CN116800616A

CN116800616A - Management method and related device of virtualized network equipment

Info

Publication number: CN116800616A
Application number: CN202311078191.9A
Authority: CN
Inventors: 张增浩
Original assignee: Zhuhai Xingyun Zhilian Technology Co Ltd
Current assignee: Zhuhai Xingyun Zhilian Technology Co Ltd
Priority date: 2023-08-25
Filing date: 2023-08-25
Publication date: 2023-09-22
Anticipated expiration: 2043-08-25
Also published as: CN116800616B

Abstract

The application provides a management method and a related device of virtualized network equipment, which are applied to a Data Processor (DPU) in a management system of the virtualized network equipment, wherein the method comprises the following steps: receiving and responding to a first device creation instruction; creating at least one virtualized network device; acquiring the number of devices of the virtualized network device; and comparing the number of the devices with a preset number range to obtain a comparison result; if the number of the devices is not in the preset number range, adjusting the virtualized network devices; monitoring updating information of a container of the virtualized network equipment in real time, and acquiring annotation of the container after confirming the updating of the container; analyzing the annotation, and respectively setting port identification information according to analysis results; and issuing the corresponding flow table integrated network bridge. Therefore, the dynamic creation of the virtualized network equipment is realized, the network data is supported to be unloaded to the DPU for processing, and the release of hardware resources of the cloud computing node physical server is facilitated.

Description

Management method and related device of virtualized network equipment

Technical Field

The application relates to the field of intelligent network cards, in particular to a management method and a related device of virtualized network equipment.

Background

With the development of cloud computing technology, 5G, artificial intelligence, edge computing and other next generation information technologies, the demands of people on container technology are more and more vigorous, and DPU (Data Processing Unit) has the advantage of solving the shortage of resource shortage.

The implementation modes of the plug-ins are continuously optimized, the network performance is also continuously optimized, the technology is continuously developed, the networking form is also continuously changed, and the choices of the container network are more and more. With the advent of DPUs, conventional container network plug-ins have not been in line with the architectural form of DPUs, failing to take advantage of the performance of DPUs.

Disclosure of Invention

The application provides a management method and a related device of virtualized network equipment, which can realize dynamic creation of the virtualized network equipment through a network plug-in, realize resource management of the virtualized network equipment by means of the existing cluster management framework, and simultaneously unload network flow data to a DPU side, thereby effectively solving the problem of releasing hardware resources of a physical server of a cloud computing node in the prior art.

In a first aspect, the present application provides a method for managing virtualized network devices, applied to a data processor DPU in a management system of virtualized network devices, where the management system of virtualized network devices includes the data processor DPU and a container-based cluster management server, where the container-based cluster management server is composed of a master node and a computing node, and the computing node in the container-based cluster management server is connected to the data processor DPU, where the method includes:

Receiving a first device creation instruction from the computing node;

invoking a simulation program in the data processor DPU to create at least one of the virtualized network devices in response to the first device creation instruction;

acquiring the equipment number of the virtualized network equipment, wherein the equipment number refers to the number of the virtualized network equipment put into use; and comparing the number of the devices with a preset number range to obtain a comparison result;

if the comparison result indicates that the number of the devices is not in the preset number range, adjusting the virtualized network device to enable the adjusted number of the devices to adapt to the preset number range, wherein the adjustment refers to deleting operation or adding operation;

monitoring the updated information of the container of the adjusted virtualized network device in real time, and after the updated information is detected to confirm the update of the container, acquiring annotation of the container, wherein the annotation comprises information of a first port and information of a second port, the first port refers to a port of a virtual network card in the computing node, and the second port refers to a port of the virtual network card in the DPU;

Analyzing the annotation to obtain an analysis result, and respectively setting first port identification information of the first port and second port identification information of the second port according to the analysis result;

and issuing a first flow table corresponding to the first port identification information and a second flow table corresponding to the second port identification information to an integrated network bridge in the DPU.

In a second aspect, the present application provides a management apparatus for a virtualized network device, applied to a data processor DPU in a management system of the virtualized network device, where the management system of the virtualized network device includes the data processor DPU and a container-based cluster management server, where the container-based cluster management server is composed of a master node and a computing node, and where the computing node in the container-based cluster management server is connected to the data processor DPU, the apparatus includes: the device comprises a receiving unit, a creating unit, a comparing unit, an adjusting unit, a monitoring unit, a setting unit and a issuing unit, wherein,

the receiving unit is used for receiving a first device creation instruction from the computing node;

the creating unit is used for responding to the first device creating instruction, calling a simulation program in the data processor DPU and creating at least one virtualized network device;

The comparison unit is used for obtaining the equipment number of the virtualized network equipment, wherein the equipment number refers to the number of the virtualized network equipment put into use; and comparing the number of the devices with a preset number range to obtain a comparison result;

the adjusting unit is configured to adjust the virtualized network device if the comparison result indicates that the number of devices is not within the preset number range, so that the number of devices after the adjustment is adapted to the preset number range, where the adjustment refers to a deletion operation or an addition operation;

the monitoring unit is configured to monitor, in real time, update information of a container of the adjusted virtualized network device, and obtain an annotation of the container after the update information is detected to confirm the update of the container, where the annotation includes information of a first port and information of a second port, the first port is a port of a virtual network card in the computing node, and the second port is a virtual network card port in the data processor DPU;

the setting unit is used for analyzing the annotation to obtain an analysis result, and respectively setting first port identification information of the first port and second port identification information of the second port according to the analysis result;

The issuing unit is configured to issue a first flow table corresponding to the first port identification information and a second flow table corresponding to the second port identification information to an integrated bridge in the data processor DPU.

