WO2016050109A1

WO2016050109A1 - Communication method, cloud management server and virtual switch

Info

Publication number: WO2016050109A1
Application number: PCT/CN2015/083382
Authority: WO
Inventors: 吴向阳
Original assignee: 华为技术有限公司
Priority date: 2014-09-29
Filing date: 2015-07-06
Publication date: 2016-04-07
Also published as: CN104243608B; CN104243608A

Abstract

Disclosed are a communication method, a cloud management server and a virtual switch. The communication method comprises: a cloud management server configures a virtual machine and a second virtual local area network identifier used by the virtual machine for a user equipment on the basis of a virtual server applying request sent by the user equipment; the cloud management server configures a corresponding physical server for the virtual machine and acquires a first virtual local area network identifier used by a physical server group where the physical server is located; the cloud management server generates a packet forwarding policy of the virtual machine on the basis of the second virtual local area network identifier and the first virtual local area network identifier, the packet forwarding policy being used for indicating a correspondence between the virtual machine and the physical server corresponding to the virtual machine; and forward the packet forwarding policy of the virtual machine to a virtual switch of the virtual machine. The method and device provided in the present invention are used for solving the technical problem that an existing method of unified networking through a physical server and a virtual machine has low networking efficiency.

Description

一种通信方法、云管理服务器及虚拟交换机Communication method, cloud management server and virtual switch

本申请要求于2014年9月29日提交中国专利局、申请号为201410515562.X、发明名称为“一种通信方法、云管理服务器及虚拟交换机”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。This application claims the priority of the Chinese patent application filed on September 29, 2014, the Chinese Patent Office, application number 201410515562.X, the invention name is "a communication method, cloud management server and virtual switch", the entire content of which is The citations are incorporated herein by reference.

技术领域Technical field

本发明涉及IT技术领域，尤其涉及一种通信方法、云管理服务器及虚拟交换机。The present invention relates to the field of IT technologies, and in particular, to a communication method, a cloud management server, and a virtual switch.

背景技术Background technique

随着云技术的成熟，越来越多的企业和个人将业务向云上迁移。在公有云或企业私有云中，因为虚拟机(virtual machine，VM)性能较弱，有时需要将VM和物理服务器统一组网，使物理服务器和VM能够互相通信，再把性能要求苛刻的关键应用部署在物理服务器上，把低负载的业务部署在VM上，以提高云端的性能。With the maturity of cloud technology, more and more enterprises and individuals are moving their business to the cloud. In a public cloud or enterprise private cloud, because virtual machines (VMs) have weak performance, it is sometimes necessary to unify the networking of VMs and physical servers, so that physical servers and VMs can communicate with each other, and critical applications with demanding performance are required. Deploy on a physical server and deploy low-load services on the VM to improve the performance of the cloud.

然而，由于物理交换机不支持自动配置，当前，在将物理服务器和VM在云环境中统一组网时，需要云管理员在接收到用户端的虚拟服务器申请请求后，手动将物理服务器和VM配置入同一虚拟局域网(Virtual Local Area Network，VLAN)内，以实现物理服务器和VM能够互相通信。However, since the physical switch does not support automatic configuration, currently, when the physical server and the VM are uniformly deployed in the cloud environment, the cloud administrator needs to manually configure the physical server and the VM after receiving the virtual server application request from the client. Within the same Virtual Local Area Network (VLAN), the physical server and the VM can communicate with each other.

也就是说，现有的物理服务器和VM统一组网的方法存在组网效率低的技术问题。That is to say, the existing physical server and the VM unified networking method have technical problems of low networking efficiency.

发明内容Summary of the invention

本发明实施例提供一种通信方法、云管理服务器及虚拟交换机，用以解决现有的物理服务器和虚拟机统一组网的方法存在的组网效率低的技术问题。 The embodiments of the present invention provide a communication method, a cloud management server, and a virtual switch, which are used to solve the technical problem of low networking efficiency of the existing physical server and the virtual machine unified networking.

第一方面，提供一种通信方法，包括：In a first aspect, a communication method is provided, including:

云管理服务器基于用户设备发送的虚拟服务器申请请求，为该用户设备配置虚拟机，以及所述虚拟机使用的第二虚拟局域网标识；The cloud management server configures a virtual machine for the user equipment based on the virtual server application request sent by the user equipment, and a second virtual local area network identifier used by the virtual machine;

所述云管理服务器为所述虚拟机配置对应的物理服务器，获取所述物理服务器所在的物理服务器组所使用的第一虚拟局域网标识，其中，每个物理服务器组配置不同的第一虚拟局域网标识，每个物理服务器组包含至少一个物理服务器；The cloud management server configures a corresponding physical server for the virtual machine, and acquires a first virtual local area network identifier used by the physical server group where the physical server is located, where each physical server group is configured with a different first virtual local area network identifier. Each physical server group contains at least one physical server;

所述云管理服务器基于所述第二虚拟局域网标识和所述第一虚拟局域网标识，生成所述虚拟机的报文转发策略，其中，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；The cloud management server generates a packet forwarding policy of the virtual machine based on the second virtual local area network identifier and the first virtual local area network identifier, where the packet forwarding policy is used to indicate the virtual machine and the Corresponding relationship between physical servers corresponding to virtual machines;

将所述虚拟机的报文转发策略转发给所述虚拟机的虚拟交换机。Forwarding the packet forwarding policy of the virtual machine to the virtual switch of the virtual machine.

结合第一方面，在第一种可能的实现方式中，所述报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识。With reference to the first aspect, in a first possible implementation, the packet forwarding policy includes an inbound or outbound policy, where the inbound policy includes the first virtual local area network identifier carried in the received foreign packet. The packet is replaced with the second virtual local area network identifier, and the outgoing policy includes replacing the packet of the second virtual local area network identifier carried in the received virtual machine message with the first virtual local area network identifier.

结合第一方面或第一方面的第一种可能的实现方式，在第二种可能的实现方式中，还包括：With reference to the first aspect or the first possible implementation manner of the first aspect, in a second possible implementation manner, the method further includes:

所述云管理服务器接收所述用户设备发送的虚拟服务器释放请求；Receiving, by the cloud management server, a virtual server release request sent by the user equipment;

所述云管理服务器基于所述虚拟服务器释放请求，指令所述虚拟交换机删除所述报文转发策略。The cloud management server instructs the virtual switch to delete the packet forwarding policy based on the virtual server release request.

第二方面，提供一种通信方法，包括：In a second aspect, a communication method is provided, including:

虚拟交换机接收虚拟机发送的报文或发送给所述虚拟机的外来报文；The virtual switch receives the packet sent by the virtual machine or the foreign packet sent to the virtual machine.

虚拟交换机获取所述虚拟机的报文转发策略，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；所述虚拟交换机根据所述报文转发策略，将所述虚拟机发送的报文或发送给所述虚拟机的外来报文进行标识替换； The virtual switch obtains a packet forwarding policy of the virtual machine, where the packet forwarding policy is used to indicate a correspondence between the virtual machine and a physical server corresponding to the virtual machine; the virtual switch is configured according to the packet Forwarding a policy, and replacing the packet sent by the virtual machine with the foreign packet sent to the virtual machine;

将替换后的报文发送至接收方。The replaced message is sent to the recipient.

结合第二方面，在第一种可能的实现方式中，还包括：In combination with the second aspect, in the first possible implementation manner, the method further includes:

所述虚拟交换机接收云管理服务器发送的所述虚拟机的报文转发策略，所述报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识；Receiving, by the virtual switch, a packet forwarding policy of the virtual machine that is sent by the cloud management server, where the packet forwarding policy includes an inbound policy or an outbound policy, where the inbound policy includes the received in the received foreign message. The first virtual local area network identifier is replaced with the second virtual local area network identifier, and the outgoing policy includes: replacing the second virtual local area network identifier packet carried in the received virtual machine message with the first virtual local area network Identification

在所述虚拟机的主干口配置所述报文转发策略。The packet forwarding policy is configured on a trunk port of the virtual machine.

结合第二方面，在第二种可能的实现方式中，所述虚拟交换机根据所述报文转发策略，将所述虚拟机发送的报文或发送给所述虚拟机的外来报文进行标识替换，将替换后的报文发送至接收方，包括：With reference to the second aspect, in a second possible implementation manner, the virtual switch performs identifier replacement on a packet sent by the virtual machine or an external packet sent to the virtual machine according to the packet forwarding policy. Send the replaced message to the receiver, including:

所述虚拟交换机接收到外来报文时，根据所述报文转发策略，将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，并将替换后的报文发送至使用所述第二虚拟局域网标识的虚拟机；和/或When receiving the inbound packet, the virtual switch replaces the packet of the first virtual local area network identifier carried in the received external packet with the second virtual local area network identifier according to the packet forwarding policy, and Sending the replaced message to a virtual machine identified using the second virtual local area network; and/or

所述虚拟交换机接收到虚拟机发送的报文时，根据所述报文转发策略，将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识，并将替换后的报文发送至使用所述第一虚拟局域网标识的物理服务器。When receiving the packet sent by the virtual machine, the virtual switch replaces the packet of the second virtual local area network identifier carried in the packet of the received virtual machine with the first packet according to the packet forwarding policy. The virtual local area network identifies and sends the replaced message to the physical server identified by the first virtual local area network.

结合第二方面、第二方面的第一种可能的实现方式或第二方面的第二种可能的实现方式，在第三种可能的实现方式中，还包括：With reference to the second aspect, the first possible implementation manner of the second aspect, or the second possible implementation manner of the second aspect, in a third possible implementation manner, the method further includes:

所述虚拟交换机接收所述云管理服务器发送的策略删除指令；其中，所述策略删除指令为，所述云管理服务器基于所述用户设备发送虚拟服务器释放请求生成的指令；The virtual switch receives the policy deletion instruction sent by the cloud management server, where the policy deletion instruction is that the cloud management server sends an instruction generated by the virtual server release request according to the user equipment;

所述虚拟交换机基于所述策略删除指令，删除所述报文转发策略。The virtual switch deletes the packet forwarding policy based on the policy deletion instruction.

第三方面，提供一种云管理服务器，包括：In a third aspect, a cloud management server is provided, including:

收发器，用于接收用户设备发送的虚拟服务器申请请求； a transceiver, configured to receive a virtual server application request sent by the user equipment;

处理器，用于基于所述收发器接收的虚拟服务器申请请求，为所述用户设备配置虚拟机，以及所述虚拟机使用的第二虚拟局域网标识；为所述虚拟机配置对应的物理服务器，获取所述物理服务器所在的物理服务器组所使用的第一虚拟局域网标识，其中，每个物理服务器组配置不同的第一虚拟局域网标识，其中，每个物理服务器组包含至少一个物理服务器；基于所述第二虚拟局域网标识和所述第一虚拟局域网标识，生成所述虚拟机的报文转发策略，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；通过所述收发器将所述虚拟机的报文转发策略转发给所述虚拟机的虚拟交换机。a processor, configured to configure, according to the virtual server application request received by the transceiver, a virtual machine, and a second virtual local area network identifier used by the virtual machine, and configure a corresponding physical server for the virtual machine, Obtaining a first virtual local area network identifier used by the physical server group where the physical server is located, where each physical server group is configured with a different first virtual local area network identifier, where each physical server group includes at least one physical server; Decoding a second virtual local area network identifier and the first virtual local area network identifier, and generating a packet forwarding policy of the virtual machine, where the packet forwarding policy is used to indicate between the virtual machine and a physical server corresponding to the virtual machine Corresponding relationship; forwarding, by the transceiver, a packet forwarding policy of the virtual machine to a virtual switch of the virtual machine.

结合第三方面，在第一种可能的实现方式中，所述处理器生成的所述虚拟机的报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识。With reference to the third aspect, in a first possible implementation manner, the packet forwarding policy of the virtual machine generated by the processor includes an inbound policy or an outbound policy, where the inbound policy includes the received foreign packet. The packet of the first virtual local area network identifier that is carried is replaced by the second virtual local area network identifier, and the outbound policy includes: replacing the packet of the second virtual local area network identifier carried in the packet of the received virtual machine. The first virtual local area network identifier.

结合第三方面或第三方面的第一种可能的实现方式，在第二种可能的实现方式中，所述收发器还用于，接收所述用户设备发送的虚拟服务器释放请求；With the third aspect or the first possible implementation manner of the third aspect, in a second possible implementation, the transceiver is further configured to receive a virtual server release request sent by the user equipment;

所述处理器还用于，基于所述虚拟服务器释放请求，指令所述虚拟交换机删除所述报文转发策略。The processor is further configured to instruct the virtual switch to delete the packet forwarding policy based on the virtual server release request.

第四方面，提供一种虚拟交换机，包括：In a fourth aspect, a virtual switch is provided, including:

收发器，用于接收接收虚拟机发送的报文或发送给所述虚拟机的外来报文；并获取所述虚拟机的报文转发策略，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；a transceiver, configured to receive a packet sent by the virtual machine or an external packet sent to the virtual machine, and obtain a packet forwarding policy of the virtual machine, where the packet forwarding policy is used to indicate the virtual machine Corresponding relationship between physical servers corresponding to the virtual machine;

处理器，用于根据所述报文转发策略，将所述虚拟机发送的报文或发送给所述虚拟机的外来报文进行标识替换；并通过所述收发器将替换后的报文发送至接收方。a processor, configured to: replace, by the transceiver, a packet sent by the virtual machine or an external packet sent to the virtual machine according to the packet forwarding policy; and send, by using the transceiver, the replaced packet To the recipient.

结合第四方面，在第一种可能的实现方式中，所述收发器还用于接收的云管理服务器发送的所述虚拟机的报文转发策略，所述报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识；With reference to the fourth aspect, in a first possible implementation manner, the transceiver is further configured to receive, by the received cloud management server, a packet forwarding policy of the virtual machine, where the packet forwarding policy includes an input policy. Or the outbound policy, the first virtual local area network identifier carried in the received foreign message is replaced with the second virtual local area network identifier, where the outgoing policy includes the received virtual machine message The packet of the second virtual local area network identifier carried in the second virtual local area network identifier is replaced by the first virtual local area network identifier;

所述处理器还用于在所述虚拟机的主干口配置所述报文转发策略。The processor is further configured to configure the packet forwarding policy on a trunk port of the virtual machine.

结合第四方面，在第二种可能的实现方式中，所述处理器还用于在通过所述收发器接收到外来报文时，根据所述报文转发策略，将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，并通过所述收发器将替换后的报文发送至使用所述第二虚拟局域网标识的虚拟机；和/或With reference to the fourth aspect, in a second possible implementation, the processor is further configured to: when receiving the foreign packet by using the transceiver, receive the received foreign message according to the packet forwarding policy Transmitting, by the transceiver, the replaced packet to the virtual machine identified by using the second virtual local area network; and /or

所述处理器还用于在通过所述收发器接收到虚拟机发送的报文时，根据所述报文转发策略，将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识，并通过所述收发器将替换后的报文发送至使用所述第一虚拟局域网标识的物理服务器。The processor is further configured to: when receiving, by the transceiver, a packet sent by the virtual machine, according to the packet forwarding policy, the second virtual local area network identifier carried in the received message of the virtual machine The message is replaced with the first virtual local area network identifier, and the replaced message is sent by the transceiver to the physical server identified by using the first virtual local area network.

结合第四方面、第四方面的第一种可能的实现方式或第四方面的第二种可能的实现方式，在第三种可能的实现方式中，所述收发器还用于接收所述云管理服务器发送的策略删除指令；其中，所述策略删除指令为，所述云管理服务器基于所述用户设备发送虚拟服务器释放请求生成的指令；With reference to the fourth aspect, the first possible implementation manner of the fourth aspect, or the second possible implementation manner of the fourth aspect, in a third possible implementation manner, the transceiver is further configured to receive the cloud a policy deletion instruction sent by the management server; wherein the policy deletion instruction is that the cloud management server sends an instruction generated by the virtual server release request according to the user equipment;

所述处理器还用于基于所述策略删除指令，删除所述报文转发策略。The processor is further configured to delete the packet forwarding policy based on the policy deletion instruction.

本发明实施例中，基于虚拟机使用的第二虚拟局域网标识和物理服务器使用的第一虚拟局域网标识生成报文转发策略，并在转发虚拟机和物理服务器间传输的报文时，根据报文转发策略替换报文中携带的虚拟局域网标识，从而不用更改物理服务器的配置，实现虚拟机与物理服务器的通信，提高组网效率。In the embodiment of the present invention, the second virtual local area network identifier used by the virtual machine and the first virtual local area network identifier used by the physical server generate a packet forwarding policy, and when forwarding the packet transmitted between the virtual machine and the physical server, according to the packet The forwarding policy replaces the virtual local area network identifier carried in the packet, so that the configuration of the physical server is not changed, the communication between the virtual machine and the physical server is realized, and the networking efficiency is improved.

附图说明DRAWINGS

为了更清楚地说明本发明实施例或现有技术中的技术方案，下面将对实施例描述中所需要使用的附图作一简单地介绍，显而易见地，下面描述中的附图是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。In order to more clearly illustrate the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are the present invention. Some embodiments, for those skilled in the art, do not make creative labor Other drawings can also be obtained from these drawings.

图1为本发明实施例中通信方法对应的***示意图；1 is a schematic diagram of a system corresponding to a communication method according to an embodiment of the present invention;

图2为本发明实施例中云管理服务器侧的通信方法的流程图；2 is a flowchart of a communication method on a cloud management server side according to an embodiment of the present invention;

图3为本发明实施例中虚拟交换机侧的通信方法的流程图；3 is a flowchart of a method for communication on a virtual switch side according to an embodiment of the present invention;

图4为本发明实施例中云管理服务器的结构示意图；4 is a schematic structural diagram of a cloud management server according to an embodiment of the present invention;

图5为本发明实施例中虚拟交换机的结构示意图。FIG. 5 is a schematic structural diagram of a virtual switch according to an embodiment of the present invention.

具体实施方式detailed description

为使本发明实施例的目的、技术方案和优点更加清楚，下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例是本发明一部分实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

在介绍本发明实施例之前，先介绍本发明实施例中通信方法所对应的***，如图1所示，图1为一种用于实施本发明通信方法的***，该***包括：用户设备、云管理服务器、虚拟交换机、物理交换机、多个虚拟机(例如：第一虚拟机、第二虚拟机、以及第三虚拟机等等)和多个物理服务器(例如：第一物理服务器、第二物理服务器、以及第三物理服务器等等)，其中所述云管理服务器和所述虚拟交换机可以设置在同一台设备上，也可以分开设置在不同的设备上；所述虚拟交换机和所述多个虚拟机可以设置在同一台设备上，也可以分开设置在不同的设备上，在本申请中不作限制。Before the embodiment of the present invention is introduced, the system corresponding to the communication method in the embodiment of the present invention is introduced. As shown in FIG. 1 , FIG. 1 is a system for implementing the communication method of the present invention, where the system includes: user equipment, a cloud management server, a virtual switch, a physical switch, a plurality of virtual machines (eg, a first virtual machine, a second virtual machine, and a third virtual machine, etc.) and a plurality of physical servers (eg, a first physical server, a second a physical server, and a third physical server, etc., wherein the cloud management server and the virtual switch may be disposed on the same device or separately on different devices; the virtual switch and the plurality of The virtual machine may be set on the same device or separately on different devices, and is not limited in this application.

实施例一Embodiment 1

本实施例提供一种通信方法，所述通信方法应用于图1所示***中的云管理服务器上，如图2所示，该通信方法包括：The embodiment provides a communication method. The communication method is applied to the cloud management server in the system shown in FIG. 1. As shown in FIG. 2, the communication method includes:

步骤S201，云管理服务器基于用户设备发送的虚拟服务器申请请求，为该用户设备配置虚拟机，以及所述虚拟机使用的第二虚拟局域网标识；Step S201: The cloud management server configures a virtual machine for the user equipment and a second virtual local area network identifier used by the virtual machine according to the virtual server application request sent by the user equipment.

步骤S202，所述云管理服务器为所述虚拟机配置对应的物理服务器，获取所述物理服务器所在的物理服务器组所使用的第一虚拟局域网标识，其中，每个物理服务器组配置不同的第一虚拟局域网标识，每个物理服务器组包含至少一个物理服务器；Step S202, the cloud management server configures a corresponding physical server for the virtual machine, and obtains a first virtual local area network identifier used by the physical server group where the physical server is located, where each physical server group is configured with a different first virtual local area network identifier, and each physical server group includes at least one physical server;

步骤S203，所述云管理服务器基于所述第二虚拟局域网标识和所述第一虚拟局域网标识，生成所述虚拟机的报文转发策略，其中，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；Step S203, the cloud management server generates a packet forwarding policy of the virtual machine based on the second virtual local area network identifier and the first virtual local area network identifier, where the packet forwarding policy is used to indicate the virtual Corresponding relationship between the machine and the physical server corresponding to the virtual machine;

步骤S204，将所述虚拟机的报文转发策略转发给所述虚拟机的虚拟交换机。Step S204: Forward the packet forwarding policy of the virtual machine to the virtual switch of the virtual machine.

下面详细介绍上述通信方法的具体实现步骤：The specific implementation steps of the above communication method are described in detail below:

首先，在执行步骤S201之前，需要先进行云资源的准备，即需要先建立图1所示的***。First, before performing step S201, the cloud resource needs to be prepared first, that is, the system shown in FIG. 1 needs to be established first.

具体来讲，在图1所示的***中，每一台物理服务器均与物理交换机连接，以至少一台物理服务器为一组，物理交换机预先为每组物理服务器配置一个第一虚拟局域网标识，其中，每组物理服务器的第一虚拟局域网标识均与其它物理服务器的第一虚拟局域网标识不同，即每组物理服务器具有不同的第一虚拟局域网标识，以隔离物理服务器之间的通信，保证物理服务器的安全性。Specifically, in the system shown in FIG. 1, each physical server is connected to a physical switch, and at least one physical server is used as a group, and the physical switch pre-configures a first virtual local area network identifier for each group of physical servers. The first virtual local area network identifier of each set of physical servers is different from the first virtual local area network identifier of the other physical servers, that is, each set of physical servers has different first virtual local area network identifiers to isolate communication between physical servers to ensure physicality. Server security.

在图1所示的***中，物理交换机与虚拟交换机连接，物理交换机将与其连接的物理服务器的第一虚拟局域网标识均发送给云管理服务器保存，以便于云管理服务器配置物理服务器。物理交换机接收到虚拟交换机发送的报文时，会先获得报文中携带的第一虚拟局域网标识，再将报文发送给使用所述第一虚拟局域网标识的物理服务器。In the system shown in FIG. 1, the physical switch is connected to the virtual switch, and the physical switch sends the first virtual local area network identifier of the physical server connected to the physical switch to the cloud management server for storage, so that the cloud management server configures the physical server. When receiving the packet sent by the virtual switch, the physical switch obtains the first virtual local area network identifier carried in the packet, and then sends the packet to the physical server that uses the first virtual local area network identifier.

在图1所示的***中，虚拟交换机的主干(trunk)口和物理交换机的trunk口均设置为允许携带指定虚拟局域网标识的报文通过，且虚拟交换机的trunk口支持按配置的转化策略对报文中携带的虚拟局域网标识进行双向替换的功能。In the system shown in Figure 1, the trunk port of the virtual switch and the trunk port of the physical switch are both configured to allow packets carrying the specified virtual local area network identifier to pass, and the trunk port of the virtual switch supports the conversion policy according to the configuration. The function of the two-way replacement of the virtual local area network identifier carried in the packet.

在完成云资源的准备，建立好图1所示的***后，执行步骤S201，即云管理服务器基于用户设备发送的虚拟服务器申请请求，为该用户设备配置虚拟机，其中，所述虚拟机使用第二虚拟局域网标识。After the cloud resource is prepared and the system shown in FIG. 1 is established, step S201 is performed, that is, the cloud management server configures the virtual machine for the user equipment based on the virtual server application request sent by the user equipment. The virtual machine uses the second virtual local area network identifier.

具体来讲，在用户设备登录云管理服务器上的云管理服务器，并发送一虚拟服务器申请请求至所述云管理服务器后，云管理服务器基于接收的虚拟服务器申请请求，从图1所示***的多个虚拟机中，为该用户设备分配对应的虚拟机，并将第二虚拟局域网络标识分配给该虚拟机，即控制该虚拟机的网卡与第二虚拟局域网络标识关联；Specifically, after the user equipment logs in to the cloud management server on the cloud management server and sends a virtual server application request to the cloud management server, the cloud management server requests the virtual server based on the received request from the system shown in FIG. All the virtual machines are allocated corresponding virtual machines, and the second virtual local area network identifier is assigned to the virtual machine, that is, the network card controlling the virtual machine is associated with the second virtual local area network identifier;

接下来，云管理服务器控制虚拟交换机将第二虚拟局域网标识配置到该虚拟机与虚拟交换机连接的端口，以使该虚拟机使用所述第二虚拟局域网标识。Next, the cloud management server controls the virtual switch to configure the second virtual local area network identifier to a port to which the virtual machine is connected to the virtual switch, so that the virtual machine uses the second virtual local area network identifier.

在通过步骤S201，为该用户设备配置虚拟机后，执行步骤S202，即所述云管理服务器为所述虚拟机配置对应的物理服务器，获取所述物理服务器所在的物理服务器组所使用的第一虚拟局域网标识。After the virtual machine is configured for the user equipment in step S201, step S202 is performed, that is, the cloud management server configures the corresponding physical server for the virtual machine, and acquires the first used by the physical server group where the physical server is located. Virtual LAN ID.

具体来讲，当用户设备发送的虚拟服务器申请请求表明还需要物理服务器时，云管理服务器分配一物理服务器给用户设备，并获取该物理服务器使用的第一虚拟局域网标识。Specifically, when the virtual server application request sent by the user equipment indicates that the physical server is still needed, the cloud management server allocates a physical server to the user equipment, and acquires the first virtual local area network identifier used by the physical server.

在通过步骤S202获取物理服务器使用的第一虚拟局域网标识后，执行步骤S203，即所述云管理服务器基于所述第二虚拟局域网标识和所述第一虚拟局域网标识，生成所述虚拟机的报文转发策略，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系。After obtaining the first virtual local area network identifier used by the physical server in step S202, step S203 is performed, that is, the cloud management server generates a report of the virtual machine based on the second virtual local area network identifier and the first virtual local area network identifier. And a packet forwarding policy, where the packet forwarding policy is used to indicate a correspondence between the virtual machine and a physical server corresponding to the virtual machine.

在本申请实施例中，所述报文转发策略可以以server1：{vSwitch，TrunkPortPolicy}格式的策略名存储，其中，server1为用户标识，用于表示申请服务器的用户；vSwitch为虚拟交换机的标识，代表是针对哪个虚拟交换机的策略；TrunkPortPolicy标识具体的策略名，代表是用于报文转发的策略，所述报文转发策略中包括allowPass、InPolicy和outPolicy，其中，allowPass表示虚拟交换机trunk口允许通过的报文的虚拟局域网标识范围；InPolicy为入策略，包括将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识的策略；outPolicy为出策略，包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识的策略。In the embodiment of the present application, the packet forwarding policy may be stored in a policy name in the format of server1: {vSwitch, TrunkPortPolicy}, where server1 is a user identifier, which is used to indicate the user of the application server; vSwitch is the identifier of the virtual switch. The delegate is the policy of the virtual switch; the TrunkPortPolicy identifies the specific policy name, which is the policy for the packet forwarding. The packet forwarding policy includes allowPass, InPolicy, and outPolicy, where allowPass indicates that the virtual switch trunk port is allowed to pass. The virtual local area network identifier range of the packet; the InPolicy is an inbound policy, and the policy of replacing the first virtual local area network identifier carried in the received foreign message with the second virtual local area network identifier; The policy includes: replacing the packet of the second virtual local area network identifier carried in the packet of the received virtual machine with the first virtual office The policy of the domain network identifier.

下面以分配给用户设备的虚拟机的第二虚拟局域网标识为1025，分配给用户设备的物理服务器的第一虚拟局域网标识为2为例，所述报文转发策略的具体内容可以用代码表示为：The second virtual local area network identifier of the virtual machine assigned to the user equipment is 1025, and the first virtual local area network identifier of the physical server allocated to the user equipment is 2, and the specific content of the packet forwarding policy may be represented by code. :

TrunkPortPolicy://策略开始TrunkPortPolicy:// policy starts

allowPass:2..2048//虚拟交换机trunk口允许虚拟局域网标识为2到2048的报文通过allowPass:2..2048//The virtual switch trunk port allows packets with the virtual LAN ID of 2 to 2048 to pass.

InPolicy://从此trunk口进入的报文，即接收物理交换机发送的报文的处理策略InPolicy:// Packets that are sent from the trunk interface, that is, the processing policy of receiving packets sent by the physical switch.

when Vid＝2//若报文头的虚拟局域网标识为2When Vid=2//If the virtual local area network identifier of the header is 2

translate vid＝1025//则将该报文头的虚拟局域网标识转换为1025Translate vid=1025// converts the virtual local area network identifier of the message header to 1025

forward//将替换后的报文转发给使用的虚拟局域网标识为1025的虚拟机Forward// forwards the replaced packet to the virtual machine whose virtual LAN ID is 1025.

end//进入的报文的转发策略结束End//The forwarding policy of the incoming packet ends.

outPolicy://从此trunk口发出的报文，即发送给物理交换机的报文的处理策略OutPolicy: The packet sent from the trunk port, that is, the processing policy of the packet sent to the physical switch.

when Vid＝1025//若报文头的虚拟局域网标识为1025When Vid=1025//If the virtual local area network identifier of the message header is 1025

translate vid＝2//则将报文头的虚拟局域网标识转换为2Translate vid=2// converts the virtual local area network identifier of the message header to 2

forward//替换后的报文转发给物理交换机，以使物理交换机将报文下发给使用的虚拟局域网标识为2的物理服务器The forward//replaced packet is forwarded to the physical switch, so that the physical switch delivers the packet to the physical server whose virtual LAN is identified as 2.

end//发出的报文的转发策略结束End// The forwarding policy of the sent packet ends.

在通过步骤S203，生成报文转发策略后，进入步骤S204，即将所述虚拟机的报文转发策略转发给所述虚拟机的虚拟交换机，以使所述虚拟交换机根据所述报文转发策略进行报文转发。After the packet forwarding policy is generated in step S203, the process proceeds to step S204, in which the packet forwarding policy of the virtual machine is forwarded to the virtual switch of the virtual machine, so that the virtual switch performs the packet forwarding policy according to the packet forwarding policy. Message forwarding.

在本申请实施例中，在将报文转发策略转发给虚拟交换机之后，还包括：In the embodiment of the present application, after forwarding the packet forwarding policy to the virtual switch, the method further includes:

所述云管理服务器接收所述用户设备发送的虚拟服务器释放请求； Receiving, by the cloud management server, a virtual server release request sent by the user equipment;

具体来讲，以报文转发策略以server1：{vSwitch，TrunkPortPolicy}的策略名存储为例：Specifically, the packet forwarding policy is stored as the policy name of server1:{vSwitch, TrunkPortPolicy} as an example:

在用户不需要继续使用物理服务器时，可以通过用户设备发送虚拟服务器释放请求至云管理服务器；When the user does not need to continue to use the physical server, the virtual server release request may be sent to the cloud management server by using the user equipment;

云管理服务器基于所述虚拟服务器释放请求中携带的用户标识server1，查找到报文转发策略server1：{vSwitch，TrunkPortPolicy}；The cloud management server finds the packet forwarding policy server1: {vSwitch, TrunkPortPolicy} based on the user identifier server1 carried in the virtual server release request.

云管理服务器发送携带server1：{vSwitch，TrunkPortPolicy}的策略名的策略删除指令至虚拟交换机，以使虚拟交换机删除策略名为server1：{vSwitch，TrunkPortPolicy}的报文转发策略。The cloud management server sends a policy to delete the policy with the policy name of the server1: {vSwitch, TrunkPortPolicy} to the virtual switch, so that the virtual switch deletes the packet forwarding policy with the policy name of server1: {vSwitch, TrunkPortPolicy}.

虚拟交换机删除报文转发策略后，之前分配给用户的虚拟机和物理服务器无法再进行报文通信，从而起到了隔离物理服务器和虚拟机的作用，防止用户继续使用该物理服务器。After the virtual switch deletes the packet forwarding policy, the virtual machine and the physical server that were previously assigned to the user cannot communicate with each other. This isolates the physical server and the virtual machine and prevents the user from continuing to use the physical server.

下面基于同一发明构思，站在图1所示***中的虚拟交换机的角度对上述方法进行介绍。In the following, based on the same inventive concept, the above method will be described from the perspective of a virtual switch in the system shown in FIG.

实施例二：Embodiment 2:

在本实施例中，将从虚拟交换机侧对实施例一中提供的通信方法进行描述，请参考图3，图3为本发明实施例中虚拟交换机侧的处理流程图。In this embodiment, the communication method provided in the first embodiment will be described from the virtual switch side. Referring to FIG. 3, FIG. 3 is a flowchart of processing on the virtual switch side according to an embodiment of the present invention.

该通信方法包括：The communication method includes:

步骤S301，虚拟交换机接收虚拟机发送的报文或发送给所述虚拟机的外来报文；Step S301: The virtual switch receives the packet sent by the virtual machine or the foreign packet sent to the virtual machine.

步骤S302，虚拟交换机获取所述虚拟机的报文转发策略，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；所述虚拟交换机根据所述报文转发策略，将所述虚拟机发送的报文或发送给所述虚拟机的外来报文进行标识替换；Step S302: The virtual switch acquires a packet forwarding policy of the virtual machine, where the packet forwarding policy is used to indicate a correspondence between the virtual machine and a physical server corresponding to the virtual machine; The message forwarding policy is used to replace the message sent by the virtual machine or the foreign message sent to the virtual machine;

步骤S303，将替换后的报文发送至接收方。 Step S303, the replaced message is sent to the receiver.

在具体实施过程中，所述虚拟机和虚拟交换机可以为同一台设备，也可以为不同的设备，在本申请中不作限制。In a specific implementation, the virtual machine and the virtual switch may be the same device or different devices, and are not limited in this application.

在具体实施过程中，所述虚拟机的报文转发策略可以为云管理服务器发送至所述虚拟交换机的，所述报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识；In a specific implementation process, the packet forwarding policy of the virtual machine may be sent to the virtual switch by the cloud management server, where the packet forwarding policy includes an inbound policy or an outbound policy, where the inbound policy includes the received policy. The first virtual local area network identifier carried in the foreign message is replaced by the second virtual local area network identifier, and the outbound policy includes the packet of the second virtual local area network identifier carried in the received message of the virtual machine. Replaced with the first virtual local area network identifier;

所述虚拟机的报文转发策略可以配置在所述虚拟交换机的trunk口。The packet forwarding policy of the virtual machine may be configured on a trunk port of the virtual switch.

所述报文转发策略的格式和内容信息与实施例一中描述的报文转发策略的格式和内容信息相同，在本实施例中就不再累述。The format and content information of the packet forwarding policy are the same as those of the packet forwarding policy described in the first embodiment, and are not described in this embodiment.

在本申请实施例中，所述虚拟交换机转发报文的方法，可以分为：转发虚拟机发送给物理服务器的报文和转发物理服务器发送给虚拟机的报文两种，下面分别进行说明：In the embodiment of the present application, the method for forwarding the packet by the virtual switch may be divided into two types: forwarding a packet sent by the virtual machine to the physical server and forwarding a packet sent by the physical server to the virtual machine.

第一种，转发虚拟机发送给物理服务器的报文。The first type is to forward the packets sent by the virtual machine to the physical server.

即当所述虚拟交换机接收到所述虚拟机发送的报文时，基于所述报文转发策略，将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识，并将替换后的报文发送至使用所述第一虚拟局域网标识的物理服务器。That is, when the virtual switch receives the packet sent by the virtual machine, the packet of the second virtual local area network identifier carried in the received packet of the virtual machine is replaced by the packet forwarding policy. The first virtual local area network identifier is sent, and the replaced message is sent to a physical server that is identified by using the first virtual local area network.

具体来讲，同样以分配给用户设备的虚拟机的第二虚拟局域网标识为1025，分配给用户设备的物理服务器的第一虚拟局域网标识为2为例：Specifically, the second virtual local area network identifier of the virtual machine assigned to the user equipment is 1025, and the first virtual local area network identifier of the physical server allocated to the user equipment is 2:

当所述虚拟交换机接收到虚拟机发送的报文后，虚拟交换机需要通过trunk口发送报文时，会执行报文转发策略中的outPolicy策略，将报文中携带的所述虚拟机的第二虚拟局域网标识1025替换为报文转发策略中指定的第一虚拟局域网标识2，再将替换后的报文发送给物理交换机；After the virtual switch receives the packet sent by the virtual machine, the virtual switch needs to send the packet through the trunk port, and then the outPolicy policy in the packet forwarding policy is executed, and the second virtual machine is carried in the packet. The virtual local area network identifier 1025 is replaced with the first virtual local area network identifier 2 specified in the packet forwarding policy, and the replaced packet is sent to the physical switch.

物理交换机接收到报文后，根据报文中的第一虚拟局域网标识2，将报文发送给使用的第一虚拟局域网标识为2的物理服务器，实现虚拟机发送报文给对应的物理服务器。 After receiving the packet, the physical switch sends the packet to the physical server with the first virtual local area network ID 2, according to the first virtual local area network identifier 2 in the packet, and the virtual machine sends the packet to the corresponding physical server.

第二种，转发物理服务器发送给虚拟机的报文。The second type is to forward packets sent by the physical server to the virtual machine.

即当所述虚拟交换机接收到所述物理服务器发送的报文时，所述虚拟交换机基于所述报文转发策略，将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，并将替换后的报文发送至使用所述第二虚拟局域网标识的虚拟机。That is, when the virtual switch receives the packet sent by the physical server, the virtual switch, according to the packet forwarding policy, receives the packet of the first virtual local area network identifier carried in the received foreign packet. And replacing the second virtual local area network identifier, and sending the replaced message to the virtual machine identified by using the second virtual local area network.

当所述虚拟交换机通过trunk口接收到物理交换机发送的报文后，会执行报文转发策略中的InPolicy策略，，将报文中携带的物理服务器的第一虚拟局域网标识2替换为报文转发策略中指定的第二虚拟局域网标识1025，再将替换后的报文下发给使用的虚拟局域网标识为1025的虚拟机，实现物理服务器发送报文给对应的虚拟机。After the virtual switch receives the packet sent by the physical switch, the virtual switch performs the InPolicy policy in the packet forwarding policy, and replaces the first virtual local area network identifier 2 of the physical server carried in the packet with the packet forwarding. The second virtual local area network identifier 1025 is specified in the policy, and the replaced packet is sent to the virtual machine whose virtual local area network is identified as 1025, so that the physical server sends a message to the corresponding virtual machine.

具体来讲，通过生成报文转发策略，并在转发报文时，根据报文转发策略替换报文中携带的虚拟局域网标识，来实现虚拟机与物理服务器的互相通信，不需要手动更改物理服务器的端口配置来组网，实现了虚拟机与物理服务器的自动组网，提高了组网效率。Specifically, the packet forwarding policy is generated, and when the packet is forwarded, the virtual local area network identifier carried in the packet is replaced according to the packet forwarding policy, so that the virtual machine and the physical server communicate with each other, and the physical server does not need to be manually changed. The port configuration is used for networking, which realizes automatic networking between virtual machines and physical servers, improving networking efficiency.

在本实施例中，在用户不需要继续使用物理服务器时，用户设备可以发送虚拟服务器释放请求至云管理服务器，所述云管理服务器基于所述虚拟服务器释放请求生成策略删除指令，并发送所述策略删除指令至所述虚拟交换机；In this embodiment, when the user does not need to continue to use the physical server, the user equipment may send a virtual server release request to the cloud management server, where the cloud management server generates a policy deletion instruction based on the virtual server release request, and sends the Policy deletion instruction to the virtual switch;

所述虚拟交换机接收到所述云管理服务器发送的策略删除指令后，删除所述报文转发策略。After receiving the policy deletion command sent by the cloud management server, the virtual switch deletes the packet forwarding policy.

具体来讲，虚拟交换机删除所述报文转发策略的方法与实施例一中描述的虚拟交换机删除所述报文转发策略的方法相同，在本实施例中就不再累述。Specifically, the method for deleting the packet forwarding policy by the virtual switch is the same as the method for deleting the packet forwarding policy by the virtual switch described in the first embodiment, and is not described in this embodiment.

实施例三： Embodiment 3:

基于同一发明构思，本申请还提供一种云管理服务器。Based on the same inventive concept, the present application also provides a cloud management server.

如图4所示，所述云管理服务器包括：As shown in FIG. 4, the cloud management server includes:

收发器401，用于接收用户设备发送的虚拟服务器申请请求；The transceiver 401 is configured to receive a virtual server application request sent by the user equipment;

处理器402，用于基于所述收发器401接收的虚拟服务器申请请求，为所述用户设备配置虚拟机，以及所述虚拟机使用的第二虚拟局域网标识；为所述虚拟机配置对应的物理服务器，获取所述物理服务器所在的物理服务器组所使用的第一虚拟局域网标识，其中，每个物理服务器组配置不同的第一虚拟局域网标识，其中，每个物理服务器组包含至少一个物理服务器；基于所述第二虚拟局域网标识和所述第一虚拟局域网标识，生成所述虚拟机的报文转发策略，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；通过所述收发器401将所述虚拟机的报文转发策略转发给所述虚拟机的虚拟交换机。The processor 402 is configured to configure, according to the virtual server application request received by the transceiver 401, a virtual machine for the user equipment, and a second virtual local area network identifier used by the virtual machine, and configure a corresponding physical entity for the virtual machine. The server obtains a first virtual local area network identifier used by the physical server group where the physical server is located, where each physical server group is configured with a different first virtual local area network identifier, where each physical server group includes at least one physical server; And generating, according to the second virtual local area network identifier and the first virtual local area network identifier, a packet forwarding policy of the virtual machine, where the packet forwarding policy is used to indicate the virtual server and the physical server corresponding to the virtual machine Corresponding relationship between the virtual machine and the virtual switch of the virtual machine is forwarded by the transceiver 401.

在具体实施过程中，所述虚拟交换机和所述云管理服务器可以为同一台设备，也可以为不同的设备，在本申请中不作限制。In a specific implementation, the virtual switch and the cloud management server may be the same device or different devices, which are not limited in this application.

在本实施例中，所述处理器402生成的所述虚拟机的报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识。In this embodiment, the packet forwarding policy of the virtual machine generated by the processor 402 includes an inbound policy or an outbound policy, where the inbound policy includes the first virtual local area network carried in the received foreign message. The identifier packet is replaced with the second virtual local area network identifier, and the outbound policy includes: replacing the packet of the second virtual local area network identifier carried in the packet of the received virtual machine with the first virtual local area network identifier. .

在本实施例中，所述收发器401还用于，接收所述用户设备发送的虚拟服务器释放请求；In this embodiment, the transceiver 401 is further configured to receive a virtual server release request sent by the user equipment;

所述处理器402还用于，基于所述虚拟服务器释放请求，指令所述虚拟交换机删除所述报文转发策略。The processor 402 is further configured to instruct the virtual switch to delete the packet forwarding policy based on the virtual server release request.

本实施例中提供的云管理服务器与实施例一中的通信方法，是基于同一发明构思下的两个方面，在前面已经对方法的实施过程作了详细的描述，所以本领域技术人员可根据前述描述清楚的了解本实施例中的设备结构及实施过程，为了说明书的简洁，在此就不再赘述了。 The cloud management server provided in this embodiment and the communication method in the first embodiment are based on two aspects under the same inventive concept. The implementation process of the method has been described in detail above, so those skilled in the art can The foregoing description clearly understands the structure and implementation process of the device in this embodiment. For the sake of brevity of the description, details are not described herein again.

实施例四：Embodiment 4:

基于同一发明构思，本申请还提供一种虚拟交换机。Based on the same inventive concept, the present application also provides a virtual switch.

如图5所示，所述虚拟交换机包括：As shown in FIG. 5, the virtual switch includes:

收发器501，用于接收接收虚拟机发送的报文或发送给所述虚拟机的外来报文；并获取所述虚拟机的报文转发策略，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；The transceiver 501 is configured to receive a packet sent by the virtual machine or an external packet sent to the virtual machine, and obtain a packet forwarding policy of the virtual machine, where the packet forwarding policy is used to indicate the virtual Corresponding relationship between the machine and the physical server corresponding to the virtual machine;

处理器502，用于根据所述报文转发策略，将所述虚拟机发送的报文或发送给所述虚拟机的外来报文进行标识替换；并通过所述收发器501将替换后的报文发送至接收方。The processor 502 is configured to: replace, by the transceiver 501, the replaced message by using the packet sent by the virtual machine or the external message sent by the virtual machine according to the packet forwarding policy. The text is sent to the recipient.

在具体实施过程中，所述虚拟机和所述虚拟交换机可以为同一台设备，也可以为不同的设备，在本申请中不作限制。In a specific implementation, the virtual machine and the virtual switch may be the same device or different devices, and are not limited in this application.

在本实施例中，所述收发器501还用于接收的云管理服务器发送的所述虚拟机的报文转发策略，所述报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识；In this embodiment, the transceiver 501 is further configured to receive, by the received cloud management server, a packet forwarding policy of the virtual machine, where the packet forwarding policy includes an inbound policy or an outbound policy, where the inbound policy includes And the first virtual local area network identifier that is carried in the received foreign message is replaced by the second virtual local area network identifier, where the outbound policy includes the second virtual local area network identifier carried in the received message of the virtual machine. The message is replaced with the first virtual local area network identifier;

所述处理器502还用于在所述虚拟机的主干口配置所述报文转发策略。The processor 502 is further configured to configure the packet forwarding policy on a trunk port of the virtual machine.

在本实施例中，所述处理器502还用于在通过所述收发器501接收到外来报文时，根据所述报文转发策略，将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，并通过所述收发器501将替换后的报文发送至使用所述第二虚拟局域网标识的虚拟机；和/或In this embodiment, the processor 502 is further configured to: when receiving the foreign message through the transceiver 501, according to the packet forwarding policy, the first carried in the received foreign message The packet of the virtual local area network identifier is replaced with the second virtual local area network identifier, and the replaced message is sent by the transceiver 501 to the virtual machine identified by using the second virtual local area network; and/or

所述处理器502还用于在通过所述收发器502接收到虚拟机发送的报文时，根据所述报文转发策略，将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识，并通过所述收发器501将替换后的报文发送至使用所述第一虚拟局域网标识的物理服务器。The processor 502 is further configured to: when receiving, by the transceiver 502, a packet sent by the virtual machine, according to the packet forwarding policy, the second virtual The packet identified by the local area network is replaced with the first virtual local area network identifier, and the replaced message is sent by the transceiver 501 to the physical server identified by using the first virtual local area network.

在本实施例中，所述收发器501还用于接收所述云管理服务器发送的策略删除指令；其中，所述策略删除指令为，所述云管理服务器基于所述用户设备发送虚拟服务器释放请求生成的指令；In this embodiment, the transceiver 501 is further configured to receive a policy deletion instruction sent by the cloud management server, where the policy deletion instruction is that the cloud management server is based on the user equipment Sending an instruction generated by the virtual server release request;

所述处理器502还用于基于所述策略删除指令，删除所述报文转发策略。The processor 502 is further configured to delete the packet forwarding policy based on the policy deletion instruction.

本实施例中提供的虚拟交换机与实施例二中的通信方法，是基于同一发明构思下的两个方面，在前面已经对方法的实施过程作了详细的描述，所以本领域技术人员可根据前述描述清楚的了解本实施例中的设备结构及实施过程，为了说明书的简洁，在此就不再赘述了。The virtual switch provided in this embodiment and the communication method in the second embodiment are based on two aspects under the same inventive concept. The implementation process of the method has been described in detail above, so those skilled in the art can A clear understanding of the structure and implementation process of the device in this embodiment is omitted here for the sake of brevity of the description.

在本申请所提供的几个实施例中，应该理解到，所述收发器可以为收发单元或收发模块；所述处理器可以为处理单元或处理模块。In several embodiments provided by the present application, it should be understood that the transceiver may be a transceiver unit or a transceiver module; the processor may be a processing unit or a processing module.

上述本申请实施例中的技术方案，具有至少一个如下的技术效果或优点：The technical solution in the foregoing embodiment of the present application has at least one of the following technical effects or advantages:

尽管已描述了本发明的优选实施例，但本领域内的技术人员一旦得知了基本创造性概念，则可对这些实施例作出另外的变更和修改。所以，所附权利要求意欲解释为包括优选实施例以及落入本发明范围的所有变更和修改。While the preferred embodiment of the invention has been described, it will be understood that Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and the modifications and

显然，本领域的技术人员可以对本发明进行各种改动和变型而不脱离本发Obviously, those skilled in the art can make various modifications and variations to the present invention without departing from the present invention.

明的精神和范围。这样，倘若本发明的这些修改和变型属于本发明权利要求及其等同技术的范围之内，则本发明也意图包含这些改动和变型在内。 The spirit and scope of the Ming. Thus, it is intended that the present invention cover the modifications and modifications of the invention

Claims

一种通信方法，其特征在于，包括：A communication method, comprising:

云管理服务器基于用户设备发送的虚拟服务器申请请求，为该用户设备配置虚拟机，以及所述虚拟机使用的第二虚拟局域网标识；The cloud management server configures a virtual machine for the user equipment based on the virtual server application request sent by the user equipment, and a second virtual local area network identifier used by the virtual machine;

所述云管理服务器为所述虚拟机配置对应的物理服务器，获取所述物理服务器所在的物理服务器组所使用的第一虚拟局域网标识，其中，每个物理服务器组配置不同的第一虚拟局域网标识，每个物理服务器组包含至少一个物理服务器；The cloud management server configures a corresponding physical server for the virtual machine, and acquires a first virtual local area network identifier used by the physical server group where the physical server is located, where each physical server group is configured with a different first virtual local area network identifier. Each physical server group contains at least one physical server;

所述云管理服务器基于所述第二虚拟局域网标识和所述第一虚拟局域网标识，生成所述虚拟机的报文转发策略，其中，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；The cloud management server generates a packet forwarding policy of the virtual machine based on the second virtual local area network identifier and the first virtual local area network identifier, where the packet forwarding policy is used to indicate the virtual machine and the Corresponding relationship between physical servers corresponding to virtual machines;

将所述虚拟机的报文转发策略转发给所述虚拟机的虚拟交换机。Forwarding the packet forwarding policy of the virtual machine to the virtual switch of the virtual machine.
如权利要求1所述的方法，其特征在于，所述报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识。The method of claim 1, wherein the message forwarding policy comprises an inbound or outbound policy, and the inbound policy comprises the report of the first virtual local area network identifier carried in the received foreign message. And replacing the packet with the second virtual local area network identifier carried in the packet of the received virtual machine with the first virtual local area network identifier.
如权利要求1或2所述的方法，其特征在于，还包括：The method of claim 1 or 2, further comprising:

所述云管理服务器接收所述用户设备发送的虚拟服务器释放请求；Receiving, by the cloud management server, a virtual server release request sent by the user equipment;

所述云管理服务器基于所述虚拟服务器释放请求，指令所述虚拟交换机删除所述报文转发策略。The cloud management server instructs the virtual switch to delete the packet forwarding policy based on the virtual server release request.
一种通信方法，其特征在于，包括：A communication method, comprising:

虚拟交换机接收虚拟机发送的报文或发送给所述虚拟机的外来报文；The virtual switch receives the packet sent by the virtual machine or the foreign packet sent to the virtual machine.

虚拟交换机获取所述虚拟机的报文转发策略，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；The virtual switch obtains a packet forwarding policy of the virtual machine, where the packet forwarding policy is used to indicate a correspondence between the virtual machine and a physical server corresponding to the virtual machine;

所述虚拟交换机根据所述报文转发策略，将所述虚拟机发送的报文或发送给所述虚拟机的外来报文进行标识替换；Sending, by the virtual switch, a packet sent by the virtual machine according to the packet forwarding policy And performing identifier replacement on the foreign message of the virtual machine;

将替换后的报文发送至接收方。The replaced message is sent to the recipient.
如权利要求4所述的方法，其特征在于，还包括：The method of claim 4, further comprising:

所述虚拟交换机接收云管理服务器发送的所述虚拟机的报文转发策略，所述报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识；Receiving, by the virtual switch, a packet forwarding policy of the virtual machine that is sent by the cloud management server, where the packet forwarding policy includes an inbound policy or an outbound policy, where the inbound policy includes the received in the received foreign message. The first virtual local area network identifier is replaced with the second virtual local area network identifier, and the outgoing policy includes: replacing the second virtual local area network identifier packet carried in the received virtual machine message with the first virtual local area network Identification

在所述虚拟交换机的主干口配置所述报文转发策略。The packet forwarding policy is configured on a trunk port of the virtual switch.
如权利要求4所述的方法，其特征在于，所述虚拟交换机根据所述报文转发策略，将所述虚拟机发送的报文或发送给所述虚拟机的外来报文进行标识替换，将替换后的报文发送至接收方，包括：The method of claim 4, wherein the virtual switch replaces the packet sent by the virtual machine or the foreign message sent to the virtual machine according to the packet forwarding policy, The replaced message is sent to the receiver, including:

所述虚拟交换机接收到外来报文时，根据所述报文转发策略，将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，并将替换后的报文发送至使用所述第二虚拟局域网标识的虚拟机；When receiving the inbound packet, the virtual switch replaces the packet of the first virtual local area network identifier carried in the received external packet with the second virtual local area network identifier according to the packet forwarding policy, and Sending the replaced message to the virtual machine identified by using the second virtual local area network;

和/或and / or

所述虚拟交换机接收到虚拟机发送的报文时，根据所述报文转发策略，将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识，并将替换后的报文发送至使用所述第一虚拟局域网标识的物理服务器。When receiving the packet sent by the virtual machine, the virtual switch replaces the packet of the second virtual local area network identifier carried in the packet of the received virtual machine with the first packet according to the packet forwarding policy. The virtual local area network identifies and sends the replaced message to the physical server identified by the first virtual local area network.
如权利要求4－6任一所述的方法，其特征在于，还包括：The method of any of claims 4-6, further comprising:

所述虚拟交换机接收所述云管理服务器发送的策略删除指令；其中，所述策略删除指令为，所述云管理服务器基于所述用户设备发送虚拟服务器释放请求生成的指令；The virtual switch receives the policy deletion instruction sent by the cloud management server, where the policy deletion instruction is that the cloud management server sends an instruction generated by the virtual server release request according to the user equipment;

所述虚拟交换机基于所述策略删除指令，删除所述报文转发策略。The virtual switch deletes the packet forwarding policy based on the policy deletion instruction.
一种云管理服务器，其特征在于，包括：A cloud management server, comprising:

收发器，用于接收用户设备发送的虚拟服务器申请请求； a transceiver, configured to receive a virtual server application request sent by the user equipment;

处理器，用于基于所述收发器接收的虚拟服务器申请请求，为所述用户设备配置虚拟机，以及所述虚拟机使用的第二虚拟局域网标识；为所述虚拟机配置对应的物理服务器，获取所述物理服务器所在的物理服务器组所使用的第一虚拟局域网标识，其中，每个物理服务器组配置不同的第一虚拟局域网标识，每个物理服务器组包含至少一个物理服务器；基于所述第二虚拟局域网标识和所述第一虚拟局域网标识，生成所述虚拟机的报文转发策略，其中，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；通过所述收发器将所述虚拟机的报文转发策略转发给所述虚拟机的虚拟交换机。a processor, configured to configure, according to the virtual server application request received by the transceiver, a virtual machine, and a second virtual local area network identifier used by the virtual machine, and configure a corresponding physical server for the virtual machine, Obtaining a first virtual local area network identifier used by the physical server group where the physical server is located, where each physical server group is configured with a different first virtual local area network identifier, and each physical server group includes at least one physical server; And generating, by the second virtual local area network identifier and the first virtual local area network identifier, a packet forwarding policy of the virtual machine, where the packet forwarding policy is used to indicate that the virtual machine is between the physical server corresponding to the virtual machine Corresponding relationship; forwarding, by the transceiver, a packet forwarding policy of the virtual machine to a virtual switch of the virtual machine.
如权利要求8所述的云管理服务器，其特征在于：The cloud management server of claim 8 wherein:

所述处理器生成的所述虚拟机的报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识。The packet forwarding policy of the virtual machine generated by the processor includes an inbound policy or an outbound policy, where the inbound policy includes replacing the packet of the first virtual local area network identifier carried in the received external packet with the And the second virtual local area network identifier is replaced by the second virtual local area network identifier carried in the received virtual machine message.
如权利要求8或9所述的云管理服务器，其特征在于：A cloud management server according to claim 8 or 9, wherein:

所述收发器还用于，接收所述用户设备发送的虚拟服务器释放请求；The transceiver is further configured to receive a virtual server release request sent by the user equipment;

所述处理器还用于，基于所述虚拟服务器释放请求，指令所述虚拟交换机删除所述报文转发策略。The processor is further configured to instruct the virtual switch to delete the packet forwarding policy based on the virtual server release request.
一种虚拟交换机，其特征在于，包括：A virtual switch, comprising:

收发器，用于接收接收虚拟机发送的报文或发送给所述虚拟机的外来报文；并获取所述虚拟机的报文转发策略，所述报文转发策略用于指示所述虚拟机与所述虚拟机对应的物理服务器之间的对应关系；a transceiver, configured to receive a packet sent by the virtual machine or an external packet sent to the virtual machine, and obtain a packet forwarding policy of the virtual machine, where the packet forwarding policy is used to indicate the virtual machine Corresponding relationship between physical servers corresponding to the virtual machine;

处理器，用于根据所述报文转发策略，将所述虚拟机发送的报文或发送给所述虚拟机的外来报文进行标识替换；并通过所述收发器将替换后的报文发送至接收方。a processor, configured to: replace, by the transceiver, a packet sent by the virtual machine or an external packet sent to the virtual machine according to the packet forwarding policy; and send, by using the transceiver, the replaced packet To the recipient.
如权利要求11所述的虚拟交换机，其特征在于：The virtual switch of claim 11 wherein:

所述收发器还用于接收的云管理服务器发送的所述虚拟机的报文转发策略，所述报文转发策略包括入策略或出策略，所述入策略包括将接收到的外来报文中携带的所述第一虚拟局域网标识替换为所述第二虚拟局域网标识，所述出策略包括将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识；The transceiver is further configured to receive, by the cloud management server, the packet forwarding policy of the virtual machine. The packet forwarding policy includes an inbound or outbound policy, where the inbound policy includes replacing the first virtual local area network identifier carried in the received foreign message with the second virtual local area network identifier, where the outgoing The policy includes replacing the packet of the second virtual local area network identifier carried in the packet of the received virtual machine with the first virtual local area network identifier;

所述处理器还用于在所述虚拟机的主干口配置所述报文转发策略。The processor is further configured to configure the packet forwarding policy on a trunk port of the virtual machine.
如权利要求11所述的虚拟交换机，其特征在于，The virtual switch of claim 11 wherein:

所述处理器还用于在通过所述收发器接收到外来报文时，根据所述报文转发策略，将接收到的外来报文中携带的所述第一虚拟局域网标识的报文替换为所述第二虚拟局域网标识，并通过所述收发器将替换后的报文发送至使用所述第二虚拟局域网标识的虚拟机；和/或The processor is further configured to replace, according to the packet forwarding policy, the packet of the first virtual local area network identifier carried in the received external packet, according to the packet forwarding policy, when the external packet is received by the transceiver, The second virtual local area network identifies, and sends, by the transceiver, the replaced message to a virtual machine identified by using the second virtual local area network; and/or

所述处理器还用于在通过所述收发器接收到虚拟机发送的报文时，根据所述报文转发策略，将接收到的虚拟机的报文中携带的所述第二虚拟局域网标识的报文替换为所述第一虚拟局域网标识，并通过所述收发器将替换后的报文发送至使用所述第一虚拟局域网标识的物理服务器。The processor is further configured to: when receiving, by the transceiver, a packet sent by the virtual machine, according to the packet forwarding policy, the second virtual local area network identifier carried in the received message of the virtual machine The message is replaced with the first virtual local area network identifier, and the replaced message is sent by the transceiver to the physical server identified by using the first virtual local area network.
如权利要求11－13任一所述的虚拟交换机，其特征在于：A virtual switch according to any of claims 11-13, characterized in that:

所述收发器还用于接收所述云管理服务器发送的策略删除指令；其中，所述策略删除指令为，所述云管理服务器基于所述用户设备发送虚拟服务器释放请求生成的指令；The transceiver is further configured to receive a policy deletion instruction sent by the cloud management server, where the policy deletion instruction is that the cloud management server sends an instruction generated by the virtual server release request according to the user equipment;

所述处理器还用于基于所述策略删除指令，删除所述报文转发策略。 The processor is further configured to delete the packet forwarding policy based on the policy deletion instruction.