the like.

The specific forwarding process is as follows:

1) two-layer VLAN (virtual local area network) access VXLAN (virtual extensible local area network) network

1.1) transmitting and processing the message of VTEP VLAN virtual interface. FIG. 8 is a diagram illustrating VLAN bridging access forwarding according to an embodiment of the present invention; as shown in fig. 8, the VM two-layer network sends the two-layer encapsulated packet to the VTEP, the VTEP identifies the VLAN virtual interface according to VLAN TAG ID, searches the INLIF table to obtain the VSI ID and the virtual interface information is forwarded by the two layers, the VTEP searches the MAC address table according to the VSI to obtain the corresponding egress interface OUTLIF ID, and the egress interface points to the virtual interface of the internal tunnel. For the multicast message, a multicast table is searched in the VSI to obtain multicast members, and the outgoing interfaces of the members point to the virtual and virtual interfaces of the tunnels.

1.2) VTEP tunnel virtual interface forwards VXLAN tunnel. Fig. 9 shows a schematic diagram of VXLAN virtual interface forwarding according to an embodiment of the invention; as shown in fig. 9, after entering the virtual interface of the internal tunnel, the message looks up the tunnel interface table to obtain the VNI and the interface information corresponding to the virtual interface. And searching the MAC address table according to the VNI to acquire the OUTLIF ID information of the output interface. And searching an interface table according to the OUTLIF ID, acquiring that the output interface is the VXLAN virtual interface, finishing tunnel encapsulation of the message, and sending the message to the VXLAN virtual interface.

1.3) VTEP VXLAN virtual interface tunnel forwarding. Fig. 10 shows a schematic diagram of IP forwarding of a VXLAN tunnel message according to an embodiment of the present invention, and as shown in fig. 10, after the message enters a VXLAN virtual interface, a tunnel interface table is searched, and the virtual interface is obtained and corresponds to IP forwarding. And searching an IP routing table forwarding table, acquiring outlet information, acquiring outlet two-layer encapsulation information through an ARP table, and transmitting the encapsulated message to a physical interface to finish forwarding.

2) Data forwarding from VLAN network to VLAN network

And 2.1) forwarding and processing the VTEP VLAN virtual interface message. FIG. 11 is a diagram illustrating VLAN bridging access forwarding according to an embodiment of the present invention; as shown in fig. 11, the VM two-layer network sends the two-layer encapsulated packet to the VTEP, the VTEP identifies the VLAN virtual interface according to VLAN TAG ID, searches the INLIF table to obtain the VSI ID and the virtual interface information is forwarded by the two layers, the VTEP searches the MAC address table according to the VSI to obtain the corresponding egress interface OUTLIF ID, and the egress interface points to the virtual interface of the internal tunnel. For the multicast message, a multicast table is searched in the VSI to obtain multicast members, and the outgoing interfaces of the members point to the virtual and virtual interfaces of the tunnels.

And 2.2) forwarding the VTEP VLAN bridging message. FIG. 12 is a diagram illustrating VLAN bridge forwarding according to an embodiment of the present invention; as shown in fig. 12, after entering the virtual interface of the internal tunnel, the message looks up the tunnel interface table to obtain the VSI and the interface information corresponding to the virtual interface. And searching the MAC address table according to the VSI to acquire the OUTLIF ID information of the output interface. And searching an interface table according to the OUTLIF ID, acquiring that the output interface is a VLAN virtual interface, completing VLAN replacement and encapsulation of the message, sending the message to a corresponding physical interface, and completing message forwarding.

3) Data forwarding from NVGRE to VXLAN tunnels

3.1) VTEP NVGRE virtual interface message forwarding process. Fig. 13 is a schematic diagram illustrating NVGRE bridging access forwarding according to an embodiment of the present invention; as shown in fig. 13, the VM two-layer network sends the two-layer encapsulated packet to the VTEP, the VTEP forwards the packet as an IP virtual interface packet according to the ingress port table identification packet, searches the INLIF table to obtain the VSI ID and the virtual interface information as a three-layer IP GRE tunnel, the VTEP searches the tunnel termination table according to the VSI, and strips the GRE tunnel encapsulation for the packet. The MAC forwarding table is searched to obtain the corresponding egress interface OUTLIF ID, and the egress interface points to the virtual interface of the internal tunnel, as shown in fig. 13.

