CN115225634A - Data forwarding method and device under virtual network and computer program product - Google Patents
Data forwarding method and device under virtual network and computer program product Download PDFInfo
- Publication number
- CN115225634A CN115225634A CN202210722020.4A CN202210722020A CN115225634A CN 115225634 A CN115225634 A CN 115225634A CN 202210722020 A CN202210722020 A CN 202210722020A CN 115225634 A CN115225634 A CN 115225634A
- Authority
- CN
- China
- Prior art keywords
- address
- virtual
- target
- computing node
- access data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45595—Network integration; Enabling network access in virtual machine instances
Abstract
The present disclosure provides a data forwarding method and apparatus in a virtual network, an electronic device, a storage medium, and a computer program product, which relate to the technical field of artificial intelligence, in particular to cloud computing and cloud network technologies, and can be used in an intelligent cloud scenario. The specific implementation scheme is as follows: acquiring access data; determining a destination high-availability virtual IP address corresponding to the access data; and forwarding the access data to a target computing node corresponding to the target high-availability virtual IP address according to the gateway of the target type corresponding to the access data. The method and the device avoid the problem that the high-availability virtual IP address needs to be bound to a specific centralized gateway, so that the centralized gateway becomes a network bottleneck, and improve the network transmission performance and stability of the virtual network.
Description
Technical Field
The present disclosure relates to the field of artificial intelligence technologies, and in particular, to a cloud computing and cloud network technology, and in particular, to a data forwarding method and apparatus in a virtual network, an electronic device, a storage medium, and a computer program product, which can be used in an intelligent cloud scenario.
Background
HAVIP (High-Availability Virtual IP Address) is a private IP (Internet Protocol) resource that can be created and released independently. HAVIP can be used with high-availability software (e.g. Keepallved) to build high-availability master-standby service and improve the availability of services. In the virtual network, the flow of HAVIP is uniformly transferred to the intermediate gateway cluster, so that the intermediate gateway cluster becomes a network bottleneck point.
Disclosure of Invention
The disclosure provides a data forwarding method and apparatus under a virtual network, an electronic device, a storage medium, and a computer program product.
According to a first aspect, a data forwarding method under a virtual network is provided, including: acquiring access data; determining a destination high-availability virtual IP address corresponding to the access data; and forwarding the access data to a target computing node corresponding to the target high-availability virtual IP address according to the gateway of the target type corresponding to the access data.
According to a second aspect, there is provided a data forwarding apparatus in a virtual network, including: an acquisition unit configured to acquire access data; a determining unit configured to determine a destination high available virtual IP address corresponding to the access data; and the forwarding unit is configured to forward the access data to the target computing node corresponding to the target high-availability virtual IP address according to the gateway of the target type corresponding to the access data.
According to a third aspect, there is provided an electronic device comprising: at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method as described in any one of the implementations of the first aspect.
According to a fourth aspect, there is provided a non-transitory computer readable storage medium having stored thereon computer instructions for causing a computer to perform a method as described in any one of the implementations of the first aspect.
According to a fifth aspect, there is provided a computer program product comprising: computer program which, when being executed by a processor, carries out the method as described in any of the implementations of the first aspect.
According to the technology disclosed by the invention, the corresponding access data is forwarded to the target computing node corresponding to the target high-availability virtual IP address through different types of gateways, so that all access flows are distributed to different gateways, the problem that the high-availability virtual IP address needs to be bound to a specific centralized gateway, so that the centralized gateway becomes a network bottleneck is solved, and the network transmission performance and stability of the virtual network are improved.
It should be understood that the statements in this section are not intended to identify key or critical features of the embodiments of the present disclosure, nor are they intended to limit the scope of the present disclosure. Other features of the present disclosure will become apparent from the following description.
Drawings
The drawings are included to provide a better understanding of the present solution and are not to be construed as limiting the present disclosure. Wherein:
FIG. 1 is an exemplary system architecture diagram in which an embodiment according to the present disclosure may be applied;
fig. 2 is a flow diagram of one embodiment of a method of data forwarding under a virtual network, according to the present disclosure;
fig. 3 is a schematic diagram of an application scenario of the data forwarding method in the virtual network according to the present embodiment;
fig. 4 is a flow diagram of yet another embodiment of a method of data forwarding under a virtual network according to the present disclosure;
fig. 5 is a schematic diagram of a virtual network according to the present disclosure.
Fig. 6 is a block diagram of one embodiment of a data forwarding device under a virtual network according to the present disclosure;
FIG. 7 is a schematic block diagram of a computer system suitable for use in implementing embodiments of the present disclosure.
Detailed Description
Exemplary embodiments of the present disclosure are described below with reference to the accompanying drawings, in which various details of the embodiments of the disclosure are included to assist understanding, and which are to be considered as merely exemplary. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the disclosure. Also, descriptions of well-known functions and constructions are omitted in the following description for clarity and conciseness.
In the technical scheme of the disclosure, the collection, storage, use, processing, transmission, provision, disclosure and other processing of the personal information of the related user are all in accordance with the regulations of related laws and regulations and do not violate the good customs of the public order.
Fig. 1 illustrates an exemplary architecture 100 of a data forwarding method and apparatus under a virtual network to which the present disclosure may be applied.
As shown in fig. 1, the system architecture 100 may include terminal devices 101, 102, 103, a network 104, and a server 105. The communication connections between the terminal devices 101, 102, 103 form a topological network, and the network 104 serves to provide a medium for communication links between the terminal devices 101, 102, 103 and the server 105. Network 104 may include various connection types, such as wired, wireless communication links, or fiber optic cables, to name a few.
