CN112769597A - Container network current limiting method and system for cloud-edge collaborative virtualization scene - Google Patents

Container network current limiting method and system for cloud-edge collaborative virtualization scene Download PDF

Info

Publication number
CN112769597A
CN112769597A CN202011540153.7A CN202011540153A CN112769597A CN 112769597 A CN112769597 A CN 112769597A CN 202011540153 A CN202011540153 A CN 202011540153A CN 112769597 A CN112769597 A CN 112769597A
Authority
CN
China
Prior art keywords
network
current limiting
container
cloud
information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202011540153.7A
Other languages
Chinese (zh)
Other versions
CN112769597B (en
Inventor
魏欢
冯志凌
才振功
王翱宇
丁轶群
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hangzhou Harmonycloud Technology Co Ltd
Original Assignee
Hangzhou Harmonycloud Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hangzhou Harmonycloud Technology Co Ltd filed Critical Hangzhou Harmonycloud Technology Co Ltd
Priority to CN202011540153.7A priority Critical patent/CN112769597B/en
Publication of CN112769597A publication Critical patent/CN112769597A/en
Application granted granted Critical
Publication of CN112769597B publication Critical patent/CN112769597B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46Multiprogramming arrangements
    • G06F9/50Allocation of resources, e.g. of the central processing unit [CPU]
    • G06F9/5061Partitioning or combining of resources
    • G06F9/5066Algorithms for mapping a plurality of inter-dependent sub-tasks onto a plurality of physical CPUs
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46Multiprogramming arrangements
    • G06F9/50Allocation of resources, e.g. of the central processing unit [CPU]
    • G06F9/5061Partitioning or combining of resources
    • G06F9/5072Grid computing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4641Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08Configuration management of networks or network elements
    • H04L41/0896Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • G06F2009/45595Network integration; Enabling network access in virtual machine instances

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Mathematical Physics (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention discloses a container network current limiting method and system for a cloud-edge collaborative virtualization scene, wherein the method comprises the following steps: sending current limiting information to an edge platform through a cloud end; establishing a label for a network packet according to the current limiting information and the network card address of the edge platform, wherein the network card comprises a virtual interface of the container; and performing network flow limitation on the network packet through a flow controller based on the label and the flow limitation information. The network packets are classified according to the virtual interface addresses of the containers in the cloud edge collaborative virtualization scene, the virtual interface addresses point to the containers, and the classified network packets are subjected to current limiting, so that the current of the native container network is limited, a network plug-in is not required to be relied on, and the network bandwidth limitation operation of container granularity in a container arrangement frame is realized.