3.2) virtual interface of VTEP tunnel forwards VXLAN tunnel. Fig. 14 shows a schematic diagram of VXLAN virtual interface forwarding according to an embodiment of the invention; as shown in fig. 14, after entering the virtual interface of the internal tunnel, the message looks up the tunnel interface table to obtain the VNI and the interface information corresponding to the virtual interface. And searching the MAC address table according to the VNI to acquire the OUTLIF ID information of the output interface. And searching an interface table according to the OUTLIF ID, acquiring that the output interface is the VXLAN virtual interface, finishing tunnel encapsulation of the message, and sending the message to the VXLAN virtual interface.

3.3) VTEP VXLAN virtual interface tunnel forwarding. Fig. 15 shows a schematic diagram of IP forwarding of a VXLAN tunnel message according to an embodiment of the present invention, and as shown in fig. 15, after the message enters a VXLAN virtual interface, a tunnel interface table is searched, and the virtual interface is obtained and corresponds to IP forwarding. And searching an IP routing table forwarding table, acquiring outlet information, acquiring outlet two-layer encapsulation information through an ARP table, and transmitting the encapsulated message to a physical interface to finish forwarding.

Fig. 16 is a schematic diagram illustrating traffic supervision of a hybrid bridging VTEP device according to an embodiment of the present invention, and as shown in fig. 16, in the foregoing forwarding description, forwarding before a two-layer tunnel is implemented on a VTEP, and each virtual port vport and an internal tunnel virtual interface vport are connected on a VSI/VNI, so that all traffic passing through the vport can be monitored and counted, and hierarchical management is implemented.

Fig. 17 is a schematic diagram of a hybrid network with multiple data centers VXLANer two-layer bridging according to an embodiment of the present invention. The above-described hierarchical hybrid bridging VXLAN scheme is used between multiple data centers, such as the network architecture shown in fig. 17. Taking three data centers as an example, the three data centers are respectively formed and respectively deployed, wherein one data center adopts a traditional VLAN networking scheme, one data center adopts an NVGRE networking scheme, and the new data center is deployed and adopts a VXLAN networking scheme. As shown in the above graph networking, in the scheme, the VTEP device can implement intercommunication of heterogeneous data center networks, and can implement fine traffic management in a bridge interface hierarchy.

The application changes the single forwarding architecture of the existing VXLAN network into a heterogeneous hybrid layered architecture, defines a virtual interface for VXLAN tunnel termination and a virtual interface for two-layer network connection in the network, realizes the mutual access and transparent transmission of the two-layer virtual interface and the tunnel virtual interface, and realizes the connection of the tunnel virtual interface and different two-layer domains VSI.

In the application, the improved VTEP device simultaneously provides a bridging function, supports different two-layer network access and forwarding, realizes forward compatibility of the network and protects user investment. Meanwhile, the network virtualization technology supported by the data center network hardware equipment and the heterogeneity of the virtual network platform are realized through the hybrid bridging of various two-layer tunnel protocols. Under the bridging scheme, the VTEP device supports the mixed networking of a local VLAN two-layer network and a VXLAN tunnel and the access of a heterogeneous two-layer network, such as VPLS, NVGRE and the like. Thus, the VTEP of the data center establishes a layered VXLAN network, including a localized large two-layer VLAN access layer and a tunneled network layer between different data centers.

The method redefines the VTEP equipment, distinguishes VXLAN bridge interfaces and VXLAN tunnel virtual interfaces, achieves hybrid layered networking, and achieves entity layered network topology and layered network management. The heterogeneous protocol intercommunication adopts a scheme of terminating first and then accessing, namely forwarding tables are respectively searched in the same equipment, forwarding information is independently learned, heterogeneous intercommunication is realized in an intermediate bridging mode, and thus a solution of hybrid bridging is provided.

According to the method and the device, layered and layered QOS management of a two-layer network is realized, QOS management of different two-layer sub-interfaces, VXLAN bridge interfaces and VXLAN tunnel virtual interfaces is realized, fine management of flow between user services and different networks is realized, and safety control is realized.

The method redefines the VTEP equipment, distinguishes VXLAN bridge interfaces and VXLAN tunnel virtual interfaces, achieves hybrid layered networking, achieves entity layered network topology structure and layered network management, and achieves layered QOS management without considering the supporting situation of old equipment.

Meanwhile, the method and the device can realize stable evolution of the technology, and protect user investment through intercommunication of the heterogeneous network. The upgrading of the network virtualization technology often involves the replacement of hardware and software devices, and the virtual network service may be interrupted in the upgrading process, which causes great loss.