The terminal devices 101, 102, 103 interact with a server 105 via a network 104 to receive or send messages or the like. The terminal devices 101, 102, 103 may be hardware devices or software that support network connections for data interaction and data processing. When the terminal devices 101, 102, and 103 are hardware, they may be various electronic devices supporting network connection, information acquisition, interaction, display, processing, and the like, including but not limited to a vehicle-mounted computer, a smart phone, a tablet computer, an e-book reader, a laptop portable computer, a desktop computer, and the like. When the terminal apparatuses 101, 102, 103 are software, they can be installed in the electronic apparatuses listed above. It may be implemented, for example, as multiple software or software modules for providing distributed services, or as a single software or software module. And is not particularly limited herein.
The server 105 may be a server providing a virtual network service, for example, a background processing server that forwards access data to a target computing node corresponding to a destination high-available virtual IP address according to the access data acquired from the terminal devices 101, 102, and 103 and according to a gateway of a target type corresponding to the access data. As an example, the server 105 may be a cloud server.
The server may be hardware or software. When the server is hardware, it may be implemented as a distributed server cluster formed by multiple servers, or may be implemented as a single server. When the server is software, it may be implemented as a plurality of software or software modules (e.g., software or software modules for providing distributed services), or as a single software or software module. And is not particularly limited herein.
It should be further noted that the data forwarding method in the virtual network provided in the embodiment of the present application may be executed by a server, may also be executed by a terminal device, and may also be executed by the server and the terminal device in cooperation with each other. Accordingly, each part (for example, each unit) included in the data forwarding apparatus in the virtual network may be entirely provided in the server, may be entirely provided in the terminal device, and may be separately provided in the server and the terminal device.
It should be understood that the number of terminal devices, networks, and servers in fig. 1 is merely illustrative. There may be any number of terminal devices, networks, and servers, as desired for implementation. When the electronic device on which the data forwarding method in the virtual network operates does not need to perform data transmission with other electronic devices, the system architecture may only include the electronic device (e.g., a server or a terminal device) on which the data forwarding method in the virtual network operates.
Referring to fig. 2, fig. 2 is a flowchart of a data forwarding method under a virtual network according to an embodiment of the present disclosure, where the process 200 includes the following steps:
In this embodiment, an execution subject (for example, a terminal device or a server in fig. 1) of the data forwarding method in the virtual network may obtain access data from a remote location or a local location based on a wired network connection manner or a wireless network connection manner.
In this embodiment, access data sent by each computing node may be acquired in a virtual network, for example, an Overlay network constructed on an Underlay network. The Underlay network is a bearer network which is composed of various physical devices and ensures the IP connectivity among the devices by using a routing protocol. The Overlay network is one or more virtual logical networks constructed on the same underway network through a network virtualization technology. Although different Overlay networks share the devices and lines in the Underlay network, the services in the Overlay network are mutually decoupled from the physical networking and interconnection technologies in the Underlay network.
As an example, under a Virtual network, a VPC (Virtual Private Cloud) service may be provided for each tenant. The VPC is an isolated and private virtual network environment constructed for resources on the cloud such as a cloud server, a cloud container and a cloud database. In VPC, a tenant can flexibly manage a network on the cloud, including creating a subnet, setting a security group and a network ACL (Access Control Lists), managing a routing table, applying for an elastic public network IP and a bandwidth, and the like.
The virtual private cloud network can comprise a plurality of computing nodes, and the computing nodes can interact with each other through accessing data. Specifically, the access data may be a packet such as a message.
In this embodiment, the execution subject may determine a destination highly available virtual IP address corresponding to the access data.
In a virtual network, each computing node, regardless of the way it is connected to the network, must have a unique IP address. In fact, an IP address is an abstraction of a host hardware address. In brief, a MAC (Media Access Control Address) Address is a physical Address, and an IP Address is a logical Address. The virtual IP is an IP that is not allocated to a real device, that is, a computing node that provides services to the outside has a virtual IP in addition to a real IP, and any one of the two IPs can be used to connect to the host.
The virtual IP address is generally used for the purpose of reaching an HA (High Availability). For example, the configuration of linking the databases in all the items is the virtual IP address, and when the main server fails to provide external services, the virtual IP address is dynamically switched to the standby server, so that in the subsequent process, the device accessing the database is in communication connection with the standby server through the virtual IP address.
In the virtual network, when a computing node sends out access data, a high available virtual IP address serving as an access destination address is added to the access data. The execution body can analyze the access data to obtain a destination high-availability IP address in the access data.
And 203, forwarding the access data to a target computing node corresponding to the target high-availability virtual IP address according to the gateway of the target type corresponding to the access data.
In this embodiment, the execution subject may forward the access data to the target computing node corresponding to the target high-availability virtual IP address according to the gateway of the target type corresponding to the access data.
In this embodiment, the execution subject may set multiple types of gateways, and determine a correspondence between each type of gateway and access data. Therefore, after the access data are determined, the gateway of the target type corresponding to the access data is determined through the corresponding relation, and the access data are forwarded to the target computing node corresponding to the target high-availability virtual IP address through the determined gateway.
As an example, different types of gateways may be set based on different service types, so as to determine a gateway corresponding to the access data according to the service type corresponding to the access data. As yet another example, different types of gateways may be set based on the category of the highly available virtual IP address to determine the gateway to which the access data corresponds according to the category of the destination highly available virtual IP address to which the access data corresponds.
In this embodiment, based on the correspondence between the high available virtual IP address and the MAC address, the execution main body may determine the MAC address of the target computing node, and then forward the access data to the target computing node corresponding to the target high available virtual IP address with the help of the nodes such as the gateway and the virtual switch.