Description

Container network current limiting method and system for cloud-edge collaborative virtualization scene
Technical Field
The invention relates to the technical field of cloud-edge collaboration, in particular to a container network current limiting method and system for a cloud-edge collaborative virtualization scene.
Background
The edge computing is originated in the field of media, and means that an open platform integrating network, computing, storage and application core capabilities is adopted on one side close to an object or a data source to provide nearest-end service nearby. The application program is initiated at the edge side, so that a faster network service response is generated, and the basic requirements of the industry in the aspects of real-time business, application intelligence, safety, privacy protection and the like are met. The edge computation is between the physical entity and the industrial connection, or on top of the physical entity. For edge computing, unlike a cloud computing platform integrating a large amount of resources, the edge cloud platform is a distributed platform, so that the characteristic of cloud-edge collaboration is one of the main characteristics of edge computing, and the cloud-edge collaboration includes various protocols and functions and relates to aspects of cloud computing, so that in the development process of edge computing, the development of the function of cloud-edge collaboration becomes one of the main development works.
At present, the limitation of a CPU, a memory, and a disk IO can be realized by a container using a Cgroup technology, but the limitation of a network is not realized, which is mainly because a constructed container network is often a very complex large network in actual production floor. In a complex virtualized network environment, how to manage the bandwidth of each container at a fine granularity is a very big challenge. Meanwhile, in the actual production and use process of the container, it is very necessary to perform network bandwidth current limiting on service containers with different network bandwidth requirements.
Disclosure of Invention
Aiming at the technical problems in the prior art, the invention provides a container network current limiting method and a system for a cloud-edge collaborative virtualization scene, which are used for limiting the current of a container network of an edge platform so as to manage the bandwidth of a container in a fine-grained manner.
The invention discloses a container network current limiting method for a cloud-edge collaborative virtualization scene, which comprises the following steps: sending current limiting information to an edge platform through a cloud end; establishing a label for a network packet according to the current limiting information and the network card address of the edge platform, wherein the network card comprises a virtual interface of the container; and performing network flow limitation on the network packet through a flow controller based on the label and the flow limitation information.
Preferably, the network card further comprises a virtual network card and/or a virtual network bridge of the edge platform.
Preferably, the method of the present invention further includes a method for limiting the current of the cloud container: establishing a label for a network packet according to the address of the cloud container virtual interface; and performing network flow limitation on the network packet through a flow controller based on the label and the flow limitation information.
Preferably, the method for network throttling of the network packet includes: causing the container to enter a privileged mode; creating a queue based on a token bucket algorithm; distributing the network packets to the queues according to the network card addresses, and classifying the network packets to obtain categories; writing the label of the category into a net _ cis.class configuration file of the container; labeling the network packet with a label of a corresponding category through the Cgroup tool; and based on the label, the network packet is limited through a flow controller.
Preferably, the network card address includes one of: the cloud container virtual interface address, the edge platform virtual machine network card address, the edge platform virtual network bridge address and the edge platform virtual interface address.
Preferably, the arrangement framework of the cloud container adopts Kubernets, and the arrangement framework of the edge platform container adopts KubeEdge.
Preferably, the current limit information is sent to the edge platform by using a reliable transmission mechanism, where the reliable transmission mechanism includes:
step 301: the cloud stores the current limiting information and the version number of the storage resource;
step 302: the cloud sends the current limiting information and the version number to the edge platform;
step 303: after receiving the current limiting information and the version number, the edge platform generates response information according to the current limiting information and the version number;
step 304: the edge platform returns the response information to the cloud end;
step 305: the cloud end judges whether the response information is received or not;
if not, step 306: repeatedly executing steps 302 and 305 until the number of transmission times exceeds the threshold, executing step 309;
step 309: and the cloud end discards the current limiting information.
Preferably, the reliable transport mechanism further comprises a method of checking a version number:
checking the version number of the storage resource, and taking the version number as a first version number;
judging whether the version number of the current limiting information is older than the first version number;
if yes, refusing to send the current limit information.
The invention also provides a system for realizing the container network current limiting method, which comprises a cloud message module and an edge container network card module, wherein the cloud message module is used for sending current limiting information to an edge platform; the side container network card module is used for establishing a label for a network packet according to the current limiting information and the network card address of the edge platform, and the network card comprises a virtual interface of a container; and performing network flow limitation on the network packet through a flow controller based on the label and the flow limitation information.
