WO2015117401A1 - 信息的处理方法及装置 - Google Patents

信息的处理方法及装置 Download PDF

Info

Publication number
WO2015117401A1
WO2015117401A1 PCT/CN2014/089261 CN2014089261W WO2015117401A1 WO 2015117401 A1 WO2015117401 A1 WO 2015117401A1 CN 2014089261 W CN2014089261 W CN 2014089261W WO 2015117401 A1 WO2015117401 A1 WO 2015117401A1
Authority
WO
WIPO (PCT)
Prior art keywords
terminal
information
nve
controller
message
Prior art date
Application number
PCT/CN2014/089261
Other languages
English (en)
French (fr)
Inventor
敖婷
吴波
肖敏
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Priority to EP14881726.5A priority Critical patent/EP3176979A4/en
Priority to US15/329,960 priority patent/US20170264496A1/en
Publication of WO2015117401A1 publication Critical patent/WO2015117401A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/12—Discovery or management of network topologies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4633—Interconnection of networks using encapsulation techniques, e.g. tunneling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
    • H04L41/065—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis involving logical or physical relationship, e.g. grouping and hierarchies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/085—Retrieval of network configuration; Tracking network configuration history
    • H04L41/0853—Retrieval of network configuration; Tracking network configuration history by actively collecting configuration information or by backing up configuration information
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/40—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks using virtualisation of network functions or resources, e.g. SDN or NFV entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/02—Topology update or discovery
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/02—Topology update or discovery
    • H04L45/036—Updating the topology between route computation elements, e.g. between OpenFlow controllers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/70—Virtual switches