With continued reference to fig. 3, fig. 3 is a schematic diagram 300 of an application scenario of the data forwarding method in the virtual network according to the present embodiment. In the application scenario of fig. 3, a virtual network is provided in the server cluster 301. A plurality of source computing nodes in the virtual network send out access data; further, determining a destination high-availability virtual IP address corresponding to each access data in the plurality of access data; and forwarding the access data to a target computing node corresponding to the corresponding target high-availability virtual IP address according to the gateway of the target type corresponding to each access data.
In this embodiment, a data forwarding method in a virtual network is provided, where different types of gateways forward corresponding access data to a target computing node corresponding to a target high available virtual IP address, so that all access flows are distributed to different gateways, a problem that the high available virtual IP address needs to be bound to a specific centralized gateway, which makes the centralized gateway become a network bottleneck, and network transmission performance and stability of the virtual network are improved.
In some optional implementations of this embodiment, the executing main body may execute the step 203 by: and in response to the fact that the access data are determined to be access data in a private line access mode, forwarding the access data to a target computing node corresponding to the target high-availability virtual IP address through a private line gateway.
The private line gateway is an interface for connecting a local VPC (virtual private network) to which a computing node for sending access data belongs with a physical private line, and when a user configures a routing table for physical private line communication in the local VPC, a next hop needs to point to the corresponding private line gateway.
If the physical private line is used for realizing the flow intercommunication among different computing nodes, the following constraint conditions are required to be met: after completing physical private line construction and private line gateway configuration, if the flows at the two ends are communicated, a routing entry pointing to an opposite terminal network must be configured in a routing table at the two ends, and the next hop of a local VPC routing table points to the corresponding private line gateway; one channel of one physical private line can only be connected with one private line gateway in the VPC for one VPC; the special line gateway and the access point of the physical special line home terminal are necessarily in the same area; the private line opposite end network and the home end VPC CIDR (class Inter-Domain Routing, no class Inter-Domain Routing) are not allowed to overlap.
In the implementation mode, the access data adopting the private line access mode is forwarded through the private line gateway, so that the network transmission performance and the stability of the virtual network on the access data adopting the private line access mode are improved.
In some optional implementations of this embodiment, the executing main body may execute the step 203 by: and in response to the fact that the access data are determined to be the access data sent by the computing nodes in other networks except the virtual private cloud network to which the target computing node belongs, forwarding the access data to the target computing node corresponding to the target high-availability virtual IP address through the network address translation gateway.
A Network Address Translation (NAT) gateway is a Network Address Translation service and provides NAT proxy capability. NAT agent capabilities include SNAT (Source Network Address Translation) and DNAT (Destination Network Address Translation). The SNAT function of the NAT gateway has the safety protection capability, and only when the virtual machine in the VPC actively accesses the outside, the connection can be established for communication, but the outside cannot actively access the virtual machine in the VPC. The SNAT function can shield the external port of the virtual machine in the VPC and protect the virtual machine in the VPC from external invasion and attack.
In the implementation mode, for the access data between different virtual private cloud networks, the network address translation gateway forwards the access data, so that the network transmission performance and stability of the virtual network for the access data between different virtual private cloud networks are improved.
In some optional implementations of this embodiment, the executing main body may execute the step 203 by: and in response to the fact that the access data are determined to be the access data sent by other computing nodes in the virtual private cloud network to which the target computing node belongs, forwarding the access data to the target computing node corresponding to the target high-availability virtual IP address in a direct-through mode.
In the implementation mode, for the access data between different computing nodes in the same VPN, the access data is forwarded to the target computing node corresponding to the target high-availability virtual IP address in a direct-through mode without passing through any gateway, so that the network transmission performance and stability of the VPN for the access data between different nodes in the same VPN are improved.
It should be noted that, both the private gateway and the network address translation gateway can be implemented in a distributed cluster manner. The private network, the network address translation gateway and the computing nodes in the virtual private cloud network all comprise tables representing the corresponding relation among < HAVIP, MAC and VTEP > so as to realize the forwarding of the access data. For the private line gateway and the network address conversion gateway, the corresponding relation of < HAVIP, MAC and VTEP > corresponding to each computing node in the virtual private cloud network in communication connection with the private line gateway and the network address conversion gateway is included; for the computing nodes in the virtual private cloud network, the < HAVIP, MAC, VTEP > corresponding relations corresponding to other computing nodes connected with the computing nodes in communication are included. Among them, VTEP (VXLAN Tunnel EndPoint) represents a VXLAN (Virtual Extensible Local Area Network) Tunnel EndPoint.
In some optional implementations of this embodiment, before performing step 203, the executing main body may further perform the following operations:
firstly, monitoring an address resolution protocol message corresponding to a target high-availability virtual IP address, and determining whether the target high-availability virtual IP address is switched from an original computing node to a new computing node.
As an example, in a high availability application, it is determined whether a high availability virtual IP address is switched from a primary service node to a backup service node.
ARP (Address Resolution Protocol) is a TCP/IP Protocol that obtains a physical Address (MAC Address) according to an IP Address, and by monitoring an ARP packet, the execution main body can determine whether a target high-availability virtual IP Address is switched from an original computing node to a new computing node.
And secondly, in response to the fact that the target high-availability virtual IP address is switched to the new computing node from the original computing node, synchronizing switching information corresponding to the target high-availability virtual IP address to a target node in a virtual private cloud network corresponding to the high-availability virtual IP in the virtual network. The target node comprises a computing node and a gateway.