Preferably, the system further comprises a cloud container network card module, a side message module and an input module, wherein the input module is used for inputting the current limiting information and sending the current limiting information to the cloud message module; the side message module is used for receiving the current limiting information sent by the cloud message module; the cloud container network card module is used for establishing a label for the network packet according to the current limiting information in the cloud message module and the address of the cloud container virtual interface, and performing network current limiting on the network packet through the flow controller based on the label and the current limiting information.
Compared with the prior art, the invention has the beneficial effects that: under the cloud edge collaborative virtualization scene, the network packets are classified according to the virtual interface addresses of the containers, the virtual interface addresses point to the containers, and the classified network packets are subjected to current limiting, so that the current limiting is performed on the native container network, and the network bandwidth quota operation of the container granularity is realized.
Drawings
FIG. 1 is a flow chart of a container network throttling method of the present invention;
FIG. 2 is a flow chart of a method of network throttling a network packet;
FIG. 3 is a flow chart of a method of a reliable transport mechanism;
FIG. 4 is a flow chart of a method of checking version numbers;
FIG. 5 is a logical block diagram of the system of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be obtained by a person skilled in the art without any inventive step based on the embodiments of the present invention, are within the scope of the present invention.
The invention is described in further detail below with reference to the attached drawing figures:
a container network current limiting method for a cloud-edge collaborative virtualization scene, as shown in fig. 1, includes:
step 101: and sending the current limiting information to the edge platform through the cloud. The flow limit information may include a network card address and one or more of the following information, an ingress broadband traffic, and an egress broadband traffic.
Step 102: and establishing a label (class) for a network packet (package) according to the current limiting information and the network card address of the edge platform, wherein the network card comprises a virtual interface of the container. The network packet typically includes a destination address, which is forwarded to the corresponding container.
The network card of the edge platform or the cloud platform comprises a virtual network card, a virtual network bridge (docker0 network bridge) and a virtual interface (veth pair), wherein the virtual network card is the network card of a virtual machine where the container is located, is used as a physical network card and has a direct networking function; the virtual two-layer network bridge created by the virtual network bridge when the bridge network mode of the container is created can realize the interconnection of network namespaces (network namespaces) of more than two containers, an exchange channel is created between the virtual network bridge and the virtual network card, and the virtual network card can send access data to the virtual network bridge through an access address; the virtual interface (path _ pair) is a pair of virtual device interfaces, one end of which is in the container, and the other end of which is bound to the virtual bridge, and is used for establishing a switching channel, so that the container can communicate to the outside. Therefore, the current limiting configuration of the container end can be modified by configuring the virtual interface, so as to limit the current of the container, but the current limiting configuration can also be performed on the virtual network card and/or the virtual network bridge of the edge platform.
Step 103: and performing network flow limitation on the network packet through a flow controller based on the label and the flow limitation information.
According to the method, under a cloud edge collaborative virtualization scene, network packets are classified according to the virtual interface addresses of the containers, the virtual interface addresses point to the containers, and the classified network packets are subjected to current limiting, so that the current limiting is performed on a native container network, a network plug-in is not required to be relied on, and the network bandwidth limitation operation on container granularity in a container arrangement frame is realized.
The method can be applied to large-scale container cloud environments in the industries such as communication, finance and internet media, the planning quality of the communication, finance and internet media industries for the network bandwidth of the container is improved, fine-grained control of the container flow is realized through a fine method, and good economic benefits are achieved.
The method of the invention can also comprise a current limiting method of the cloud container: establishing a label for a network packet according to the address of the cloud container virtual interface; and performing network flow limitation on the network packet through a flow controller based on the label and the flow limitation information. This is accomplished in a manner similar to the flow restricting method of the edge platform container. The current limiting method can be applied to a virtual network card and a virtual network bridge of a cloud end as well as an edge platform; the cloud current limiting requirement is usually not high, and the virtual network card and the virtual network bridge do not need to be subjected to excessive current limiting.
Specifically, as shown in fig. 2, the method for performing network throttling on a network packet includes:
step 201: causing the container to enter a privileged mode.
Taking kubernets framework as an example, when the kube-apiserver is started, an all-privileged parameter can be added into the YAML configuration file, and a privileged module is entered; parameters in YAML files of Pod and Deployment resources can also be modified to spec.contacts [0]. secure Context.privileged: true.
Step 202: a queue is created based on a token bucket algorithm. The Token Bucket algorithm (HTB) can effectively improve the bandwidth utilization: the method can control the number of data sent to the network, allow burst data to be sent, prevent network congestion when the network transmits data, limit the flow out of the network, and enable the flow to be sent out at a relatively uniform speed.
Step 203: and distributing the network packets to the queues according to the network card addresses, classifying the network packets, and obtaining the categories. HTB queuing rules for root privileges may be created on the container network card and a classifier tagged differently may be created in each queuing rule (QDisc) through which network packets are classified.