On the other hand, the interfaces of different virtual network platforms are different, the formats of the storage virtual networks are also different, and the information interaction between the two virtual network platforms is difficult. When the network virtualization technology is replaced, the migration time overhead of the original virtual network information is large. The problem of heterogeneous network virtualization, which cannot be solved by the existing scheme, is solved.

Fig. 18 is a block diagram of a hybrid networking apparatus according to an embodiment of the present invention, and as shown in fig. 18, the apparatus includes:

the first-second-layer virtual interface access module 41 is configured to determine a first-second-layer virtual interface according to a virtual local area network tag identifier in a message received by a physical access interface, and send the message to the determined first-second-layer virtual interface;

a first-second layer virtual interface determining module 42, configured to determine first interface information of the first-second layer virtual interface according to the message and search for a VSI;

a first two-layer virtual interface forwarding module 43, configured to determine a tunnel virtual interface according to the first interface information and the VSI, and forward the packet to the determined tunnel virtual interface;

a tunnel virtual interface sending module 44, configured to determine a second layer virtual interface according to the packet, perform tunnel encapsulation on the packet, and send the packet to the determined second layer virtual interface;

and a second layer virtual interface sending module 45, configured to package the packet and send the packet to the physical output interface.

In a possible implementation manner, the tunnel virtual interface sending module 44 includes:

the first searching submodule is used for determining second interface information of the first two-layer virtual interface and searching for the VSI by the tunnel virtual interface according to the message;

and the first tunnel sending submodule is used for determining a second layer virtual interface according to the second interface information and the VSI, and forwarding the message to the second layer virtual interface after tunnel encapsulation.

In a possible implementation manner, the first two-layer virtual interface forwarding module 43 includes:

and the multicast forwarding sub-module is used for searching the multicast table by the first two-layer virtual interface when the message is a multicast message, and determining the tunnel virtual interface corresponding to each multicast member according to the searching result.

the second searching submodule is used for determining second interface information of the first two-layer virtual interface and searching the VNI by the tunnel virtual interface according to the message;

and the second tunnel sending submodule is used for determining a second layer virtual interface according to the second interface information and the VNI, and forwarding the message to the second layer virtual interface after tunnel encapsulation.

In one possible implementation, the apparatus further includes:

and the bridging module is used for the tunnel virtual interface to carry out tunnel encapsulation on the message and then send the message to the physical output interface.

In one possible implementation, the apparatus further includes:

and the control information module is used for receiving control information of a first two-layer virtual interface, a tunnel virtual interface and a second two-layer virtual interface which are created in the VTEP equipment by the SDN controller according to the network topology structure.

In a possible implementation manner, the present invention further provides a hybrid networking system, including: an access network and a VTEP device,

the access network comprises at least one of the following three networks: VLAN networks, VXLAN networks, and GRE networks;

the VTEP equipment comprises the hybrid networking device provided by the invention.

In another aspect, an embodiment of the present invention provides a hybrid networking system, including: the access network comprises at least one of the following three networks: VLAN networks, VXLAN networks, and GRE networks; the VTEP apparatus includes a hybrid networking device as described in the above embodiments.

In addition, the hybrid networking method of the embodiment of the present invention described in conjunction with fig. 4 may be implemented by a hybrid networking device. Fig. 19 is a schematic hardware structure diagram of a hybrid networking device according to an embodiment of the present invention.

The hybrid networking device may include a processor 401 and a memory 402 storing computer program instructions.

Specifically, the processor 401 may include a Central Processing Unit (CPU), or an Application Specific Integrated Circuit (ASIC), or may be configured as one or more Integrated circuits implementing embodiments of the present invention.

Memory 402 may include mass storage for data or instructions. By way of example, and not limitation, memory 402 may include a Hard Disk Drive (HDD), floppy Disk Drive, flash memory, optical Disk, magneto-optical Disk, tape, or Universal Serial Bus (USB) Drive or a combination of two or more of these. Memory 402 may include removable or non-removable (or fixed) media, where appropriate. The memory 402 may be internal or external to the data processing apparatus, where appropriate. In a particular embodiment, the memory 402 is a non-volatile solid-state memory. In a particular embodiment, the memory 402 includes Read Only Memory (ROM). Where appropriate, the ROM may be mask-programmed ROM, Programmable ROM (PROM), Erasable PROM (EPROM), Electrically Erasable PROM (EEPROM), electrically rewritable ROM (EAROM), or flash memory or a combination of two or more of these.