Specifically, the switching information includes the corresponding relationship among the switched < HAVIP, MAC, VTEP >. For each high-availability virtual IP address, when the switching between the original computing node and the new computing node occurs, the switching behavior is actively discovered through monitoring, and the switching information is timely synchronized to the computing node, the gateway and other target nodes in the virtual private cloud network corresponding to the high-availability virtual IP address in the virtual network, so that the timeliness of updating the switching information is improved, and the accuracy of forwarding the access data is further improved.
In some optional implementations of this embodiment, the executing body may execute the first step by: and monitoring a free address resolution protocol message corresponding to the target high-availability virtual IP address, and determining whether the target high-availability virtual IP address is switched from the original computing node to the new computing node.
The gratuitous ARP message may serve as an announcement. As an example, when a switch between computing nodes occurs with a destination highly available virtual IP address, packets are sent out in a broadcast fashion without the need to get a response, just to tell the other computers their own IP address and MAC address. Thus, it may be used to update the ARP cache tables of other computing nodes.
When a free ARP message corresponding to the target high-availability virtual IP address is monitored, the obtained ARP message can be analyzed, and the target high-availability virtual IP address is determined to be switched from the original computing node to the new computing node.
In the implementation mode, the switching behavior of the target high-availability virtual IP address is determined by monitoring the free address resolution protocol message corresponding to the target high-availability virtual IP address, so that the accuracy of information determination is improved.
In some optional implementations of this embodiment, the executing body may execute the first step by: firstly, a detection address resolution protocol message is sent to a computing node in a virtual private cloud network to which a target computing node belongs. Wherein, the detection ARP message is generated by the ARP-level network diagnostic tool. Then, a response message aiming at the detection address resolution protocol message is monitored, and whether the target high-available virtual IP address is switched from the original computing node to a new computing node or not is determined.
As an example, the network diagnostic tool at the address resolution protocol level is ARPing. Sending an ARPing instruction through an ARPing tool, detecting all virtual machines bound with target high-available virtual IP addresses in a second level, triggering ARP response according to detection ARP messages generated based on the ARPing instruction by the virtual machines bound with the target high-available virtual IP addresses, and generating response messages. And then, determining whether the target high-available virtual IP address is switched from the original computing node to the new computing node or not through the response message.
In the implementation mode, whether the target high-availability virtual IP address is switched from the original computing node to the new computing node or not is actively determined through the ARPing message, so that the timeliness of finding the switching behavior of the target high-availability virtual IP address is further improved, and the dependence degree on the free ARP message is reduced.
In some optional implementation manners, the execution main body may combine two manners, namely a free APR message and an ARPing message, and determine the discovery timeliness of the handover behavior of the high-available virtual IP address in time.
In some optional implementations of this embodiment, the execution main body may further perform the following operations: and carrying out speed limit processing on different types of messages based on a preset speed limit rule.
Specifically, the messages related to this embodiment include a free ARP message, an ARPing detection message, and a response message of the ARPing detection message. For various types of messages, a preset speed limit rule can be specifically set according to actual conditions.
As an example, for a free ARP message, when HAVIP switching causes table entry change, 5 messages are continuously released within the first 0.1 ms; for ARPing detection messages, releasing 3 messages for 1s, and carrying out synchronous operation; for the response message of the ARPing detection message, 1s releases 3 messages.
In the implementation mode, the speed limit processing is carried out on the messages of different types, so that the control surface of the central control node is prevented from becoming a bottleneck point due to ARP attack, and the stability of the virtual network is further improved.
With continuing reference to fig. 4, a schematic flow chart 400 illustrating yet another embodiment of a method for data forwarding under virtual networks in accordance with the present disclosure is shown and includes the steps of:
And 403, monitoring an address resolution protocol message corresponding to the destination high-availability virtual IP address, and determining whether the destination high-availability virtual IP address is switched from the original computing node to a new computing node.
The target node comprises a computing node and a gateway.
And 405, in response to determining that the access data is access data in a private line access mode, forwarding the access data to a target computing node corresponding to the target high-availability virtual IP address through a private line gateway.
As can be seen from this embodiment, compared with the embodiment corresponding to fig. 2, the flow 400 of the data forwarding method in the virtual network in this embodiment specifically illustrates a switching information determining and synchronizing process of switching a high available virtual IP address between computing nodes and a process of forwarding access data through different types of gateways, so that timeliness and accuracy of determining switching information are improved, and network transmission performance and stability of the virtual network are improved.
With continued reference to fig. 5, a structural schematic 500 of a virtual network in accordance with the present disclosure is shown. The virtual network 500 includes computing nodes 501 and 502, a central control node 503, and various types of gateways 504. The computing nodes 501 and 502 may be computing nodes in the same vpn cloud network, or computing nodes in different vpn cloud networks. Each computing node comprises a corresponding virtual switch, a virtual machine and an ARP monitoring program; the gateway 504 includes a private gateway 5041 and a NAT gateway 5042.
Assume that the highly available virtual IP address initially binds a virtual machine in the compute node 502. And releasing a free ARP message corresponding to the high available virtual IP address and an ARP response message aiming at the gateway address of the virtual machine at the virtual switch side, and guiding the received message to an ARP monitoring program. During a handover of a high available virtual IP address (e.g., a high available virtual IP address is switched from a virtual machine in the computing node 502 to a virtual machine in the computing node 501), multiple gratuitous ARP messages are typically sent, and the ARP listener can capture this handover directly.
The ARP monitoring program captures the free ARP message and judges whether the switching occurs, if the switching behavior occurs, the API (Application Programming Interface) of the central control node is called to generate a switching request, and the request contains the corresponding relation among the switched < HAVIP, MAC and VTEP >. Furthermore, the central control node synchronizes the correspondence between < HAVIP, MAC, VTEP > corresponding to the high available virtual IP address to all the computing nodes and forwarding gateways (such as private line gateway and NAT gateway) in the virtual private cloud network corresponding to the high available virtual IP address in the virtual network, so as to ensure strong consistency of the correspondence between the nodes with respect to < HAVIP, MAC, VTEP >.