The network card address can be set according to the equal current-limiting container, such as a cloud-end container virtual interface address, an edge platform virtual machine network card address, an edge platform virtual network bridge address or an edge platform virtual interface address.
Step 204: writing the class of tag (class) into a net _ class. Traffic classification can be done by Cgroup and HTB, writing the corresponding tag into the net _ cis.
Step 205: the network packets are labeled with labels of the corresponding category through cgroup (control groups). For example, the network packet is tagged by the Cgroup subsystem net _ cls for filtering classification, and this tag is used to mark the class of the queuing rule to which the socket key buffer (skb) belongs. CGroup is a Linux kernel function for carrying out packetization management on any process; the net _ cls subsystem tags the network packets with a tag (classid), which may allow the Linux traffic control program (tc) to identify the packets generated from Cgroup.
Step 206: and based on the label, the network packet is limited through a flow controller. The flow controller, such as tc, may throttle different Cgroup packets, but is not limited to tc, and Netfilter/iptables may also throttle based on the label.
TC (traffic control) is a built-in framework of a Linux kernel, and can realize traffic speed limitation, traffic shaping, policy application and the like. The Netfilter framework is designed to filter packets over the kernel path of the network protocol stack. And classifying data packets through the IP address of the network card, and then performing bandwidth limitation on the Traffic bandwidth on the host node where the Pod is located by using a tc tool of a Traffic Control frame corresponding to the network card, so as to perform bandwidth limitation on the inlet broadband Traffic and/or the outlet broadband Traffic.
The containers of the cloud end and the edge platform can adopt different container arrangement frames, for example, the arrangement frame of the cloud end container adopts Kubernets, and the arrangement frame of the edge platform container adopts KubeEdge.
Kubernets (K8s) is an open source for managing containerized applications on multiple hosts in a cloud platform, which aims to make deploying containerized applications simple and efficient, and provides a mechanism for application deployment, planning, updating, and maintenance. Kubeeedge is an open source system used for extending the editing function of the native containerized application program to a host computer on the Edge, is constructed based on Kubernets and provides basic infrastructure support for network and application programs.
As shown in fig. 3, the reliable transmission mechanism may be used to send the current limiting information to the edge platform, and the reliable transmission mechanism includes:
step 301: the cloud stores the current limiting information and the version number of the storage resource. When the current limiting information is stored, a corresponding stored resource version number is generated and used for marking the time for storing the current limiting information.
Step 302: and the cloud sends the current limiting information and the version number to the edge platform.
Step 303: and after receiving the current limiting information and the version number, the edge platform generates response information according to the current limiting information and the version number.
Step 304: and the edge platform returns the response information to the cloud.
Step 305: and the cloud end judges whether the response information is received.
If not, step 306: steps 302 and 305 are repeatedly performed until the number of transmissions exceeds the threshold, and step 307 is performed. The threshold value may be set according to the actual situation, such as setting the threshold value to 5.
Step 307: and the cloud end discards the current limiting information.
Sending current-limiting information to the edge platform through a reliable transmission mechanism to prevent information loss and repetition
If yes, the current limiting information is successfully sent.
The cloud end can screen out the network card current-limiting information of the side-end container, packages the network card current-limiting information, and sends the network card current-limiting information of the side-end container to the edge platform through a reliable transmission mechanism.
As shown in fig. 4, the reliable transport mechanism further includes a method of checking a version number:
step 401: checking the version number of the storage resource, and taking the version number as a first version number;
step 402: judging whether the version number of the current limiting information is older than the first version number;
if yes, go to step 403: refusing to send the current limit information.
If not, go to step 404: the current limit information is sent to the edge platform.
The invention also provides a system for implementing the container network current limiting method, as shown in fig. 5, the system includes a cloud message module 2 and an edge container network card module 5,
the cloud message module 2 is used for sending current limiting information to the edge platform;
the edge container network card module 5 is used for establishing a label for a network packet according to the current limiting information and the network card address of the edge platform, and the network card comprises a virtual interface of the container; and performing network flow limitation on the network packet through a flow controller based on the label and the flow limitation information.
The system can also comprise a cloud container network card module 3, an edge message module 4 and an input module 1,
the input module 1 is used for inputting current limiting information and sending the current limiting information to the cloud message module, and specifically, parameters of the current limiting information can be input or set through a UI (user interface);
the side message module 4 is used for receiving the current limiting information sent by the cloud message module 2;
the cloud container network card module 2 is used for establishing a label for the network packet according to the current limiting information in the cloud message module and the address of the cloud container virtual interface, and performing network current limiting on the network packet through the flow controller based on the label and the current limiting information.
The above is only a preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes will occur to those skilled in the art. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims (10)

1. A container network current limiting method for a cloud-edge collaborative virtualization scene is characterized by comprising the following steps:
sending current limiting information to an edge platform through a cloud end;
establishing a label for a network packet according to the current limiting information and the network card address of the edge platform, wherein the network card comprises a virtual interface of the container;
and performing network flow limitation on the network packet through a flow controller based on the label and the flow limitation information.
2. The container network current limiting method of claim 1, wherein the network card further comprises a virtual network card and/or a virtual network bridge of an edge platform.
3. The container network current limiting method according to claim 1, further comprising a cloud container current limiting method: establishing a label for a network packet according to the address of the cloud container virtual interface;
and performing network flow limitation on the network packet through a flow controller based on the label and the flow limitation information.
4. The container network throttling method of claim 3, wherein the network throttling method for network packets comprises:
causing the container to enter a privileged mode;
creating a queue based on a token bucket algorithm;
distributing the network packets to the queues according to the network card addresses, and classifying the network packets to obtain categories;
writing the label of the category into a net _ cis.class configuration file of the container;
labeling the network packet with a label of a corresponding category through the Cgroup tool;
and based on the label, the network packet is limited through a flow controller.
5. The container network throttling method of claim 4, wherein the network card address comprises one of: the cloud container virtual interface address, the edge platform virtual machine network card address, the edge platform virtual network bridge address and the edge platform virtual interface address.
6. The container network current limiting method according to claim 1, wherein a kubernets is adopted as an arrangement framework of the cloud container, and a KubeEdge is adopted as an arrangement framework of the edge platform container.
7. The container network current limiting method of claim 1, wherein a reliable transport mechanism is employed to send current limiting information to an edge platform, the reliable transport mechanism comprising:
step 301: the cloud stores the current limiting information and the version number of the storage resource;
step 302: the cloud sends the current limiting information and the version number to the edge platform;
step 303: after receiving the current limiting information and the version number, the edge platform generates response information according to the current limiting information and the version number;
step 304: the edge platform returns the response information to the cloud end;
step 305: the cloud end judges whether the response information is received or not;
if not, step 306: repeatedly executing steps 302 and 305 until the number of transmission times exceeds the threshold, executing step 309;
step 309: and the cloud end discards the current limiting information.
8. The container network throttling method of claim 7, wherein said reliable transport mechanism further comprises a method of checking a version number:
checking the version number of the storage resource, and taking the version number as a first version number;
judging whether the version number of the current limiting information is older than the first version number;
if yes, refusing to send the current limit information.
9. A system for implementing the container network current limiting method of any one of claims 1 to 8, comprising a cloud message module and an edge container network card module,
the cloud message module is used for sending current limiting information to the edge platform;
the side container network card module is used for establishing a label for a network packet according to the current limiting information and the network card address of the edge platform, and the network card comprises a virtual interface of a container; and performing network flow limitation on the network packet through a flow controller based on the label and the flow limitation information.
10. The system of claim 9, further comprising a cloud container network card module, an edge message module, and an input module,
the input module is used for inputting current limiting information and sending the current limiting information to the cloud message module;
the side message module is used for receiving the current limiting information sent by the cloud message module;
the cloud container network card module is used for establishing a label for the network packet according to the current limiting information in the cloud message module and the address of the cloud container virtual interface, and performing network current limiting on the network packet through the flow controller based on the label and the current limiting information.
CN202011540153.7A 2020-12-23 2020-12-23 Container network current limiting method and system for cloud-edge collaborative virtualization scene Active CN112769597B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011540153.7A CN112769597B (en) 2020-12-23 2020-12-23 Container network current limiting method and system for cloud-edge collaborative virtualization scene