Definitions

  • the present invention relates to the field of communications, and in particular to a method and apparatus for processing information.
  • NVO virtual overlay network
  • This virtual cascade network can support not only multi-tenancy but also multiple virtual networks, and between each tenant. The address space and traffic are isolated from each other and are not visible.
  • Each tenant can use the same address space in different virtual networks (VNs).
  • VNs virtual networks
  • Each tenant can have multiple VNs, but the traffic between each VN is not freely flowing, and it needs to be implemented through routers, security gateways, and so on.
  • NVO3 can solve virtual machine migration and multi-tenancy problems without changing the existing network. Only by adding gateway devices, NVO3 can effectively protect user investment.
  • the edge device accessing the network by the terminal TS needs to be virtualized, and the terminal packet is identified, and the packet is encapsulated and then transmitted to the traditional network for transmission.
  • the more common technologies can include: virtual scalable local area network (VXLAN) and network virtualization (NVGRE) using universal routing encapsulation, which can support Layer 2 packet access to Layer 3 network transmission and Layer 3 packet access.
  • Layer network On a virtual tiered network, the location of a virtual network edge device (NVE) can be either within the host virtual machine monitor (hypervisor) or on an external onion route (ToR). If it is on the external ToR, it can be on the ToR directly connected to the terminal, or it can be on the ToR connected through the bridge.
  • the terminal information connected to the virtual network edge device can be advertised to the controller through a cloud management platform or the like.
  • the situation is generally applicable to virtual network edge devices located in the hypervisor.
  • the cloud management platform may not be aware of this layer of equipment, that is, the cloud management platform and the centralized controller system are independent of each other.
  • the centralized controller does not have the entire network (including the terminal). If the otherid2ology information is used, the information that is required for the virtual network edge device to forward packets is not available.
  • a more common solution proposed in the related art is to wait for the terminal to send a message, and the virtual network edge device sends a request to the controller through the Packet-In message, and the controller cannot find the relevant information after receiving the packet-In message.
  • the node in the virtual network topology floods the reply of the destination node, and the obtained forwarding information is sent to the virtual network edge device node and other related nodes.
  • the shortcoming of the above solution is that it increases the delay of packet forwarding, greatly increases the broadcast packets of the entire network, thereby adversely affecting network performance, and is difficult to apply to high performance requirements, and does not It facilitates the controller to obtain the entire network topology in time, so that it is impossible to calculate the path and acquire the policy in a timely manner.
  • the embodiment of the invention provides a method and a device for processing information, so as to at least solve the problem that the controller cannot obtain the topology information of the entire network in time in the related art.
  • a method of processing information is provided.
  • the method for processing information according to the embodiment of the present invention includes: receiving terminal information connected to the NVE advertised by the NVE and connection information of the NVE and the terminal; and performing corresponding operations according to the terminal information and the connection information.
  • the terminal information includes at least one of the following: terminal identification information, terminal policy information, and terminal status information.
  • the terminal identification information comprises at least one of: a media access control (MAC) address of the terminal; an internet protocol (IP) address of the terminal; and a virtual network identifier (VNID) to which the terminal belongs.
  • MAC media access control
  • IP internet protocol
  • VNID virtual network identifier
  • the terminal policy information includes at least one of the following: a quality of service (Qos), an access control list (ACL).
  • Qos quality of service
  • ACL access control list
  • the terminal status information includes at least one of: an associated state of the terminal; a de-associate state of the terminal; an active state of the terminal; a de-active state of the terminal; Whether the terminal is the associated state of the migration terminal.
  • performing the corresponding operation according to the terminal information and the connection information includes: acquiring the network resource and the configuration information corresponding to the terminal according to the terminal policy information, and determining whether the network resource and the configuration information are available, in the case that the terminal status information is determined to be the associated state; .
  • determining whether the network resource and the configuration information are available comprises one of: if it is determined that the network resource and the configuration information are available, saving the terminal information and the connection information, and/or returning an association success message to the NVE; if determining the network resource and the configuration If the information is not available, there is no need to save the terminal information and the connection information, and/or return an association failure message to the NVE, wherein the association failure message is used to cause the NVE to return a connection failure message to the terminal, and issue an alarm to the preset network entity.
  • performing the corresponding operation according to the terminal information and the connection information includes: acquiring the network resource and the configuration information corresponding to the terminal according to the terminal policy information, and determining the network resource and the configuration, in the case that the terminal status information is determined to be the associated state of the migration terminal; Whether the information is available and/or whether a migration tunnel is established within the virtual network, wherein the migration tunnel is used to migrate data on the terminal.
  • determining whether the network resource and the configuration information are available and/or establishing whether the migration tunnel is completed within the virtual network includes one of: if it is determined that the network resource and the configuration information can be used and/or the migration tunnel is completed, the association is successfully returned to the NVE. Message, and save terminal information and connection information; if it is determined that the network resource and the configuration information are unavailable and/or the migration tunnel has not been completed, return an association failure message to the NVE, where the association failure message is used to cause the NVE to return a connection failure message to the terminal. And an alarm is issued to the preset network entity, and the NVE does not need to save the information of the terminal.
  • performing the corresponding operation according to the terminal information and the connection information comprises: deleting the terminal information stored locally and the connection information when determining that the terminal status information is in a De-associate state.
  • the method before deleting the connection information between the terminal and the NVE, the method further includes: sending a deletion instruction and/or notifying the network to some or all of the NVEs under the current control, in the case that the terminal status information is determined to be in a De-associate state.
  • the network resource is released, wherein the instruction is used to delete the flow table entry corresponding to the terminal stored in the other NVE, and notify the network to release the network resource.
  • performing the corresponding operation according to the terminal information and the connection information comprises: adding an instruction and/or allocating network resources to some or all of the NVEs under the current control according to the connection information, if the terminal status information is determined to be the active state,
  • the adding instruction is used to add a flow table entry corresponding to the terminal in the part or all of the NVE, and the information carried in the adding instruction includes: a manner in which the NVE encapsulates the packet sent by the terminal and a forwarding manner.
  • performing the corresponding operation according to the terminal information and the connection information comprises: receiving the request message from the NVE, where the request message is used to acquire the terminal, if the terminal status information is determined to be the Active state.
  • the method of processing the sent message ; adding instructions and/or allocating network resources to some or all of the NVEs under the current control according to the connection information, wherein the adding instruction is used to add a flow table corresponding to the terminal in some or all of the NVEs.
  • the information carried in the add-on command includes the encapsulation mode and forwarding mode of the packet sent by the NVE.
  • performing the corresponding operation according to the terminal information and the connection information further includes: acquiring the network resource and the configuration information corresponding to the terminal according to the terminal policy information when determining that the terminal state information is the active state; determining whether the network resource and the configuration information are Available.
  • determining whether the network resource and the configuration information are available comprises one of: if it is determined that the network resource and the configuration information can be used, returning an association success message to the NVE; if it is determined that the network resource and the configuration information are not available, returning the association failure to the NVE The message, wherein the association failure message is used to cause the NVE to return a connection failure message to the terminal, and send an alarm to the preset network entity, and the NVE does not need to save the information of the terminal.
  • performing the corresponding operation according to the terminal information and the connection information comprises: in the case of determining that the terminal status information is in the De-active state, issuing a delete instruction to some or all of the NVEs under the current control, wherein the delete instruction is used for deleting A flow table entry corresponding to the terminal stored in some or all of the NVEs and releasing network resources.
  • performing the corresponding operation according to the terminal information and the connection information further comprises: sending a delivery notification message to the NVE, wherein the notification message is used to notify the NVE of the execution status of the instruction.
  • the method before receiving the terminal information and the connection information, the method further includes: sending a request message to the NVE, wherein the request message is used to request the NVE to acquire the terminal information and the connection information.
  • the method for processing information according to the embodiment of the present invention includes: notifying the controller of the terminal information currently connected by itself and the connection information between the terminal and the terminal; and receiving the flow table sent by the controller, wherein the flow table is the controller according to the terminal Information and connection information are determined.
  • the terminal information and the connection information are notified to the controller, including: one of: proactively notifying the terminal information and the connection information; after receiving the request message from the controller, notifying the controller of the terminal information according to the request message and Connection information.
  • the method further includes: receiving the terminal information and the connection information reported by the terminal connected to the controller.
  • the terminal information includes at least one of the following: terminal identification information, terminal policy information, and terminal status information.
  • the terminal identification information comprises at least one of: a media access control (MAC) address of the terminal; an internet protocol (IP) address of the terminal; and a virtual network identifier (VNID) to which the terminal belongs.
  • MAC media access control
  • IP internet protocol
  • VNID virtual network identifier
  • the terminal policy information includes at least one of the following: a quality of service (Qos), an access control list (ACL).
  • Qos quality of service
  • ACL access control list
  • the terminal status information includes at least one of: an associated state of the terminal; a de-associate state of the terminal; an active state of the terminal; a de-active state of the terminal; Whether the terminal is the associated state of the migration terminal.
  • the method further includes: when receiving the association sent by the controller or migrating the association success message, notifying that the connection with the terminal connected to the terminal is successfully established.
  • the method further includes: in response to receiving the association failure message sent by the controller, notifying that the connection with the terminal connected to the terminal is successfully established.
  • the method further includes: deleting the flow table entry of the terminal connected to the self, if the deletion instruction sent by the controller is received.
  • the method further includes: adding a flow table entry of the terminal connected to the self, when receiving the adding instruction sent by the controller.
  • an information processing apparatus is provided.
  • the information processing apparatus includes: a receiving module configured to receive terminal information connected to the NVE advertised by the NVE and connection information of the NVE and the terminal; and the processing module configured to perform a corresponding operation according to the terminal information and the connection information .
  • the terminal information includes at least one of the following: terminal identification information, terminal policy information, and terminal status information.
  • the terminal identification information includes at least one of the following: a MAC address of the terminal; an IP address of the terminal; and a VNID to which the terminal belongs.
  • the terminal policy information includes at least one of the following: Qos, ACL.
  • the terminal status information includes at least one of: an Associate status of the terminal; a De-associate status of the terminal; an Active status of the terminal; a De-active status of the terminal; and whether the terminal is an associated status of the migration terminal.
  • the processing module includes: a first acquiring unit, configured to acquire network resources and configuration information corresponding to the terminal according to the terminal policy information, where the terminal status information is determined as an Associate state; the first determining unit is configured to determine the network Resources and configuration information are available.
  • the first determining unit is configured to determine whether the network resource and the configuration information are available, including one of: if it is determined that the network resource and the configuration information are available, saving the terminal information and the connection information, and/or returning an association success message to the NVE. If it is determined that the network resource and the configuration information are not available, there is no need to save the terminal information and the connection information, and/or return an association failure message to the NVE, wherein the association failure message is used to cause the NVE to return a connection failure message to the terminal, and Let the network entity issue an alarm, and the NVE does not need to save the information of the terminal.
  • the processing module includes: a second acquiring unit, configured to acquire network resources and configuration information corresponding to the terminal according to the terminal policy information, where the terminal state information is determined to be the associated state of the migration terminal; the second determining unit, setting To determine whether network resources and configuration information are available and/or whether a migration tunnel is established within the virtual network, the migration tunnel is used to migrate data on the terminal.
  • a second acquiring unit configured to acquire network resources and configuration information corresponding to the terminal according to the terminal policy information, where the terminal state information is determined to be the associated state of the migration terminal
  • the second determining unit setting To determine whether network resources and configuration information are available and/or whether a migration tunnel is established within the virtual network, the migration tunnel is used to migrate data on the terminal.
  • the second determining unit is configured to determine whether the network resource and the configuration information are available and/or whether the establishment of the migration tunnel in the virtual network is completed comprises one of: if it is determined that the network resource and the configuration information can be used and the migration tunnel is completed, then Returning an association success message to the NVE, and saving the terminal information and the connection information; if it is determined that the network resource and the configuration information are unavailable and/or the migration tunnel has not been completed, returning an association failure message to the NVE, wherein the association failure message is used to make the NVE direction
  • the terminal returns a connection failure message and issues an alarm to the preset network entity, and the NVE does not need to save the terminal information.
  • the processing module includes: a deleting unit, configured to delete the locally stored terminal information and the connection information when determining that the terminal status information is in a De-associate state.
  • a deleting unit configured to delete the locally stored terminal information and the connection information when determining that the terminal status information is in a De-associate state.
  • the processing module further includes: a first sending unit, configured to send a delete command to the part or all of the NVEs under the current control and/or notify the network release network if the terminal status information is determined to be in a De-associate state The resource, where the deletion instruction is used to delete the flow table entry corresponding to the terminal stored in the other NVE, and notify the network to release the network resource.
  • a first sending unit configured to send a delete command to the part or all of the NVEs under the current control and/or notify the network release network if the terminal status information is determined to be in a De-associate state The resource, where the deletion instruction is used to delete the flow table entry corresponding to the terminal stored in the other NVE, and notify the network to release the network resource.
  • the processing module further includes: a second sending unit, configured to send an instruction and/or allocate network resources to some or all of the NVEs under the current control according to the connection information, if the terminal status information is determined to be the active state.
  • a second sending unit configured to send an instruction and/or allocate network resources to some or all of the NVEs under the current control according to the connection information, if the terminal status information is determined to be the active state.
  • the adding instruction is used to add a flow table entry corresponding to the terminal in some or all of the NVEs
  • the information carried in the add-on command includes: the manner in which the NVE encapsulates the packet and the manner in which the packet is sent, and the manner in which the network resource is allocated.
  • the processing module further includes: a receiving unit, configured to receive a request message from the NVE, where the request message is used to obtain a processing manner of the packet sent by the terminal, if the terminal status information is determined to be the active state;
  • the third sending unit is configured to add an instruction and/or allocate a network resource to some or all of the NVEs under the current control according to the connection information, where the adding instruction is used to add a flow table corresponding to the terminal in part or all of the NVEs.
  • the information carried in the add-on command includes the encapsulation mode and forwarding mode of the packet sent by the NVE.
  • the processing module further includes: a third acquiring unit, configured to acquire network resources and configuration information corresponding to the terminal according to the terminal policy information, where the terminal state information is determined to be the active state; and the third determining unit is configured to determine Whether network resources and configuration information are available.
  • a third acquiring unit configured to acquire network resources and configuration information corresponding to the terminal according to the terminal policy information, where the terminal state information is determined to be the active state
  • the third determining unit is configured to determine Whether network resources and configuration information are available.
  • the third determining unit configured to determine whether the network resource and the configuration information are available, includes one of: if it is determined that the network resource and the configuration information can be used, returning an association success message to the NVE; if it is determined that the network resource and the configuration information are unavailable And returning an association failure message to the NVE, where the association failure message is used to enable the NVE to return a connection failure message to the terminal, and send an alarm to the preset network entity, and the NVE does not need to save the information of the terminal.
  • the processing module includes: a fourth sending unit, configured to send a delete instruction to some or all of the NVEs under the current control, where the terminal status information is determined to be in a De-active state, where the delete command is used for deleting A flow table entry corresponding to the terminal stored in some or all of the NVEs and releasing network resources.
  • a fourth sending unit configured to send a delete instruction to some or all of the NVEs under the current control, where the terminal status information is determined to be in a De-active state, where the delete command is used for deleting A flow table entry corresponding to the terminal stored in some or all of the NVEs and releasing network resources.
  • the processing module further includes: a fifth sending unit, configured to send a sending notification message to the NVE, wherein the notification message is used to notify the NVE of the execution status of the instruction.
  • a fifth sending unit configured to send a sending notification message to the NVE, wherein the notification message is used to notify the NVE of the execution status of the instruction.
  • the apparatus further includes: a sending module, configured to send a request message to the NVE, wherein the request message is used to request the NVE to acquire the terminal information and the connection information.
  • a sending module configured to send a request message to the NVE, wherein the request message is used to request the NVE to acquire the terminal information and the connection information.
  • a processing apparatus for another type of information is provided.
  • the information processing apparatus includes: an advertisement module, configured to notify the controller of the terminal information currently connected by itself and the connection information between the terminal and the terminal; the first receiving module is configured to be sent by the receiving controller.
  • a flow table wherein the flow table is determined by the controller based on the terminal information and the connection information.
  • the notification module includes: a first notification unit, configured to actively announce the terminal information and the connection information to the controller; and the second notification unit is configured to: after receiving the request message from the controller, according to the request message to the controller Announce terminal information and connection information.
  • the foregoing apparatus further includes: a second receiving module, configured to receive terminal information and connection information reported by the terminal connected to the terminal.
  • the terminal information includes at least one of the following: terminal identification information, terminal policy information, and terminal status information.
  • the terminal identification information comprises at least one of: a media access control (MAC) address of the terminal; an internet protocol (IP) address of the terminal; and a virtual network identifier (VNID) to which the terminal belongs.
  • MAC media access control
  • IP internet protocol
  • VNID virtual network identifier
  • the terminal policy information includes at least one of the following: a quality of service (Qos), an access control list (ACL).
  • Qos quality of service
  • ACL access control list
  • the terminal status information includes at least one of: an associated state of the terminal; a de-associate state of the terminal; an active state of the terminal; a de-active state of the terminal; Whether the terminal is the associated state of the migration terminal.
  • the foregoing apparatus further includes: a processing module, configured to notify that the connection connection with the terminal connected to itself is successfully established, if the association sent by the controller or the migration success message is received.
  • a processing module configured to notify that the connection connection with the terminal connected to itself is successfully established, if the association sent by the controller or the migration success message is received.
  • the foregoing apparatus further includes: a processing module, configured to notify that the connection connection with the terminal connected to itself is successfully established, in the case that the association failure message sent by the controller is received.
  • a processing module configured to notify that the connection connection with the terminal connected to itself is successfully established, in the case that the association failure message sent by the controller is received.
  • the device further includes: a processing module, configured to delete the flow table entry of the terminal connected to the self, if the deletion instruction sent by the controller is received.
  • a processing module configured to delete the flow table entry of the terminal connected to the self, if the deletion instruction sent by the controller is received.
  • the foregoing apparatus further includes: a processing module, configured to: when receiving the adding instruction sent by the controller, adding a flow table entry of the terminal connected to the self.
  • the terminal information connected to the NVE that is notified by the NVE and the connection information between the NVE and the terminal are used; and the corresponding operation is performed according to the terminal information and the connection information, thereby solving the topology that the controller cannot obtain the entire network in time in the related art.
  • the problem of information can further improve the fast forwarding capability of the virtual cascading network and the ability to control the resources of the entire network.
  • FIG. 1 is a flowchart of a method of processing information according to an embodiment of the present invention
  • FIG. 2 is a flow chart of another method of processing information according to an embodiment of the present invention.
  • FIG. 3 is a schematic diagram of a network between a controller and an NVE according to a preferred embodiment of the present invention
  • FIG. 4 is a schematic diagram of a migration process from VM1 to VM4 in accordance with a preferred embodiment of the present invention
  • FIG. 5 is a structural block diagram of an apparatus for processing information according to an embodiment of the present invention.
  • FIG. 6 is a structural block diagram of an apparatus for processing information according to a preferred embodiment of the present invention.
  • FIG. 7 is a structural block diagram of another apparatus for processing information according to an embodiment of the present invention.
  • FIG. 8 is a block diagram showing the structure of another apparatus for processing information according to a preferred embodiment of the present invention.
  • FIG. 1 is a flow chart of a method of processing information according to an embodiment of the present invention. As shown in FIG. 1, the method may include the following processing steps:
  • Step S102 Receive terminal information connected by the NVE advertised by the NVE and connection information of the NVE and the terminal;
  • Step S104 Perform a corresponding operation according to the terminal information and the connection information.
  • the controller cannot obtain the topology information of the entire network in time.
  • the method shown in FIG. 1 is used to notify the controller of the connected terminal information and the connection information of the NVE and the terminal through the NVE, so that the controller can quickly grasp the topology information of the entire network. Therefore, the problem that the controller cannot obtain the topology information of the entire network in time is solved, and the fast forwarding capability of the virtual layered network and the management and control capability of the entire network resources can be improved.
  • the embodiments of the present invention are all described by using a virtual machine as an example, but also applicable to an application scenario of external connection of a bare metal host.
  • the present embodiment is mainly based on the openflow protocol, but the interaction protocols of other virtual network edge devices and controllers are also within the scope of the present invention.
  • the foregoing terminal information may include, but is not limited to, at least one of the following:
  • the foregoing terminal identification information may include, but is not limited to, at least one of the following:
  • the media access control (MAC) address of the terminal (1) The media access control (MAC) address of the terminal;
  • IP Internet Protocol
  • VNID virtual network identifier
  • the foregoing terminal policy information may include, but is not limited to, at least one of the following:
  • Qos Quality of service
  • the foregoing terminal status information may include, but is not limited to, at least one of the following:
  • step S104 performing corresponding operations according to the terminal information and the connection information may include the following operations:
  • Step S1 When determining that the terminal status information is in an Associate state, acquiring network resources and configuration information corresponding to the terminal according to the terminal policy information;
  • Step S2 Determine whether the network resource and the configuration information are available.
  • determining whether the network resource and the configuration information are available may include one of the following:
  • the terminal information and the connection information need not be saved, and/or an association failure message is returned to the NVE, where the association failure message is used to cause the NVE to return a connection failure message to the terminal, and An alarm is issued to the preset network entity, and the NVE does not need to save the information of the terminal.
  • the controller saves the terminal information and the connection information of the terminal and the NVE, and obtains the network resource and configuration information corresponding to the terminal according to the policy information of the terminal to determine the corresponding Availability of network resources.
