CN115426313B - NAT optimization device and method based on OVN virtual machine network - Google Patents

NAT optimization device and method based on OVN virtual machine network Download PDF

Info

Publication number
CN115426313B
CN115426313B CN202211061776.5A CN202211061776A CN115426313B CN 115426313 B CN115426313 B CN 115426313B CN 202211061776 A CN202211061776 A CN 202211061776A CN 115426313 B CN115426313 B CN 115426313B
Authority
CN
China
Prior art keywords
network
router
logic
nat
intranet
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202211061776.5A
Other languages
Chinese (zh)
Other versions
CN115426313A (en
Inventor
安兆哲
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Zhongdian Cloud Computing Technology Co.,Ltd.
Original Assignee
CLP Cloud Digital Intelligence Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by CLP Cloud Digital Intelligence Technology Co Ltd filed Critical CLP Cloud Digital Intelligence Technology Co Ltd
Priority to CN202211061776.5A priority Critical patent/CN115426313B/en
Publication of CN115426313A publication Critical patent/CN115426313A/en
Application granted granted Critical
Publication of CN115426313B publication Critical patent/CN115426313B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/38Flow based routing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/74Address processing for routing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/09Mapping addresses
    • H04L61/25Mapping addresses of the same type
    • H04L61/2503Translation of Internet protocol [IP] addresses
    • H04L61/2557Translation policies or rules
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00Reducing energy consumption in communication networks
    • Y02D30/50Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate

Abstract

The invention relates to the technical field of OVN networks, and provides a NAT optimization device and method based on OVN virtual machine networks, wherein the device comprises the following components: the system comprises a logic switch, a forwarding logic router, a strategy routing module, a public network logic router, an intranet logic router and an NAT module, wherein the forwarding logic router is used for forwarding traffic of a private network address sent by the logic switch to the public network logic router or the intranet logic router according to a routing strategy; the policy routing module is used for dividing network scenes according to the destination address network segments, matching different NAT address conversion rules for different network scenes, and generating a routing policy. According to the NAT optimization device and method based on the OVN virtual machine network, which are disclosed by the embodiment of the invention, the problem that NAT address conversion in the ovn virtual network conflicts in different network scenes is solved, so that network paths of different network scenes are clearer, user service flows are clearer, and service usability is improved.

Description

NAT optimization device and method based on OVN virtual machine network
Technical Field
The invention relates to the technical field of OVN networks, in particular to a NAT optimization device and method based on OVN virtual machine networks.
Background
As enterprises get cloud, the trend of digitized transformation of enterprises gets deeper and deeper, and more enterprises choose to container applications and then deploy the applications on a cloud platform. The cloud platform is built, the cloud network is built independently, and a network model based on ovn cloud is a common cloud network implementation mode.
Based on ovn, the cloud platform virtual network realizes the two-layer forwarding of the network on the cloud through a Logical Switch logical_switch, realizes the three-layer forwarding, NAT address conversion and routing functions of the network on the cloud through a Logical Router logical_router, and builds a basic three-layer network by creating the logical_ Router, logical _switch in ovn. In addition to the basic three-tier network, network functions such as route forwarding, dhcp services, dns services, NAT address translation, vpn address translation, etc. are also common network requirements. Where NAT address translation is implemented in ovn networks by the Logical Router configuration in ovn.
In practical use, different NAT address translation rules are required for different network scenarios, for example, when a resource on the cloud accesses a public network service, a private network address of the resource needs to be translated into a public network unique address through the NAT address. When the resources on the cloud access the internal service, the private network address of the resources needs to be converted into an intranet unique address through the NAT address. In the face of various NAT requirements, a single logical_router cannot meet the NAT address translation requirements meeting the practical application.
Therefore, how to provide a NAT address translation method suitable for accessing public network service and intranet service at the same time is a technical problem to be solved.
Disclosure of Invention
In view of the above, the technical problem to be solved by the present invention is to provide a method and a system for NAT address translation in multiple scenarios based on ovn virtual network, which solve NAT address translation conflict problem in different scenarios. The NAT rule is controlled through the routing strategy of the destination address in a mode of separating the routing from the NAT function, so that the requirement that a user uses different NAT rules for different network scenes is met.
In one aspect, the present invention provides a NAT optimization device based on a OVN virtual machine network, including:
the logic switch is used for forwarding the private network address of the resource on the cloud or the traffic of the private network segment to the forwarding logic router;
the forwarding logic router is used for forwarding the traffic of the private network address sent by the logic switch to the public network logic router or the intranet logic router according to a routing strategy;
the strategy routing module is used for dividing network scenes according to the destination address network segments, matching different NAT address conversion rules for different network scenes and generating a routing strategy;
the public network logic router is used for forwarding the flow mapped by the NAT to the public network, and a third logic routing port is arranged on the public network logic router;
the intranet logic router is used for forwarding the flow mapped by the NAT to the intranet, and a fourth logic routing port is arranged on the intranet logic router;
the NAT module is used for performing NAT mapping on the public network eip and a resource private network address or a private network segment on the cloud when the public network eip is bound, and setting a mapping rule to a public network logic router; when the intranet eip is bound, NAT mapping is carried out on the intranet eip and a private network address or a private network segment of a resource on the cloud, and a mapping rule is set on an intranet logic router.
Furthermore, in the NAT optimization device based on OVN virtual machine network, the forwarding logic router and the public network logic router are connected through the first logic routing port and the third logic routing port.
Furthermore, in the NAT optimization device based on OVN virtual machine network, the forwarding logic router and the intranet logic router are connected through the second logic routing port and the fourth logic routing port.
Further, in the NAT optimization device based on OVN virtual machine network of the present invention, the policy routing module is configured to: and dividing a network scene through the destination address segment, and designating a public network logic router or an intranet logic router through the next hop address of the routing strategy.
Further, in the NAT optimization device based on OVN virtual machine network, the present invention designates a public network logical router or an intranet logical router by the next hop address of the routing policy, and includes: when the next hop address of the routing strategy is the third IP, designating a public network logic router; when the next hop address of the routing policy is the fourth IP, an intranet logical router is specified.
On the other hand, the invention provides a NAT optimization method based on OVN virtual machine network, comprising the following steps:
step S1: forwarding the traffic of the resources on the cloud to a forwarding logic router through a logic switch;
step S2: dividing a network scene according to a destination address network segment by adopting a strategy routing module, generating a routing strategy, and designating a public network logic router or an intranet logic router through the next hop address of the routing strategy;
step S3: the forwarding logic router matches a routing strategy according to the network segment of the destination address, and forwards the traffic to a corresponding public network logic router or intranet logic router according to the next hop address of the routing strategy;
step S4: the NAT module performs NAT mapping on the public network eip or the intranet eip and a private network address or a private network segment of a resource on the cloud, and sets a mapping rule to a public network logic router or an intranet logic router;
step S5: and forwarding the traffic after NAT mapping to the public network or the intranet by the public network logic router or the intranet logic router.
Further, in step S1 of the NAT optimization method based on OVN virtual machine network, the traffic of the resources on the cloud includes the traffic of the public network and the traffic of the internal network.
Further, in step S3 of the NAT optimization method according to the present invention based on the OVN virtual machine network, according to the next hop address of the routing policy, the forwarding of the traffic to the corresponding public network logical router or intranet logical router includes: when the next hop address of the routing strategy is the third IP, forwarding the traffic to the corresponding public network logic router; and when the next hop address of the routing strategy is the fourth IP, forwarding the traffic to the corresponding intranet logic router.
Next, the present invention provides a computer-readable storage medium having stored thereon a computer program which, when executed, performs the method.
Finally, the invention also provides a terminal device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the steps of the method when executing the program.
According to the NAT optimization method based on the OVN virtual machine network, different NAT address conversion rules are set for different scenes by superposing the logical_router, different network scenes are led to the specific logical_router for NAT according to the routing strategy, the problem that the NAT address conversion in the ovn virtual network conflicts in different network scenes is solved, network paths of the different network scenes are clearer, the user service flow is clearer, and the usability of the service is improved.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings that are needed in the embodiments will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and that other drawings can be obtained according to these drawings without inventive effort for a person skilled in the art.
Fig. 1 is a schematic diagram of a NAT optimization device according to an exemplary first embodiment of the invention based on a OVN virtual machine network.
Fig. 2 is a flowchart of a NAT optimization method based on a OVN virtual machine network according to an exemplary second embodiment of the invention.
Detailed Description
Embodiments of the present invention will be described in detail below with reference to the accompanying drawings.
It should be noted that, without conflict, the following embodiments and features in the embodiments may be combined with each other; and, based on the embodiments in this disclosure, all other embodiments that may be made by one of ordinary skill in the art without inventive effort are within the scope of the present disclosure.
It is noted that various aspects of the embodiments are described below within the scope of the following claims. It should be apparent that the aspects described herein may be embodied in a wide variety of forms and that any specific structure and/or function described herein is merely illustrative. Based on the present disclosure, one skilled in the art will appreciate that one aspect described herein may be implemented independently of any other aspect, and that two or more of these aspects may be combined in various ways. For example, an apparatus may be implemented and/or a method practiced using any number of the aspects set forth herein. In addition, such apparatus may be implemented and/or such methods practiced using other structure and/or functionality in addition to one or more of the aspects set forth herein.
Fig. 1 is a schematic diagram of a NAT optimization device according to an exemplary first embodiment of the present invention based on a OVN virtual machine network, and as shown in fig. 1, the device of this embodiment includes:
the logic switch is used for forwarding the private network address of the resource on the cloud or the traffic of the private network segment to the forwarding logic router;
the forwarding logic router is used for forwarding the traffic of the private network address sent by the logic switch to the public network logic router or the intranet logic router according to a routing strategy;
the strategy routing module is used for dividing network scenes according to the destination address network segments, matching different NAT address conversion rules for different network scenes and generating a routing strategy;
the public network logic router is used for forwarding the flow mapped by the NAT to the public network, and a third logic routing port is arranged on the public network logic router;
the intranet logic router is used for forwarding the flow mapped by the NAT to the intranet, and a fourth logic routing port is arranged on the intranet logic router;
the NAT module is used for performing NAT mapping on the public network eip and a resource private network address or a private network segment on the cloud when the public network eip is bound, and setting a mapping rule to a public network logic router; when the intranet eip is bound, NAT mapping is carried out on the intranet eip and a private network address or a private network segment of a resource on the cloud, and a mapping rule is set on an intranet logic router.
Specifically, in the NAT optimization device based on the OVN virtual machine network in this embodiment, the forwarding logical router and the public network logical router are connected through the first logical routing port and the third logical routing port.
Specifically, in the NAT optimization device based on the OVN virtual machine network in this embodiment, the forwarding logical router and the intranet logical router are connected through the second logical routing port and the fourth logical routing port.
Specifically, in the NAT optimization device based on OVN virtual machine network in this embodiment, the policy routing module is configured to: and dividing a network scene through the destination address segment, and designating a public network logic router or an intranet logic router through the next hop address of the routing strategy.
Specifically, in the NAT optimization device based on OVN virtual machine network of this embodiment, the public network logical router or the intranet logical router is specified by the next hop address of the routing policy, which includes: when the next hop address of the routing strategy is the third IP, designating a public network logic router; when the next hop address of the routing policy is the fourth IP, an intranet logical router is specified.
Fig. 2 is a flowchart of a NAT optimization method based on a OVN virtual machine network according to an exemplary second embodiment of the invention, where the method of the present embodiment includes:
step S1: forwarding the traffic of the resources on the cloud to a forwarding logic router through a logic switch;
step S2: dividing a network scene according to a destination address network segment by adopting a strategy routing module, generating a routing strategy, and designating a public network logic router or an intranet logic router through the next hop address of the routing strategy;
step S3: the forwarding logic router matches a routing strategy according to the network segment of the destination address, and forwards the traffic to a corresponding public network logic router or intranet logic router according to the next hop address of the routing strategy;
step S4: the NAT module performs NAT mapping on the public network eip or the intranet eip and a private network address or a private network segment of a resource on the cloud, and sets a mapping rule to a public network logic router or an intranet logic router;
step S5: and forwarding the traffic after NAT mapping to the public network or the intranet by the public network logic router or the intranet logic router.
In step S1 of the method in this embodiment, the traffic of the resources on the cloud includes the traffic of the public network and the traffic of the internal network.
In step S3 of the method of the present embodiment, forwarding, according to a next hop address of a routing policy, traffic to a corresponding public network logical router or an intranet logical router includes: when the next hop address of the routing strategy is the third IP, forwarding the traffic to the corresponding public network logic router; and when the next hop address of the routing strategy is the fourth IP, forwarding the traffic to the corresponding intranet logic router.
According to the method, different NAT address conversion rules are set for different scenes by superposing the logical_router, different network scenes are led to the specific logical_router for NAT according to the routing strategy, the problem that NAT address conversion in a ovn virtual network conflicts in different network scenes is solved, network paths of the different network scenes are clearer, user service flows are clearer, and service usability is improved.
The invention also provides a computer readable storage medium having stored thereon a computer program which, when executed, performs the method.
The invention also provides a terminal device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the steps of the method when executing the program.
The terminal equipment has the corresponding technical effects of the NAT optimization device and method based on the OVN virtual machine network.
The foregoing is merely illustrative of the present invention, and the present invention is not limited thereto, and any changes or substitutions easily contemplated by those skilled in the art within the scope of the present invention should be included in the present invention. Therefore, the protection scope of the invention is subject to the protection scope of the claims.

Claims (10)

1. A NAT optimization device based on a OVN virtual machine network, the device comprising:
the logic switch is used for forwarding the private network address of the resource on the cloud or the traffic of the private network segment to the forwarding logic router;
the forwarding logic router is used for forwarding the traffic of the private network address sent by the logic switch to the public network logic router or the intranet logic router according to the next hop address of the routing strategy;
the strategy routing module is used for dividing network scenes according to the destination address network segments, matching different NAT address conversion rules for different network scenes and generating a routing strategy;
the public network logic router is used for forwarding the flow mapped by the NAT to the public network, and a third logic routing port is arranged on the public network logic router;
the intranet logic router is used for forwarding the flow mapped by the NAT to the intranet, and a fourth logic routing port is arranged on the intranet logic router;
the NAT module is used for performing NAT mapping on the public network eip and a resource private network address or a private network segment on the cloud when the public network eip is bound, and setting a mapping rule to a public network logic router; when the intranet eip is bound, NAT mapping is carried out on the intranet eip and a private network address or a private network segment of a resource on the cloud, and a mapping rule is set on an intranet logic router.
2. The OVN virtual machine network based NAT optimization of claim 1, wherein the forwarding logical router is connected to the public network logical router through a first logical routing port and a third logical routing port.
3. The OVN virtual machine network based NAT optimization of claim 1, wherein the forwarding logical router is connected to the intranet logical router through a second logical routing port and a fourth logical routing port.
4. The NAT optimization device based on OVN virtual machine network of claim 1, wherein the policy routing module is configured to: and dividing a network scene through the destination address segment, and designating a public network logic router or an intranet logic router through the next hop address of the routing strategy.
5. The OVN virtual machine network based NAT optimization apparatus of claim 4, wherein the public network logical router or the intranet logical router is specified by the next hop address of the routing policy, comprising: when the next hop address of the routing strategy is the third IP, designating a public network logic router; when the next hop address of the routing policy is the fourth IP, an intranet logical router is specified.
6. A method of NAT optimization based on a OVN virtual machine network based on the apparatus of any of claims 1-5, the method comprising:
step S1: forwarding the traffic of the resources on the cloud to a forwarding logic router through a logic switch;
step S2: dividing a network scene according to a destination address network segment by adopting a strategy routing module, generating a routing strategy, and designating a public network logic router or an intranet logic router through the next hop address of the routing strategy;
step S3: the forwarding logic router matches a routing strategy according to the network segment of the destination address, and forwards the traffic to a corresponding public network logic router or intranet logic router according to the next hop address of the routing strategy;
step S4: the NAT module performs NAT mapping on the public network eip or the intranet eip and a private network address or a private network segment of a resource on the cloud, and sets a mapping rule to a public network logic router or an intranet logic router;
step S5: and forwarding the traffic after NAT mapping to the public network or the intranet by the public network logic router or the intranet logic router.
7. The NAT optimization method according to claim 6, wherein in step S1, the traffic of the resources on the cloud includes the outbound public network traffic and the outbound internal network traffic.
8. The NAT optimization method based on the OVN virtual machine network of claim 6, wherein in step S3, forwarding traffic to the corresponding public network logical router or intranet logical router according to the next hop address of the routing policy includes: when the next hop address of the routing strategy is the third IP, forwarding the traffic to the corresponding public network logic router; and when the next hop address of the routing strategy is the fourth IP, forwarding the traffic to the corresponding intranet logic router.
9. A computer readable storage medium, characterized in that the computer readable storage medium has stored thereon a computer program which, when executed, performs the method according to any of claims 6-8.
10. A terminal device, characterized in that it comprises a memory, a processor and a computer program stored on the memory and executable on the processor, which processor, when executing the program, realizes the steps of the method according to any of claims 6-8.
CN202211061776.5A 2022-08-31 2022-08-31 NAT optimization device and method based on OVN virtual machine network Active CN115426313B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202211061776.5A CN115426313B (en) 2022-08-31 2022-08-31 NAT optimization device and method based on OVN virtual machine network

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202211061776.5A CN115426313B (en) 2022-08-31 2022-08-31 NAT optimization device and method based on OVN virtual machine network

Publications (2)

Publication Number Publication Date
CN115426313A CN115426313A (en) 2022-12-02
CN115426313B true CN115426313B (en) 2023-08-18

Family

ID=84201273

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202211061776.5A Active CN115426313B (en) 2022-08-31 2022-08-31 NAT optimization device and method based on OVN virtual machine network

Country Status (1)

Country Link
CN (1) CN115426313B (en)

Citations (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1411220A (en) * 2001-10-04 2003-04-16 华为技术有限公司 Method and system of realizing IP speech service of private network
CN1960313A (en) * 2005-11-03 2007-05-09 中兴通讯股份有限公司 Periphery devices of service provider of combining network address conversion, and method of application
CN101075964A (en) * 2007-06-11 2007-11-21 中兴通讯股份有限公司 Method and system for realizing port re-direction by router interface address
CN102664972A (en) * 2012-05-11 2012-09-12 中科方德软件有限公司 Method and device for mapping address in virtual network
CN103916378A (en) * 2012-12-28 2014-07-09 中国电信股份有限公司 System and method for automatically deploying application system in cloud resource pool
CN105391771A (en) * 2015-10-16 2016-03-09 张陵 Multi-tenant-oriented cloud network architecture
CN105812340A (en) * 2014-12-31 2016-07-27 杭州华三通信技术有限公司 Access method and device for virtual network to extranet
CN106487691A (en) * 2016-10-13 2017-03-08 网宿科技股份有限公司 The data processing method of virtual router, device and virtual router
CN106850444A (en) * 2011-08-17 2017-06-13 Nicira股份有限公司 Logic L3 route
CN107113208A (en) * 2015-01-27 2017-08-29 华为技术有限公司 The network virtualization of network infrastructure
CN107911258A (en) * 2017-12-29 2018-04-13 深信服科技股份有限公司 A kind of realization method and system in the secure resources pond based on SDN network
US10148493B1 (en) * 2015-06-08 2018-12-04 Infoblox Inc. API gateway for network policy and configuration management with public cloud
CN109361764A (en) * 2018-11-29 2019-02-19 杭州数梦工场科技有限公司 The interior service access method across VPC, device, equipment and readable storage medium storing program for executing
CN109743415A (en) * 2019-02-27 2019-05-10 上海浪潮云计算服务有限公司 A kind of public cloud network resilience IP realization method and system
CN111095880A (en) * 2017-12-04 2020-05-01 Nicira股份有限公司 High availability of stateful services in public cloud logic networks
CN111327720A (en) * 2020-02-21 2020-06-23 北京百度网讯科技有限公司 Network address conversion method, device, gateway equipment and storage medium
US10826725B1 (en) * 2015-09-29 2020-11-03 Aviatrix Systems, Inc. System for scaling network address translation (NAT) and firewall functions
CN111917649A (en) * 2019-05-10 2020-11-10 华为技术有限公司 Virtual private cloud communication and configuration method and related device
CN112929322A (en) * 2019-12-06 2021-06-08 北京百度网讯科技有限公司 Method, device and system for issuing and accessing service on cloud
CN114448937A (en) * 2022-01-28 2022-05-06 浙江大华技术股份有限公司 Access request response method and device and storage medium
CN114915420A (en) * 2022-03-03 2022-08-16 阿里巴巴(中国)有限公司 Communication method and system for cloud desktop

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11177978B2 (en) * 2019-07-29 2021-11-16 Vmware, Inc. Connecting virtual computer networks with overlapping IP addresses using transit virtual computer network

Patent Citations (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1411220A (en) * 2001-10-04 2003-04-16 华为技术有限公司 Method and system of realizing IP speech service of private network
CN1960313A (en) * 2005-11-03 2007-05-09 中兴通讯股份有限公司 Periphery devices of service provider of combining network address conversion, and method of application
CN101075964A (en) * 2007-06-11 2007-11-21 中兴通讯股份有限公司 Method and system for realizing port re-direction by router interface address
CN106850444A (en) * 2011-08-17 2017-06-13 Nicira股份有限公司 Logic L3 route
CN102664972A (en) * 2012-05-11 2012-09-12 中科方德软件有限公司 Method and device for mapping address in virtual network
CN103916378A (en) * 2012-12-28 2014-07-09 中国电信股份有限公司 System and method for automatically deploying application system in cloud resource pool
CN105812340A (en) * 2014-12-31 2016-07-27 杭州华三通信技术有限公司 Access method and device for virtual network to extranet
CN107113208A (en) * 2015-01-27 2017-08-29 华为技术有限公司 The network virtualization of network infrastructure
US10148493B1 (en) * 2015-06-08 2018-12-04 Infoblox Inc. API gateway for network policy and configuration management with public cloud
US10826725B1 (en) * 2015-09-29 2020-11-03 Aviatrix Systems, Inc. System for scaling network address translation (NAT) and firewall functions
CN105391771A (en) * 2015-10-16 2016-03-09 张陵 Multi-tenant-oriented cloud network architecture
CN106487691A (en) * 2016-10-13 2017-03-08 网宿科技股份有限公司 The data processing method of virtual router, device and virtual router
CN111095880A (en) * 2017-12-04 2020-05-01 Nicira股份有限公司 High availability of stateful services in public cloud logic networks
CN107911258A (en) * 2017-12-29 2018-04-13 深信服科技股份有限公司 A kind of realization method and system in the secure resources pond based on SDN network
CN109361764A (en) * 2018-11-29 2019-02-19 杭州数梦工场科技有限公司 The interior service access method across VPC, device, equipment and readable storage medium storing program for executing
CN109743415A (en) * 2019-02-27 2019-05-10 上海浪潮云计算服务有限公司 A kind of public cloud network resilience IP realization method and system
CN111917649A (en) * 2019-05-10 2020-11-10 华为技术有限公司 Virtual private cloud communication and configuration method and related device
CN111917893A (en) * 2019-05-10 2020-11-10 华为技术有限公司 Virtual private cloud and data center under cloud communication and configuration method and related device
CN112929322A (en) * 2019-12-06 2021-06-08 北京百度网讯科技有限公司 Method, device and system for issuing and accessing service on cloud
CN111327720A (en) * 2020-02-21 2020-06-23 北京百度网讯科技有限公司 Network address conversion method, device, gateway equipment and storage medium
CN114448937A (en) * 2022-01-28 2022-05-06 浙江大华技术股份有限公司 Access request response method and device and storage medium
CN114915420A (en) * 2022-03-03 2022-08-16 阿里巴巴(中国)有限公司 Communication method and system for cloud desktop

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
A survey of network isolation solutions for multi-tenant data centers;Valentin Del Piccolo;IEEE Communications Surveys & Tutorials;全文 *

Also Published As

Publication number Publication date
CN115426313A (en) 2022-12-02

Similar Documents

Publication Publication Date Title
US11283707B2 (en) Segment routing with fast reroute for container networking
US9876756B2 (en) Network access method and device for equipment
WO2016066072A1 (en) Method and device for realizing communication between nvo3 network and mpls network
CN102664972B (en) Method and device for mapping address in virtual network
CN101572676B (en) Load sharing method and equipment of double outlets at data center
CN109937400A (en) The stream mode of real-time migration for virtual machine transmits
CN108600415A (en) A kind of virtual network accesses method, system and the SDN controllers of outer net
CN102611618B (en) Route protection converting method and device
CN112272145B (en) Message processing method, device, equipment and machine readable storage medium
WO2021238256A1 (en) Application isolation method, system and device, and computer-readable storage medium
CN107809386B (en) IP address translation method, routing device and communication system
RU2517312C2 (en) Link state identifier conflict resolution
CN112187633A (en) Link fault convergence method and device, electronic equipment and storage medium
CN109347715B (en) Private network access method and system for external tenant
CN114363410B (en) Application access method, cloud agent, node agent component, device and medium
CN115426313B (en) NAT optimization device and method based on OVN virtual machine network
CN112243036B (en) Data processing method and device for PaaS service, equipment and storage medium
CN113342468A (en) Container data processing method and device
JP2007180963A (en) Cluster node control program, cluster node, and cluster system control method
Aziz The importance of VLANs and trunk links in network communication areas
CN106209634B (en) Learning method and device of address mapping relation
CN113422846B (en) Service message processing method and device based on network address translation protocol
CN116264518A (en) Cloud service mutual access method, system, network node and medium based on cloud private line
CN108696437B (en) Flow forwarding method and device
CN117040933B (en) Cross-regional network drainage processing method, security processing method, device and equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
CP01 Change in the name or title of a patent holder
CP01 Change in the name or title of a patent holder

Address after: 430058 No. n3013, 3rd floor, R & D building, building n, Artificial Intelligence Science Park, economic and Technological Development Zone, Caidian District, Wuhan City, Hubei Province

Patentee after: Zhongdian Cloud Computing Technology Co.,Ltd.

Address before: 430058 No. n3013, 3rd floor, R & D building, building n, Artificial Intelligence Science Park, economic and Technological Development Zone, Caidian District, Wuhan City, Hubei Province

Patentee before: CLP cloud Digital Intelligence Technology Co.,Ltd.