The processor 401 reads and executes the computer program instructions stored in the memory 402 to implement any one of the hybrid networking methods in the above embodiments.

In one example, the hybrid networking device may also include a communication interface 403 and a bus 410. As shown in fig. 4, the processor 401, the memory 402, and the communication interface 403 are connected via a bus 410 to complete communication therebetween.

The communication interface 403 is mainly used for implementing communication between modules, apparatuses, units and/or devices in the embodiments of the present invention.

Bus 410 includes hardware, software, or both to couple the components of the hybrid networking device to each other. By way of example, and not limitation, a bus may include an Accelerated Graphics Port (AGP) or other graphics bus, an Enhanced Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hypertransport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an infiniband interconnect, a Low Pin Count (LPC) bus, a memory bus, a Micro Channel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a video electronics standards association local (VLB) bus, or other suitable bus or a combination of two or more of these. Bus 410 may include one or more buses, where appropriate. Although specific buses have been described and shown in the embodiments of the invention, any suitable buses or interconnects are contemplated by the invention.

In addition, in combination with the hybrid networking method in the foregoing embodiments, embodiments of the present invention may provide a computer-readable storage medium to implement. The computer readable storage medium having stored thereon computer program instructions; the computer program instructions, when executed by a processor, implement any of the hybrid networking methods of the above embodiments.

It is to be understood that the invention is not limited to the specific arrangements and instrumentality described above and shown in the drawings. A detailed description of known methods is omitted herein for the sake of brevity. In the above embodiments, several specific steps are described and shown as examples. However, the method processes of the present invention are not limited to the specific steps described and illustrated, and those skilled in the art can make various changes, modifications and additions or change the order between the steps after comprehending the spirit of the present invention.

The functional blocks shown in the above-described structural block diagrams may be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, it may be, for example, an electronic circuit, an Application Specific Integrated Circuit (ASIC), suitable firmware, plug-in, function card, or the like. When implemented in software, the elements of the invention are the programs or code segments used to perform the required tasks. The program or code segments may be stored in a machine-readable medium or transmitted by a data signal carried in a carrier wave over a transmission medium or a communication link. A "machine-readable medium" may include any medium that can store or transfer information. Examples of a machine-readable medium include electronic circuits, semiconductor memory devices, ROM, flash memory, Erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, fiber optic media, Radio Frequency (RF) links, and so forth. The code segments may be downloaded via computer networks such as the internet, intranet, etc.

It should also be noted that the exemplary embodiments mentioned in this patent describe some methods or systems based on a series of steps or devices. However, the present invention is not limited to the order of the above-described steps, that is, the steps may be performed in the order mentioned in the embodiments, may be performed in an order different from the order in the embodiments, or may be performed simultaneously.

As described above, only the specific embodiments of the present invention are provided, and it can be clearly understood by those skilled in the art that, for convenience and brevity of description, the specific working processes of the system, the module and the unit described above may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again. It should be understood that the scope of the present invention is not limited thereto, and any person skilled in the art of the present application can easily conceive various equivalent modifications or substitutions within the technical scope of the present invention, and these modifications or substitutions should be covered within the scope of the present invention.

Claims

1. A hybrid networking method, the method comprising:

the second layer virtual interface packages the message and then sends the message to a physical output interface;

2. The method of claim 1, wherein the tunnel virtual interface determines a second layer virtual interface according to the packet, and tunnels the packet and sends the packet to the determined second layer virtual interface, comprising:

3. The method of claim 1, wherein the determining, by the first and second virtual interfaces, a virtual tunnel interface according to the first interface information and the VSI, and forwarding the packet to the determined virtual tunnel interface comprises:

4. The method of claim 1, wherein the tunnel virtual interface determining a second layer virtual interface according to the packet and sending the packet to the determined second layer virtual interface comprises:

5. The method of claim 1, further comprising:

6. The method according to claim 1, wherein the message comprises any one of the following three messages:

7. A hybrid networking apparatus, the apparatus comprising:

the second layer virtual interface sending module is used for packaging the message and then sending the message to the physical output interface;

8. A hybrid networking system, comprising: an access network and a VTEP device,

the VTEP apparatus comprising the apparatus of claim 7.

9. A hybrid networking device, comprising: at least one processor, at least one memory, and computer program instructions stored in the memory that, when executed by the processor, implement the method of any of claims 1-6.

10. A computer-readable storage medium having computer program instructions stored thereon, which when executed by a processor implement the method of any one of claims 1-6.