  • step S104 performing corresponding operations according to the terminal information and the connection information may include the following steps:
  • Step S3 In the case that the terminal status information is determined to be the associated state of the migration terminal, the network resource and configuration information corresponding to the terminal are acquired according to the terminal policy information;
  • Step S4 Determine whether the network resource and the configuration information are available and/or whether the migration tunnel is established in the virtual network, where the migration tunnel is used to migrate data on the terminal.
  • determining whether the network resource and the configuration information are available and/or establishing whether the migration tunnel is completed within the virtual network may include one of the following:
  • the associated request for the migrated terminal carries a Migrating identifier to notify the controller that the terminal is currently in a migrated state.
  • the controller needs to be built in the network first.
  • the migration tunnel is used for the migration of data from the original terminal to the destination terminal.
  • the controller sends a message to the NVE that the association is successful.
  • the NVE will perform other actions after receiving the above message (for example, replying to the terminal with a successful connection message). If the network resource or configuration is unavailable, the NVE will reply with a failure message and no action will be taken. After receiving the failure message, the NVE will send an alarm to the network management or cloud management platform, and return a connection failure message to the terminal without saving the information of the terminal.
  • step S104 performing corresponding operations according to the terminal information and the connection information may include the following operations:
  • Step S5 In the case where it is determined that the terminal status information is in the De-associate state, the terminal information and the connection information stored locally are deleted.
  • step S5 Before deleting the connection information between the terminal and the NVE, in step S5, the following steps may be further included:
  • Step S6 In the case that the terminal status information is determined to be in the De-associate state, the deletion instruction is sent to the part or all of the NVEs under the current control, and/or the network is notified to release the network resource, where the instruction is used to delete the storage in other NVEs.
  • the controller if the terminal status information is a de-association state, the controller must delete the flow table entry corresponding to the terminal on the other NVEs in the same VN, and release the network resource (if the past activation action is not performed before) . At the same time, information such as the connection relationship between the terminal information and the NVE connected thereto is also deleted from the controller.
  • step S104 performing corresponding operations according to the terminal information and the connection information may include the following operations:
  • Step S7 In the case that it is determined that the terminal status information is in the active state, the instruction is added to the part or all of the NVEs under the current control according to the connection information, and/or the network resource is allocated, wherein the adding instruction is used in some or all of the NVEs.
  • the information of the flow table entry corresponding to the terminal is added.
  • the information carried in the add command includes the encapsulation mode and forwarding mode of the message sent by the NVE.
  • the flow table may be sent to other NVEs that belong to the same virtual network.
  • the content of the flow table may include, but is not limited to, how the NVE encapsulates and forwards the message sent by the terminal, and the required network resource. distribution. Therefore, the problem of the triangle route generated during the migration can be solved, and the forwarding efficiency of the network is improved.
  • step S104 performing corresponding operations according to the terminal information and the connection information may include the following operations:
  • Step S8 Receive a request message from the NVE, where the request message is used to obtain a processing manner of the packet sent by the terminal, in the case that the terminal status information is determined to be the active state.
  • Step S9 Adding an instruction and/or allocating network resources to some or all of the NVEs under the current control according to the connection information, where the adding instruction is used to add a flow table entry corresponding to the terminal in part or all of the NVE, adding
  • the information carried in the command includes: encapsulation mode and forwarding mode of the packet sent by the NVE.
  • step S104 performing corresponding operations according to the terminal information and the connection information may further include the following steps:
  • Step S10 In the case that the terminal status information is determined to be in the active state, the network resource and the configuration information corresponding to the terminal are acquired according to the terminal policy information.
  • Step S11 Determine whether network resources and configuration information are available.
  • determining whether the network resource and the configuration information are available may include one of the following:
  • association failure message is returned to the NVE, where the association failure message is used to enable the NVE to return a connection failure message to the terminal, and send an alarm to the preset network entity, and the NVE does not need to save the terminal. Information.
  • the controller saves the terminal information and the connection information of the terminal and the NVE, and obtains the network resource and configuration information corresponding to the terminal according to the policy information of the terminal to determine the corresponding Availability of network resources (if no related actions have been performed before).
  • step S104 performing corresponding operations according to the terminal information and the connection information may include the following steps:
  • Step S12 In the case where it is determined that the terminal status information is in the De-active state, the deletion instruction is sent to some or all of the NVEs under the current control, wherein the deletion instruction is used to delete the terminal corresponding to the terminal stored in part or all of the NVEs. Flow table entries and release network resources.
  • step S104 performing corresponding operations according to the terminal information and the connection information may further include the following steps:
  • Step S13 Send a delivery notification message to the NVE, where the notification message is used to notify the NVE of the execution of the instruction.
  • the controller if the terminal status information is in the deactivated state, the controller sends an instruction to the other NVEs in the same VN to delete the flow table entries in the other NVEs in the same VN and the network resources. . After completing the above actions, the controller may send a message of success or failure to the NVE to inform the NVE.
  • the method before receiving the terminal information and the connection information, the method further includes the following steps:
  • Step S14 Send a request message to the NVE, where the request message is used to request the NVE to acquire the terminal information and the connection information.
  • the terminal information associated with the terminal and the connection information between the terminal and the NVE can be advertised to the controller via the openflow protocol NVE.
  • the notification method here can be divided into the following two ways:
  • Manner 1 The NVE actively announces the terminal information connected thereto and the connection information between the terminal and the NVE to the controller;
  • Manner 2 The controller requests on demand, and then the NVE advertises the terminal information connected to the terminal and the connection information between the terminal and the NVE according to the request message. That is, the controller may also send a request message for obtaining the connection status information of the terminal to the NVE, and the virtual network edge device provides the controller with the terminal information connected to the virtual network edge device as needed.
  • FIG. 2 is a flow chart of another method of processing information according to an embodiment of the present invention. As shown in FIG. 2, the method may include the following processing steps:
  • Step S202 Notifying the controller of the terminal information currently connected by itself and the connection information between itself and the terminal;
  • Step S204 Receive a flow table sent by the controller, where the flow table is determined by the controller according to the terminal information and the connection information.
  • Step S15 Determine, according to the flow table, a manner of encapsulating and forwarding the packet sent by the terminal, and a manner of allocating the network resource corresponding to the terminal.
  • notifying the controller of the terminal information and the connection information may include but is not limited to one of the following:
  • the terminal information and the connection information are advertised to the controller according to the request message.
  • the following steps may be further included:
  • Step S16 Receive terminal information and connection information reported by the terminal connected to itself.
  • the foregoing terminal information may include, but is not limited to, at least one of the following:
  • the foregoing terminal identification information may include, but is not limited to, at least one of the following:
  • the media access control (MAC) address of the terminal (1) The media access control (MAC) address of the terminal;
  • IP Internet Protocol
  • VNID virtual network identifier
  • the foregoing terminal policy information may include, but is not limited to, at least one of the following:
  • Qos Quality of service
  • the foregoing terminal status information may include, but is not limited to, at least one of the following:
  • the above method may further comprise the following processing steps:
  • Step S17 In the case that the association sent by the controller or the migration success message is received, the terminal connection established with the connection is successfully established.
  • the above method may further comprise the following processing steps:
  • Step S18 In the case that the association failure message sent by the controller is received, it is notified that the connection connection with the terminal connected to itself is successfully established.
  • the above method may further comprise the following processing steps:
  • Step S19 In the case that the deletion instruction sent by the controller is received, the flow table entry of the terminal connected to itself is deleted.
  • the above method may further comprise the following processing steps:
  • Step S20 In the case that the add instruction sent by the controller is received, the flow table entry of the terminal connected to itself is added.
  • FIG. 3 is a schematic diagram of a network between a controller and an NVE according to a preferred embodiment of the present invention.
  • the cloud management platform creates a number of virtual site terminals VM1, VM2, ..., VM6.
  • VM1 and VM4 communicate in the same virtual network.
  • VM1 when it needs to participate in network communication, it can be advertised to the virtual network edge switch NVE through a preset protocol (for example, Virtual Desktop Protocol (VDP)).
  • VDP Virtual Desktop Protocol
  • the advertisement here carries the current state information of the VM, that is, it is The associated state is also the associated state, the active state or the deactivated state.
  • the NVE needs to re-advertise to the controller through the openflow protocol, and then the controller sends corresponding commands to the switch connected to the terminal according to the status information of the terminal.
  • NVE2 receives an association request from VM4, NVE2 sends an extended Packet-in message to the controller to simulate the data message sent by VM4.
  • NVE address information for example, IP, MAC
  • the controller replies a success message to the NVE after determining the availability. If the network resource or configuration is unavailable, the NVE will reply with a failure message and no action will be taken. After receiving the failure message, the NVE will send an alarm to the network management or cloud management platform, and return a connection failure message to the terminal without saving the information of the terminal.
  • NVE address information for example, IP, MAC
  • Operation 1 Send a flow table through the openflow protocol to notify other NVEs belonging to the same virtual network. For example, if VM1 and VM4 belong to the same virtual network, the controller sends a flow table to NVE1 connected to VM1. When VM1 needs to send packets to VM4 via NVE1, NVE1 encapsulates the packet according to the corresponding flow table. The encapsulated destination IP address is the IP address of the NVE2, and the packet is forwarded to the NVE2 according to the IP address, and then the packet is sent to the VM4 after being decapsulated by the NVE2.
  • the controller may selectively send a flow table instruction Modify-State to other NVEs in the same VN to delete the corresponding flow table table on the NVEs. Item and release network resources.
  • the match field carries information about the VM, such as MAC address, IP address, VNID, and VSI.
  • Preferred embodiment 2 (expanding openflow asynchronous message)
  • the notification-association informs the controller that if it needs to reach the terminal specified in the message, it needs to be forwarded by the NVE, that is, it needs to be forwarded through the tunnel of the destination NVE.
  • the filter_info here carries information about the VM to which the NVE is connected, such as MAC, IP, and VNID.
  • the controller When the controller receives the Notification_association message, it processes the filter_info information and the VSI information according to the TS status information.
  • the NVE can send an activation status message to the controller only if the reply message informs the network that it is available. If the network resource or configuration is unavailable, the NVE will reply with a failure message and no action will be taken. After receiving the failure message, the NVE will send an alarm to the network management or cloud management platform, and return a connection failure message to the terminal without saving the information of the terminal.
  • TS_status OFPTSS_ACTIVE
  • NVE address information for example, IP, MAC
  • Operation 1 Send a flow table through the openflow protocol to notify other NVEs belonging to the same virtual network. For example, if VM1 and VM4 belong to the same virtual network, the controller sends a flow table to NVE1 connected to VM1.
  • the NVE1 encapsulates the packet according to the corresponding flow table, and the encapsulated destination IP address is the IP address of the NVE2, and the packet is forwarded to the NVE2 according to the IP address. Therefore, the above message is sent to VM4 after decapsulation by NVE2.
  • the controller may selectively send a flow table instruction Modify-State to delete corresponding flow table entries on other NVEs in the same VN, and release network resources.
  • TS_status OFPTSS_DEASSOCIATE
  • the controller sends a flow table instruction Modify-State to delete the corresponding flow table entry on other NVEs in the same VN, and also binds the terminal information and the NVE connected thereto. Relationship deleted.
  • the NVE does not perceive the connection of the terminal (for example, the NVE and the link between the terminals are abnormal)
  • the NVE does not perceive the connection of the terminal after waiting for a period of time and then sends a de-association message to the controller.
  • the NVE actively informs the controller of the terminal information (for example, MAC, IP, VNID) connected to the controller, and the NVE may be active whenever a terminal is connected to the NVE. Send a message to inform the controller.
  • the terminal information for example, MAC, IP, VNID
  • the controller initiates a query request to extend the Multipart Messages message.
  • a message type for the state of the terminal :
  • the controller sends a request message:
  • the above body field can be empty or carry a VNID. If the body field is empty, it indicates that the controller needs to obtain all terminal information on the NVE. If the body field carries one or more VNIDs, it indicates that the controller needs to obtain terminal information belonging to the virtual network indicated by these VNIDs.
  • the switch After receiving the request message, the switch will reply a message to the controller to inform the terminal of the connected terminal.
  • the type here is still 17, indicating that the switch replies to the terminal information it is connected to.
  • the body field carries the terminal information content.
  • the filter_info here carries information about terminals connected to the NVE, such as MAC, IP, and VNID.
  • the processing procedure is basically the same as that of the preferred embodiment 1 and the preferred embodiment 2, and details are not described herein again.
  • the terminal When the terminal performs migration, it can also be advertised to the controller through a message notification method, so that the controller can decentrate the corresponding flow table.
  • VM1 requires hot migration to VM4.
  • 4 is a schematic diagram of a migration process from VM1 to VM4 in accordance with a preferred embodiment of the present invention.
  • the controller After receiving the foregoing notification message, the controller saves the state information of the VM4, and records the binding relationship between the VM4 and the NVE2; and confirms the availability of the network resource, and if available, the controller notifies that the NVE2 association is successful and can be executed. Next step.
  • VM4 is also activated and advertised to NVE2 after the migration is complete.
  • the advertisement message also carries the IP address, MAC address, and VNID of VM1. And other information.
  • the controller After receiving the Active message, the controller performs the following operations according to the preset policy:
  • Operation 1 Send a flow table through the openflow protocol to notify other NVEs belonging to the same virtual network.
  • the network side completes the support for VM migration.
  • FIG. 5 is a block diagram showing the structure of an apparatus for processing information according to an embodiment of the present invention.
  • the information processing apparatus may include: a receiving module 10 configured to receive terminal information connected by the NVE advertised by the NVE and connection information of the NVE and the terminal; and the processing module 20 is configured to set the terminal information and the connection information according to the terminal information and the connection information. Perform the corresponding operation.
  • the device shown in FIG. 5 solves the problem that the controller cannot obtain the topology information of the entire network in time in the related art, thereby improving the fast forwarding capability of the virtual layered network and the control capability of the entire network resources.
  • the foregoing terminal information may include, but is not limited to, at least one of the following:
  • the foregoing terminal identification information may include, but is not limited to, at least one of the following:
  • the media access control (MAC) address of the terminal (1) The media access control (MAC) address of the terminal;
  • IP Internet Protocol
  • VNID virtual network identifier
  • the foregoing terminal policy information may include, but is not limited to, at least one of the following:
  • Qos Quality of service
  • the foregoing terminal status information may include, but is not limited to, at least one of the following:
  • the processing module 20 may include: a first obtaining unit 200, configured to acquire, according to the terminal policy information, network resources and configuration information corresponding to the terminal, in a case where determining that the terminal state information is an Associate state;
  • the first determining unit 202 is configured to determine whether network resources and configuration information are available.
  • the first determining unit 202 is configured to determine whether the network resource and the configuration information are available, including one of: if it is determined that the network resource and the configuration information are available, saving the terminal information and the connection information, and/or returning the association success to the NVE. Message; if it is determined that the network resource and the configuration information are not available, there is no need to save the terminal information and the connection information, and/or return an association failure message to the NVE, wherein the association failure message is used to cause the NVE to return a connection failure message to the terminal, and The preset network entity issues an alarm, and the NVE does not need to save the information of the terminal.
  • the processing module 20 may include: a second obtaining unit 204, configured to acquire, according to the terminal policy information, network resources corresponding to the terminal, in a case where determining that the terminal state information is an associated state of the migration terminal.
  • the second information determining unit 206 is configured to determine whether the network resource and the configuration information are available and/or whether the migration tunnel is established in the virtual network, wherein the migration tunnel is used to migrate data on the terminal.
  • the second determining unit 206 is configured to determine whether the network resource and the configuration information are available and/or whether establishing the migration tunnel within the virtual network is completed, including one of: if it is determined that the network resource and the configuration information can be used and the migration tunnel is completed, Returning the association success message to the NVE, and saving the terminal information and the connection information; if it is determined that the network resource and the configuration information are unavailable and/or the migration tunnel has not been completed, returning an association failure message to the NVE, where the association failure message is used
  • the NVE returns a connection failure message to the terminal, and sends an alarm to the preset network entity, and the NVE does not need to save the information of the terminal.
  • the processing module 20 may include: a deleting unit 208, configured to delete the terminal information and the connection information stored locally when determining that the terminal status information is in a De-associate state.
  • a deleting unit 208 configured to delete the terminal information and the connection information stored locally when determining that the terminal status information is in a De-associate state.
  • the processing module 20 may further include: a first sending unit 210 configured to deliver to some or all of the NVEs under the current control if the terminal status information is determined to be in a De-associate state. Deleting the instruction and/or notifying the network to release the network resource, where the deletion instruction is used to delete the flow table entry corresponding to the terminal stored in the other NVE, and notify the network to release the network resource;
  • the processing module 20 may further include: a second sending unit 212 configured to, under the condition that the terminal status information is in the active state, follow the connection information to some or all of the NVEs under the current control.
  • a second sending unit 212 configured to, under the condition that the terminal status information is in the active state, follow the connection information to some or all of the NVEs under the current control.
  • Adding an instruction and/or allocating network resources, wherein the adding instruction is used to add a flow table entry corresponding to the terminal in part or all of the NVE, and the information carried in the adding instruction includes: encapsulating the message sent by the terminal by the NVE Mode and forwarding method.
  • the processing module 20 may further include: a receiving unit 214, configured to receive a request message from the NVE, where the terminal status information is determined to be an Active state, where the request message is used for Obtaining a processing manner of the packet sent by the terminal; the third sending unit 216 is configured to send an instruction and/or allocate network resources to some or all of the NVEs under the current control according to the connection information, where the adding instruction is used to The information of the flow table entry corresponding to the terminal is added to the part of the NVE.
  • the information carried in the add command includes the encapsulation mode and forwarding mode of the message sent by the NVE.
  • the processing module 20 may further include: a third obtaining unit 218, configured to acquire network resources and configuration information corresponding to the terminal according to the terminal policy information, if the terminal status information is determined to be the active state.
  • the third determining unit 220 is configured to determine whether the network resource and the configuration information are available.
  • the third determining unit 220 is configured to determine whether the network resource and the configuration information are available, including one of: if it is determined that the network resource and the configuration information can be used, return an association success message to the NVE; if it is determined that the network resource and the configuration information are not available If yes, the association failure message is returned to the NVE, where the association failure message is used to enable the NVE to return a connection failure message to the terminal, and send an alarm to the preset network entity, and the NVE does not need to save the information of the terminal.
  • the processing module 20 may include: a fourth sending unit 222, configured to send a deletion to some or all of the NVEs under the current control if the terminal status information is determined to be in a De-active state.
  • An instruction where the delete instruction is used to delete a flow table entry corresponding to the terminal stored in part or all of the NVE and release the network resource.
  • the processing module 20 may further include: a fifth sending unit 224, configured to send a sending notification message to the NVE, wherein the notification message is used to notify the NVE of the execution of the instruction.
  • a fifth sending unit 224 configured to send a sending notification message to the NVE, wherein the notification message is used to notify the NVE of the execution of the instruction.
  • the foregoing apparatus may further include: a sending module 30, configured to send a request message to the NVE, where the request message is used to request the NVE to acquire the terminal information and the connection information.
  • a sending module 30 configured to send a request message to the NVE, where the request message is used to request the NVE to acquire the terminal information and the connection information.
  • FIG. 7 is a structural block diagram of another apparatus for processing information according to an embodiment of the present invention.
  • the processing device of the information may include: an advertising module 40, configured to notify the controller of the terminal information currently connected by the controller. And the connection information between the user and the terminal; the first receiving module 50 is configured to receive the flow table sent by the controller, wherein the flow table is determined by the controller according to the terminal information and the connection information.
  • the notification module 40 may include: a first notification unit 400 configured to actively announce terminal information and connection information to the controller; and a second notification unit 402 configured to receive the controller from the controller After requesting the message, the terminal information and the connection information are advertised to the controller according to the request message.
  • the foregoing apparatus may further include: a second receiving module 60, configured to receive terminal information and connection information reported by the terminal connected by itself.
  • a second receiving module 60 configured to receive terminal information and connection information reported by the terminal connected by itself.
  • the foregoing terminal information may include, but is not limited to, at least one of the following:
  • the foregoing terminal identification information may include, but is not limited to, at least one of the following:
  • the media access control (MAC) address of the terminal (1) The media access control (MAC) address of the terminal;
  • IP Internet Protocol
  • VNID virtual network identifier
  • the foregoing terminal policy information may include, but is not limited to, at least one of the following:
  • Qos Quality of service
  • the foregoing terminal status information may include, but is not limited to, at least one of the following:
  • the foregoing apparatus may further include: a processing module 70, configured to notify that the connection with the terminal connected to itself is successfully established if the association sent by the controller or the migration success message is received.
  • a processing module 70 configured to notify that the connection with the terminal connected to itself is successfully established if the association sent by the controller or the migration success message is received.
  • the foregoing apparatus may further include: a processing module 70, configured to notify that the connection connection with the terminal connected to itself is successfully established, in the case that the association failure message sent by the controller is received.
  • a processing module 70 configured to notify that the connection connection with the terminal connected to itself is successfully established, in the case that the association failure message sent by the controller is received.
  • the foregoing apparatus may further include: a processing module 70, configured to delete a flow table entry of the terminal connected to itself when receiving the deletion instruction sent by the controller.
  • a processing module 70 configured to delete a flow table entry of the terminal connected to itself when receiving the deletion instruction sent by the controller.
  • the foregoing apparatus may further include: a processing module 70, configured to: when receiving an add instruction sent by the controller, increase a flow table entry of the terminal connected to the self.
  • a processing module 70 configured to: when receiving an add instruction sent by the controller, increase a flow table entry of the terminal connected to the self.
  • the technical solution provided by the embodiment of the present invention is applied to the data center.
  • Virtual machine migration in the network can coordinate the processing of the controller during the migration process, making the migration more orderly, and also eliminating the problem of triangular routing that occurs when the virtual machine is migrated.
  • the controller can timely detect the state of the terminal connected to the edge of the network, and timely deliver the flow table and modify the flow table, thereby effectively improving the forwarding performance of the packet.
  • modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein.
  • the steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module.
  • the invention is not limited to any specific combination of hardware and software.
  • the method and apparatus for processing information provided by the embodiments of the present invention have the following beneficial effects: the fast forwarding capability of the virtual cascading network and the management and control capabilities of the entire network resources can be improved.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明公开了一种信息的处理方法及装置，在上述方法中，接收NVE通告的NVE所连接的终端信息以及NVE与终端的连接信息；根据终端信息和连接信息执行对应的操作。根据本发明提供的技术方案，能够提高虚拟层叠网络的快速转发能力以及对全网资源的管控能力。

Description

信息的处理方法及装置 技术领域
本发明涉及通信领域，具体而言，涉及一种信息的处理方法及装置。
背景技术
随着数据中心服务器虚拟化技术的广泛使用，虚拟机数量的猛增，并且在混合云和公有云数据中心需要提供海量租户(tenant)支持，传统网络已经无法满足上述需求。为了能够满足上述多租户的需求，一种基于表层(overlay)的虚拟层叠网络(NVO)技术应运而生，这种虚拟层叠网络不仅可以支持多租户以及多虚拟网络，而且每个tenant之间的地址空间、流量彼此隔离且不可见。各tenant能够在不同虚拟网络(VN)中使用相同的地址空间。每个tenant可以拥有多个VN，但是每个VN之间的流量尚不能自由流动，需通过路由器、安全网关等才得以实现。NVO3可以不改动已有网络，仅需增加网关设备，就可以解决虚拟机迁移和多租户问题，从而有效保护用户投资。
为了实现NVO，需要对终端TS接入网络的边缘设备进行虚拟化，对终端报文进行识别，对报文做出相应封装后再接入到传统网络中进行传输。目前较为通用的技术可以包括：虚拟可扩展局域网(VXLAN)和利用通用路由封装实现网络虚拟化(NVGRE)，其都可以支持二层报文接入三层网络传输以及三层报文接入三层网络。在虚拟层叠网络上，虚拟网络边缘设备(NVE)的位置可以是在主机虚拟机监视器(hypervisor)内，也可以是在外部洋葱路由(ToR)上。如果在外部ToR上，可以是和终端直接物理连接的ToR上，也可以是通过桥连接的ToR上。
目前，大多数现有的控制协议都可以应用在虚拟层叠网络上，以实现信息交互和确定转发路径。但对于数据中心网络而言，虚拟机数量众多、设备类型繁杂，对传统协议都是一个巨大的挑战，因此，软件定义网络(SDN)这种集中控制在虚拟层叠网络上的方式愈发受到欢迎。此处，存在中央控制器Controller就像是在北向的应用和南向的交换机之间的一个中间件。北向应用主要向控制器阐明业务策略、网络配置和诸如此类的信息；而控制器则将这些策略和配置翻译成南向的编程指令再发送至网络交换机。南向协议最常用的就是开放流(OpenFlow)。控制器通过Openflow向虚拟网络边缘设备下发封装信息和转发信息。在控制器下发上述信息之前，必须能够通过特定渠道获取全网的交换机拓扑信息以及虚拟网络边缘设备上连接的终端信息。对于虚拟网络边缘设备上连接的终端信息，可以通过云管理平台等方式通告给控制器，这种 情况一般适用于虚拟网络边缘设备位于Hypervisor。而对于虚拟网络边缘设备外置的情况，云管理平台则可能无法感知到这一层设备，即云管理平台和集中控制器***相互独立，此时集中控制器由于没有全网(包括终端)的拓扑信息，则无法提供虚拟网络边缘设备转发报文时需要的信息，无法直接下发流表。
相关技术中所提出的较为常用的解决方案在于等待终端发送报文，虚拟网络边缘设备通过Packet-In消息向控制器发送请求，控制器在接收到上述packet-In消息后如果查找不到相关的表项，则在虚拟网络拓扑内的节点泛洪等待目的节点的答复，从而获取转发信息下发给该虚拟网络边缘设备节点以及其他相关节点。
然而，上述解决方案的缺陷在于：其增加了报文转发的延时，大幅增加了全网的广播报文，从而对网络性能造成不良影响，对性能要求高的情况是难以适用的，并且不利于控制器及时获取全网拓扑，从而无法更快、更好地计算路径及时获取策略的需求。
发明内容
本发明实施例提供了一种信息的处理方法及装置，以至少解决相关技术中控制器无法及时获取全网的拓扑信息的问题。
根据本发明的一个方面，提供了一种信息的处理方法。
根据本发明实施例的信息的处理方法包括：接收NVE通告的NVE所连接的终端信息以及NVE与终端的连接信息；根据终端信息和连接信息执行对应的操作。
优选地，终端信息包括以下至少之一：终端标识信息、终端策略信息、终端状态信息。
优选地，终端标识信息包括以下至少之一：终端的媒体接入控制(MAC)地址；终端的互联网协议(IP)地址；终端归属的虚拟网络标识(VNID)。
优选地，终端策略信息包括以下至少之一：服务质量(Qos)、访问控制列表(ACL)。
优选地，终端状态信息包括以下至少之一：终端的关联(Associate)状态；终端的去关联(De-associate)状态；终端的激活(Active)状态；终端的去激活(De-active)状态；终端是否为迁移终端的关联状态。
优选地，根据终端信息和连接信息执行对应的操作包括：在确定终端状态信息为Associate状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；确定网络资源以及配置信息是否可用。
优选地，确定网络资源以及配置信息是否可用包括以下之一：如果确定网络资源以及配置信息可用，则保存终端信息以及连接信息，和/或，向NVE返回关联成功消息；如果确定网络资源以及配置信息不可用，则无需保存终端信息以及连接信息，和/或，向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警。
优选地，根据终端信息和连接信息执行对应的操作包括：在确定终端状态信息为迁移终端的关联状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；确定网络资源以及配置信息是否可用和/或在虚拟网络内建立迁移隧道是否完成，其中，迁移隧道用于对终端上的数据进行迁移。
优选地，确定网络资源以及配置信息是否可用和/或在虚拟网络内建立迁移隧道是否完成包括以下之一：如果确定网络资源以及配置信息能够使用和/或迁移隧道完成，则向NVE返回关联成功消息，并保存终端信息以及连接信息；如果确定网络资源以及配置信息不可用和/或迁移隧道尚未完成，则向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
优选地，根据终端信息和连接信息执行对应的操作包括：在确定终端状态信息为De-associate状态的情况下，删除在本地存储的终端信息以及连接信息。
优选地，在删除终端与NVE之间的连接信息之前，还包括：在确定终端状态信息为De-associate状态的情况下，向当前控制下的部分或全部NVE下发删除指令和/或通知网络释放网络资源，其中，指令用于删除在其他NVE内存储的与终端对应的流表表项，并且通知网络释放网络资源。
优选地，根据终端信息和连接信息执行对应的操作包括：在确定终端状态信息为Active状态的情况下，按照连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，增添指令用于在部分或全部NVE中增加与终端对应的流表表项，在增添指令中携带的信息包括：NVE对终端发送的报文的封装方式和转发方式。
优选地，根据终端信息和连接信息执行对应的操作包括：在确定终端状态信息为Active状态的情况下，接收来自于NVE的请求消息，其中，请求消息用于获取对终端 发送的报文的处理方式；按照连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，增添指令用于在部分或全部NVE中增加和终端对应的流表表项，在增添指令中携带的信息包括：NVE对终端发送的报文的封装方式和转发方式。
优选地，根据终端信息和连接信息执行对应的操作还包括：在确定终端状态信息为Active状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；确定网络资源以及配置信息是否可用。
优选地，确定网络资源以及配置信息是否可用包括以下之一：如果确定网络资源以及配置信息能够使用，则向NVE返回关联成功消息；如果确定网络资源以及配置信息不可用，则向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
优选地，根据终端信息和连接信息执行对应的操作包括：在确定终端状态信息为De-active状态的情况下，向当前控制下的部分或全部NVE下发删除指令，其中，删除指令用于删除在部分或全部NVE内存储的与终端对应的流表表项以及释放网络资源。
优选地，根据终端信息和连接信息执行对应的操作还包括：向NVE发送下发通知消息，其中，通知消息用于将指令的执行情况告知NVE。
优选地，在接收终端信息以及连接信息之前，还包括：向NVE发送请求消息，其中，请求消息用于向NVE请求获取终端信息和连接信息。
根据本发明的另一方面，提供了另一种信息的处理方法。
根据本发明实施例的信息的处理方法包括：向控制器通告自身当前连接的终端信息以及自身与终端之间的连接信息；接收控制器下发的流表，其中，流表是控制器根据终端信息和连接信息确定的。
优选地，向控制器通告终端信息以及连接信息包括以下之一：主动向控制器通告终端信息以及连接信息；在接收到来自于控制器的请求消息后，根据请求消息向控制器通告终端信息以及连接信息。
优选地，在向控制器通告终端信息以及连接信息之前，还包括：接收自身连接的终端上报的终端信息和连接信息。
优选地，终端信息包括以下至少之一：终端标识信息、终端策略信息、终端状态信息。
优选地，终端标识信息包括以下至少之一：终端的媒体接入控制(MAC)地址；终端的互联网协议(IP)地址；终端归属的虚拟网络标识(VNID)。
优选地，终端策略信息包括以下至少之一：服务质量(Qos)、访问控制列表(ACL)。
优选地，终端状态信息包括以下至少之一：终端的关联(Associate)状态；终端的去关联(De-associate)状态；终端的激活(Active)状态；终端的去激活(De-active)状态；终端是否为迁移终端的关联状态。
优选地，上述方法还包括：在接收到控制器下发的关联或者迁移关联成功消息的情况下，通知与自身连接的终端连接建立成功。
优选地，上述方法还包括：在接收到控制器下发的关联失败消息的情况下，通知与自身连接的终端连接建立成功。
优选地，上述方法还包括：在接收到控制器下发的删除指令的情况下，删除与自身连接的终端的流表表项。
优选地，上述方法还包括：在接收到控制器下发的添加指令的情况下，增加与自身连接的终端的流表表项。
根据本发明的另一方面，提供了一种信息的处理装置。
根据本发明实施例的信息的处理装置包括：接收模块，设置为接收NVE通告的NVE所连接的终端信息以及NVE与终端的连接信息；处理模块，设置为根据终端信息和连接信息执行对应的操作。
优选地，终端信息包括以下至少之一：终端标识信息、终端策略信息、终端状态信息。
优选地，终端标识信息包括以下至少之一：终端的MAC地址；终端的IP地址；终端归属的VNID。
优选地，终端策略信息包括以下至少之一：Qos、ACL。
优选地，终端状态信息包括以下至少之一：终端的Associate状态；终端的De-associate状态；终端的Active状态；终端的De-active状态；终端是否为迁移终端的关联状态。
优选地，处理模块包括：第一获取单元，设置为在确定终端状态信息为Associate状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；第一确定单元，设置为确定网络资源以及配置信息是否可用。
优选地，第一确定单元，设置为确定网络资源以及配置信息是否可用包括以下之一：如果确定网络资源以及配置信息可用，则保存终端信息以及连接信息，和/或，向NVE返回关联成功消息；如果确定网络资源以及配置信息不可用，则无需保存终端信息以及连接信息，和/或，向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
优选地，处理模块包括：第二获取单元，设置为在确定终端状态信息为迁移终端的关联状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；第二确定单元，设置为确定网络资源以及配置信息是否可用和/或在虚拟网络内建立迁移隧道是否完成，其中，迁移隧道用于对终端上的数据进行迁移。
优选地，第二确定单元，设置为确定网络资源以及配置信息是否可用和/或在虚拟网络内建立迁移隧道是否完成包括以下之一：如果确定网络资源以及配置信息能够使用且迁移隧道完成，则向NVE返回关联成功消息，并保存终端信息以及连接信息；如果确定网络资源以及配置信息不可用和/或迁移隧道尚未完成，则向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
优选地，处理模块包括：删除单元，设置为在确定终端状态信息为De-associate状态的情况下，删除在本地存储的终端信息以及连接信息。
优选地，处理模块还包括：第一下发单元，设置为在确定终端状态信息为De-associate状态的情况下，向当前控制下的部分或全部NVE下发删除指令和/或通知网络释放网络资源，其中，删除指令用于删除在其他NVE内存储的与终端对应的流表表项，并且通知网络释放网络资源。
优选地，处理模块还包括：第二下发单元，设置为在确定终端状态信息为Active状态的情况下，按照连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，增添指令用于在部分或全部NVE中增加与终端对应的流表表项， 在增添指令中携带的信息包括：NVE对终端发送的报文的封装方式和转发方式以及网络资源的分配方式。
优选地，处理模块还包括：接收单元，设置为在确定终端状态信息为Active状态的情况下，接收来自于NVE的请求消息，其中，请求消息用于获取对终端发送的报文的处理方式；第三下发单元，设置为按照连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，增添指令用于在部分或全部NVE中增加和终端对应的流表表项，在增添指令中携带的信息包括：NVE对终端发送的报文的封装方式和转发方式。
优选地，处理模块还包括：第三获取单元，设置为在确定终端状态信息为Active状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；第三确定单元，设置为确定网络资源以及配置信息是否可用。
优选地，第三确定单元，设置为确定网络资源以及配置信息是否可用包括以下之一：如果确定网络资源以及配置信息能够使用，则向NVE返回关联成功消息；如果确定网络资源以及配置信息不可用，则向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
优选地，处理模块包括：第四下发单元，设置为在确定终端状态信息为De-active状态的情况下，向当前控制下的部分或全部NVE下发删除指令，其中，删除指令用于删除在部分或全部NVE内存储的与终端对应的流表表项以及释放网络资源。
优选地，处理模块还包括：第五下发单元，设置为向NVE发送下发通知消息，其中，通知消息用于将指令的执行情况告知NVE。
优选地，上述装置还包括：发送模块，设置为向NVE发送请求消息，其中，请求消息用于向NVE请求获取终端信息和连接信息。
根据本发明的另一方面，提供了另一种信息的处理装置。
根据本发明实施例的信息的处理装置包括：通告模块，设置为向控制器通告自身当前连接的终端信息以及自身与终端之间的连接信息；第一接收模块，设置为接收控制器下发的流表，其中，流表是控制器根据终端信息和连接信息确定的。
优选地，通告模块包括：第一通告单元，设置为主动向控制器通告终端信息以及连接信息；第二通告单元，设置为在接收到来自于控制器的请求消息后，根据请求消息向控制器通告终端信息以及连接信息。
优选地，上述装置还包括：第二接收模块，设置为接收自身连接的终端上报的终端信息和连接信息。
优选地，终端信息包括以下至少之一：终端标识信息、终端策略信息、终端状态信息。
优选地，终端标识信息包括以下至少之一：终端的媒体接入控制(MAC)地址；终端的互联网协议(IP)地址；终端归属的虚拟网络标识(VNID)。
优选地，终端策略信息包括以下至少之一：服务质量(Qos)、访问控制列表(ACL)。
优选地，终端状态信息包括以下至少之一：终端的关联(Associate)状态；终端的去关联(De-associate)状态；终端的激活(Active)状态；终端的去激活(De-active)状态；终端是否为迁移终端的关联状态。
优选地，上述装置还包括：处理模块，设置为在接收到控制器下发的关联或者迁移关联成功消息的情况下，通知与自身连接的终端连接建立成功。
优选地，上述装置还包括：处理模块，还设置为在接收到控制器下发的关联失败消息的情况下，通知与自身连接的终端连接建立成功。
优选地，上述装置还包括：处理模块，还设置为在接收到控制器下发的删除指令的情况下，删除与自身连接的终端的流表表项。
优选地，上述装置还包括：处理模块，还设置为在接收到控制器下发的添加指令的情况下，增加与自身连接的终端的流表表项。
通过本发明实施例，采用接收NVE通告的NVE所连接的终端信息以及NVE与终端的连接信息；根据终端信息和连接信息执行对应的操作，解决了相关技术中控制器无法及时获取全网的拓扑信息的问题，进而能够提高虚拟层叠网络的快速转发能力以及对全网资源的管控能力。