In addition to the switching process of determining the high available virtual IP address based on the free ARP message, the ARPing detection message can be sent through an ARPing module in the central control node, all the virtual machines which are bound with the high available virtual IP address can be detected in a second level, the virtual machines which are bound with the target high available virtual IP address can trigger an ARP response according to the detection ARP message generated based on the ARPing instruction, and a response message is generated and forwarded to the target computing node. And then, determining whether the target high-available virtual IP address is switched from the original computing node to the new computing node or not through the response message.
When a highly available virtual IP address is handed over from a virtual machine in compute node 502 to a virtual machine in compute node 501, the central control node synchronizes the binding of the highly available virtual IP address < HAVIP, MAC, VTEP > to all nodes (private gateways, NAT gateways, compute nodes, etc.) associated with the highly available virtual IP address. For the mutual access flow among the computing nodes in the same virtual private cloud network, the mutual access among the computing nodes can be directly carried out without passing through a certain centralized gateway; for the flow of the private line accessing the high available virtual IP address, forwarding the flow to a corresponding computing node through a private line gateway; and for the traffic of the external network accessing the high available virtual IP address, forwarding the traffic to the corresponding computing node through the NAT gateway, distributing all the access traffic to different gateways, and solving the problem that the high available virtual IP address needs to be bound to a specific centralized gateway and becomes a network bottleneck.
With continuing reference to fig. 6, as an implementation of the method shown in the foregoing figures, the present disclosure provides an embodiment of a data forwarding apparatus in a virtual network, where the embodiment of the apparatus corresponds to the embodiment of the method shown in fig. 2, and the apparatus may be specifically applied to various electronic devices.
As shown in fig. 6, the data forwarding apparatus under the virtual network includes: an acquisition unit 601 configured to acquire access data; a determining unit 602 configured to determine a destination high available virtual IP address corresponding to the access data; and a forwarding unit 603 configured to forward the access data to the target computing node corresponding to the destination high-available virtual IP address according to the gateway of the target type corresponding to the access data.
In some optional implementations of this embodiment, the forwarding unit 603 is further configured to: and in response to the fact that the access data are determined to be access data in a private line access mode, forwarding the access data to a target computing node corresponding to the target high-availability virtual IP address through a private line gateway.
In some optional implementations of this embodiment, the forwarding unit 603 is further configured to: and in response to the fact that the access data are determined to be the access data sent by the computing nodes in other networks except the virtual private cloud network to which the target computing node belongs, forwarding the access data to the target computing node corresponding to the target high-availability virtual IP address through the network address translation gateway.
In some optional implementations of this embodiment, the forwarding unit 603 is further configured to: and in response to the fact that the access data are determined to be the access data sent by other computing nodes in the virtual private cloud network to which the target computing node belongs, forwarding the access data to the target computing node corresponding to the target high-availability virtual IP address in a direct-through mode.
In some optional implementations of this embodiment, the apparatus further includes: a monitoring unit (not shown in the figure) configured to monitor an address resolution protocol message corresponding to the destination high-available virtual IP address, and determine whether the destination high-available virtual IP address is switched from the original computing node to the new computing node; and a synchronization unit (not shown in the figure) configured to respond to the determination that the destination high-available virtual IP address is switched from the original computing node to the new computing node, and synchronize the switching information corresponding to the destination high-available virtual IP address to a target node in a virtual private cloud network corresponding to the high-available virtual IP address in the virtual network, wherein the target node comprises the computing node and a gateway.
In some optional implementations of this embodiment, the listening unit (not shown in the figure) is further configured to: and monitoring a free address resolution protocol message corresponding to the target high-availability virtual IP address, and determining whether the target high-availability virtual IP address is switched from the original computing node to the new computing node.
In some optional implementations of this embodiment, the listening unit (not shown in the figure) is further configured to: sending a detection address resolution protocol message to a computing node in a virtual private cloud network to which a target computing node belongs, wherein the detection address resolution protocol message is generated by an address resolution protocol-level network diagnostic tool; monitoring a response message aiming at the detection address resolution protocol message, and determining whether the target high-availability virtual IP address is switched from the original computing node to a new computing node.
In some optional implementations of this embodiment, the apparatus further includes: and the speed limiting unit (not shown in the figure) is configured to perform speed limiting processing on different types of messages based on preset speed limiting rules.
In this embodiment, a data forwarding apparatus in a virtual network is provided, where different types of gateways forward corresponding access data to a target computing node corresponding to a target high-available virtual IP address, so that all access flows are distributed to different gateways, a problem that the high-available virtual IP address needs to be bound to a specific centralized gateway, so that the centralized gateway becomes a network bottleneck is solved, and network transmission performance and stability of the virtual network are improved.
According to an embodiment of the present disclosure, the present disclosure also provides an electronic device including: at least one processor; and a memory communicatively coupled to the at least one processor; the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor, so that the at least one processor can implement the data forwarding method under the virtual network described in any of the above embodiments when executing the instructions.
According to an embodiment of the present disclosure, the present disclosure further provides a readable storage medium, where computer instructions are stored, and the computer instructions are configured to enable a computer to implement the data forwarding method in a virtual network described in any of the above embodiments when executed.
The embodiments of the present disclosure provide a computer program product, which when executed by a processor can implement the data forwarding method in the virtual network described in any of the above embodiments.