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011540153.7A CN112769597B (en) 2020-12-23 2020-12-23 Container network current limiting method and system for cloud-edge collaborative virtualization scene

Publications (2)

Publication Number Publication Date
CN112769597A true CN112769597A (en) 2021-05-07
CN112769597B CN112769597B (en) 2022-11-08

Family

ID=75694844

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011540153.7A Active CN112769597B (en) 2020-12-23 2020-12-23 Container network current limiting method and system for cloud-edge collaborative virtualization scene

Country Status (1)

Country Link
CN (1) CN112769597B (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113342498A (en) * 2021-06-28 2021-09-03 平安信托有限责任公司 Concurrent request processing method, device, server and storage medium
CN113783797A (en) * 2021-09-13 2021-12-10 京东科技信息技术有限公司 Network flow control method, device, equipment and storage medium of cloud native container
CN114465956A (en) * 2022-04-11 2022-05-10 北京金山云网络技术有限公司 Method and device for limiting flow rate of virtual machine, electronic equipment and storage medium
CN114826994A (en) * 2022-04-22 2022-07-29 重庆紫光华山智安科技有限公司 User environment playback method, system, electronic device and readable storage medium

Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101364936A (en) * 2007-08-08 2009-02-11 中国电信股份有限公司 Service differentiating and quality control system and method for multiple edge wideband access network
CN102088404A (en) * 2010-12-10 2011-06-08 北京世纪互联工程技术服务有限公司 Method for limiting speed of network card in Xen virtual machine
CN102801636A (en) * 2012-09-05 2012-11-28 成都国腾实业集团有限公司 Method for limiting bandwidth of cloud hosting network of cloud computing platform
WO2016056210A1 (en) * 2014-10-10 2016-04-14 日本電気株式会社 Server, flow control method, and virtual switch program
CN106059915A (en) * 2016-07-20 2016-10-26 赛特斯信息科技股份有限公司 System and method for implementing limitation of north-south traffic of tenants based on SDN controller
CN106452958A (en) * 2016-09-30 2017-02-22 中国联合网络通信集团有限公司 Flow control method and system, and centralized controller
CN107666446A (en) * 2017-09-14 2018-02-06 北京京东尚科信息技术有限公司 Downlink traffic, uplink traffic, bidirectional traffics method for limiting and device
CN108683607A (en) * 2018-06-14 2018-10-19 新华三云计算技术有限公司 Virtual machine traffic control method, device and server
CN109802894A (en) * 2019-01-03 2019-05-24 中国联合网络通信集团有限公司 Flow control methods and device
CN109922001A (en) * 2017-12-12 2019-06-21 ***通信集团公司 A kind of flow processing method, unit and computer readable storage medium
CN110838932A (en) * 2018-08-17 2020-02-25 阿里巴巴集团控股有限公司 Network current limiting method and device and electronic equipment
CN111542064A (en) * 2020-04-22 2020-08-14 中国科学院计算技术研究所 Container arrangement management system and arrangement method for wireless access network
CN112073330A (en) * 2020-09-02 2020-12-11 浪潮云信息技术股份公司 Cloud platform container network current limiting method

Patent Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101364936A (en) * 2007-08-08 2009-02-11 中国电信股份有限公司 Service differentiating and quality control system and method for multiple edge wideband access network
CN102088404A (en) * 2010-12-10 2011-06-08 北京世纪互联工程技术服务有限公司 Method for limiting speed of network card in Xen virtual machine
CN102801636A (en) * 2012-09-05 2012-11-28 成都国腾实业集团有限公司 Method for limiting bandwidth of cloud hosting network of cloud computing platform
WO2016056210A1 (en) * 2014-10-10 2016-04-14 日本電気株式会社 Server, flow control method, and virtual switch program
CN106059915A (en) * 2016-07-20 2016-10-26 赛特斯信息科技股份有限公司 System and method for implementing limitation of north-south traffic of tenants based on SDN controller
CN106452958A (en) * 2016-09-30 2017-02-22 中国联合网络通信集团有限公司 Flow control method and system, and centralized controller
CN107666446A (en) * 2017-09-14 2018-02-06 北京京东尚科信息技术有限公司 Downlink traffic, uplink traffic, bidirectional traffics method for limiting and device
CN109922001A (en) * 2017-12-12 2019-06-21 ***通信集团公司 A kind of flow processing method, unit and computer readable storage medium
CN108683607A (en) * 2018-06-14 2018-10-19 新华三云计算技术有限公司 Virtual machine traffic control method, device and server
CN110838932A (en) * 2018-08-17 2020-02-25 阿里巴巴集团控股有限公司 Network current limiting method and device and electronic equipment
CN109802894A (en) * 2019-01-03 2019-05-24 中国联合网络通信集团有限公司 Flow control methods and device
CN111542064A (en) * 2020-04-22 2020-08-14 中国科学院计算技术研究所 Container arrangement management system and arrangement method for wireless access network
CN112073330A (en) * 2020-09-02 2020-12-11 浪潮云信息技术股份公司 Cloud platform container network current limiting method

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
马学: "cgroup-net_cls子***分析", 《HTTPS://BLOG.CSDN.NET/TANZHE2017/ARTICLE/DETAILS/81001621》 *

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113342498A (en) * 2021-06-28 2021-09-03 平安信托有限责任公司 Concurrent request processing method, device, server and storage medium
CN113783797A (en) * 2021-09-13 2021-12-10 京东科技信息技术有限公司 Network flow control method, device, equipment and storage medium of cloud native container
CN113783797B (en) * 2021-09-13 2023-11-07 京东科技信息技术有限公司 Network flow control method, device and equipment of cloud primary container and storage medium
CN114465956A (en) * 2022-04-11 2022-05-10 北京金山云网络技术有限公司 Method and device for limiting flow rate of virtual machine, electronic equipment and storage medium
CN114465956B (en) * 2022-04-11 2022-08-23 北京金山云网络技术有限公司 Method and device for limiting flow rate of virtual machine, electronic equipment and storage medium
CN114826994A (en) * 2022-04-22 2022-07-29 重庆紫光华山智安科技有限公司 User environment playback method, system, electronic device and readable storage medium
CN114826994B (en) * 2022-04-22 2023-08-29 重庆紫光华山智安科技有限公司 User environment playback method, system, electronic device and readable storage medium

Also Published As

Publication number Publication date
CN112769597B (en) 2022-11-08

Similar Documents

Publication Publication Date Title
CN112769597B (en) Container network current limiting method and system for cloud-edge collaborative virtualization scene
US9800502B2 (en) Quantized congestion notification for computing environments
US9112801B2 (en) Quantized congestion notification in a virtual networking system
Chaves et al. Ofswitch13: Enhancing ns-3 with openflow 1.3 support
US7764678B2 (en) Routing based on dynamic classification rules
US7283468B1 (en) Method and system for controlling network traffic within the same connection with different packet tags by varying the policies applied to a connection
CN101902395B (en) System and method for managing resources on a host
US6799220B1 (en) Tunneling management messages over a channel architecture network
US10313380B2 (en) System and method for centralized virtual interface card driver logging in a network environment
US7742474B2 (en) Virtual network interface cards with VLAN functionality
US9356844B2 (en) Efficient application recognition in network traffic
CN108353029A (en) For managing the method and system for calculating the data service in network
US7613132B2 (en) Method and system for controlling virtual machine bandwidth
US11799972B2 (en) Session management in a forwarding plane
KR102153585B1 (en) Method and apparatus for network functions virtualization
CN112165435A (en) Bidirectional flow control method and system based on network service quality of virtual machine
CN114301868A (en) Method for quickly generating floating IP of virtual container and method and device for network direct connection
KR102020049B1 (en) Switch and method for supporting QOS of Multi-Tenant Cloud Service and System having the same switch
CN112511438B (en) Method and device for forwarding message by using flow table and computer equipment
CN111970149B (en) Shared bandwidth implementation method based on hardware firewall QOS
CN116723162B (en) Network first packet processing method, system, device, medium and heterogeneous equipment
US9503278B2 (en) Reflective relay processing on logical ports for channelized links in edge virtual bridging systems
US11115337B2 (en) Network traffic segregation on an application basis in a virtual computing environment
US11902826B2 (en) Acknowledgement of data packet transmission using RLC in am mode operating in 5G protocol stack with mitigation of RLC channel congestion
Paul et al. Service chaining for NFV and delivery of other applications in a global multi-cloud environment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
PE01 Entry into force of the registration of the contract for pledge of patent right

Denomination of invention: A Container Network Flow Limiting Method and System for Cloud Edge Collaborative Virtualization Scenarios

Granted publication date: 20221108

Pledgee: Guotou Taikang Trust Co.,Ltd.

Pledgor: HANGZHOU HARMONYCLOUD TECHNOLOGY Co.,Ltd.

Registration number: Y2024980004921

PE01 Entry into force of the registration of the contract for pledge of patent right