In a third aspect, the present application provides an electronic device comprising a processor, a memory and one or more programs stored in the memory and configured to be executed by the processor, the programs comprising instructions for performing steps as in the first aspect of the embodiments of the present application.

In a fourth aspect, the present application provides a computer readable storage medium having stored thereon a computer program/instruction which when executed by a processor performs the steps of the first aspect of the embodiments of the present application.

In a fifth aspect, the present application provides a computer program product, wherein the computer program product comprises a non-transitory computer readable storage medium storing a computer program operable to cause a computer to perform part or all of the steps described in the first aspect of the embodiments of the present application.

It can be seen that in the present application, first, a first device creation instruction from a computing node is received by a data processor DPU in a management system of a virtualized network device; responding to a first equipment creation instruction, and calling a simulation program by the DPU to create a virtualized network equipment; then obtaining the number of the virtualized network devices; and comparing the number of the devices with a preset number range to obtain a comparison result; if the comparison result indicates that the number of the devices is not in the preset number range, the virtualized network device is adjusted so that the number of the devices after adjustment is matched with the preset number range, then updating information of a container of the virtualized network device after adjustment is monitored in real time, annotation of the container is obtained after the updating information is detected to confirm the updating of the container, the annotation comprises information of a first port and information of a second port, the first port refers to a port of a virtual network card in a computing node, and the second port refers to a port of the virtual network card in a data processor DPU; analyzing the annotation to obtain an analysis result, and respectively setting first port identification information of the first port and second port identification information of the second port according to the analysis result; and finally, issuing a first flow table corresponding to the first port identification information and a second flow table corresponding to the second port identification information to the integrated network bridge. In this way, the dynamic creation of the virtualized network device is supported, the network data of the virtualized network device is unloaded to the DPU for processing, and the hardware resources of the cloud computing node physical server are fully released.

Drawings

In order to more clearly illustrate the embodiments of the application or the technical solutions in the prior art, the drawings that are required in the embodiments or the description of the prior art will be briefly described, it being obvious that the drawings in the following description are only some embodiments of the application, and that other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

Fig. 1 is a schematic architecture diagram of a management system for virtualized network devices according to an embodiment of the present application;

FIG. 2 is a schematic diagram of a computing node architecture according to an embodiment of the present application;

fig. 3 is a flow chart of a method for managing virtualized network devices according to an embodiment of the present application;

FIG. 4 is a schematic diagram of a system node architecture according to an embodiment of the present application;

FIG. 5 is a schematic diagram of an interface connection relationship according to an embodiment of the present application;

fig. 6 is a functional unit composition block diagram of a management apparatus of a virtualized network device according to an embodiment of the present application;

fig. 7 is a functional unit block diagram of another management apparatus for virtualized network devices according to an embodiment of the present application;

Fig. 8 is a functional unit composition block diagram of an electronic device according to an embodiment of the present application.

Detailed Description

In order that those skilled in the art will better understand the present application, a technical solution in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present application, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the application without making any inventive effort, are intended to be within the scope of the application.

The terms first, second and the like in the description and in the claims and in the above-described figures are used for distinguishing between different objects and not necessarily for describing a sequential or chronological order. Furthermore, the terms "comprise" and "have," as well as any variations thereof, are intended to cover a non-exclusive inclusion. For example, a process, method, system, article, or apparatus that comprises a list of steps or elements is not limited to only those listed steps or elements but may include other steps or elements not listed or inherent to such process, method, article, or apparatus.

Reference herein to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment may be included in at least one embodiment of the application. The appearances of such phrases in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. Those of skill in the art will explicitly and implicitly appreciate that the embodiments described herein may be combined with other embodiments.

The electronic device according to the embodiment of the present application may include various handheld devices, vehicle-mounted devices, wearable devices, computing devices or other processing devices connected to a wireless modem, and various forms of User Equipment (UE), mobile Station (MS), terminal devices (terminal devices), and so on. For convenience of description, the above-mentioned devices are collectively referred to as electronic devices. In the present application, the electronic device may be a server. In the present application, the electronic device may further include a chip, and for example, the chip may include a DPU (Data Processing Unit, smart network card).

The following description will first be made of the relevant terms that the present application relates to.

The DPU (Data Processing Unit, data processor) is a special processor which is constructed by taking data as a center, adopts a software-defined technical route to support the resource virtualization of an infrastructure layer, supports the functions of the infrastructure layer such as storage, security, service quality management and the like, and has the most direct function of serving as an unloading engine of a central processing unit (Central Processing Unit, CPU), taking over the services of the infrastructure layer such as network virtualization, hardware resource pooling and the like, and releasing the calculation power of the CPU to an upper layer application.