FIG. 7 shows a schematic block diagram of an example electronic device 700 that may be used to implement embodiments of the present disclosure. Electronic devices are intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions, are meant to be examples only, and are not meant to limit implementations of the disclosure described and/or claimed herein.
As shown in fig. 7, the device 700 comprises a computing unit 701, which may perform various suitable actions and processes according to a computer program stored in a Read Only Memory (ROM) 702 or a computer program loaded from a storage unit 708 into a Random Access Memory (RAM) 703. In the RAM703, various programs and data required for the operation of the device 700 can also be stored. The calculation unit 701, the ROM 702, and the RAM703 are connected to each other by a bus 704. An input/output (I/O) interface 705 is also connected to bus 704.
Various components in the device 700 are connected to the I/O interface 705, including: an input unit 706 such as a keyboard, a mouse, or the like; an output unit 707 such as various types of displays, speakers, and the like; a storage unit 708 such as a magnetic disk, optical disk, or the like; and a communication unit 709 such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 709 allows the device 700 to exchange information/data with other devices via a computer network, such as the internet, and/or various telecommunication networks.
Various implementations of the systems and techniques described here above may be implemented in digital electronic circuitry, integrated circuitry, field Programmable Gate Arrays (FPGAs), application Specific Integrated Circuits (ASICs), application Specific Standard Products (ASSPs), system on a chip (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include: implemented in one or more computer programs that are executable and/or interpretable on a programmable system including at least one programmable processor, which may be special or general purpose, receiving data and instructions from, and transmitting data and instructions to, a storage system, at least one input device, and at least one output device.
Program code for implementing the methods of the present disclosure may be written in any combination of one or more programming languages. These program codes may be provided to a processor or controller of a general purpose computer, special purpose computer, or other programmable data processing apparatus, such that the program codes, when executed by the processor or controller, cause the functions/operations specified in the flowchart and/or block diagram to be performed. The program code may execute entirely on the machine, partly on the machine, as a stand-alone software package, partly on the machine and partly on a remote machine or entirely on the remote machine or server.
In the context of this disclosure, a machine-readable medium may be a tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. The machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
To provide for interaction with a user, the systems and techniques described here can be implemented on a computer having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and a pointing device (e.g., a mouse or a trackball) by which a user may provide input to the computer. Other kinds of devices may also be used to provide for interaction with a user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form, including acoustic, speech, or tactile input.
The systems and techniques described here can be implemented in a computing system that includes a back-end component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front-end component (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such back-end, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local Area Networks (LANs), wide Area Networks (WANs), and the Internet.
The computer system may include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The Server can be a cloud Server, also called a cloud computing Server or a cloud host, and is a host product in a cloud computing service system, so as to solve the defects of large management difficulty and weak service expansibility existing in the traditional physical host and Virtual Private Server (VPS) service; it may also be a server of a distributed system, or a server incorporating a blockchain.
According to the technical scheme of the embodiment of the disclosure, a data forwarding method under a virtual network is provided, according to the corresponding relation between the scattered panoramic image and the target topology panoramic image in the panoramic road network data, the bidirectional skip between the scattered panoramic image and the panoramic road network data is realized, the problem of high data processing cost caused by generating the whole panoramic road network data is avoided, and the flexibility of the topology of the scattered panoramic image is improved.
It should be understood that various forms of the flows shown above, reordering, adding or deleting steps, may be used. For example, the steps described in this disclosure may be performed in parallel, sequentially, or in a different order, as long as the desired results of the technical solutions provided by this disclosure can be achieved, and are not limited herein.
The above detailed description should not be construed as limiting the scope of the disclosure. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may be made in accordance with design requirements and other factors. Any modification, equivalent replacement, and improvement made within the spirit and principle of the present disclosure should be included in the scope of protection of the present disclosure.
Claims (19)
1. A data forwarding method under a virtual network comprises the following steps:
acquiring access data;
determining a destination high-availability virtual IP address corresponding to the access data;
and forwarding the access data to a target computing node corresponding to the target high-availability virtual IP address according to the gateway of the target type corresponding to the access data.
2. The method of claim 1, wherein the forwarding the access data to the target computing node corresponding to the destination high available virtual IP address according to the gateway of the target type corresponding to the access data comprises:
and in response to the fact that the access data are determined to be access data in a private line access mode, forwarding the access data to a target computing node corresponding to the target high-availability virtual IP address through a private line gateway.
3. The method of claim 1, wherein the forwarding the access data to the target computing node corresponding to the destination high available virtual IP address according to the gateway of the target type corresponding to the access data comprises:
and in response to determining that the access data is the access data sent by the computing nodes in other networks except the virtual private cloud network to which the target computing node belongs, forwarding the access data to the target computing node corresponding to the target high-availability virtual IP address through a network address translation gateway.
4. The method of claim 1, wherein the forwarding the access data to the target computing node corresponding to the destination high available virtual IP address according to the gateway of the target type corresponding to the access data comprises:
and in response to determining that the access data are access data sent by other computing nodes in the VPN to which the target computing node belongs, forwarding the access data to the target computing node corresponding to the target high-availability virtual IP address in a direct-through mode.
5. The method according to claim 1, wherein before the gateway according to the target type corresponding to the access data forwards the access data to the target computing node corresponding to the destination high-available virtual IP address, the method further includes:
monitoring an address resolution protocol message corresponding to the target high-availability virtual IP address, and determining whether the target high-availability virtual IP address is switched from an original computing node to a new computing node;
and in response to the fact that the target high-availability virtual IP address is determined to be switched to a new computing node from an original computing node, synchronizing switching information corresponding to the target high-availability virtual IP address to a target node in a virtual private cloud network corresponding to the high-availability virtual IP under the virtual network, wherein the target node comprises a computing node and a gateway.