附图说明
此处所说明的附图用来提供对本发明的进一步理解，构成本申请的一部分，本发明的示意性实施例及其说明用于解释本发明，并不构成对本发明的不当限定。在附图中：
图1是根据本发明实施例的信息的处理方法的流程图；
图2是根据本发明实施例的另一种信息的处理方法的流程图；
图3是根据本发明优选实施例的控制器与NVE组网示意图；
图4是根据本发明优选实施例的从VM1迁移至VM4的迁移过程示意图；
图5是根据本发明实施例的信息的处理装置的结构框图；
图6是根据本发明优选实施例的信息的处理装置的结构框图；
图7是根据本发明实施例的另一种信息的处理装置的结构框图；
图8是根据本发明优选实施例的另一种信息的处理装置的结构框图。
具体实施方式
下文中将参考附图并结合实施例来详细说明本发明。需要说明的是，在不冲突的情况下，本申请中的实施例及实施例中的特征可以相互组合。
图1是根据本发明实施例的信息的处理方法的流程图。如图1所示，该方法可以包括以下处理步骤：
步骤S102：接收NVE通告的NVE所连接的终端信息以及NVE与终端的连接信息；
步骤S104：根据终端信息和连接信息执行对应的操作。
相关技术中控制器无法及时获取全网的拓扑信息。采用如图1所示的方法，通过NVE将其所连接的终端信息以及该NVE与终端的连接信息通告至控制器，以使控制器能够迅速掌握全网的拓扑信息。由此解决了相关技术中控制器无法及时获取全网的拓扑信息的问题，进而能够提高虚拟层叠网络的快速转发能力以及对全网资源的管控能力。
需要说明的是，本发明实施例均以虚拟机为例进行阐述，但同时也适用于裸机主机外部连接的应用场景。另外，本发送实施例主要是基于openflow协议，但其他虚拟网络边缘设备与控制器的交互协议也同样在本发明的保护范围之内。
在优选实施过程中，上述终端信息可以包括但不限于以下至少之一：
(1)终端标识信息；
(2)终端策略信息；
(3)终端状态信息。
在优选实施过程中，上述终端标识信息可以包括但不限于以下至少之一：
(1)终端的媒体接入控制(MAC)地址；
(2)终端的互联网协议(IP)地址；
(3)终端归属的虚拟网络标识(VNID)。
在优选实施过程中，上述终端策略信息可以包括但不限于以下至少之一：
(1)服务质量(Qos)；
(2)访问控制列表(ACL)。
在优选实施过程中，上述终端状态信息可以包括但不限于以下至少之一：
(1)终端的关联(Associate)状态；
(2)终端的去关联(De-associate)状态；
(3)终端的激活(Active)状态；
(4)终端的去激活(De-active)状态；
(5)终端是否为迁移终端的关联状态。
优选地，在步骤S104中，根据终端信息和连接信息执行对应的操作可以包括以下操作：
步骤S1：在确定终端状态信息为Associate状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；
步骤S2：确定网络资源以及配置信息是否可用。
优选地，在步骤S2中，确定网络资源以及配置信息是否可用可以包括以下之一：
(1)如果确定网络资源以及配置信息可用，则保存终端信息以及连接信息，和/或，向NVE返回关联成功消息；
(2)如果确定网络资源以及配置信息不可用，则无需保存终端信息以及连接信息，和/或，向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
在优选实施例中，如果终端状态信息为关联状态，则控制器将保存终端信息以及终端和NVE的连接信息，并依据终端的策略信息去获取该终端对应的网络资源和配置信息，以确定对应网络资源的可用性。
优选地，在步骤S104中，根据终端信息和连接信息执行对应的操作可以包括以下步骤：
步骤S3：在确定终端状态信息为迁移终端的关联状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；
步骤S4：确定网络资源以及配置信息是否可用和/或在虚拟网络内建立迁移隧道是否完成，其中，迁移隧道用于对终端上的数据进行迁移。
优选地，在步骤S4中，确定网络资源以及配置信息是否可用和/或在虚拟网络内建立迁移隧道是否完成可以包括以下之一：
(1)如果确定网络资源以及配置信息能够使用和/或迁移隧道完成，则向NVE返回关联成功消息，并保存终端信息以及连接信息；
(2)如果确定网络资源以及配置信息不可用和/或迁移隧道尚未完成，则向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
在优选实施例中，对于迁移的终端的关联请求，会携带有Migrating标识，以通告控制器终端当前处于迁移状态。如果需要带内迁移，则控制器需要首先在网络内建立 迁移隧道，用于原终端的数据往目的终端上的迁移传送。在确认网络资源和配置信息可用以及隧道建立完成之后，则控制器向NVE发送一个关联成功的消息。NVE在接收到上述消息后才会进行其他的动作(例如：向终端回复关联成功的消息)。如果网络资源或配置不可用，则向NVE回复失败消息，不做动作。NVE在接收到该失败消息后，则会向网管或云管理平台发出报警，并且向终端返回连接失败消息，而不会保存该终端的信息。
优选地，在步骤S104中，根据终端信息和连接信息执行对应的操作可以包括以下操作：
步骤S5：在确定终端状态信息为De-associate状态的情况下，删除在本地存储的终端信息以及连接信息。
优选地，在步骤S5，删除终端与NVE之间的连接信息之前，还可以包括以下步骤：
步骤S6：在确定终端状态信息为De-associate状态的情况下，向当前控制下的部分或全部NVE下发删除指令和/或通知网络释放网络资源，其中，指令用于删除在其他NVE内存储的与终端对应的流表表项，并且通知网络释放网络资源；
在优选实施例中，如果终端状态信息为去关联状态，则控制器必须删除在同一VN内的其他NVE上和该终端对应的流表表项，释放网络资源(如果之前没有进行过去激活动作)。同时也会将该终端信息以及和其连接的NVE之间的连接关系等信息从本控制器中删除。
优选地，在步骤S104中，根据终端信息和连接信息执行对应的操作可以包括以下操作：
步骤S7：在确定终端状态信息为Active状态的情况下，按照连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，增添指令用于在部分或全部NVE中增加与终端对应的流表表项，在增添指令中携带的信息包括：NVE对终端发送的报文的封装方式和转发方式。
在优选实施例中，可以向属于同一虚拟网络的其他NVE下发流表，流表的内容可以包括但不限于：NVE对终端发送的报文如何进行封装和转发信息以及对所需网络资源的分配。由此可以解决迁移时产生的triangle route的问题，提高网络的转发效率。
优选地，在步骤S104中，根据终端信息和连接信息执行对应的操作可以包括以下操作：
步骤S8：在确定所述终端状态信息为Active状态的情况下，接收来自于NVE的请求消息，其中，请求消息用于获取对终端发送的报文的处理方式；
步骤S9：按照连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，增添指令用于在部分或全部NVE中增加和终端对应的流表表项，在增添指令中携带的信息包括：NVE对终端发送的报文的封装方式和转发方式。
在优选实施例中，控制器仍只保存相关信息并不下发给其他NVE，只有当接收到来自于NVE的packet-in消息(reason＝0)，请求控制器告知如何处理该报文时，控制器才针对该Pakcet-in消息向相应的NVE下发流表。
优选地，在步骤S104中，根据终端信息和连接信息执行对应的操作还可以包括以下步骤：
步骤S10：在确定终端状态信息为Active状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；
步骤S11：确定网络资源以及配置信息是否可用。
优选地，在步骤S11中，确定网络资源以及配置信息是否可用可以包括以下之一：
(1)如果确定网络资源以及配置信息能够使用，则向NVE返回关联成功消息；
(2)如果确定网络资源以及配置信息不可用，则向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
在优选实施例中，如果终端状态信息为激活状态，则控制器将保存终端信息以及终端和NVE的连接信息，并依据终端的策略信息去获取该终端对应的网络资源和配置信息，以确定对应网络资源的可用性(如果之前没有进行过关联动作)。
优选地，在步骤S104中，根据终端信息和连接信息执行对应的操作可以包括以下步骤：
步骤S12：在确定终端状态信息为De-active状态的情况下，向当前控制下的部分或全部NVE下发删除指令，其中，删除指令用于删除在部分或全部NVE内存储的与终端对应的流表表项以及释放网络资源。
优选地，在步骤S104中，根据终端信息和连接信息执行对应的操作还可以包括以下步骤：
步骤S13：向NVE发送下发通知消息，其中，通知消息用于将指令的执行情况告知NVE。
在优选实施例中，如果终端状态信息为去激活状态，则控制器会向属于同一VN的其他NVE下发指令，删除同一VN内其他NVE内和该终端对应的流表表项并释放网络资源。控制器在完成上述动作后，可以向NVE发送一个成功与否的消息，以告知NVE。
优选地，在步骤S102，接收终端信息以及连接信息之前，还可以包括以下步骤：
步骤S14：向NVE发送请求消息，其中，请求消息用于向NVE请求获取终端信息和连接信息。
在优选实施例中，通过openflow协议NVE可以向控制器通告与其连接的终端信息以及终端与NVE之间的连接信息。此处的通告方式可以分为以下两种方式：
方式一、NVE主动向控制器通告与其连接的终端信息以及终端与NVE之间的连接信息；
方式二、控制器按需请求，然后再由NVE按照请求消息向控制器通告与其连接的终端信息以及终端与NVE之间的连接信息。即控制器也可以通过向NVE发送获取终端连接状态信息的请求消息，虚拟网络边缘设备按需给控制器提供虚拟网络边缘设备所连接的终端信息。
图2是根据本发明实施例的另一种信息的处理方法的流程图。如图2所示，该方法可以包括以下处理步骤：
步骤S202：向控制器通告自身当前连接的终端信息以及自身与终端的连接信息；
步骤S204：接收控制器下发的流表，其中，流表是控制器根据终端信息和连接信息确定的。
优选地，在步骤S204，接收控制器下发的流表之后，还可以包括以下操作：
步骤S15：根据流表确定对终端发送的报文的封装方式和转发方式以及与终端对应的网络资源的分配方式。
优选地，在步骤S202中，向控制器通告终端信息以及连接信息可以包括但不限于以下之一：
(1)主动向控制器通告终端信息以及连接信息；
(2)在接收到来自于控制器的请求消息后，根据请求消息向控制器通告终端信息以及连接信息。
优选地，在向控制器通告终端信息以及连接信息之前，还可以包括以下步骤：
步骤S16：接收自身连接的终端上报的终端信息和连接信息。
在优选实施过程中，上述终端信息可以包括但不限于以下至少之一：
(1)终端标识信息；
(2)终端策略信息；
(3)终端状态信息。
在优选实施过程中，上述终端标识信息可以包括但不限于以下至少之一：
(1)终端的媒体接入控制(MAC)地址；
(2)终端的互联网协议(IP)地址；
(3)终端归属的虚拟网络标识(VNID)。
在优选实施过程中，上述终端策略信息可以包括但不限于以下至少之一：
(1)服务质量(Qos)；
(2)访问控制列表(ACL)。
在优选实施过程中，上述终端状态信息可以包括但不限于以下至少之一：
(1)终端的关联(Associate)状态；
(2)终端的去关联(De-associate)状态；
(3)终端的激活(Active)状态；
(4)终端的去激活(De-active)状态；
(5)终端是否为迁移终端的关联状态。
优选地，上述方法还可以包括以下处理步骤：
步骤S17：在接收到控制器下发的关联或者迁移关联成功消息的情况下，通知与自身连接的终端连接建立成功。
优选地，上述方法还可以包括以下处理步骤：
步骤S18：在接收到控制器下发的关联失败消息的情况下，通知与自身连接的终端连接建立成功。
优选地，上述方法还可以包括以下处理步骤：
步骤S19：在接收到控制器下发的删除指令的情况下，删除与自身连接的终端的流表表项。
优选地，上述方法还可以包括以下处理步骤：
步骤S20：在接收到控制器下发的添加指令的情况下，增加与自身连接的终端的流表表项。
图3是根据本发明优选实施例的控制器与NVE组网示意图。如图3所示，云管理平台创建了若干虚拟站点终端VM1、VM2……VM6。VM1和VM4在同一个虚拟网络中进行通信。在VM1创建之后，需要参与网络通信时，可以通过预设协议(例如：虚拟桌面协议(VDP))通告给虚拟网络边缘交换机NVE，此处的通告携带了有VM的当前状态信息，即其为关联状态还是去关联状态，是激活状态还是去激活状态等。NVE在得到所连接的终端状态信息后，需要通过openflow协议再通告给控制器，然后控制器再根据终端的状态信息对终端所连接的交换机发出相应的指令。
优选实施例一(扩展openflow的packet-in消息)
假设NVE2接收到来自于VM4的关联请求，则NVE2向控制器发送一个扩展的Packet-in消息以模拟VM4发送的数据报文。
Figure PCTCN2014089261-appb-000001
扩展reason字段：
Figure PCTCN2014089261-appb-000002
Figure PCTCN2014089261-appb-000003
控制器在接收到reason＝6、10的packet-in消息之后，会将该VM的终端信息结合发送该packet-in消息的NVE地址信息(例如：IP、MAC)进行绑定并加以保存，以确认网络资源可用。如果reason＝10，表示该正在迁移的VM已经关联至NVE上，则需要依据预设策略建立迁移隧道。
控制器在确定可用性之后，向NVE回复成功消息。如果网络资源或配置不可用，则向NVE回复失败消息，不做动作。NVE在接收到该失败消息后，则会向网管或云管理平台发出报警，并且向终端返回连接失败消息，而不会保存该终端的信息。
控制器在接收到reason＝8的packet-in消息之后，则会将该VM的终端信息结合发送该packet-in消息的NVE地址信息(例如：IP、MAC)进行绑定并加以保存；同时依据预设策略执行以下操作：
操作一、通过openflow协议下发流表，告知属于同一个虚拟网络中的其他NVE。例如：VM1和VM4属于同一个虚拟网络，则控制器会向VM1连接的NVE1下发流表，当VM1需要经由NVE1向VM4发送报文时，NVE1会依据相应的流表对该报文进行封装，其封装的目的IP地址为NVE2的IP地址，并依据该IP地址将上述报文转发至NVE2，从而通过NVE2解封装后再将上述报文发送至VM4。
操作二、控制器仅存储相关信息，但并不下发给其他NVE，只有当接收到来自于NVE的packet-in消息(reason＝0)，以请求控制器告知如何处理该报文时，控制器才针对该报文会向发送请求的NVE下发相应地流表。例如：当VM1需要向VM4发送报文时，由于在NVE1中查找不到对应的表项，因此，会向控制器发送一个packet-in消息以请求获取流表，控制器按照正常处理流程下发流表，指定该报文的处理动作。
如果控制器接收到的是reason＝9的packet-in消息，则控制器可以选择性地向在同一VN内的其他NVE下发流表指令Modify-State，以删除这些NVE上对应的流表表项，并释放网络资源。
如果控制器接收到的是reason＝7的packet-in消息，则控制器下发流表指令Modify-State，以删除在同一VN内的其他NVE上对应的流表表项，并释放网络资源。而且也会将该终端信息以及与其连接的NVE之间的连接关系等信息从控制器中删除。
当reason＝6、7、8、9时，match字段携带的是VM的信息，例如：MAC地址、IP地址、VNID、VSI等相关信息。
优选实施例二(扩展openflow的异步消息)
在原openflow的异步消息基础上(packet-in、Flow-removed、Port-status)增加一个新的消息Notification-attachment。
Notification-association通知控制器如果需要到达本消息内所指定的终端，则需要经过本NVE转发，即需要经由目的地为本NVE的隧道进行转发。
Figure PCTCN2014089261-appb-000004
此处的filter_info中携带有该NVE所连接的VM的相关信息，例如：MAC、IP、VNID。
其中，status字段取值可以是：
Figure PCTCN2014089261-appb-000005
控制器接收到Notification_association消息，则会根据TS status信息对filter_info信息以及VSI信息进行处理。
控制器接收到TS_status＝OFPTSS_ASSOCIATE或者OFPCRR_MIGRATING的Notification_status消息，将该VM的终端信息结合发送该消息的NVE地址信息(例如：IP、MAC)进行绑定并加以保存，以确定网络资源的可用性。然后再发送回复成功消息告知NVE。只有回复消息告知网络资源可用，NVE才可以向控制器发送激活状态的消息。如果网络资源或配置不可用，则向NVE回复失败消息，不做动作。NVE在接收到该失败消息后，则会向网管或云管理平台发出报警，并且向终端返回连接失败消息，而不会保存该终端的信息。
如果TS_status＝OFPTSS_ACTIVE，则将该消息中的NVE地址信息(例如：IP、MAC)进行绑定，并加以保存。同时依据预设策略进行如下操作：
操作一、在通过openflow协议下发流表，告知属于同一个虚拟网络中的其他NVE。例如：VM1和VM4属于同一个虚拟网络，则控制器会向VM1连接的NVE1下发流表。当VM1需要经由NVE1向VM4发送报文时，NVE1会依据相应的流表对该报文进行封装，其封装的目的IP地址为NVE2的IP地址，并依据该IP地址将上述报文转发至NVE2，从而通过NVE2解封装后再将上述报文发送至VM4。
操作二、控制器仅存储相关信息，但并不下发给其他NVE，只有当接收到来自于NVE的packet-in消息(reason＝0)，以请求控制器告知如何处理该报文时，控制器才会向发送请求的NVE下发流表。例如：当VM1需要向VM4发送报文时，由于在NVE1中查找不到对应的表项，因此，会向控制器发送一个packet-in消息以请求获取流表，控制器按照正常处理流程下发流表，指定该报文的处理动作。
需要说明的是，在发送TS_status＝OFPTSS_ACTIVE消息之前，可以不发送TS_status＝OFPTSS_ASSOCIATE。但是，控制器在完成OFPTSS_ACTIVE对应的动作之前，应该先完成OFPTSS_ASSOCIATE的动作。如果成功则NVE连接该终端，否则，该NVE将不会连接该终端。
如果TS_status＝OFPTSS_DEACTIVE，则控制器可以选择性地下发流表指令Modify-State以删除在同一VN内的其他NVE上对应的流表表项，并释放网络资源。
如果TS_status＝OFPTSS_DEASSOCIATE，则控制器下发流表指令Modify-State以删除在同一VN内的其他NVE上对应的流表表项，并且也会将该终端信息以及与其连接的NVE之间的绑定关系删除。
此处，在发送TS_status＝OFPTSS_DEASSOCIATE消息之前，可以不发送TS_status＝OFPTSS_DEACTIVE。但是，控制器在完成OFPTSS_DEASSOCIATE对应的动作之前，应该先完成OFPTSS_DEACTIVE的动作。
如果NVE感知不到终端的连接(例如：NVE和终端之间的链接出现异常等原因)，则NVE需要主动向控制器发送TS_status＝OFPTSS_DEASSOCIATE消息，告知控制器该终端需要从本网络中去关联。优选地，NVE在等待一段时间都感知不到终端的连接再向控制器发送去关联消息。
优选实例三
上述优选实施例一和优选实施例二均为NVE主动向控制器告知自身连接的终端信息(例如：MAC、IP、VNID)，其可以是每当有终端连接到NVE上时，则该NVE主动发送消息告知控制器。
而在该优选实施例中，由控制器发起查询请求，扩展Multipart Messages消息。为终端的状态定义一个消息类型：
Figure PCTCN2014089261-appb-000006
Figure PCTCN2014089261-appb-000007
控制器发送请求消息：
Figure PCTCN2014089261-appb-000008
其中，定义type＝17，表示控制器需要知道交换机上所连接的终端信息。
上述body字段可以为空，也可以携带一个VNID。如果body字段为空，则表示控制器需要获取该NVE上所有的终端信息。如果body字段携带有一个或多个VNID，则表示该控制器需要获取属于这些VNID所标示的虚拟网络的终端信息。
交换机在接收到该请求消息之后，将回复一个消息告知控制器其所连接的终端相关信息。
Figure PCTCN2014089261-appb-000009
Figure PCTCN2014089261-appb-000010
此处的type依旧为17，表示交换机回复的是其所连接的终端信息。而body字段中携带有终端信息内容。
Figure PCTCN2014089261-appb-000011
此处的filter_info中携带有该NVE所连接的终端的相关信息，例如：MAC、IP、VNID。
其中，status字段取值可以是：
Figure PCTCN2014089261-appb-000012
控制器在接收到交换机的回复消息之后，其处理过程与上述优选实施例一和优选实施例二基本相同，此处不再赘述。
优选实施例四
当终端进行迁移时，也可以通过消息通知方法通告给控制器，从而使得控制器能够下放相应的流表。
在该优选实施例中，如图3所示，VM1需要热迁移至VM4上。图4是根据本发明优选实施例的从VM1迁移至VM4的迁移过程示意图。如图4所示，当VM1需要向VM4迁移时，首先要创建VM4。当VM4创建完成以后，VM4会通告给NVE2(例如：通过VDP协议)，因此，NVE2会向控制器发送一个携带有status＝Migrating的通告消息，其中，该通告消息还携带有VM4的IP地址、MAC地址、VNID等信息。控制器在接收到上述通告消息后将VM4的状态信息进行保存，并记录下VM4和NVE2之间的绑定关系；同时确认网络资源的可用性，如果可用，则控制器告知NVE2关联成功，可以执行下一步操作。
在VM1向VM4迁移完成后，VM1也会通告给NVE1(例如：通过VDP协议)，NVE1得知VM1的使命即将结束后，会向控制器发送一个携带有status＝Deactive的通告消息，其中该通告消息还携带有VM1的IP地址、MAC地址、VNID等信息。控制器在接收到上述控制消息后将向同一VN内的其他NVE交换机发送一条删除对应流表的指令，以删除所有和通往VM1相关的流表。同时，控制器可以在删除流表的同时告知这些NVE，删除流表是因为该主机迁移完成，控制器已经释放资源。
同时，VM4在迁移完成后也会被激活并通告给NVE2，NVE2通过openflow协议向控制器发送一个status＝Active的通告消息，其中，该通告消息中还携带有VM1的IP地址、MAC地址、VNID等信息。控制器在接收到Active的消息后，会依据预设策略进行如下操作：
操作一、在通过openflow协议下发流表，告知属于同一个虚拟网络中的其他NVE。
操作二、控制器只保存相关信息，确定该VM4已经处于可用状态，但并不下发给其他NVE，只有当接收到来自于NVE的packet-in消息(reason＝0)，以请求控制器告知如何处理该报文时，控制器才会向发送请求的NVE下发流表。例如：当VM1需要向VM4发送报文时，由于在NVE1中查找不到对应的表项，因此，会向控制器发 送一个packet-in消息以请求获取流表，控制器按照正常处理流程下发流表，指定该报文的处理动作。
从而，网络侧完成了对VM迁移的支持。
图5是根据本发明实施例的信息的处理装置的结构框图。如图5所示，该信息的处理装置可以包括：接收模块10，设置为接收NVE通告的NVE所连接的终端信息以及NVE与终端的连接信息；处理模块20，设置为根据终端信息和连接信息执行对应的操作。
采用如图5所示的装置，解决了相关技术中控制器无法及时获取全网的拓扑信息的问题，进而能够提高虚拟层叠网络的快速转发能力以及对全网资源的管控能力。
在优选实施过程中，上述终端信息可以包括但不限于以下至少之一：
(1)终端标识信息；
(2)终端策略信息；
(3)终端状态信息。
在优选实施过程中，上述终端标识信息可以包括但不限于以下至少之一：
(1)终端的媒体接入控制(MAC)地址；
(2)终端的互联网协议(IP)地址；
(3)终端归属的虚拟网络标识(VNID)。
在优选实施过程中，上述终端策略信息可以包括但不限于以下至少之一：
(1)服务质量(Qos)；
(2)访问控制列表(ACL)。
在优选实施过程中，上述终端状态信息可以包括但不限于以下至少之一：
(1)终端的关联(Associate)状态；
(2)终端的去关联(De-associate)状态；
(3)终端的激活(Active)状态；
(4)终端的去激活(De-active)状态；
(5)终端是否为迁移终端的关联状态。
优选地，如图6所示，处理模块20可以包括：第一获取单元200，设置为在确定终端状态信息为Associate状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；第一确定单元202，设置为确定网络资源以及配置信息是否可用。
优选地，第一确定单元202，设置为确定网络资源以及配置信息是否可用包括以下之一：如果确定网络资源以及配置信息可用，则保存终端信息以及连接信息，和/或，向NVE返回关联成功消息；如果确定网络资源以及配置信息不可用，则无需保存终端信息以及连接信息，和/或，向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
优选地，如图6所示，处理模块20可以包括：第二获取单元204，设置为在确定终端状态信息为迁移终端的关联状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；第二确定单元206，设置为确定网络资源以及配置信息是否可用和/或在虚拟网络内建立迁移隧道是否完成，其中，迁移隧道用于对终端上的数据进行迁移。
优选地，第二确定单元206，设置为确定网络资源以及配置信息是否可用和/或在虚拟网络内建立迁移隧道是否完成包括以下之一：如果确定网络资源以及配置信息能够使用且迁移隧道完成，则向NVE返回关联成功消息，并保存终端信息以及连接信息；如果确定网络资源以及配置信息不可用和/或所述迁移隧道尚未完成，则向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
优选地，如图6所示，处理模块20可以包括：删除单元208，设置为在确定终端状态信息为De-associate状态的情况下，删除在本地存储的终端信息以及连接信息。
优选地，如图6所示，处理模块20还可以包括：第一下发单元210，设置为在确定终端状态信息为De-associate状态的情况下，向当前控制下的部分或全部NVE下发删除指令和/或通知网络释放网络资源，其中，删除指令用于删除在其他NVE内存储的与终端对应的流表表项，并且通知网络释放网络资源；
优选地，如图6所示，处理模块20还可以包括：第二下发单元212，设置为在确定终端状态信息为Active状态的情况下，按照连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，增添指令用于在部分或全部NVE中增加与终端对应的流表表项，在增添指令中携带的信息包括：NVE对终端发送的报文的封装方式和转发方式。
优选地，如图6所示，处理模块20还可以包括：接收单元214，设置为在确定所述终端状态信息为Active状态的情况下，接收来自于NVE的请求消息，其中，请求消息用于获取对终端发送的报文的处理方式；第三下发单元216，设置为按照连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，增添指令用于在部分或全部NVE中增加和终端对应的流表表项，在增添指令中携带的信息包括：NVE对终端发送的报文的封装方式和转发方式。
优选地，如图6所示，处理模块20还可以包括：第三获取单元218，设置为在确定终端状态信息为Active状态的情况下，按照终端策略信息获取与终端对应的网络资源和配置信息；第三确定单元220，设置为确定网络资源以及配置信息是否可用。
优选地，第三确定单元220，设置为确定网络资源以及配置信息是否可用包括以下之一：如果确定网络资源以及配置信息能够使用，则向NVE返回关联成功消息；如果确定网络资源以及配置信息不可用，则向NVE返回关联失败消息，其中，关联失败消息用于使NVE向终端返回连接失败消息，并且向预设网络实体发出报警，NVE无需保存终端的信息。
优选地，如图6所示，处理模块20可以包括：第四下发单元222，设置为在确定终端状态信息为De-active状态的情况下，向当前控制下的部分或全部NVE下发删除指令，其中，删除指令用于删除在部分或全部NVE内存储的与终端对应的流表表项以及释放网络资源。
优选地，如图6所示，处理模块20还可以包括：第五下发单元224，设置为向NVE发送下发通知消息，其中，通知消息用于将指令的执行情况告知NVE。
优选地，如图6所示，上述装置还可以包括：发送模块30，设置为向NVE发送请求消息，其中，请求消息用于向NVE请求获取终端信息和连接信息。
图7是根据本发明实施例的另一种信息的处理装置的结构框图。如图7所示，该信息的处理装置可以包括：通告模块40，设置为向控制器通告自身当前连接的终端信 息以及自身与终端之间的连接信息；第一接收模块50，设置为接收控制器下发的流表，其中，流表是控制器根据终端信息和连接信息确定的。
优选地，如图8所示，通告模块40可以包括：第一通告单元400，设置为主动向控制器通告终端信息以及连接信息；第二通告单元402，设置为在接收到来自于控制器的请求消息后，根据请求消息向控制器通告终端信息以及连接信息。
优选地，如图8所示，上述装置还可以包括：第二接收模块60，设置为接收自身连接的终端上报的终端信息和连接信息。
在优选实施过程中，上述终端信息可以包括但不限于以下至少之一：
(1)终端标识信息；
(2)终端策略信息；
(3)终端状态信息。
在优选实施过程中，上述终端标识信息可以包括但不限于以下至少之一：
(1)终端的媒体接入控制(MAC)地址；
(2)终端的互联网协议(IP)地址；
(3)终端归属的虚拟网络标识(VNID)。
在优选实施过程中，上述终端策略信息可以包括但不限于以下至少之一：
(1)服务质量(Qos)；
(2)访问控制列表(ACL)。
在优选实施过程中，上述终端状态信息可以包括但不限于以下至少之一：
(1)终端的关联(Associate)状态；
(2)终端的去关联(De-associate)状态；
(3)终端的激活(Active)状态；
(4)终端的去激活(De-active)状态；
(5)终端是否为迁移终端的关联状态。
优选地，如图8所示，上述装置还可以包括：处理模块70，设置为在接收到控制器下发的关联或者迁移关联成功消息的情况下，通知与自身连接的终端连接建立成功。
优选地，如图8所示，上述装置还可以包括：处理模块70，还设置为在接收到控制器下发的关联失败消息的情况下，通知与自身连接的终端连接建立成功。
优选地，如图8所示，上述装置还可以包括：处理模块70，还设置为在接收到控制器下发的删除指令的情况下，删除与自身连接的终端的流表表项。
优选地，如图8所示，上述装置还可以包括：处理模块70，还设置为在接收到控制器下发的添加指令的情况下，增加与自身连接的终端的流表表项。
从以上的描述中，可以看出，上述实施例实现了如下技术效果(需要说明的是这些效果是某些优选实施例可以达到的效果)：采用本发明实施例所提供的技术方案对于数据中心网络中的虚拟机迁移，能够在迁移过程中协调控制器的处理，使得迁移更加有序地进行，并且还消除了虚拟机迁移时出现的三角路由的问题。由于控制器能够及时感知网络边缘所连接的终端状态，及时下发流表和修改流表，从而有效地提高了报文的转发性能。
显然，本领域的技术人员应该明白，上述的本发明的各模块或各步骤可以用通用的计算装置来实现，它们可以集中在单个的计算装置上，或者分布在多个计算装置所组成的网络上，可选地，它们可以用计算装置可执行的程序代码来实现，从而，可以将它们存储在存储装置中由计算装置来执行，并且在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤，或者将它们分别制作成各个集成电路模块，或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样，本发明不限制于任何特定的硬件和软件结合。
以上所述仅为本发明的优选实施例而已，并不用于限制本发明，对于本领域的技术人员来说，本发明可以有各种更改和变化。凡在本发明的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。
工业实用性
如上所述，本发明实施例提供的一种信息的处理方法及装置具有以下有益效果：能够提高虚拟层叠网络的快速转发能力以及对全网资源的管控能力。

Claims (58)

  1. 一种信息的处理方法，包括：
    接收虚拟网络边缘设备NVE通告的所述NVE所连接的终端信息以及所述NVE与终端的连接信息；
    根据所述终端信息和所述连接信息执行对应的操作。
  2. 根据权利要求1所述的方法，其中，所述终端信息包括以下至少之一：
    终端标识信息、终端策略信息、终端状态信息。
  3. 根据权利要求2所述的方法，其中，所述终端标识信息包括以下至少之一：
    所述终端的媒体接入控制MAC地址；
    所述终端的互联网协议IP地址；
    所述终端归属的虚拟网络标识VNID。
  4. 根据权利要求2所述的方法，其中，所述终端策略信息包括以下至少之一：
    服务质量Qos、访问控制列表ACL。
  5. 根据权利要求2所述的方法，其中，所述终端状态信息包括以下至少之一：
    所述终端的关联Associate状态；
    所述终端的去关联De-associate状态；
    所述终端的激活Active状态；
    所述终端的去激活De-active状态；
    所述终端是否为迁移终端的关联状态。
  6. 根据权利要求2至5中任一项所述的方法，其中，根据所述终端信息和所述连接信息执行对应的操作包括：
    在确定所述终端状态信息为Associate状态的情况下，按照所述终端策略信息获取与所述终端对应的网络资源和配置信息；
    确定所述网络资源以及所述配置信息是否可用。
  7. 根据权利要求6所述的方法，其中，确定所述网络资源以及所述配置信息是否可用包括以下之一：
    如果确定所述网络资源以及所述配置信息可用，则保存所述终端信息以及所述连接信息，和/或，向所述NVE返回关联成功消息；
    如果确定所述网络资源以及所述配置信息不可用，则无需保存所述终端信息以及所述连接信息，和/或，向所述NVE返回关联失败消息，其中，所述关联失败消息用于使所述NVE向所述终端返回连接失败消息，并且向预设网络实体发出报警。
  8. 根据权利要求2至5中任一项所述的方法，其中，根据所述终端信息和所述连接信息执行对应的操作包括：
    在确定所述终端状态信息为迁移终端的关联状态的情况下，按照所述终端策略信息获取与所述终端对应的网络资源和配置信息；
    确定所述网络资源以及所述配置信息是否可用和/或在虚拟网络内建立迁移隧道是否完成，其中，所述迁移隧道用于对所述终端上的数据进行迁移。
  9. 根据权利要求8所述的方法，其中，确定所述网络资源以及所述配置信息是否可用和/或在所述虚拟网络内建立迁移隧道是否完成包括以下之一：
    如果确定所述网络资源以及所述配置信息能够使用和/或所述迁移隧道完成，则向所述NVE返回关联成功消息，并保存所述终端信息以及所述连接信息；
    如果确定所述网络资源以及所述配置信息不可用和/或所述迁移隧道尚未完成，则向所述NVE返回关联失败消息，其中，所述关联失败消息用于使所述NVE向所述终端返回连接失败消息，并且向预设网络实体发出报警，所述NVE无需保存所述终端的信息。
  10. 根据权利要求2至5中任一项所述的方法，其中，根据所述终端信息和所述连接信息执行对应的操作包括：
    在确定所述终端状态信息为De-associate状态的情况下，删除在本地存储的所述终端信息以及所述连接信息。
  11. 根据权利要求10所述的方法，其中，在删除所述终端与所述NVE之间的所述连接信息之前，还包括：
    在确定所述终端状态信息为De-associate状态的情况下，向当前控制下的部分或全部NVE下发删除指令和/或通知网络释放网络资源，其中，所述删除指令用于删除在所述其他NVE内存储的与所述终端对应的流表表项，并且通知所述网络释放所述网络资源。
  12. 根据权利要求2至5中任一项所述的方法，其中，根据所述终端信息和所述连接信息执行对应的操作包括：
    在确定所述终端状态信息为Active状态的情况下，按照所述连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，所述增添指令用于在所述部分或全部NVE中增加与所述终端对应的流表表项，在所述增添指令中携带的信息包括：所述NVE对所述终端发送的报文的封装方式和转发方式。
  13. 根据权利要求2至5中任一项所述的方法，其中，根据所述终端信息和所述连接信息执行对应的操作包括：
    在确定所述终端状态信息为Active状态的情况下，接收来自于所述NVE的请求消息，其中，所述请求消息用于获取对所述终端发送的报文的处理方式；
    按照所述连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，所述增添指令用于在所述部分或全部NVE中增加和所述终端对应的流表表项，在所述增添指令中携带的信息包括：所述NVE对所述终端发送的报文的封装方式和转发方式。
  14. 根据权利要求12或13所述的方法，其中，根据所述终端信息和所述连接信息执行对应的操作还包括：
    在确定所述终端状态信息为Active状态的情况下，按照所述终端策略信息获取与所述终端对应的网络资源和配置信息；
    确定所述网络资源以及所述配置信息是否可用。
  15. 根据权利要求14所述的方法，其中，确定所述网络资源以及所述配置信息是否可用包括以下之一：
    如果确定所述网络资源以及所述配置信息能够使用，则向所述NVE返回关联成功消息；
    如果确定所述网络资源以及所述配置信息不可用，则向所述NVE返回关联失败消息，其中，所述关联失败消息用于使所述NVE向所述终端返回连接 失败消息，并且向预设网络实体发出报警，所述NVE无需保存所述终端的信息。
  16. 根据权利要求2至5中任一项所述的方法，其中，根据所述终端信息和所述连接信息执行对应的操作包括：
    在确定所述终端状态信息为De-active状态的情况下，向当前控制下的部分或全部NVE下发删除指令，其中，所述删除指令用于删除在所述部分或全部NVE内存储的与所述终端对应的流表表项以及释放所述网络资源。
  17. 根据权利要求16所述的方法，其中，根据所述终端信息和所述连接信息执行对应的操作还包括：
    向所述NVE发送下发通知消息，其中，所述通知消息用于将所述指令的执行情况告知所述NVE。
  18. 根据权利要求1所述的方法，其中，在接收所述终端信息以及所述连接信息之前，还包括：
    向所述NVE发送请求消息，其中，所述请求消息用于向所述NVE请求获取所述终端信息和所述连接信息。
  19. 一种信息的处理方法，包括：
    向控制器通告自身当前连接的终端信息以及自身与终端之间的连接信息；
    接收所述控制器下发的流表，其中，所述流表是所述控制器根据所述终端信息和所述连接信息确定的。
  20. 根据权利要求19所述的方法，其中，向所述控制器通告所述终端信息以及所述连接信息包括以下之一：
    主动向所述控制器通告所述终端信息以及所述连接信息；
    在接收到来自于所述控制器的请求消息后，根据所述请求消息向所述控制器通告所述终端信息以及所述连接信息。
  21. 根据权利要求19所述的方法，其中，在向所述控制器通告所述终端信息以及所述连接信息之前，还包括：
    接收自身连接的终端上报的所述终端信息和所述连接信息。
  22. 根据权利要求19所述的方法，其中，所述终端信息包括以下至少之一：
    终端标识信息、终端策略信息、终端状态信息。
  23. 根据权利要求22所述的方法，其中，所述终端标识信息包括以下至少之一：
    所述终端的媒体接入控制MAC地址；
    所述终端的互联网协议IP地址；
    所述终端归属的虚拟网络标识VNID。
  24. 根据权利要求22所述的方法，其中，所述终端策略信息包括以下至少之一：
    服务质量Qos、访问控制列表ACL。
  25. 根据权利要求22所述的方法，其中，所述终端状态信息包括以下至少之一：
    所述终端的关联Associate状态；
    所述终端的去关联De-associate状态；
    所述终端的激活Active状态；
    所述终端的去激活De-active状态；
    所述终端是否为迁移终端的关联状态。
  26. 根据权利要求19所述的方法，其中，所述方法还包括：在接收到所述控制器下发的关联或者迁移关联成功消息的情况下，通知与自身连接的终端连接建立成功。
  27. 根据权利要求19所述的方法，其中，所述方法还包括：在接收到所述控制器下发的关联失败消息的情况下，通知与自身连接的终端连接建立成功。
  28. 根据权利要求19所述的方法，其中，所述方法还包括：在接收到所述控制器下发的删除指令的情况下，删除与自身连接的终端的流表表项。
  29. 根据权利要求19所述的方法，其中，所述方法还包括：在接收到所述控制器下发的添加指令的情况下，增加与自身连接的终端的流表表项。
  30. 一种信息的处理装置，包括：
    接收模块，设置为接收虚拟网络边缘设备NVE通告的所述NVE所连接的终端信息以及所述NVE与终端的连接信息；
    处理模块，设置为根据所述终端信息和所述连接信息执行对应的操作。
  31. 根据权利要求30所述的装置，其中，所述终端信息包括以下至少之一：
    终端标识信息、终端策略信息、终端状态信息。
  32. 根据权利要求31所述的装置，其中，所述终端标识信息包括以下至少之一：
    所述终端的媒体接入控制MAC地址；
    所述终端的互联网协议IP地址；
    所述终端归属的虚拟网络标识VNID。
  33. 根据权利要求31所述的装置，其中，所述终端策略信息包括以下至少之一：
    服务质量Qos、访问控制列表ACL。
  34. 根据权利要求31所述的装置，其中，所述终端状态信息包括以下至少之一：
    所述终端的关联Associate状态；
    所述终端的去关联De-associate状态；
    所述终端的激活Active状态；
    所述终端的去激活De-active状态；
    所述终端是否为迁移终端的关联状态。
  35. 根据权利要求31至34中任一项所述的装置，其中，所述处理模块包括：
    第一获取单元，设置为在确定所述终端状态信息为Associate状态的情况下，按照所述终端策略信息获取与所述终端对应的网络资源和配置信息；
    第一确定单元，设置为确定所述网络资源以及所述配置信息是否可用。
  36. 根据权利要求35所述的装置，其中，所述第一确定单元，设置为确定所述网络资源以及所述配置信息是否可用包括以下之一：
    如果确定所述网络资源以及所述配置信息可用，则保存所述终端信息以及所述连接信息，和/或，向所述NVE返回关联成功消息；
    如果确定所述网络资源以及所述配置信息不可用，则无需保存所述终端信息以及所述连接信息，和/或，向所述NVE返回关联失败消息，其中，所述关联失败消息用于使所述NVE向所述终端返回连接失败消息，并且向预设网络实体发出报警，所述NVE无需保存所述终端的信息。
  37. 根据权利要求31至34中任一项所述的装置，其中，所述处理模块包括：
    第二获取单元，设置为在确定所述终端状态信息为迁移终端的关联状态的情况下，按照所述终端策略信息获取与所述终端对应的网络资源和配置信息；
    第二确定单元，设置为确定所述网络资源以及所述配置信息是否可用和/或在虚拟网络内建立迁移隧道是否完成，其中，所述迁移隧道用于对所述终端上的数据进行迁移。
  38. 根据权利要求37所述的装置，其中，所述第二确定单元，设置为确定所述网络资源以及所述配置信息是否可用和/或在所述虚拟网络内建立迁移隧道是否完成包括以下之一：
    如果确定所述网络资源以及所述配置信息能够使用和/或所述迁移隧道完成，则向所述NVE返回关联成功消息，并保存所述终端信息以及所述连接信息；
    如果确定所述网络资源以及所述配置信息不可用和/或所述迁移隧道尚未完成，则向所述NVE返回关联失败消息，其中，所述关联失败消息用于使所述NVE向所述终端返回连接失败消息，并且向预设网络实体发出报警，所述NVE无需保存所述终端的信息。
  39. 根据权利要求31至34中任一项所述的装置，其中，所述处理模块包括：
    删除单元，设置为在确定所述终端状态信息为De-associate状态的情况下，删除在本地存储的所述终端信息以及所述连接信息。
  40. 根据权利要求39所述的装置，其中，所述处理模块还包括：
    第一下发单元，设置为在确定所述终端状态信息为De-associate状态的情况下，向当前控制下的部分或全部NVE下发删除指令和/或通知网络释放网络资源，其中，所述删除指令用于删除在所述其他NVE内存储的与所述终端对应的流表表项，并且通知所述网络释放所述网络资源。
  41. 根据权利要求31至34中任一项所述的装置，其中，所述处理模块包括：
    第二下发单元，设置为在确定所述终端状态信息为Active状态的情况下，按照所述连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，所述增添指令用于在所述部分或全部NVE中增加与所述终端对应的流表表项，在所述增添指令中携带的信息包括：所述NVE对所述终端发送的报文的封装方式和转发方式。
  42. 根据权利要求31至34中任一项所述的装置，其中，所述处理模块包括：
    接收单元，设置为在确定所述终端状态信息为Active状态的情况下，接收来自于所述NVE的请求消息，其中，所述请求消息用于获取对所述终端发送的报文的处理方式；
    第三下发单元，设置为按照所述连接信息向当前控制下的部分或全部NVE下发增添指令和/或分配网络资源，其中，所述增添指令用于在所述部分或全部NVE中增加和所述终端对应的流表表项，在所述增添指令中携带的信息包括：所述NVE对所述终端发送的报文的封装方式和转发方式。
  43. 根据权利要求41或42所述的装置，其中，所述处理模块还包括：
    第三获取单元，设置为在确定所述终端状态信息为Active状态的情况下，按照所述终端策略信息获取与所述终端对应的网络资源和配置信息；
    第三确定单元，设置为确定所述网络资源以及所述配置信息是否可用。
  44. 根据权利要求43所述的装置，其中，所述第三确定单元，设置为确定所述网络资源以及所述配置信息是否可用包括以下之一：
    如果确定所述网络资源以及所述配置信息能够使用，则向所述NVE返回关联成功消息；
    如果确定所述网络资源以及所述配置信息不可用，则向所述NVE返回关联失败消息，其中，所述关联失败消息用于使所述NVE向所述终端返回连接失败消息，并且向预设网络实体发出报警，所述NVE无需保存所述终端的信息。
  45. 根据权利要求31至34中任一项所述的装置，其中，所述处理模块包括：
    第四下发单元，设置为在确定所述终端状态信息为De-active状态的情况下，向当前控制下的部分或全部NVE下发删除指令，其中，所述删除指令用于删除在所述部分或全部NVE内存储的与所述终端对应的流表表项以及释放所述网络资源。
  46. 根据权利要求45所述的装置，其中，所述处理模块还包括：
    第五下发单元，设置为向所述NVE发送下发通知消息，其中，所述通知消息用于将所述指令的执行情况告知所述NVE。
  47. 根据权利要求30所述的装置，其中，所述装置还包括：
    发送模块，设置为向所述NVE发送请求消息，其中，所述请求消息用于向所述NVE请求获取所述终端信息和所述连接信息。
  48. 一种信息的处理装置，包括：
    通告模块，设置为向控制器通告自身当前连接的终端信息以及自身与终端之间的连接信息；
    第一接收模块，设置为接收所述控制器下发的流表，其中，所述流表是所述控制器根据所述终端信息和所述连接信息确定的。
  49. 根据权利要求48所述的装置，其中，所述通告模块包括：
    第一通告单元，设置为主动向所述控制器通告所述终端信息以及所述连接信息；
    第二通告单元，设置为在接收到来自于所述控制器的请求消息后，根据所述请求消息向所述控制器通告所述终端信息以及所述连接信息。
  50. 根据权利要求48所述的装置，其中，所述装置还包括：
    第二接收模块，设置为接收自身连接的终端上报的所述终端信息和所述连接信息。
  51. 根据权利要求48所述的装置，其中，所述终端信息包括以下至少之一：
    终端标识信息、终端策略信息、终端状态信息。
  52. 根据权利要求51所述的装置，其中，所述终端标识信息包括以下至少之一：
    所述终端的媒体接入控制MAC地址；
    所述终端的互联网协议IP地址；
    所述终端归属的虚拟网络标识VNID。
  53. 根据权利要求51所述的装置，其中，所述终端策略信息包括以下至少之一：
    服务质量Qos、访问控制列表ACL。
  54. 根据权利要求51所述的装置，其中，所述终端状态信息包括以下至少之一：
    所述终端的关联Associate状态；
    所述终端的去关联De-associate状态；
    所述终端的激活Active状态；
    所述终端的去激活De-active状态；
    所述终端是否为迁移终端的关联状态。
  55. 根据权利要求48所述的装置，其中，所述装置还包括：处理模块，设置为在接收到所述控制器下发的关联或者迁移关联成功消息的情况下，通知与自身连接的终端连接建立成功。
  56. 根据权利要求48所述的装置，其中，所述装置还包括：处理模块，还设置为在接收到所述控制器下发的关联失败消息的情况下，通知与自身连接的终端连接建立成功。
  57. 根据权利要求48所述的装置，其中，所述装置还包括：处理模块，还设置为在接收到所述控制器下发的删除指令的情况下，删除与自身连接的终端的流表表项。
  58. 根据权利要求48所述的装置，其中，所述装置还包括：处理模块，还设置为在接收到所述控制器下发的添加指令的情况下，增加与自身连接的终端的流表表项。
PCT/CN2014/089261 2014-07-31 2014-10-23 信息的处理方法及装置 WO2015117401A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP14881726.5A EP3176979A4 (en) 2014-07-31 2014-10-23 Information processing method and device
US15/329,960 US20170264496A1 (en) 2014-07-31 2014-10-23 Method and device for information processing

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410374597.6A CN105323136B (zh) 2014-07-31 2014-07-31 信息的处理方法及装置
CN201410374597.6 2014-07-31

Publications (1)

Publication Number Publication Date
WO2015117401A1 true WO2015117401A1 (zh) 2015-08-13

Family

ID=53777219

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2014/089261 WO2015117401A1 (zh) 2014-07-31 2014-10-23 信息的处理方法及装置

Country Status (4)

Country Link
US (1) US20170264496A1 (zh)
EP (1) EP3176979A4 (zh)
CN (1) CN105323136B (zh)
WO (1) WO2015117401A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11294867B2 (en) 2017-03-15 2022-04-05 Carrier Corporation Internet of things architecture with a cloud-based integration platform

Families Citing this family (50)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10454714B2 (en) 2013-07-10 2019-10-22 Nicira, Inc. Method and system of overlay flow control
US10749711B2 (en) 2013-07-10 2020-08-18 Nicira, Inc. Network-link method useful for a last-mile connectivity in an edge-gateway multipath system
US10135789B2 (en) 2015-04-13 2018-11-20 Nicira, Inc. Method and system of establishing a virtual private network in a cloud service for branch networking
US10425382B2 (en) 2015-04-13 2019-09-24 Nicira, Inc. Method and system of a cloud-based multipath routing protocol
US10498652B2 (en) 2015-04-13 2019-12-03 Nicira, Inc. Method and system of application-aware routing with crowdsourcing
US10992558B1 (en) 2017-11-06 2021-04-27 Vmware, Inc. Method and apparatus for distributed data network traffic optimization
US11121962B2 (en) 2017-01-31 2021-09-14 Vmware, Inc. High performance software-defined core network
US11706127B2 (en) 2017-01-31 2023-07-18 Vmware, Inc. High performance software-defined core network
US20180219765A1 (en) 2017-01-31 2018-08-02 Waltz Networks Method and Apparatus for Network Traffic Control Optimization
US11252079B2 (en) 2017-01-31 2022-02-15 Vmware, Inc. High performance software-defined core network
US10992568B2 (en) 2017-01-31 2021-04-27 Vmware, Inc. High performance software-defined core network
US20200036624A1 (en) 2017-01-31 2020-01-30 The Mode Group High performance software-defined core network
US10778528B2 (en) 2017-02-11 2020-09-15 Nicira, Inc. Method and system of connecting to a multipath hub in a cluster
US10523539B2 (en) 2017-06-22 2019-12-31 Nicira, Inc. Method and system of resiliency in cloud-delivered SD-WAN
US10977064B2 (en) 2017-08-23 2021-04-13 Red Hat, Inc. Live virtual machine migration
US10838752B2 (en) 2017-08-28 2020-11-17 Red Hat Israel, Ltd. Network notification loss detection for virtual machine migration
US11070629B2 (en) * 2017-08-30 2021-07-20 Red Hat Israel, Ltd Migration notification and response messages for virtual machines
US10628198B2 (en) 2017-08-30 2020-04-21 Red Hat Israel Ltd. Hypervisor management of migration notification and response messages for virtual machines
US11115480B2 (en) 2017-10-02 2021-09-07 Vmware, Inc. Layer four optimization for a virtual network defined over public cloud
US11089111B2 (en) 2017-10-02 2021-08-10 Vmware, Inc. Layer four optimization for a virtual network defined over public cloud
US10958479B2 (en) 2017-10-02 2021-03-23 Vmware, Inc. Selecting one node from several candidate nodes in several public clouds to establish a virtual network that spans the public clouds
US10999100B2 (en) 2017-10-02 2021-05-04 Vmware, Inc. Identifying multiple nodes in a virtual network defined over a set of public clouds to connect to an external SAAS provider
US10959098B2 (en) * 2017-10-02 2021-03-23 Vmware, Inc. Dynamically specifying multiple public cloud edge nodes to connect to an external multi-computer node
US10999165B2 (en) 2017-10-02 2021-05-04 Vmware, Inc. Three tiers of SaaS providers for deploying compute and network infrastructure in the public cloud
US11223514B2 (en) 2017-11-09 2022-01-11 Nicira, Inc. Method and system of a dynamic high-availability mode based on current wide area network connectivity
US10965641B2 (en) 2017-12-07 2021-03-30 Red Hat, Inc. Live virtual machine migration utilizing network address pools
US10693801B2 (en) 2018-02-20 2020-06-23 Red Hat, Inc. Packet drop reduction in virtual machine migration
US11252105B2 (en) 2019-08-27 2022-02-15 Vmware, Inc. Identifying different SaaS optimal egress nodes for virtual networks of different entities
US11611507B2 (en) 2019-10-28 2023-03-21 Vmware, Inc. Managing forwarding elements at edge nodes connected to a virtual network
US11394640B2 (en) 2019-12-12 2022-07-19 Vmware, Inc. Collecting and analyzing data regarding flows associated with DPI parameters
US11489783B2 (en) 2019-12-12 2022-11-01 Vmware, Inc. Performing deep packet inspection in a software defined wide area network
US12041479B2 (en) 2020-01-24 2024-07-16 VMware LLC Accurate traffic steering between links through sub-path path quality metrics
CN111478853B (zh) * 2020-04-02 2022-02-08 广州市品高软件股份有限公司 一种基于SDN的IPv6路由公告方法和***
US11245641B2 (en) 2020-07-02 2022-02-08 Vmware, Inc. Methods and apparatus for application aware hub clustering techniques for a hyper scale SD-WAN
US11363124B2 (en) 2020-07-30 2022-06-14 Vmware, Inc. Zero copy socket splicing
US11444865B2 (en) 2020-11-17 2022-09-13 Vmware, Inc. Autonomous distributed forwarding plane traceability based anomaly detection in application traffic for hyper-scale SD-WAN
US11575600B2 (en) 2020-11-24 2023-02-07 Vmware, Inc. Tunnel-less SD-WAN
CN112491630B (zh) * 2020-12-07 2023-08-04 北京华胜天成科技股份有限公司 一种裸机自动部署方法、装置及云环境平台
US11929903B2 (en) 2020-12-29 2024-03-12 VMware LLC Emulating packet flows to assess network links for SD-WAN
US11792127B2 (en) 2021-01-18 2023-10-17 Vmware, Inc. Network-aware load balancing
US11979325B2 (en) 2021-01-28 2024-05-07 VMware LLC Dynamic SD-WAN hub cluster scaling with machine learning
US11582144B2 (en) 2021-05-03 2023-02-14 Vmware, Inc. Routing mesh to provide alternate routes through SD-WAN edge forwarding nodes based on degraded operational states of SD-WAN hubs
US12009987B2 (en) 2021-05-03 2024-06-11 VMware LLC Methods to support dynamic transit paths through hub clustering across branches in SD-WAN
US11729065B2 (en) 2021-05-06 2023-08-15 Vmware, Inc. Methods for application defined virtual network service among multiple transport in SD-WAN
US12015536B2 (en) 2021-06-18 2024-06-18 VMware LLC Method and apparatus for deploying tenant deployable elements across public clouds based on harvested performance metrics of types of resource elements in the public clouds
US11489720B1 (en) 2021-06-18 2022-11-01 Vmware, Inc. Method and apparatus to evaluate resource elements and public clouds for deploying tenant deployable elements based on harvested performance metrics
US11375005B1 (en) 2021-07-24 2022-06-28 Vmware, Inc. High availability solutions for a secure access service edge application
US11943146B2 (en) 2021-10-01 2024-03-26 VMware LLC Traffic prioritization in SD-WAN
US11909815B2 (en) 2022-06-06 2024-02-20 VMware LLC Routing based on geolocation costs
US12034587B1 (en) 2023-03-27 2024-07-09 VMware LLC Identifying and remediating anomalies in a self-healing network

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102801715A (zh) * 2012-07-30 2012-11-28 华为技术有限公司 一种网络中虚拟机迁移的方法、网关及***
US20140006585A1 (en) * 2012-06-29 2014-01-02 Futurewei Technologies, Inc. Providing Mobility in Overlay Networks
WO2014124604A1 (zh) * 2013-02-18 2014-08-21 华为技术有限公司 生成配置信息的方法和网络控制单元

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101114994B (zh) * 2006-07-28 2010-05-12 中兴通讯股份有限公司 一种多协议标签交换虚拟专用网连通性检测方法
CN100450101C (zh) * 2006-08-30 2009-01-07 华为数字技术有限公司 一种oam报文的转发控制方法及***
CN102047245B (zh) * 2008-03-31 2013-07-17 亚马逊技术有限公司 配置计算机节点之间的通信
CN103365852A (zh) * 2012-03-28 2013-10-23 天津书生软件技术有限公司 一种文档库***中的并发控制方法及***
US10097372B2 (en) * 2014-01-09 2018-10-09 Ciena Corporation Method for resource optimized network virtualization overlay transport in virtualized data center environments

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140006585A1 (en) * 2012-06-29 2014-01-02 Futurewei Technologies, Inc. Providing Mobility in Overlay Networks
CN102801715A (zh) * 2012-07-30 2012-11-28 华为技术有限公司 一种网络中虚拟机迁移的方法、网关及***
WO2014124604A1 (zh) * 2013-02-18 2014-08-21 华为技术有限公司 生成配置信息的方法和网络控制单元

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
BALUS, F. ET AL.: "Federated SDN-based Controllers for NV03", DRAFT-SB-NOV3-SDN-FEDERATION-02. TXT, 22 November 2013 (2013-11-22), pages 5, XP055218949 *
See also references of EP3176979A4 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11294867B2 (en) 2017-03-15 2022-04-05 Carrier Corporation Internet of things architecture with a cloud-based integration platform
EP3596948B1 (en) * 2017-03-15 2023-09-20 Carrier Corporation Internet of things architecture with a cloud-based integration platform

Also Published As

Publication number Publication date
US20170264496A1 (en) 2017-09-14
CN105323136B (zh) 2020-01-10
EP3176979A4 (en) 2017-06-21
EP3176979A1 (en) 2017-06-07
CN105323136A (zh) 2016-02-10

Similar Documents

Publication Publication Date Title
WO2015117401A1 (zh) 信息的处理方法及装置
US11563669B2 (en) Method for implementing network virtualization and related apparatus and communications system
US9325615B2 (en) Method and apparatus for implementing communication between virtual machines
EP3422642B1 (en) Vlan tagging in a virtual environment
WO2017114017A1 (zh) 实现负载均衡的计算机设备、***和方法
US10880248B2 (en) Orchestrator agnostic application container visibility
CN110896371B (zh) 一种虚拟网络设备及相关方法
WO2016107418A1 (zh) 云化网络通信路径的分配方法、装置及***
CN107733746B (zh) 一种混合云平台的组网方法及混合云平台***
WO2016034074A1 (zh) 一种软件定义网络sdn的实现方法、装置和***
US20140068045A1 (en) Network system and virtual node migration method
CN105162704B (zh) Overlay网络中组播复制的方法及装置
CN104584491A (zh) 提供分布式虚拟路由和交换(dvrs)的***和方法
RU2676452C1 (ru) Контроллер, способ управления и программа
CN104584484A (zh) 提供基于策略的数据中心网络自动化的***和方法
WO2017114363A1 (zh) 报文处理方法、bng及bng集群***
US11140091B2 (en) Openflow protocol-based resource control method and system, and apparatus
CN108141384B (zh) Lisp移动性网络的自动配设
US20180088972A1 (en) Controller, control method and program
CN105556929A (zh) 在云计算***中运行应用的网络元件和方法
WO2016015633A1 (en) Multicast migration
WO2016183832A1 (zh) 一种网络业务实例化的方法及设备
EP3038296A1 (en) Pool element status information synchronization method, pool register and pool element
US11570097B1 (en) Overlay broadcast network for management traffic
CN107294857B (zh) 组播的分发处理方法、装置及***

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14881726

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 15329960

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE

REEP Request for entry into the european phase

Ref document number: 2014881726

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2014881726

Country of ref document: EP