Network virtualization (virtio), an abstraction layer located above devices in a paravirtualized virtual machine hypervisor (hypervisor), provides a series of generic device emulation interfaces for paravirtualization. The network virtualization architecture comprises front-end drivers and back-end drivers, wherein the front-end drivers are implemented in a client operating system and run in a virtual machine, the back-end drivers are implemented in a paravirtualized virtual machine management program, the front-end drivers are responsible for providing uniform interfaces for the virtual machine, the back-end drivers are responsible for adapting different physical hardware devices, each front-end driver corresponds to one back-end driver, and virtualized network devices (virtual-net) are included in front-end driver devices.

A container-based cluster management server (Kubernetes) is a container cluster management system that is a source of Google in 2014, hereinafter referred to as K8S for deployment, extension and management of containerized applications, where K8S provides a series of functions of container orchestration (yml), resource scheduling, elastic scaling, deployment management, service discovery, and the like, and aims to make deployment of containerized applications simple and efficient. The K8S is compatible with a plurality of container types, has highest market occupancy, and is used for automatically deploying, expanding and managing an open source system of a containerized application program.

Referring to fig. 1, fig. 1 is a schematic architecture diagram of a management system of a virtualized network device according to an embodiment of the present application, and as shown in fig. 1, a management system 10 of a virtualized network device includes a data processor DPU100 and a container-based cluster management server 110.

Wherein the container-based cluster management server 110 is composed of a master node 111 and a computing node 112, the computing node 112 being connected to the data processor DPU 100. It should be appreciated that the computing node 112 is only one example of which in the container-based cluster management server 110, there may be one master node and at least one computing node in the container-based cluster management server 110, the master node being connected to the at least one computing node, respectively.

Wherein a computing node, such as computing node 112, may be used for the creation of virtualized network devices.

Referring to fig. 2, fig. 2 is a schematic diagram of an architecture of a computing node according to an embodiment of the present application, where, as shown in fig. 2, the computing node 112 may include a first container 1121, a second container 1122, and more or less containers, where the containers are used to place created virtualized network devices.

In one possible example, the container-based cluster management server 110 sends a first device creation instruction to the data processor DPU100, the data processor DPU100 responds to the first device creation instruction and creates at least one virtualized network device through a built-in emulation program (simulator), and then obtains the number of devices of the virtualized network device; and comparing the number of the devices with a preset number range to obtain a comparison result; if the comparison result indicates that the number of the devices is not in the preset number range, the virtualized network devices are adjusted so that the number of the devices after adjustment is matched with the preset number range, then updating information of containers of the virtualized network devices after adjustment is monitored in real time, annotation of the containers is obtained after the updating information is detected to confirm the updating of the containers, the annotation comprises information of a first port and information of a second port, the first port is a port of a virtual network card in a computing node, and the second port is a virtual network card port on the DPU100 side; analyzing the annotation to obtain an analysis result, and respectively setting first port identification information of the first port and second port identification information of the second port according to the analysis result; and finally, issuing a first flow table corresponding to the first port identification information and a second flow table corresponding to the second port identification information to the integrated network bridge. In this way, the dynamic creation of the virtualized network device is supported, the network data of the virtualized network device is unloaded to the DPU for processing, and the hardware resources of the cloud computing node physical server are fully released.

In the present application, a plurality means two or more.

Referring to fig. 3, fig. 3 is a flowchart of a method for managing a virtualized network device according to an embodiment of the present application, where the method is applied to a data processor DPU100 in a management system 10 of a virtualized network device shown in fig. 1, and as shown in fig. 3, the method includes the following steps:

step S210, receiving a first device creation instruction from the computing node.

The computing node is a first equipment creation instruction generated according to the creation instruction sent by the master node.

Specifically, the master node is a management node in the K8S, configured to accept a client request, schedule execution of a container, and run a control loop, and migrate a state of the cluster to a target state, where the master node may be internally configured by a plurality of components including:

center management entity (API Server): the main function of the system is to provide an interface meeting the expression layer state transition architecture style (RESTful) to the outside, wherein the interface comprises a read request for checking the cluster state and a write request for changing the cluster state, and the system is also the only component communicated with a distributed unified key value storage (etcd) cluster;

And (3) storing distributed unified key values: the key value database with consistency and high availability can be used as a background database for storing all cluster data of K8S;

scheduler (Scheduler): a component on the master node that monitors those newly created containers (Pod) that are not designated to run nodes and selects nodes on which to run containers, the factors considered by the scheduling decisions including resource requirements, hardware/software/policy constraints, affinity and anti-affinity specifications, data locations, interference between workloads, and end time limits for individual containers and container sets;

controller-manager: the components of the controllers run on the master node, logically each being a separate process, but for reduced complexity they are all compiled to the same executable file and run in one process. These controllers include: node controllers (responsible for notification and response when a node fails), replica controllers (responsible for maintaining the correct number of containers for each replica controller object in the system), endpoint controllers (populating endpoint(s) objects, i.e., joining services (services) and containers), service accounts and token controllers (creating default accounts and Application Programming Interface (API) access tokens for new namespaces).

Specifically, the compute nodes include node agents (kubelet): the node agent is an agent component for executing operation by a working node, is responsible for specific container life cycle management, manages containers according to information obtained from a database, and reports the running state of the containers; network proxy (kube-proxy): is a simple network access agent, and is also a Load Balancer (Load Balancer) which is responsible for specifically distributing requests to access a service to containers of the same type of labels on the working nodes; the network agent essentially realizes the mapping of the container and the container running environment (Container Runtime) by operating the firewall rules (iptables or ipvs): the container runtime environment is software responsible for running containers, and K8S supports multiple container runtime environments and any implementation container runtime environment interface (Kubernetes CRI).

Step S220, in response to the first device creation instruction, invoking a simulation program in the data processor DPU to create at least one of the virtualized network devices.

Specifically, the appropriate virtualized network device is flexibly created by calling a simulation program on the DPU side through a virtualized network device plug-in (virtual-net deviceplug in), where the virtualized network device plug-in is a plug-in that is deployed in advance on the host (host) side (also referred to as the compute node side in the system provided in the present embodiment).

Wherein the virtualized network device is created by a simulation program preset on the DPU side, it should be understood that the created virtualized network device is stored in containers in the computing node, and one virtualized network device is stored in each container.

Specifically, the number of created virtualized network devices is determined according to that devices such as a single root I/O virtualization (srio) device, a virtual network card of the virtualized network device, and the like can be reported to the K8S management, and the number of created virtualized network devices is at least greater than or equal to 1.

Step S230, obtaining the number of the virtualized network devices; and comparing the number of the devices with a preset number range to obtain a comparison result.

Wherein the number of devices refers to the number of devices in use of the virtualized network device.

Step S240, if the comparison result indicates that the number of devices is not within the preset number range, adjusting the virtualized network device, so that the adjusted number of devices is adapted to the preset number range.

Wherein, the adjustment refers to a deletion operation or an addition operation.

Specifically, the preset number range is a range capable of ensuring normal operation of the K8S, the preset number range is set into the DPU in advance by a user, and if the number of the devices is larger than the preset number range, deletion operation is needed, so that the situation that the system is overloaded due to excessive number of the devices, and the efficiency is low is avoided; if the number of the devices is smaller than the preset number range, normal operation of the K8S cannot be met, additional devices are required to be created, the function of the basic K8S is realized, and meanwhile, the working efficiency is improved.

And step S250, monitoring the updated information of the container of the virtualized network equipment after the adjustment in real time, and acquiring the annotation of the container after detecting the updated information to confirm the update of the container.

The annotation comprises information of a first port and information of a second port, wherein the first port refers to a port of a virtual network card in the computing node, and the second port refers to a port of the virtual network card in the data processor DPU.

Wherein, first creating a container of the virtualized network device, adding the virtualized network device port into the container through a container network interface (ovn-kubernetes cni) of the host side, and configuring information such as ip address, route, etc.

And step S260, analyzing the annotation to obtain an analysis result, and respectively setting the first port identification information of the first port and the second port identification information of the second port according to the analysis result.

Specifically, corresponding information of a host side virtualized network device port and a DPU side corresponding (rep) port is obtained by inquiring a local file, and a container annotation (accounting) is set at a container network node at the host side, wherein the annotation comprises information of a host side virtual network card device (virtual-net vf) and a DPU side virtual network card (virtual-net vf rep) peer port.

Step S270, issuing a first flow table corresponding to the first port identification information and a second flow table corresponding to the second port identification information to an integrated bridge in the data processor DPU.

The method comprises the steps that a container network node running on a DPU side monitors the change of a host side container, further obtains annotation information, obtains information corresponding to a peer port, sets information such as an interface (interface-id) corresponding to the peer port and the like, a framework controller (ovn-controller) on the DPU side detects the change of the port, and issues a corresponding flow table to an integrated network bridge (br-int), and at the moment, for virtualized network equipment in the container, network data flow is unloaded to a virtual switch on the DPU side and then unloaded to hardware for acceleration processing, a data path of a service face is realized, and network functions are unloaded to the DPU side for acceleration operation.

It can be seen that in the embodiment of the present application, first, a first device creation instruction from a computing node is received by a data processor DPU in a management system of a virtualized network device; responding to a first equipment creation instruction, and calling a simulation program by the DPU to create a virtualized network equipment; then obtaining the number of the virtualized network devices; and comparing the number of the devices with a preset number range to obtain a comparison result; if the comparison result indicates that the number of the devices is not in the preset number range, the virtualized network device is adjusted so that the number of the devices after adjustment is matched with the preset number range, then updating information of a container of the virtualized network device after adjustment is monitored in real time, annotation of the container is obtained after the updating information is detected to confirm the updating of the container, the annotation comprises information of a first port and information of a second port, the first port refers to a port of a virtual network card in a computing node, and the second port refers to a port of the virtual network card in a data processor DPU; analyzing the annotation to obtain an analysis result, and respectively setting first port identification information of the first port and second port identification information of the second port according to the analysis result; and finally, issuing a first flow table corresponding to the first port identification information and a second flow table corresponding to the second port identification information to the integrated network bridge. In this way, the dynamic creation of the virtualized network device is supported, the network data of the virtualized network device is unloaded to the DPU for processing, and the hardware resources of the cloud computing node physical server are fully released.

In one possible example, before the real-time listening for updated information of the container of the virtualized network device after the adapting, the method further comprises:

receiving a second equipment creation instruction;

responding to the second equipment creation instruction, creating a physical network card of the virtualized network equipment, and creating a basic network bridge of the physical network card;

and configuring the interface of the physical network card according to a first route, wherein the first route refers to a default route in the computing node.

Wherein a physical network card (virtual-net pf) of the virtualized network device without a single root I/O virtualization function is created by a DPU side backend emulation program.

After the physical network card device of the virtualized network device is created, the default route of the host side is configured to the pf port, a basic (underley) bridge is created on the DPU side, and the basic bridge is named as 'br+the name of the pf rep port', namely, based on the name of the physical network card peer port of the virtualized network device, and the default route of the DPU side is configured to the basic bridge.

In this example, a physical network card of the virtualized network device is created, a basic network bridge is created, and then a physical network card interface is configured by a first route, so that a K8S service is opened in a shared gateway (shared gateway) mode, and a network function of the K8S is realized.

In one possible example, before said issuing the first flow table corresponding to the first port identification information and the second flow table corresponding to the second port identification information to the integrated bridge in the data processor DPU, the method further comprises:

compiling and installing a multi-layer virtual switch module by rapidly processing a data packet development mode; the method comprises the steps of,

and deploying two DPU containers on the DPU, and respectively storing a control component of the virtual network system and nodes of the virtual network system in the DPU mode in the two DPU containers.

Referring to fig. 4, fig. 4 is a schematic diagram of a system node architecture provided in an embodiment of the present application, as shown in fig. 4, a control component 31 of a virtual network system is connected to a virtual switch database server side 32 of a virtual switch (OVS), the control component 31 of the virtual network system is simultaneously connected to a virtual switch architecture 33, where the virtual switch architecture 33 is a virtual switch optimized by Data Plane Development Kit (DPDK), the virtual switch architecture 33 is further connected to a first bridge 34 and a second bridge 35, and it should be understood that the number and functions of the first bridge 34 and the second bridge 35 are not limited and only reference is made.

Wherein the virtual switch database server side 32 is bi-directionally connected to the virtual switch fabric 33 for interworking data.

Specifically, a database server (ovsdb-server) is configured to store configuration information (such as bridges, ports, etc.) of the virtual switch, and provide a virtual switch database management protocol (ovsdb) operation interface for the controller and the virtual switch. The virtual switch database management protocol is located in the virtual switch, the client corresponding to the database server can be a controller, and the command of database configuration and inquiry is sent to the database server through the virtual switch database management protocol; or may be a command line tool running locally at the virtual switch, i.e., an administrator may enter database configuration and query commands locally at the virtual switch in a command line fashion.

Specifically, the data plane development kit has the advantages that user-state data can be directly forwarded to the network card without passing through the kernel, the acceleration purpose is realized, the user-state process directly takes over the network card to receive and transmit the data, an IO exclusive core technology is adopted, namely, each port is allocated with a core to be specially used for data receiving and transmitting, the polling type processing mode replaces interrupt type processing, and IO performance is remarkably improved.

In this example, the multi-layer virtual switch module is compiled and installed by rapidly processing the data packet development mode, and two DPU containers are deployed on the data processor DPU at the same time, and the control component of the virtual network system and the node of the virtual network system in the DPU mode are respectively stored, so that the problem that part of network plug-ins only support network devices in the kernel mode is solved, and the network plug-ins are adapted to network devices in the support user mode, thereby improving the overall performance of the system.

In one possible example, the creating the base bridge of the physical network card includes: adding interface information to the basic network bridge, wherein the interface information refers to Ethernet port information or binding port information; the base bridge is configured according to a second route, which refers to a default route of the data processor DPU.

Referring to fig. 5, fig. 5 is a schematic diagram of an interface connection relationship provided in the embodiment of the present application, as shown in fig. 5, the interface connection relationship includes a physical network card 41, which is bi-directionally connected with a base bridge 42 and performs data communication, an output port of the base bridge 42 is connected with an input port of a binding port 43, an output port of the binding port 43 is connected with an input port of a first ethernet port 44 and an input port of a second ethernet port 45, and it should be understood that the first ethernet port 44 and the second ethernet port 45 are not limited by functional distinction and only presented by reference, and more or fewer ethernet ports may exist.

In one possible example, after said issuing the first flow table corresponding to the first port identification information and the second flow table corresponding to the second port identification information to the integrated bridge in the data processor DPU, the method further comprises:

offloading network data traffic of the virtualized network device in the container to the multi-layer virtual switch module in the data processor DPU;

and unloading the network data flow to hardware through the binding port or the Ethernet port for acceleration processing.

Specifically, after the container network node running on the DPU side monitors the change of the host side container, the architecture controller on the DPU side detects the change of the port and issues the corresponding flow table to the integrated network bridge, at this time, for the virtualized network device in the container, the network data traffic of the virtualized network device is unloaded to the virtual switch of the DPU network card and then unloaded to the hardware for acceleration processing, and finally, the data path and acceleration of the service plane are realized.

In this example, the network data traffic is offloaded to the multi-layer virtual switch module in the DPU of the data processor, and then the network data traffic is offloaded to the hardware through the binding port or the ethernet port for acceleration processing, so that the network function is offloaded to the DPU side for acceleration operation, and the standard K8S service function is realized.

In one possible example, before the receiving the first device creation instruction from the computing node, the method further comprises: a device plugin of the virtualized network device is deployed at the computing node.

Specifically, the device plugin may be a virtualized network device plugin, and the virtualized network device plugin invokes a simulation program at the back end of the DPU to create a certain amount of virtualized network devices in advance, and enables single I/O virtualized devices and host side virtual network cards to report to the K8S for management, and simultaneously records the corresponding relationship between the host side virtual network cards created by the plugin and corresponding rep peer ports at the DPU side locally, and the virtualized network device plugin monitors the number of available devices of the virtualized network devices at the host side through a controller, dynamically creates and deletes the virtualized network devices, and realizes registration to the K8S, including creating, deleting, updating, viewing and other functions, and meanwhile, can automatically add and delete the virtualized network devices as required.

In this example, the device plug-in of the virtualized network device is deployed at the computing node in advance, so that full-automatic management of the virtualized device of the virtualized network device is realized, flexibility of management of the virtualized network device is improved, and resource complexity of additional management of the virtualized network device is reduced.

In one possible example, after said issuing the first flow table corresponding to the first port identification information and the second flow table corresponding to the second port identification information to the integrated bridge in the data processor DPU, the method further comprises: setting a label of the container-based cluster management platform for a server using the data processor DPU; and deploying a plug-in of the virtual network system at the computing node, wherein the plug-in of the virtual network system comprises interface information of the virtual network system.

Wherein for servers that have been plugged into and taken into use with a DPU, a corresponding K8S label is applied, and a container network component is deployed at the computing node, specifically, the container network component includes a container network interface and a DPU-host side mode of the container network node.

In this example, a label is set for a server using the DPU of the data processor, and a plug-in of the virtual network system is deployed at the computing node, so that the container network plug-in conforms to the architecture form of the DPU, and the container network plug-in implementation manner conforming to the DPU architecture is provided, thereby being beneficial to exerting the performance advantage of the DPU.

In accordance with the above-described embodiments, referring to fig. 6, fig. 6 is a functional block diagram of a management apparatus for virtualized network devices according to an embodiment of the present application, which is applied to a data processor DPU100 in a management system 10 for virtualized network devices shown in fig. 1, as shown in fig. 6, a management apparatus 50 for virtualized network devices includes: a receiving unit 501, a creating unit 502, a comparing unit 503, an adjusting unit 504, a monitoring unit 505, a setting unit 506 and a transmitting unit 507, wherein the receiving unit 501 is configured to receive a first device creating instruction from the computing node; the creating unit 502 is configured to invoke a simulation program in the data processor DPU to create at least one virtualized network device in response to the first device creation instruction; the comparing unit 503 is configured to obtain the number of devices of the virtualized network device, where the number of devices refers to the number of devices of the virtualized network device that are put into use; and comparing the number of the devices with a preset number range to obtain a comparison result; the adjusting unit 504 is configured to adjust the virtualized network device if the comparison result indicates that the number of devices is not within the preset number range, so that the number of devices after the adjustment is adapted to the preset number range, where the adjustment refers to a deletion operation or an addition operation; the monitoring unit 505 is configured to monitor, in real time, update information of a container of the adjusted virtualized network device, and obtain, after detecting the update information to confirm that the container is updated, an annotation of the container, where the annotation includes information of a first port and information of a second port, where the first port is a port of a virtual network card in the computing node, and the second port is a virtual network card port in the data processor DPU; the setting unit 506 is configured to parse the annotation to obtain a parsing result, and set, according to the parsing result, first port identification information of the first port and second port identification information of the second port respectively; the issuing unit 507 is configured to issue a first flow table corresponding to the first port identification information and a second flow table corresponding to the second port identification information to an integrated bridge in the data processor DPU.

In one possible example, before the real-time listening for updated information of the container of the virtualized network device after the adjustment, the listening unit 505 is specifically further configured to: receiving a second equipment creation instruction; responding to the second equipment creation instruction, creating a physical network card of the virtualized network equipment, and creating a basic network bridge of the physical network card; and configuring the interface of the physical network card according to a first route, wherein the first route refers to a default route in the computing node.

In a possible example, before said issuing the first flow table corresponding to the first port identification information and the second flow table corresponding to the second port identification information to the integrated bridge in the data processor DPU, the issuing unit 507 is specifically further configured to: compiling and installing a multi-layer virtual switch module by rapidly processing a data packet development mode; and deploying two DPU containers on the data processor DPU, and respectively storing a control component of a virtual network system and nodes of the virtual network system in a DPU mode in the two DPU containers.

In one possible example, the base bridge that creates the physical network card, the listening unit 505 is specifically configured to: adding interface information to the basic network bridge, wherein the interface information refers to Ethernet port information or binding port information; the base bridge is configured according to a second route, which refers to a default route of the data processor DPU.

In a possible example, after said issuing the first flow table corresponding to the first port identification information and the second flow table corresponding to the second port identification information to the integrated bridge in the data processor DPU, the issuing unit 507 is specifically further configured to: offloading network data traffic of the virtualized network device in the container to the multi-layer virtual switch module in the data processor DPU; and unloading the network data flow to hardware through the binding port or the Ethernet port for acceleration processing.

In one possible example, before said receiving the first device creation instruction from the computing node, the receiving unit 501 is specifically further configured to: a device plugin of the virtualized network device is deployed at the computing node.

In a possible example, after said issuing the first flow table corresponding to the first port identification information and the second flow table corresponding to the second port identification information to the integrated bridge in the data processor DPU, the issuing unit 507 is specifically further configured to: setting a label of the container-based cluster management platform for a server using the data processor DPU; and deploying a plug-in of the virtual network system at the computing node, wherein the plug-in of the virtual network system comprises interface information of the virtual network system.

It can be understood that, since the method embodiment and the apparatus embodiment are different presentation forms of the same technical concept, the content of the method embodiment portion in the present application should be synchronously adapted to the apparatus embodiment portion, which is not described herein.

In the case of using integrated units, as shown in fig. 7, fig. 7 is a functional unit block diagram of another management apparatus for virtualized network devices according to an embodiment of the present application. In fig. 7, the management apparatus 50 of the virtualized network device includes: a processing module 512 and a communication module 511. The processing module 512 is configured to control and manage actions of management devices of the virtualized network device, for example, steps of the receiving unit 501, the creating unit 502, the comparing unit 503, the adjusting unit 504, the listening unit 505, the setting unit 506, and the issuing unit 507, and/or other processes for performing the techniques described herein. The communication module 511 is used to support interactions between management means of the virtualized network device and other devices. As shown in fig. 7, the management apparatus of the virtualized network device may further include a storage module 513, and the storage module 513 is configured to store program codes and data of the management apparatus of the virtualized network device.

The processing module 512 may be a processor or controller, such as a central processing unit (Central Processing Unit, CPU), a general purpose processor, a digital signal processor (Digital Signal Processor, DSP), an ASIC, an FPGA or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. Which may implement or perform the various exemplary logic blocks, modules and circuits described in connection with this disclosure. The processor may also be a combination that performs the function of a computation, e.g., a combination comprising one or more microprocessors, a combination of a DSP and a microprocessor, and the like. The communication module 511 may be a transceiver, an RF circuit, a communication interface, or the like. The memory module 513 may be a memory.

All relevant contents of each scenario related to the above method embodiment may be cited to the functional description of the corresponding functional module, which is not described herein. The management apparatus 50 of the virtualized network device may perform the method of managing the virtualized network device shown in fig. 3.

The above embodiments may be implemented in whole or in part by software, hardware, firmware, or any other combination. When implemented in software, the above-described embodiments may be implemented in whole or in part in the form of a computer program product. The computer program product comprises one or more computer instructions or computer programs. When the computer instructions or computer program are loaded or executed on a computer, the processes or functions described in accordance with embodiments of the present application are produced in whole or in part. The computer may be a general purpose computer, a special purpose computer, a computer network, or other programmable apparatus. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from one website site, computer, server, or data center to another website site, computer, server, or data center by wired or wireless means. The computer readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server, data center, etc. that contains one or more sets of available media. The usable medium may be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium. The semiconductor medium may be a solid state disk.

Fig. 8 is a functional unit composition block diagram of an electronic device according to an embodiment of the present application. As shown in fig. 8, the electronic device 60 may include one or more of the following components: a processor 601, a memory 602 coupled to the processor 601, wherein the memory 602 may store one or more computer programs that may be configured to implement the methods as described in the embodiments above when executed by the one or more processors 601.

Processor 601 may include one or more processing cores. The processor 601 connects various portions of the overall electronic device using various interfaces and lines to perform various functions of the electronic device and process data by executing or executing instructions, programs, code sets, or instruction sets stored in the memory 602, and invoking data stored in the memory 602. Alternatively, the processor 601 may be implemented in at least one hardware form of digital signal processing (Digital Signal Processing, DSP), field-Programmable gate array (FPGA), programmable Logic Array (PLA). The processor 601 may integrate one or a combination of several of a central processing unit (CentralProcessing Unit, CPU), an image processor (Graphics Processing Unit, GPU), and a modem, etc. The CPU mainly processes an operating system, a user interface, an application program and the like; the GPU is used for being responsible for rendering and drawing of display content; the modem is used to handle wireless communications. It will be appreciated that the modem may not be integrated into the processor 601 and may be implemented solely by a single communication chip.

The Memory 602 may include random access Memory (Random Access Memory, RAM) or Read-Only Memory (ROM). Memory 602 may be used to store instructions, programs, code, a set of codes, or a set of instructions. The memory 602 may include a stored program area and a stored data area, wherein the stored program area may store instructions for implementing an operating system, instructions for implementing at least one function (e.g., a touch function, a sound playing function, an image playing function, etc.), instructions for implementing the various method embodiments described above, and the like. The storage data area may also store data created by the electronic device in use, etc. It will be appreciated that the electronic device may include more or fewer structural elements than those shown in the above-described structural block diagrams, and is not limited in this regard.

The embodiments of the present application also provide a computer storage medium having stored thereon a computer program/instruction which, when executed by a processor, performs part or all of the steps of any of the methods described in the method embodiments above.

Embodiments of the present application also provide a computer program product comprising a non-transitory computer-readable storage medium storing a computer program operable to cause a computer to perform part or all of the steps of any one of the methods described in the method embodiments above.

It should be understood that, in various embodiments of the present application, the sequence numbers of the foregoing processes do not mean the order of execution, and the order of execution of the processes should be determined by the functions and internal logic thereof, and should not constitute any limitation on the implementation process of the embodiments of the present application.

In the several embodiments provided in the present application, it should be understood that the disclosed method, apparatus and system may be implemented in other manners. For example, the device embodiments described above are merely illustrative; for example, the division of the units is only one logic function division, and other division modes can be adopted in actual implementation; for example, multiple units or components may be combined or may be integrated into another system, or some features may be omitted, or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be an indirect coupling or communication connection via some interfaces, devices or units, which may be in electrical, mechanical or other form.

The units described as separate units may or may not be physically separate, and units shown as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in the embodiments of the present invention may be integrated in one processing unit, or each unit may be physically included separately, or two or more units may be integrated in one unit. The integrated units may be implemented in hardware or in hardware plus software functional units.

The integrated units implemented in the form of software functional units described above may be stored in a computer readable storage medium. The software functional unit is stored in a storage medium, and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: u disk, removable hard disk, magnetic disk, optical disk, volatile memory or nonvolatile memory. The nonvolatile memory may be a read-only memory (ROM), a Programmable ROM (PROM), an Erasable PROM (EPROM), an electrically Erasable EPROM (EEPROM), or a flash memory. The volatile memory may be random access memory (random access memory, RAM) which acts as an external cache. By way of example, and not limitation, many forms of random access memory (random access memory, RAM) are available, such as Static RAM (SRAM), dynamic Random Access Memory (DRAM), synchronous Dynamic Random Access Memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced Synchronous Dynamic Random Access Memory (ESDRAM), synchronous Link DRAM (SLDRAM), direct memory bus RAM (DR RAM), and the like, various mediums that can store program code.

Although the present invention is disclosed above, the present invention is not limited thereto. Variations and modifications, including combinations of the different functions and implementation steps, as well as embodiments of the software and hardware, may be readily apparent to those skilled in the art without departing from the spirit and scope of the invention.

Claims

1. A method of managing virtualized network devices, characterized by a data processor DPU applied in a management system of virtualized network devices, the management system of virtualized network devices comprising the data processor DPU and a container-based cluster management server, the container-based cluster management server consisting of a master node and a compute node, the compute node in the container-based cluster management server being connected to the data processor DPU, the method comprising:

receiving a first device creation instruction from the computing node;

2. The method of claim 1, wherein prior to said real-time listening for updated information of the container of the virtualized network device after said adjusting, the method further comprises:

Receiving a second equipment creation instruction;

3. The method of claim 2, wherein prior to said issuing a first flow table corresponding to said first port identification information and a second flow table corresponding to said second port identification information to an integrated bridge in said data processor DPU, said method further comprises:

4. The method of claim 3, wherein creating the base bridge of the physical network card comprises:

adding interface information to the basic network bridge, wherein the interface information refers to Ethernet port information or binding port information;

The base bridge is configured according to a second route, which refers to a default route of the data processor DPU.

5. The method of claim 4, wherein after said issuing a first flow table corresponding to said first port identification information and a second flow table corresponding to said second port identification information to an integrated bridge in said data processor DPU, said method further comprises:

6. The method of any of claims 1-5, wherein prior to the receiving the first device creation instruction from the computing node, the method further comprises:

a device plugin of the virtualized network device is deployed at the computing node.

7. A method according to claim 3, characterized in that after said issuing a first flow table corresponding to said first port identification information and a second flow table corresponding to said second port identification information to an integrated bridge in said data processor DPU, the method further comprises:

Setting a tag of the container-based cluster management server for a server using the data processor DPU;

and deploying a plug-in of the virtual network system at the computing node, wherein the plug-in of the virtual network system comprises interface information of the virtual network system.

8. A management apparatus of a virtualized network device, characterized by a data processor DPU applied in a management system of the virtualized network device, the management system of the virtualized network device comprising the data processor DPU and a container-based cluster management server, the container-based cluster management server being composed of a master node and a computing node, the computing node in the container-based cluster management server being connected to the data processor DPU, the apparatus comprising: the device comprises a receiving unit, a creating unit, a comparing unit, an adjusting unit, a monitoring unit, a setting unit and a issuing unit, wherein,

9. An electronic device comprising a processor, a memory, and one or more programs stored in the memory and configured to be executed by the processor, the programs comprising instructions for performing the steps in the method of any of claims 1-7.

10. A computer readable storage medium having stored thereon a computer program/instruction, which when executed by a processor, implements the steps of the method according to any of claims 1-7.