6. The method according to claim 5, wherein the monitoring an ARP packet corresponding to the destination high available virtual IP address and determining whether the destination high available virtual IP address is switched from an original computing node to a new computing node comprises:
and monitoring a free address resolution protocol message corresponding to the target high-availability virtual IP address, and determining whether the target high-availability virtual IP address is switched from the original computing node to a new computing node.
7. The method according to claim 5, wherein the monitoring an ARP packet corresponding to the destination high available virtual IP address and determining whether the destination high available virtual IP address is switched from an original computing node to a new computing node comprises:
sending a detection address resolution protocol message to a computing node in a virtual private cloud network to which the target computing node belongs, wherein the detection address resolution protocol message is generated by a network diagnosis tool at an address resolution protocol level;
monitoring a response message aiming at the detection address resolution protocol message, and determining whether the target high-availability virtual IP address is switched from the original computing node to a new computing node.
8. The method according to any one of claims 5-7, further comprising:
and carrying out speed limit processing on different types of messages based on a preset speed limit rule.
9. A data forwarding apparatus under a virtual network, comprising:
an acquisition unit configured to acquire access data;
a determining unit configured to determine a destination high available virtual IP address corresponding to the access data;
and the forwarding unit is configured to forward the access data to the target computing node corresponding to the target high-availability virtual IP address according to the gateway of the target type corresponding to the access data.
10. The apparatus of claim 9, wherein the forwarding unit is further configured to:
and in response to the fact that the access data are determined to be access data in a private line access mode, forwarding the access data to a target computing node corresponding to the target high-availability virtual IP address through a private line gateway.
11. The apparatus of claim 9, wherein the forwarding unit is further configured to:
and in response to determining that the access data is the access data sent by the computing nodes in other networks except the virtual private cloud network to which the target computing node belongs, forwarding the access data to the target computing node corresponding to the target high-availability virtual IP address through a network address translation gateway.
12. The apparatus of claim 9, wherein the forwarding unit is further configured to:
and in response to determining that the access data are the access data sent by other computing nodes in the virtual private cloud network to which the target computing node belongs, forwarding the access data to the target computing node corresponding to the target high-availability virtual IP address in a direct-through mode.
13. The apparatus of claim 9, further comprising:
the monitoring unit is configured to monitor an address resolution protocol message corresponding to the target high-availability virtual IP address and determine whether the target high-availability virtual IP address is switched from an original computing node to a new computing node;
a synchronization unit configured to synchronize switching information corresponding to the destination high-available virtual IP address to a target node in a VPN corresponding to the high-available virtual IP under the VPN in response to determining that the destination high-available virtual IP address is switched from an original compute node to a new compute node, wherein the target node includes a compute node and a gateway.
14. The apparatus of claim 13, wherein the listening unit is further configured to:
and monitoring a free address resolution protocol message corresponding to the target high-availability virtual IP address, and determining whether the target high-availability virtual IP address is switched from the original computing node to a new computing node.
15. The apparatus of claim 13, wherein the listening unit is further configured to:
sending a detection address resolution protocol message to a computing node in a virtual private cloud network to which the target computing node belongs, wherein the detection address resolution protocol message is generated by a network diagnosis tool at an address resolution protocol level; monitoring a response message aiming at the detection address resolution protocol message, and determining whether the target high-availability virtual IP address is switched from the original computing node to a new computing node.
16. The apparatus of any of claims 13-15, further comprising:
and the speed limiting unit is configured to limit the speed of different types of messages based on a preset speed limiting rule.
17. An electronic device, comprising:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein the content of the first and second substances,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method of any one of claims 1-8.
18. A non-transitory computer readable storage medium having stored thereon computer instructions for causing the computer to perform the method of any one of claims 1-8.
19. A computer program product, comprising: computer program which, when being executed by a processor, carries out the method according to any one of claims 1-8.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210722020.4A CN115225634B (en) | 2022-06-17 | 2022-06-17 | Data forwarding method, device and computer program product under virtual network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210722020.4A CN115225634B (en) | 2022-06-17 | 2022-06-17 | Data forwarding method, device and computer program product under virtual network |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN115225634A true CN115225634A (en) | 2022-10-21 |
| CN115225634B CN115225634B (en) | 2023-10-20 |
Family
ID=83610138
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210722020.4A Active CN115225634B (en) | 2022-06-17 | 2022-06-17 | Data forwarding method, device and computer program product under virtual network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115225634B (en) |
Citations (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2003091895A2 (en) * | 2002-04-23 | 2003-11-06 | Edgile, Inc. | System for managing and delivering digital services through computer networks |
| US20140233569A1 (en) * | 2013-02-15 | 2014-08-21 | Futurewei Technologies, Inc. | Distributed Gateway in Virtual Overlay Networks |
| CN104660479A (en) * | 2015-02-13 | 2015-05-27 | 南京华讯方舟通信设备有限公司 | Networking method and network system |
| CN105812340A (en) * | 2014-12-31 | 2016-07-27 | 杭州华三通信技术有限公司 | Access method and device for virtual network to extranet |
| CN106789667A (en) * | 2016-11-21 | 2017-05-31 | 华为技术有限公司 | A kind of data forwarding method, relevant device and system |
| CN108600415A (en) * | 2018-05-28 | 2018-09-28 | 郑州云海信息技术有限公司 | A kind of virtual network accesses method, system and the SDN controllers of outer net |
| CN108768817A (en) * | 2018-05-22 | 2018-11-06 | 腾讯科技（深圳）有限公司 | A kind of virtualization network constructing system, data packet sending method |
| CN109639557A (en) * | 2019-02-11 | 2019-04-16 | 北京百度网讯科技有限公司 | Methods, devices and systems for network communication |
| CN110177048A (en) * | 2019-05-28 | 2019-08-27 | 银联商务股份有限公司 | A kind of high availability implementation method and device of virtual private cloud system |
| CN110913028A (en) * | 2018-09-14 | 2020-03-24 | 阿里巴巴集团控股有限公司 | Method, device and system for processing virtual address |
| CN111327720A (en) * | 2020-02-21 | 2020-06-23 | 北京百度网讯科技有限公司 | Network address conversion method, device, gateway equipment and storage medium |
| CN113709200A (en) * | 2020-05-21 | 2021-11-26 | 阿里巴巴集团控股有限公司 | Method and device for establishing communication connection |
| CN114006909A (en) * | 2021-11-11 | 2022-02-01 | 四川中电启明星信息技术有限公司 | Method and system for point-to-point unidirectional dynamic private line connection between private cloud tenants |
-
2022
- 2022-06-17 CN CN202210722020.4A patent/CN115225634B/en active Active
Patent Citations (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2003091895A2 (en) * | 2002-04-23 | 2003-11-06 | Edgile, Inc. | System for managing and delivering digital services through computer networks |
| US20140233569A1 (en) * | 2013-02-15 | 2014-08-21 | Futurewei Technologies, Inc. | Distributed Gateway in Virtual Overlay Networks |
| CN105812340A (en) * | 2014-12-31 | 2016-07-27 | 杭州华三通信技术有限公司 | Access method and device for virtual network to extranet |
| CN104660479A (en) * | 2015-02-13 | 2015-05-27 | 南京华讯方舟通信设备有限公司 | Networking method and network system |
| CN106789667A (en) * | 2016-11-21 | 2017-05-31 | 华为技术有限公司 | A kind of data forwarding method, relevant device and system |
| CN108768817A (en) * | 2018-05-22 | 2018-11-06 | 腾讯科技（深圳）有限公司 | A kind of virtualization network constructing system, data packet sending method |
| CN108600415A (en) * | 2018-05-28 | 2018-09-28 | 郑州云海信息技术有限公司 | A kind of virtual network accesses method, system and the SDN controllers of outer net |
| CN110913028A (en) * | 2018-09-14 | 2020-03-24 | 阿里巴巴集团控股有限公司 | Method, device and system for processing virtual address |
| CN109639557A (en) * | 2019-02-11 | 2019-04-16 | 北京百度网讯科技有限公司 | Methods, devices and systems for network communication |
| CN110177048A (en) * | 2019-05-28 | 2019-08-27 | 银联商务股份有限公司 | A kind of high availability implementation method and device of virtual private cloud system |
| CN111327720A (en) * | 2020-02-21 | 2020-06-23 | 北京百度网讯科技有限公司 | Network address conversion method, device, gateway equipment and storage medium |
| CN113709200A (en) * | 2020-05-21 | 2021-11-26 | 阿里巴巴集团控股有限公司 | Method and device for establishing communication connection |
| CN114006909A (en) * | 2021-11-11 | 2022-02-01 | 四川中电启明星信息技术有限公司 | Method and system for point-to-point unidirectional dynamic private line connection between private cloud tenants |
Non-Patent Citations (1)
| Title |
|---|
| 程海瑞;张沛;: "企业网关虚拟化研究与部署", 电信网技术, no. 01 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN115225634B (en) | 2023-10-20 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10645056B2 (en) | Source-dependent address resolution | |
| US10887276B1 (en) | DNS-based endpoint discovery of resources in cloud edge locations embedded in telecommunications networks | |
| US11463511B2 (en) | Model-based load balancing for network data plane | |
| US11095534B1 (en) | API-based endpoint discovery of resources in cloud edge locations embedded in telecommunications networks | |
| JP6087922B2 (en) | Communication control method and gateway | |
| CN112470436A (en) | Multi-cloud connectivity using SRV6 and BGP | |
| CN113572831B (en) | Communication method, computer equipment and medium between Kubernetes clusters | |
| JP4789425B2 (en) | Route table synchronization method, network device, and route table synchronization program | |
| JP2022548152A (en) | Routing control method, device, program and computer device | |
| CN110808857B (en) | Network intercommunication method, device, equipment and storage medium for realizing Kubernetes cluster | |
| CN112787913B (en) | Intelligent network card assembly, physical machine, cloud service system and message sending method | |
| US11743325B1 (en) | Centralized load balancing of resources in cloud edge locations embedded in telecommunications networks | |
| CN107547373B (en) | Message forwarding method, device, equipment and machine readable storage medium | |
| CN115225634B (en) | Data forwarding method, device and computer program product under virtual network | |
| CN116032880A (en) | System, method, electronic equipment and storage medium for session synchronization | |
| CN115190087A (en) | Data transmission method, device, equipment and medium based on two-layer intermediate equipment | |
| CN115022279A (en) | Intranet penetration method and device | |
| CN111800340B (en) | Data packet forwarding method and device | |
| CN114598532A (en) | Connection establishing method, device, electronic equipment and storage medium | |
| CN112866107A (en) | IP address notification method, traffic guiding method and network equipment | |
| US11831598B2 (en) | Method, apparatus and system for switching virtual IP | |
| CN109039680B (en) | Method and system for switching main Broadband Network Gateway (BNG) and standby BNG and BNG | |
| CN115118654B (en) | Data forwarding method, system, device and program product under virtual network | |
| WO2023231836A1 (en) | File synchronization method, apparatus, device, and storage medium | |
| CN117811919A (en) | Communication method, system, equipment and medium of heterogeneous CNI of large-scale cloud platform |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |