WO2020108438A1 - 一种接入***、方法及装置 - Google Patents

一种接入***、方法及装置 Download PDF

Info

Publication number
WO2020108438A1
WO2020108438A1 PCT/CN2019/120649 CN2019120649W WO2020108438A1 WO 2020108438 A1 WO2020108438 A1 WO 2020108438A1 CN 2019120649 W CN2019120649 W CN 2019120649W WO 2020108438 A1 WO2020108438 A1 WO 2020108438A1
Authority
WO
WIPO (PCT)
Prior art keywords
service data
local area
area network
virtual local
network
Prior art date
Application number
PCT/CN2019/120649
Other languages
English (en)
French (fr)
Inventor
张争宪
谢华国
赵海飞
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Publication of WO2020108438A1 publication Critical patent/WO2020108438A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks

Definitions

  • This application relates to the field of communication technology, and in particular, to an access system, method, and device.
  • cloud resources have been widely used.
  • different networks or hardware all require access to cloud resources.
  • bare metal servers bare metal servers, BMS
  • hosting area networks and new hardware (such as encryption machines) all require access to cloud resources.
  • new hardware such as encryption machines
  • FIG. 1a BMS accesses cloud resources through an open source virtual switch (openvswitch, OVS).
  • OVS open source virtual switch
  • FIG. 1b the hosted zone network accesses cloud resources through the next generation firewall (ngfw).
  • FIG. 1c new hardware accesses cloud resources through OVS. Because different networks or hardware have different ways of accessing cloud resources, the way of accessing cloud resources is more complicated.
  • Embodiments of the present application provide an access system, method, and device to simplify access to cloud resources.
  • an access system including at least one of a network or a hardware device, a virtual local area network gateway, and cloud resources;
  • the network or hardware device is used to send service data;
  • the virtual local area network gateway is used to receive service data sent by at least one of the network or hardware devices, and convert the service data into a unified protocol Business data, and sending the unified protocol business data to a cloud resource;
  • the cloud resource is used to receive the unified protocol business data sent by the virtual local area network gateway.
  • the network or hardware devices are connected to the cloud resources through the virtual local area network gateway, and the type of the network or hardware devices is not limited. That is, no matter what type of network or hardware device can access the cloud resources through the virtual LAN gateway.
  • different types of network or hardware devices can access cloud resources in different ways, which can simplify the access method of cloud resources.
  • the system further includes a switch; the switch is configured to receive service data sent by at least one of the network or hardware device, perform capacity expansion processing on the service data, and send the capacity expansion processing Service data to the virtual local area network gateway, the expansion process is used to increase the number of cloud resources accessible to the network or hardware devices; the virtual local area network gateway is used to receive the expanded service data sent by the switch, Converting the expanded business data into unified protocol business data, and sending the unified protocol business data to the cloud resource.
  • the number of networks and hardware devices that can access cloud resources can be expanded through switches, thereby solving the problem that cloud resources cannot be expanded on a large scale.
  • the service data sent by the network or hardware device includes a header part, and the header part includes at least a virtual local area network identification field, and the virtual local area network identification field includes a virtual local area network identification, the The virtual local area network identifier is the cloud resource allocated in advance to the network or hardware device;
  • the switch When the switch performs capacity expansion processing on the service data, it is specifically used for: the switch adds a virtual local area network identification field in the header portion of the service data; or, the switch adds a header in the service data In the virtual local area network identification field included in the section, the number of bits corresponding to the virtual local area network identification is increased.
  • the number of cloud resources that can be accessed to the network and hardware devices can be expanded.
  • the service data sent by the network or hardware device includes a source Internet protocol IP address field, and the source IP address field is allocated by the network or hardware device itself.
  • the solution of using the network or hardware device to assign the IP address as the source IP address compared with the solution of using cloud resources to assign the IP address of the network device or the hardware device as the source IP address, can solve the problem
  • the number of IP addresses is limited.
  • the virtual local area network gateway is further configured to: receive service data sent by the cloud resource, where the service data includes a destination IP address field, and the destination IP address field is the cloud resource Assigned to the network or hardware device; according to a pre-configured routing table, sending the service data to the corresponding network or hardware device, the routing table stores the IP address and cloud resources allocated by the network or hardware device itself is Correspondence between IP addresses assigned by the network or hardware.
  • an access method including: a virtual local area network gateway receiving service data sent by at least one of a network or a hardware device; the virtual local area network gateway converting the service data into unified protocol service data; The virtual local area network gateway sends the unified protocol service data to cloud resources.
  • the service data sent by at least one of the network or hardware device includes a source Internet protocol IP address field, and the source IP address field is allocated by the network or hardware device itself.
  • the method further includes: the virtual local area network gateway receives service data sent by the cloud resource, the service data includes a destination IP address field, and the destination IP address field is the cloud Resources are allocated by the network or hardware devices; the virtual LAN gateway sends the service data to the corresponding network or hardware device according to a pre-configured routing table, and the routing table stores the IP assigned by the network or hardware itself The correspondence between the address and the IP address assigned by the cloud resource to the network or hardware.
  • the virtual local area network gateway receiving service data sent by at least one of a network or a hardware device includes: the virtual local area network gateway receives service data after capacity expansion processing sent by a switch, and after the capacity expansion processing The business data is generated based on the business data sent by at least one of the network or the hardware device; the conversion of the business data into unified protocol business data by the virtual local area network gateway includes: The business data after the expansion processing is converted into unified protocol business data.
  • an access method which includes: a switch receiving service data sent by at least one of a network or a hardware device; the switch performing capacity expansion processing on the service data, and sending the service data after the capacity expansion processing to a virtual local area network Gateway, the expansion process is used to increase the number of cloud resources that can be accessed to the network or hardware devices.
  • the header portion of the service data includes at least a virtual local area network identification field, and the virtual local area network identification field includes a virtual local area network identification, and the virtual local area network identification is the cloud resource provided to the network or hardware in advance Equipment assigned;
  • the switch performs capacity expansion processing on the service data, including: the switch adds a virtual local area network identification field in the service data header; or, the switch includes the service data header In the field of virtual local area network identification, increase the number of bits corresponding to the virtual local area network identification.
  • the present application provides a communication device, which is suitable for a first computing node or a chip in a first computing node, and includes a unit or means for performing the steps of the above second aspect or third aspect.
  • the present application provides a communication device, which is suitable for a terminal device or a chip in a terminal device, and includes at least one processing element and at least one storage element, wherein the at least one storage element is used to store programs and data. At least one processing element is used to perform the method provided in the second or third aspect of the present application.
  • the present application provides a communication device including at least one processing element (or chip) for performing the method of the above second aspect or third aspect.
  • the present application provides a computer program product, the computer program product comprising computer instructions, which when executed by a computer, causes the computer to perform the method of any of the above aspects.
  • the present application provides a computer-readable storage medium that stores computer instructions, and when the computer instructions are executed by a computer, causes the computer to perform the method of any of the above aspects.
  • FIG. 1a to 1c are schematic diagrams of an access system provided by an embodiment of this application.
  • FIGS. 2a to 2c are schematic diagrams of an access system provided by an embodiment of this application.
  • 3a to 3c are schematic diagrams of an access system provided by an embodiment of this application.
  • FIG 7 and 8 are schematic structural diagrams of an access device provided by an embodiment of the present application.
  • FIG. 2a shows an access system 200a.
  • the access system 200a includes a network 201a, a virtual local area network gateway (virtual local area network gateway, VLAN GW) 202, and a cloud resource 203.
  • the first end of the virtual local area network gateway 202 is connected to the network 201a, and the second end is connected to the cloud resource 203.
  • the network 201a is used to send service data to the virtual LAN gateway 202.
  • the network 201a may include one network, or multiple networks, and the types of the multiple networks are the same or different.
  • the network 201a may be, but not limited to, a hosted area network.
  • the virtual local area network gateway 202 is used to convert the service data sent by the network 201a into a unified protocol service data, and send the unified protocol service data to the cloud resource 203, wherein the unified protocol is that the cloud resource 203 can be identified and decoded Agreement.
  • the cloud resource 203 is used to receive the unified protocol service number sent by the virtual local area network gateway 202.
  • the service data sent by the network 201a may include two parts, namely a header part and a data part.
  • the header part may include the source Internet protocol (IP) address and the destination IP address.
  • IP Internet protocol
  • the source IP address is the IP address of the network 201a
  • the destination IP address is the IP address of the cloud resource 203.
  • the source IP address is the IP address assigned by the network itself, or the source IP address is the IP address assigned by the cloud resource to the network. Because the IP addresses allocated by cloud resources are limited, the solution of using the network's own assigned IP address as the source IP address can be solved compared with the solution of using cloud resources to assign the IP address of the network device as the source IP address. Restrictions on the number of IP addresses.
  • the virtual LAN gateway 202 may perform the following operations: according to the IP address and cloud resources assigned by the network 201a itself 203 generates a routing table for the IP address assigned by the network 201a.
  • the IP address allocated by the network 201a itself may be referred to as the first IP address of the network 201a
  • the IP address allocated by the cloud resource 203 to the network 201a may be referred to as the second IP address of the network 201a.
  • the routing table may include a correspondence between the first IP address and the second IP address.
  • the words "first" and “second” are only used to distinguish the description, and cannot be understood as indicating or implying relative importance, nor as an indication. Or suggest the order.
  • the cloud resource 203 can send service data to the virtual local area network gateway 202.
  • the service data sent by the cloud resource 203 may include a header part and a data part, and the header part may include a source IP address and a destination IP address, where the source IP address is the IP address of the cloud resource 203, and the destination The IP address is the second IP address of the network 201a.
  • the virtual local area network gateway 202 may convert the second IP address in the service data to the first IP address according to the above routing table, and send the converted service data after the IP To the network 201a.
  • the access system 200a may further include a switch 204, which is used to expand the number of networks or hardware devices that the cloud resources can access.
  • the switch 204 may be a hardware switch or a software switch.
  • the switch may be an open source virtual switch (open vswitch, OVS) or a top-level (TOR) switch.
  • the first end of the switch 204 is connected to the network 201a, the second end of the switch 204 is connected to the first end of the virtual LAN gateway 202, and the second end of the virtual LAN gateway 202 is connected to the cloud resource 203.
  • the network 201a is used to send service data to the switch 204;
  • the switch 204 is used for performing capacity expansion processing on the service data sent by the network 201a, and sending the service data after the capacity expansion processing to the virtual local area network gateway 202.
  • the capacity expansion processing is used to increase the number of cloud resources 203 that can access the network or hardware devices.
  • the virtual local area network gateway 202 is used to receive the expanded service data sent by the switch 204, and convert the expanded service data to unified protocol service data.
  • the cloud resource 203 is used to receive unified protocol service data sent by the virtual local area network gateway 202.
  • the service data sent by the network 201a may include two parts, a header part and a data part, respectively.
  • the header portion may include a virtual local area network identification field, which is a cloud resource pre-allocated by the network device 201a, and the virtual local area network identification field is used to identify a network or hardware device that accesses the cloud resource.
  • the switch 204 may add a virtual local area network identification field to the header of the service data.
  • the header portion of the service data sent by the network device 201a includes a virtual local area network identification field, and the virtual local area network identification field includes 4 bit data.
  • the switch 204 may add a virtual local area network identification field to the header of the service data, and the newly added virtual local area network identification field may also include 4-bit data. Since the virtual local area network identifier is used to identify the network or hardware device that accesses the cloud resource 203, when the original service data includes a virtual local area network field, the entire cloud resource can access 24 (16) network or hardware devices. After the expansion of the switch, the entire cloud resource can access 28 (256) networks or hardware devices.
  • the switch 204 may increase the number of bits corresponding to the virtual local area network identifier in the virtual local area network identification field included in the header portion of the service data.
  • the header portion of the service data sent by the network 201a includes a virtual local area network identification field, and the virtual local area network identification field includes 4-bit data, and the 4-bit data is used to indicate the virtual local area network ID corresponding to the network 201a .
  • the switch 204 can increase the number of bits in the virtual local area network identification field.
  • the number of bits in the virtual local area field can be increased from 4 bits to 8 bits.
  • the maximum number of network and hardware devices that access cloud resources can be increased from 24 to 28.
  • the double-layer VLAN technology is adopted to solve the problem that cloud resources cannot be expanded on a large scale.
  • FIG. 2b shows an access system 200b.
  • the access system 200b includes a hardware device 201b, a virtual local area network gateway (virtual local area network gateway, VLAN GW) 202, and a cloud resource 203.
  • the first end of the virtual local area network gateway 202 is connected to the hardware device 201b, and the second end is connected to the cloud resource 203.
  • the hardware device 201b is used to send service data to the virtual LAN gateway 202.
  • the hardware device 201b may include one hardware device, or multiple hardware devices, and the types of the multiple hardware devices are the same or different.
  • the hardware device 201b may be a bare metal server (bare metal server, BMS) or an encryption machine.
  • the virtual local area network gateway 202 is used to convert the service data sent by the hardware device 201b into unified protocol service data, and send the unified protocol service data to the cloud resource 203.
  • the cloud resource 203 is used to receive unified protocol service data sent by the virtual local area network gateway 202.
  • Cloud resources can simplify the access method of cloud resources.
  • the service data sent by the hardware device 201b may also include two parts, namely a header part and a data part.
  • the header part may include a source IP address and a destination IP address.
  • the source IP address is the IP address of the hardware device
  • the destination IP address is the IP address of the cloud resource.
  • the source IP address is an IP address allocated by the hardware itself, or the source IP address is an IP address allocated by the cloud resource to the hardware device. Since the IP addresses allocated by cloud resources are limited, the solution of using the IP addresses allocated by the network as the source IP address can be solved compared with the solution of using the IP addresses allocated by the cloud resources for hardware devices as the source IP address. Restrictions on the number of IP addresses.
  • the virtual LAN gateway 202 may perform the following operations: According to the IP address assigned by the hardware device 201b itself and The cloud resource 203 generates a routing table for the IP address allocated by the hardware device 201b.
  • the routing table may include a correspondence between the first IP address and the second IP address.
  • the service data sent by the cloud resource 203 may also include a header part and a data part, and the header part may include a source IP address and a destination IP address.
  • the source IP address is the IP address of the cloud resource 203
  • the destination IP address is the second IP address of the hardware device 201b.
  • the virtual local area network gateway 202 may convert the second IP address in the service data to the first IP address according to the above routing table, and send the converted service data after the IP To hardware device 201b.
  • the access system 200b may further include a switch 204, which is used to expand the number of networks or hardware devices that the cloud resources can access.
  • the switch 204 may be a hardware switch or a software switch.
  • the first end of the switch 204 is connected to the hardware device 201b, the second end of the switch 204 is connected to the first end of the virtual LAN gateway 202, and the second end of the virtual LAN gateway 202 is connected to the cloud resource 203.
  • the hardware device 201b is used to send service data to the switch 204;
  • the switch 204 is used for performing expansion processing on the service data sent by the hardware device 201b, and sending the expanded expanded business data to the virtual LAN gateway 202.
  • the expansion processing is used to increase the number of cloud resources 203 that can access the network or hardware devices .
  • the virtual local area network gateway 202 is used to receive the expanded service data sent by the switch 204, and convert the expanded service data to unified protocol service data.
  • the cloud resource 203 is used to receive unified protocol service data sent by the virtual local area network gateway 202.
  • the hardware device is a BMS server
  • the switch is a TOR switch
  • the cloud resources include a dedicated gateway (GW), a virtual router (virtual, VR, Router), and a Linux virtual server (linux virtual server) , LVS), destination network address translation (destination network address translation, DNAT), soft network address translation (network address translation, NAT and next generation firewall (ngfw) as examples, detailing the process of this application:
  • the BMS server may include a virtual local area network (Virtual Local Area Network, VLAN) interface.
  • VLAN Virtual Local Area Network
  • the BMS server is connected to the first end of the TOR switch through the VLAN interface, and the second end of the TOR switch is connected to the first end of the virtual LAN gateway.
  • the second end of the virtual LAN gateway is connected to the first end of the dedicated line GW in the cloud resource, the second end of the dedicated line GW is connected to the first end of the VR, the second end of the VR is connected to the LVS, and the third end of the VR
  • the end is connected to the first end of DNAT, the second end of DNAT is connected to the first end of soft NAT, the second end of soft NAT is connected to the first end of ngfw, and the second end of ngfw is connected to the public network.
  • the console of the virtual local area network gateway provides an interface to support the creation of VLAN GW subnets, and this subnet can communicate with other subnets in the cloud resources by configuring dedicated lines.
  • the dedicated line GW is responsible for connecting the VLAN GW subnet with the customer's offline data center.
  • LVS is responsible for establishing a VLANX tunnel between VR and LVS, using the floating IP of VR as VTEP IP, the console transparently transmits the virtualization identification field to LVS, and LVS sends the virtualized traffic to VR.
  • DNAT is responsible for all ports mapping of EIP and VLAN GW subnet IP.
  • the BMS server may further include a virtual private cloud (virtual private cloud, VPC) interface.
  • VPC virtual private cloud
  • the BMS is connected to the TOR switch through the VPC interface, and the TOR switch is connected to the BMGW.
  • Cloud resources such as private clouds.
  • FIG. 2c shows an access system 200c.
  • the access system 200c includes a network 201a, a hardware device 201b, a virtual local area network gateway 202, and a cloud resource 203.
  • the first end of the virtual local area network gateway 202 is respectively connected to the network 201a and the hardware device 201b, and the second end is connected to the cloud resource 203.
  • the network 201a and the hardware device 201b are used to send service data to the virtual local area network gateway 202.
  • the network 201a may include one or more networks, and the types of the multiple networks may be the same or different, and the hardware device 201b may include one or more hardware devices, and the types of the multiple hardware devices may be different or different.
  • the virtual local area network gateway 202 is configured to receive service data sent by the network 201a and the hardware device 201b, convert the service data into unified protocol service data, and send the unified protocol service data to the cloud resource 203.
  • the virtual local area network gateway 202 can refer to the description in FIG. 2a or FIG. 2b respectively, and will not be described here.
  • the cloud resource 203 is used to receive unified protocol service data sent by the virtual local area network gateway 202.
  • the network or hardware devices are all connected to the cloud resources 203 through the virtual local area network gateway 202, and the network or hardware devices are not limited type. That is, no matter what type of network or hardware device can access the cloud resource 203 through the virtual local area network gateway 202.
  • different types of network or hardware devices can access the cloud resource 203 in different ways, which can simplify the access method of the cloud resource.
  • FIG. 3c shows an access system 300c.
  • the access system 300c includes a network device 301a, a hardware device 301b, a switch 204, a virtual local area network gateway 202, and a cloud resource 203.
  • the first end of the switch 204 is respectively connected to the network 201a and the hardware device 201b, the second end of the switch 204 is connected to the first end of the virtual LAN gateway 202, and the second end of the virtual LAN gateway 202 is connected to the cloud resource 203.
  • the network device 201a and the hardware device 201b are used to send service data to the switch 204.
  • the switch 204 is configured to receive the service data sent by the network device 201a and the hardware device 201b, and perform capacity expansion processing on the service data, and send the service data after the capacity expansion processing to the virtual local area network gateway 202.
  • capacity expansion processing please refer to the descriptions in FIG. 3a and FIG. 3b above, and no further description will be given here.
  • the virtual local area network gateway 202 is configured to receive the expanded service data sent by the switch 204, convert the expanded service data into unified protocol service data, and send the unified protocol service data to the cloud resource 203.
  • the cloud resource 203 is used to receive unified protocol service data sent by the virtual local area network gateway 202.
  • FIG. 5 a process of providing an access method is provided.
  • the virtual LAN gateway, network, hardware device, and cloud resources in the process may be the above-mentioned FIG. 2a, FIG. 2b, FIG. 2c, FIG. 3a, FIG. 3b or The virtual LAN gateway, network, hardware resources, and cloud resources in Figure 3c.
  • the process is:
  • At least one of the network or the hardware device sends service data to the virtual local area network gateway.
  • At least one of the network or the hardware device may include only the network, or only the hardware device, or include the network or the hardware device at the same time, the number of the network may be one or more, the types of multiple networks are the same or different, the number of the hardware device There may be one or more, and the types of multiple hardware devices are the same or different.
  • the virtual local area network gateway receives service data sent by at least one of a network or a hardware device, converts the service data into unified protocol business data, and sends the unified protocol business data to cloud resources.
  • service data sent by at least one of a network or a hardware device
  • converts the service data into unified protocol business data and sends the unified protocol business data to cloud resources.
  • processing process of the service data by the virtual local area network gateway please refer to the above records, which will not be described here.
  • the cloud resource receives business data of a unified protocol.
  • the virtual LAN gateway, switch, network, hardware equipment, and cloud resources in the flow may be the virtual LAN gateway in FIG. 3a, FIG. 3b, or FIG. 3c, respectively. Switches, networks, hardware resources, and cloud resources.
  • the process is:
  • At least one of the network or the hardware device sends service data to the switch.
  • the switch receives the service data sent by at least one of the network or the hardware device, performs capacity expansion processing on the service data, and sends the service data after the capacity expansion processing to the virtual local area network gateway.
  • the virtual local area network gateway receives the expanded business data, converts the expanded business data into unified protocol business data, and sends the unified protocol business data to cloud resources.
  • the cloud resource receives business data of a unified protocol.
  • the present application provides an apparatus 700, including a communication unit 701 and a processing unit 702.
  • the device 700 may be applied to a virtual local area network gateway, which is used to perform the steps shown in FIG. 5 with the virtual local area network gateway as the main body.
  • the communication unit 701 is configured to receive service data sent by at least one of a network or a hardware device.
  • the processing unit 702 is configured to convert the business data into unified protocol business data.
  • the communication unit 701 is also used to send the unified protocol service data to cloud resources.
  • the apparatus 700 may be applied to a switch, and is used to perform the steps shown in FIG. 6 with the switch as the main body.
  • the communication unit 701 is configured to receive service data sent by at least one of a network or a hardware device.
  • the processing unit 702 is configured to perform capacity expansion processing on the service data, and send the service data after the capacity expansion processing to the virtual local area network gateway.
  • the capacity expansion processing is used to increase the number of cloud resources that can be accessed to the network or hardware devices.
  • the present application provides an apparatus 800 that can be applied to the virtual LAN gateway or switch in the process shown in FIG. 5 or FIG. 6 above.
  • the communication device 800 may include a processor 801 and a memory 802. Further, the device may further include a communication interface 804, and the communication interface may be a transceiver. Further, the device may further include a bus system 803.
  • the processor 801, the memory 802 and the communication interface 804 can be connected through a bus system 803, the memory 802 can be used to store instructions, the processor 801 can be used to execute the instructions stored in the memory 802 to control the communication interface 804 to receive or send signals, Complete the steps in the method shown in FIG. 5 or FIG. 6 with the virtual LAN gateway or switch as the main body.
  • the memory 802 may be integrated in the processor 801, or may be a physical entity different from the processor 801.
  • the function of the communication interface 804 may be implemented through a transceiver circuit or a dedicated chip for transceiver.
  • the processor 801 may be realized by a dedicated processing chip, a processing circuit, a processor, or a general-purpose chip.
  • the general-purpose processor may implement the functions of the processor 801 and the communication interface 804 by executing the codes in the memory.
  • the communication device 800 may be used to execute the steps shown in FIG. 5 above, using a virtual local area network gateway as the main body.
  • the communication interface 804 can receive service data sent by at least one of a network or a hardware device; the processor 801 can convert the service data into unified protocol service data; the communication interface 804 can send the unified protocol service data To cloud resources.
  • the communication device 800 may be used to execute the steps shown in FIG. 6 above, with the switch as the main body.
  • the communication interface 804 may receive service data sent by at least one of a network or a hardware device; the processor 801 may perform capacity expansion processing on the service data, and send the service data after capacity expansion processing to the virtual LAN gateway, and the capacity expansion processing Used to increase the number of cloud resources that can be connected to the network or hardware devices.
  • the embodiments of the present application further provide a computer storage medium in which a software program is stored, which can realize any one or more of the above when read and executed by one or more processors The method provided by the embodiment.
  • the computer storage medium may include various media that can store program codes, such as a U disk, a mobile hard disk, a read-only memory, a random access memory, a magnetic disk, or an optical disk.
  • embodiments of the present application also provide a computer program product, the computer program product includes computer instructions, and when the computer instructions are executed by a computer, the computer is caused to perform any one or more of the above implementations Examples provided.
  • an embodiment of the present application further provides a chip including a processor for implementing the functions involved in any one or more of the above embodiments, such as acquiring or processing information involved in the above method or News.
  • the chip further includes a memory, which is used to store program instructions and data executed by the processor.
  • the chip may also contain chips and other discrete devices.
  • the processor may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSPs), and dedicated integration Circuit (application-specific integrated circuit, ASIC), field programmable gate array (FPGA) or other programmable logic devices, transistor logic devices, discrete hardware components, etc.
  • the general-purpose processor may be a microprocessor or any conventional processor.
  • the memory may include read-only memory and random access memory, and provide instructions and data to the processor.
  • a portion of the memory may also include non-volatile random access memory.
  • the bus system may also include a power bus, a control bus, and a status signal bus.
  • various buses are marked as bus systems in the figure.
  • each step of the above method may be completed by an integrated logic circuit of hardware in the processor or instructions in the form of software.
  • the steps of the method disclosed in conjunction with the embodiments of the present application may be directly embodied and executed by a hardware processor, or may be executed and completed by a combination of hardware and software modules in the processor.
  • the software module may be located in a mature storage medium in the art, such as random access memory, flash memory, read-only memory, programmable read-only memory, or electrically erasable programmable memory, and registers.
  • the storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware. In order to avoid repetition, they will not be described in detail here.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

一种接入***、方法及装置，该接入***包括网络或硬件设备中的至少一个、虚拟局域网网关和云资源；所述网络或硬件设备，用于发送业务数据；所述虚拟局域网网关，用于接收所述网络或硬件设备中的至少一个发送的业务数据，将所述业务数据，转换为统一协议的业务数据，以及发送所述统一协议的业务数据至云资源；所述云资源，用于接收所述虚拟局域网网关发送的统一协议的业务数据。采用本申请的***、方法或装置，可简化云资源的接入。

Description

一种接入***、方法及装置 技术领域
本申请涉及通信技术领域，尤其涉及一种接入***、方法及装置。
背景技术
随着云技术的发展，云资源已得到广泛应用。在现有技术中，不同的网络或硬件都需要接入云资源。比如，裸金属服务器(bare metal server，BMS)、托管区网络、新硬件(比如加密机)等都有接入云资源的需求。
目前，不同的网络或硬件，采用不同的方式接入云资源。比如，如图1a所示，BMS通过开源虚拟交换机(open vswitch，OVS)接入云资源。如图1b所示，托管区网络通过下一代防火墙(next generation firewall，ngfw)接入云资源。如图1c所示，新硬件通过OVS接入云资源。由于不同的网络或硬件接入云资源的方式不同，接入云资源的接入方式较复杂。
发明内容
本申请实施例提供一种接入***、方法及装置，以简化接入云资源的方式。
第一方面，提供一种接入***，包括网络或硬件设备中的至少一个、虚拟局域网网关和云资源；
其中，所述网络或硬件设备，用于发送业务数据；所述虚拟局域网网关，用于接收所述网络或硬件设备中的至少一个发送的业务数据，将所述业务数据，转换为统一协议的业务数据，以及发送所述统一协议的业务数据至云资源；所述云资源，用于接收所述虚拟局域网网关发送的统一协议的业务数据。
由上可见，网络或硬件设备均通过虚拟局域网网关接入云资源，且不限定网络或硬件设备的类型。也就是无论何种类型的网络或硬件设备均可通过虚拟局域网网关接入云资源。相对应，不同类型的网络或硬件设备，通过不同方式接入云资源，可简化云资源的接入方式。
在一种可能的设计中，所述***还包括交换机；所述交换机，用于接收所述网络或硬件设备中的至少一个发送的业务数据，对所述业务数据进行扩容处理，发送扩容处理后的业务数据至所述虚拟局域网网关，所述扩容处理用于增加云资源可接入网络或硬件设备的数量；所述虚拟局域网网关，用于接收所述交换机发送的扩容处理后的业务数据，将所述扩容处理后的业务数据转换为统一协议的业务数据，发送所述统一协议的业务数据至所述云资源。
由上可见，通过交换机可扩大可接入云资源的网络和硬件设备数量，从而解决云资源无法大规模扩容的问题。
在一种可能的设计中，所述网络或硬件设备所发送的业务数据中包括头部分，所述头部分中至少包括虚拟局域网标识字段，所述虚拟局域网标识字段中包括虚拟局域网标识， 所述虚拟局域网标识为所述云资源预先为网络或硬件设备所分配的；
所述交换机在对所述业务数据进行扩容处理时，具体用于：所述交换机在所述业务数据的头部分中，新增虚拟局域网标识字段；或者，所述交换机在所述业务数据的头部分中所包括的虚拟局域网标识字段中，增加所述虚拟局域网标识所对应的比特数量。
通过上述新增虚拟局域网标识字段，或者增加虚拟局域网标识所对应的比特数量的操作，可扩大云资源可接入网络和硬件设备的数量。
在一种可能的设计中，所述网络或硬件设备所发送的业务数据中包括源互联网协议IP地址字段，所述源IP地址字段为所述网络或硬件设备自己所分配的。
由上可见，采用网络或硬件设备自己为所分配的IP地址作为源IP地址的方案，相对于，采用云资源为网络设备或硬件设备所分配的IP地址作为源IP地址的方案，可解决对IP地址数量限制的问题。
在一种可能的设计中，所述虚拟局域网网关，还用于：接收所述云资源发送的业务数据，所述业务数据中包括目的IP地址字段，所述目的IP地址字段为所述云资源为网络或硬件设备所分配的；根据预配置的路由表，发送所述业务数据至对应的网络或硬件设备，所述路由表中存储有网络或硬件设备自己所分配的IP地址与云资源为网络或硬件所分配的IP地址间的对应关系。
第二方面，提供一种接入方法，包括：虚拟局域网网关接收网络或硬件设备中的至少一个发送的业务数据；所述虚拟局域网网关将所述业务数据，转换为统一协议的业务数据；所述虚拟局域网网关发送所述统一协议的业务数据至云资源。
在一种可能的设计中，所述网络或硬件设备中的至少一个所发送的业务数据中包括源互联网协议IP地址字段，所述源IP地址字段为所述网络或硬件设备自己所分配的。
在一种可能的设计中，所述方法还包括：所述虚拟局域网网关接收所述云资源发送的业务数据，所述业务数据中包括目的IP地址字段，所述目的IP地址字段为所述云资源为网络或硬件设备所分配的；所述虚拟局域网网关根据预配置的路由表，发送所述业务数据至对应的网络或硬件设备，所述路由表中存储有网络或硬件自己所分配的IP地址与云资源为网络或硬件所分配的IP地址间的对应关系。
在一种可能的设计中，所述虚拟局域网网关接收网络或硬件设备中的至少一个发送的业务数据，包括：所述虚拟局域网网关接收交换机发送的扩容处理后的业务数据，所述扩容处理后的业务数据是根据所述网络或硬件设备中的至少一个发送的业务数据所生成的；所述虚拟局域网网关将所述业务数据，转换为统一协议的业务数据，包括：所述虚拟局域网网关将所述扩容处理后的业务数据转换为统一协议的业务数据。
第三方面，提供一种接入方法，包括：交换机接收网络或硬件设备中的至少一个发送的业务数据；所述交换机对所述业务数据进行扩容处理，发送扩容处理后的业务数据至虚拟局域网网关，所述扩容处理用于增加云资源可接入网络或硬件设备的数量。
在一种可能的设计中，所述业务数据的头部分中至少包括虚拟局域网标识字段，所述虚拟局域网标识字段中包括虚拟局域网标识，所述虚拟局域网标识为所述云资源预先给网络或硬件设备所分配的；
所述交换机对所述业务数据进行扩容处理，包括：所述交换机在所述业务数据的头部 分中，新增虚拟局域网标识字段；或者，所述交换机在所述业务数据的头部分中所包括的虚拟局域网标识字段中，增加所述虚拟局域网标识所对应的比特数量。
第四方面，本申请提供一种通信装置，适用于第一计算节点或第一计算节点中的芯片，包括用于执行以上第二方面或第三方面各个步骤的单元或手段(means)。
第五方面，本申请提供一种通信装置，适用于终端设备或终端设备中的芯片，包括至少一个处理元件和至少一个存储元件，其中所述至少一个存储元件用于存储程序和数据，所述至少一个处理元件用于执行本申请第二方面或第三方面提供的方法。
第六方面，本申请提供一种通信装置，包括用于执行以上第二方面或第三方面的方法的至少一个处理元件(或芯片)。
第七方面，本申请提供一种计算机程序产品，该计算机程序产品包括计算机指令，当该计算机指令被计算机执行时，使得所述计算机执行以上任一方面的方法。
第八方面，本申请提供了一种计算机可读存储介质，该存储介质存储有计算机指令，当所述计算机指令被计算机执行时，使得所述计算机执行以上任一方面的方法。
附图说明
图1a至图1c为本申请实施例提供的接入***示意图；
图2a至图2c为本申请实施例提供的接入***的示意图；
图3a至图3c为本申请实施例提供的接入***的示意图；
图4为本申请实施例提供的接入***的一具体示例；
图5和图6为本申请实施例提供的接入方法的流程图；
图7和图8为本申请实施例提供的接入装置的结构示意图。
具体实施方式
下面将结合本申请实施例中的附图，对本申请实施例中的技术方案进行描述。
图2a示出了一种接入***200a，接入***200a中包括网络201a、虚拟局域网网关(virtual local area network gateway，VLAN GW)202和云资源203。虚拟局域网网关202的第一端与网络201a相连，第二端与云资源203相连。
其中，网络201a，用于发送业务数据至虚拟局域网网关202。所述网络201a中可包括一个网络，或者，多个网络，所述多个网络的类型相同或不同。比如，所述网络201a可但不限于为托管区网络。
虚拟局域网网关202，用于将所述网络201a发送的业务数据转换为统一协议的业务数据，且发送所述统一协议的业务数据至云资源203，其中该统一协议为云资源203可以识别并解码的协议。
云资源203，用于接收虚拟局域网网关202发送的统一协议的业务数。
由上可见，在图2a所示的接入***200a中，不同类型的网络接入云资源的方式相同，相对于，不同类型的网络采用不同的方式接入云资源，可简化云资源的接入方式。
具体的，网络201a所发送的业务数据中可包括两部分，分别为头(header)部分和数据(data)部分。其中，头部分可包括源互联网协议(internet protocol，IP)字址和目的IP 地址。源IP地址为网络201a的IP地址，目的IP地址为云资源203的IP地址。源IP地址为网络自己所分配的IP地址，或者，源IP地址为云资源为网络所分配的IP地址。由于云资源所分配的IP地址有限，因此，采用网络自己为所分配的IP地址作为源IP地址的方案，相对于，采用云资源为网络设备分配的IP地址作为源IP地址的方案，可解决对IP地址数量限制的问题。
在本申请实施例中，如果网络201a采用网络为自己所分配的IP地址作为源IP地址的方案，则所述虚拟局域网网关202可执行以下操作：根据网络201a自己所分配的IP地址与云资源203为网络201a所分配的IP地址，生成路由表。为了方便描述，可将网络201a自己所分配的IP地址称为网络201a的第一IP地址，将云资源203为网络201a所分配的IP地址称为网络201a的第二IP地址。所述路由表中可包括第一IP地址与第二IP地址的对应关系。另外，需要理解的是，在本申请的描述中，“第一”、“第二”等词汇，仅用于区分描述的目的，而不能理解为指示或暗示相对重要性，也不能理解为指示或暗示顺序。
这样，在下行方向上，云资源203可发送业务数据至虚拟局域网网关202。其中，云资源203所发送的业务数据中可包括头部分和数据部分，所述头部分中可包括源IP地址和目的IP地址，所述源IP地址为云资源203的IP地址，所述目的IP地址为网络201a的第二IP地址。所述虚拟局域网网关202在接收到云资源203发送的业务数据时，可根据上述路由表，将所述业务数据中的第二IP地址转换为第一IP地址，且发送转换IP后的业务数据至网络201a。
可选的，如图3a所示，接入***200a中还可包括交换机204，用于对云资源可接入网络或硬件设备的数量进行扩容。交换机204可为硬件交换机，也可为软件交换机。比如，交换机可为开源虚拟交换机(open vswitch，OVS)或最高级别(top of rank，TOR)交换机。
其中，交换机204的第一端与网络201a相连，交换机204的第二端与虚拟局域网网关202的第一端相连，虚拟局域网网关202的第二端与云资源203相连。
具体的，整个数据处理的过程如下：
网络201a，用于发送业务数据至交换机204；
交换机204，用于对网络201a发送的业务数据进行扩容处理，且发送扩容处理后的业务数据至虚拟局域网网关202，所述扩容处理用于增加云资源203可接入网络或硬件设备的数量。
虚拟局域网网关202，用于接收交换机204发送的扩容处理后的业务数据，且将扩容处理后的业务数据转换为统一协议的业务数据。
云资源203，用于接收虚拟局域网网关202发送的统一协议的业务数据。
在本申请实施例中，网络201a发送的业务数据可包部两部分，分别为头(header)部分和数据(data)部分。其中，头部分可包括虚拟局域网标识字段，所述虚拟局域网标识为云资源预先为网络设备201a所分配的，所述虚拟局域网标识字段用于标识接入云资源的网络或硬件设备。
在一种示例中，交换机204在接收到网络201a发送的业务数据时，可在业务数据的头部分中，新增虚拟局域网标识字段。比如，在本申请实施例中，网络设备201a所发送的业务数据的头部分中包括一个虚拟局域网标识字段，所述虚拟局域网标识字段中包括4个比 特数据。交换机204在接收到所述业务数据后，可在业务数据的头部分中新增一个虚拟局域网标识字段，新增的虚拟局域网标识字段中也可包括4比特数据。由于所述虚拟局域网标识用于标识接入云资源203的网络或硬件设备，那么，原来业务数据中包括一个虚拟局域网字段时，整个云资源可接入24(16)个网络或硬件设备。在经过交换机的扩容处理后，整个云资源可接入28(256)个网络或硬件设备。
在一种示例中，交换机204在接收到网络201a所发送的业务数据时，可在业务数据的头部分中所包括的虚拟局域网标识字段中，增加所述虚拟局域网标识所对应的比特数量。比如，网络201a所发送的业务数据的头部分中包括一个虚拟局域网标识字段，所述虚拟局域网标识字段中包括4比特数据，所述4比特数据用于表示所述网络201a所对应的虚拟局域网标识。在本示例中，交换机204可增加虚拟局域网标识字段中的比特数量，比如，可将虚拟局域字段中的比特数量由4比特增加至8比特数。同理，接入云资源的最大网络和硬件设备数量可由24增加至28。
由上可见，在本申请实施例中，采用双层VLAN技术，可解决云资源无法大规模扩容的问题。
图2b示出了一种接入***200b，接入***200b中包括硬件设备201b、虚拟局域网网关(virtual local area network gateway，VLAN GW)202和云资源203。虚拟局域网网关202的第一端与硬件设备201b相连，第二端与云资源203相连。
其中，硬件设备201b，用于发送业务数据至虚拟局域网网关202。所述硬件设备201b中可包括一个硬件设备，或者，多个硬件设备，所述多个硬件设备的类型相同或不同。比如，所述硬件设备201b可为裸金属服务器(bare metal server，BMS)或加密机等。
虚拟局域网网关202，用于将所述硬件设备201b发送的业务数据转换为统一协议的业务数据，且发送所述统一协议的业务数据至云资源203。
云资源203，用于接收虚拟局域网网关202发送的统一协议的业务数据。
由上可见，在本申请实施例中，在图2b所示的接入***200b中，不同类型的硬件设备接入云资源的方式相同，相对于，不同类型的硬件设备采用不同的方式接入云资源，可简化云资源的接入方式。
具体的，硬件设备201b所发送的业务数据中也可包括两部分，分别为头部分和数据部分。其中，头部分可包括源IP地址和目的IP地址。源IP地址为硬件设备的IP地址，目的IP地址为云资源的IP地址。所述源IP地址为硬件自己所分配的IP地址，或者，所述源IP地址为云资源为硬件设备所分配的IP地址。由于云资源所分配的IP地址有限，因此，采用网络自己所分的IP地址作为源IP地址的方案，相对于，采用云资源为硬件设备所分配的IP地址作为源IP地址的方案，可解决对IP地址数量限制的问题。
在本申请实施例中，如果硬件设备201b采用网络为自己所分配的IP地址作为源IP地址的方案，则所述虚拟局域网网关202可执行以下操作：根据硬件设备201b自己所分配的IP地址与云资源203为硬件设备201b所分配的IP地址，生成路由表。为了方便描述，可将硬件设备201b自己所分配的IP地址称为硬件设备201b的第一IP地址，将云资源203为硬件设备201b所分配的IP地址称为硬件设备201b的第二IP地址。所述路由表中可包括第一IP地址与第二IP地址的对应关系。
这样，在云资源203发送业务数据至虚拟局域网网关202时，云资源203所发送的业务数据中也可包括头部分和数据部分，所述头部分中可包括源IP地址和目的IP地址，所述源IP地址为云资源203的IP地址，所述目的IP地址为硬件设备201b的第二IP地址。所述虚拟局域网网关202在接收到云资源203发送的业务数据时，可根据上述路由表，将所述业务数据中的第二IP地址转换为第一IP地址，且发送转换IP后的业务数据至硬件设备201b。
可选的，如图3b所示，接入***200b中还可包括交换机204，用于对云资源可接入网络或硬件设备的数量进行扩容。交换机204可为硬件交换机，也可为软件交换机。
其中，交换机204的第一端与硬件设备201b相连，交换机204的第二端与虚拟局域网网关202的第一端相连，虚拟局域网网关202的第二端与云资源203相连。
具体的，整个数据处理的过程如下：
硬件设备201b，用于发送业务数据至交换机204；
交换机204，用于对硬件设备201b发送的业务数据进行扩容处理，且发送扩容处理后的业务数据至虚拟局域网网关202，所述扩容处理用于增加云资源203可接入网络或硬件设备的数量。
虚拟局域网网关202，用于接收交换机204发送的扩容处理后的业务数据，且将扩容处理后的业务数据转换为统一协议的业务数据。
云资源203，用于接收虚拟局域网网关202发送的统一协议的业务数据。
关于交换机204对业务数据的扩容处理，可参见上述图3a所示示例的介绍，在此不再说明。
如图4所示，提供一接入云资源的具体示例。在图4所示的示例中，以硬件设备为BMS服务器，交换机为TOR交换机，云资源包括专线网关(gate way，GW)、虚拟路由器(virtual，VR，Router)、Linux虚拟服务器(linux virtual server，LVS)、目的网络地址转换(destination network address translation，DNAT)、软网络地址转换(network address translation，NAT和下一代防火墙(next generation firewall，ngfw)为例，详细说明本申请的过程：
具体的，BMS服务器可包括虚拟局域网(virtual local area network，VLAN)接口，BMS服务器通过VLAN接口与TOR交换机的第一端相连，TOR交换机的第二端与虚拟局域网网关的第一端相连，所述虚拟局域网网关的第二端与云资源中的专线GW的第一端相连，专线GW的第二端与VR的第一端相连，所述VR的第二端与LVS相连，VR的第三端与DNAT的第一端相连，DNAT的第二端与软NAT的第一端相连，软NAT的第二端与ngfw的第一端相连，ngfw的第二端与公网相连。
其中，虚拟局域网网关的控制台(console)提供界面，支持创建VLAN GW子网，且该子网能通过配置专线与云资源内的其它子网互通。专线GW负责将VLAN GW子网与客户线下数据中心打通。LVS负责VR和LVS之间建立VLANX隧道，将VR的浮动IP作为VTEP IP，控制台透传虚拟化标识字段给LVS，LVS把虚拟化流量送给VR等。DNAT负责EIP与VLAN GW子网IP的全端口(all ports)映射。
如图4所示，BMS服务器中还可以包括虚拟私有云(virtual private cloud，VPC)接口，所述BMS通过VPC接口与TOR交换机相连，所述TOR交换机与BMGW相连，所 述BMGW可接入虚拟私有云等云资源等。
图2c示出了一种接入***200c，接入***200c中包括网络201a、硬件设备201b、虚拟局域网网关202和云资源203。虚拟局域网网关202的第一端分别与网络201a和硬件设备201b相连，第二端与云资源203相连。
其中，网络201a和硬件设备201b，用于发送业务数据至虚拟局域网网关202。所述网络201a中可包括一个或多个网络，多个网络的类型可相同或不同，硬件设备201b中可包括一个或多个硬件设备，多个硬件设备的类型可不同或不同。
虚拟局域网网关202，用于接收网络201a和硬件设备201b发送的业务数据，且将所述业务数据转换为统一协议的业务数据，且发送所述统一协议的业务数据至云资源203。
关于虚拟局域网网关202对网络201a所发送业务数据的处理过程，以及对硬件设备201b所发送业务数据的处理过程，可分别参见上述图2a或图2b中的记载，在此不再说明。
云资源203，用于接收虚拟局域网网关202发送的统一协议的业务数据。
由上可见，在本申请实施例中，图2a、图2b和图2c所示的接入***中，网络或硬件设备均通过虚拟局域网网关202接入云资源203，且不限定网络或硬件设备的类型。也就是无论何种类型的网络或硬件设备均可通过虚拟局域网网关202接入云资源203。相对应，不同类型的网络或硬件设备，通过不同方式接入云资源203，可简化云资源的接入方式。
图3c示出了一种接入***300c，该接入***300c中包括网络设备301a、硬件设备301b、交换机204、虚拟局域网网关202和云资源203。
其中，交换机204的第一端分别与网络201a和硬件设备201b相连，交换机204的第二端与虚拟局域网网关202的第一端相连，虚拟局域网网关202的第二端与云资源203相连。
具体的，网络设备201a和硬件设备201b，用于发送业务数据至交换机204。
交换机204，用于接收网络设备201a和硬件设备201b发送的业务数据，且对所述业务数据进行扩容处理，且发送扩容处理后的业务数据至虚拟局域网网关202。关于扩容处理的过程，参见上述图3a和图3b中的记载，在此不再说明。
虚拟局域网网关202，用于接收交换机204发送的扩容处理后的业务数据，且将扩容处理后的业务数据转换为统一协议的业务数据，发送统一协议的业务数据至云资源203。
云资源203，用于接收虚拟局域网网关202发送的统一协议的业务数据。
由上可见，在图3c所提供的接入***中，可实现不同类型的网络和硬件设备接入云资源，简化接入云资源的方式。同时，可增加云资源中可接入网络和硬件设备的最大数量，实现对云资源的扩容。
如图5所示，提供一种接入方法的流程，该流程中的虚拟局域网网关、网络、硬件设备和云资源可分别为为上述图2a、图2b、图2c、图3a、图3b或图3c中的虚拟局域网网关、网络、硬件资源和云资源。该流程为：
S501.网络或硬件设备中的至少一个发送业务数据至虚拟局域网网关。
网络或硬件设备中的至少一个可仅包括网络，或者仅包括硬件设备，或者同时包括网络或硬件设备，网络的数量可为一个或多个，多个网络的类型相同或不同，硬件设备的数量可为一个或多个，多个硬件设备的类型相同或不同。
S502.虚拟局域网网关接收网络或硬件设备中的至少一个所发送的业务数据，将所述业务数据转换为统一协议的业务数据，发送所述统一协议的业务数据至云资源。关于虚拟局域网网关对业务数据的处理过程，参见上述记载，在此不再说明。
S503.云资源接收统一协议的业务数据。
如图6所示，提供一种接入方法的流程，该流程中的虚拟局域网网关、交换机、网络、硬件设备和云资源可分别为上述图3a、图3b或图3c中的虚拟局域网网关、交换机、网络、硬件资源和云资源。该流程为：
S601.网络或硬件设备中的至少一个发送业务数据至交换机。
S602.交换机接收网络或硬件设备中的至少一个发送的业务数据，对所述业务数据进行扩容处理，且发送扩容处理后的业务数据至虚拟局域网网关。
S603.虚拟局域网网关接收扩容处理后的业务数据，且将扩容处理后的业务数据转换为统一协议的业务数据，发送所述统一协议的业务数据至云资源。
S604.云资源接收统一协议的业务数据。
关于虚拟局域网和交换机对数据的处理过程，可参见上述记载，在此不再说明。
与上述构思相同，如图7所示，本申请提供一种装置700，包括通信单元701和处理单元702。
在本申请的一示例中，装置700可应用于虚拟局域网网关，用于执行图5所示的流程中，以虚拟局域网网关为执行主体的步骤。具体的，通信单元701，用于接收网络或硬件设备中的至少一个发送的业务数据。处理单元702，用于将所述业务数据，转换为统一协议的业务数据。通信单元701，还用于发送所述统一协议的业务数据至云资源。
在本申请的一示例中，装置700可应用于交换机，用于执行图6所示的流程中，以交换机为执行主体的步骤。具体的，通信单元701，用于接收网络或硬件设备中的至少一个发送的业务数据。处理单元702，用于对所述业务数据进行扩容处理，发送扩容处理后的业务数据至虚拟局域网网关，所述扩容处理用于增加云资源可接入网络或硬件设备的数量。
关于通信单元701和处理单元702的具体处理过程，可参见上述图5或图6所示的流程，不再说明。
与上述构思相同，如图8所示，本申请提供一种装置800，装置800可应用于上述图5或图6所示流程中的虚拟局域网网关或交换机上。
通信装置800可包括处理器801和存储器802。进一步的，该装置还可包括通信接口804，该通信接口可为收发器。进一步的，该装置还可包括总线***803。
其中，处理器801、存储器802和通信接口804可通过总线***803相连，该存储器802可用存储指令，该处理器801可用于执行该存储器802存储的指令，以控制通信接口804接收或发送信号，完成上述图5或图6所示方法中以虚拟局域网网关或交换机为主体的步骤。
其中，存储器802可以集成在处理器801中，也可以是与处理器801不同的物理实体。
作为一种实现方式，通信接口804的功能可以考虑通过收发电路或收发的专用芯片实现。处理器801可以考虑通过专用处理芯片、处理电路、处理器或通用芯片实现。
作为另一种实现方式，可以考虑使用计算机的方式，来实现本申请实施例提供的第一 计算节点或第一计算节点的功能。即将实现处理器801和通信接口804功能的程序代码存储在存储器802中，通用处理器可通过执行存储器中的代码来实现处理器801和通信接口804的功能。
该通信装置800所涉及的与本申请提供的技术方案相关的概念、解释和详细说明以及其他步骤，可参见前述方法或其它实施例中关于这些内容的描述，此处不作赘述。
在本申请的一示例中，所述通信装置800可用于执行上述图5所示流程中，以虚拟局域网网关为执行主体的步骤。比如，通信接口804可接收网络或硬件设备中的至少一个发送的业务数据；处理器801可将所述业务数据，转换为统一协议的业务数据；通信接口804可发送所述统一协议的业务数据至云资源。
在本申请的一示例中，所述通信装置800可用于执行上述图6所示流程中，以交换机为执行主体的步骤。比如，通信接口804，可接收网络或硬件设备中的至少一个发送的业务数据；处理器801可对所述业务数据进行扩容处理，发送扩容处理后的业务数据至虚拟局域网网关，所述扩容处理用于增加云资源可接入网络或硬件设备的数量。
关于处理器801和通信接口804的介绍，可参见上述图5或图6所示流程的介绍，在此不再赘述。
基于以上实施例，本申请实施例还提供了一种计算机存储介质，该存储介质中存储软件程序，该软件程序在被一个或多个处理器读取并执行时可实现上述任意一个或多个实施例提供的方法。该计算机存储介质可以包括：U盘、移动硬盘、只读存储器、随机存取存储器、磁碟或者光盘等各种可以存储程序代码的介质。
基于以上实施例，本申请实施例还提供了一种计算机程序产品，所述计算机程序产品中包括计算机指令，当所述计算机指令被计算机执行时，使得所述计算机执行上述任意一个或多个实施例提供的方法。
基于以上实施例，本申请实施例还提供了一种芯片，该芯片包括处理器，用于实现上述任意一个或多个实施例所涉及的功能，例如获取或处理上述方法中所涉及的信息或者消息。可选地，该芯片还包括存储器，该存储器，用于存储处理器所执行的程序指令和数据。该芯片，也可以包含芯片和其他分立器件。
应理解，在本申请实施例中，处理器可以是中央处理单元(central processing unit，CPU)，该处理器还可以是其他通用处理器、数字信号处理器(digital signal processor，DSP)、专用集成电路(application-specific integrated circuit，ASIC)、现成可编程门阵列(field programmable gate array，FPGA)或者其他可编程逻辑器件、晶体管逻辑器件、分立硬件组件等。通用处理器可以是微处理器，也可以是任何常规的处理器等。
该存储器可以包括只读存储器和随机存取存储器，并向处理器提供指令和数据。存储器的一部分还可以包括非易失性随机存取存储器。
该总线***除包括数据总线之外，还可以包括电源总线、控制总线和状态信号总线等。但是为了清楚说明起见，在图中将各种总线都标为总线***。在实现过程中，上述方法的各步骤可以通过处理器中的硬件的集成逻辑电路或者软件形式的指令完成。结合本申请实施例所公开的方法的步骤可以直接体现为硬件处理器执行完成，或者用处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器，闪存、只读存储器，可编程只读 存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器，处理器读取存储器中的信息，结合其硬件完成上述方法的步骤。为避免重复，这里不再详细描述。
在本申请的各个实施例中，如果没有特殊说明以及逻辑冲突，不同的实施例之间的术语和/或描述具有一致性、且可以相互引用，不同的实施例中的技术特征根据其内在的逻辑关系可以组合形成新的实施例。
可以理解的是，在本申请的实施例中涉及的各种数字编号仅为描述方便进行的区分，并不用来限制本申请的实施例的范围。上述各过程的序号的大小并不意味着执行顺序的先后，各过程的执行顺序应以其功能和内在逻辑确定。

Claims (14)

  1. 一种接入***，其特征在于，包括网络或硬件设备中的至少一个、虚拟局域网网关和云资源；
    所述网络或硬件设备，用于发送业务数据；
    所述虚拟局域网网关，用于接收所述网络或硬件设备中的至少一个发送的业务数据，将所述业务数据，转换为统一协议的业务数据，以及发送所述统一协议的业务数据至云资源；
    所述云资源，用于接收所述虚拟局域网网关发送的统一协议的业务数据。
  2. 如权利要求1所述的***，其特征在于，所述***还包括交换机；
    所述交换机，用于接收所述网络或硬件设备中的至少一个发送的业务数据，对所述业务数据进行扩容处理，发送扩容处理后的业务数据至所述虚拟局域网网关，所述扩容处理用于增加云资源可接入网络或硬件设备的数量；
    所述虚拟局域网网关，用于接收所述交换机发送的扩容处理后的业务数据，将所述扩容处理后的业务数据转换为统一协议的业务数据，发送所述统一协议的业务数据至所述云资源。
  3. 如权利要求2所述的***，其特征在于，所述网络或硬件设备所发送的业务数据中包括头部分，所述头部分中至少包括虚拟局域网标识字段，所述虚拟局域网标识字段中包括虚拟局域网标识，所述虚拟局域网标识为所述云资源预先为网络或硬件设备所分配的；
    所述交换机在对所述业务数据进行扩容处理时，具体用于：
    所述交换机在所述业务数据的头部分中，新增虚拟局域网标识字段；或者，
    所述交换机在所述业务数据的头部分中所包括的虚拟局域网标识字段中，增加所述虚拟局域网标识所对应的比特数量。
  4. 如权利要求1至3任一项所述的***，其特征在于，所述网络或硬件设备所发送的业务数据中包括源互联网协议IP地址字段，所述源IP地址字段为所述网络或硬件设备自己所分配的。
  5. 如权利要求4所述的***，其特征在于，所述虚拟局域网网关，还用于：
    接收所述云资源发送的业务数据，所述业务数据中包括目的IP地址字段，所述目的IP地址字段为所述云资源为网络或硬件设备所分配的；
    根据预配置的路由表，发送所述业务数据至对应的网络或硬件设备，所述路由表中存储有网络或硬件设备自己所分配的IP地址与云资源为网络或硬件所分配的IP地址间的对应关系。
  6. 一种接入方法，其特征在于，包括：
    虚拟局域网网关接收网络或硬件设备中的至少一个发送的业务数据；
    所述虚拟局域网网关将所述业务数据，转换为统一协议的业务数据；
    所述虚拟局域网网关发送所述统一协议的业务数据至云资源。
  7. 如权利要求6所述的方法，其特征在于，所述网络或硬件设备中的至少一个所发送的业务数据中包括源互联网协议IP地址字段，所述源IP地址字段为所述网络或硬件设备 自己所分配的。
  8. 如权利要求6或7所述的方法，其特征在于，所述方法还包括：
    所述虚拟局域网网关接收所述云资源发送的业务数据，所述业务数据中包括目的IP地址字段，所述目的IP地址字段为所述云资源为网络或硬件设备所分配的；
    所述虚拟局域网网关根据预配置的路由表，发送所述业务数据至对应的网络或硬件设备，所述路由表中存储有网络或硬件自己所分配的IP地址与云资源为网络或硬件所分配的IP地址间的对应关系。
  9. 如权利要求6至8任一项所述的方法，其特征在于，所述虚拟局域网网关接收网络或硬件设备中的至少一个发送的业务数据，包括：
    所述虚拟局域网网关接收交换机发送的扩容处理后的业务数据，所述扩容处理后的业务数据是根据所述网络或硬件设备中的至少一个发送的业务数据所生成的；
    所述虚拟局域网网关将所述业务数据，转换为统一协议的业务数据，包括：
    所述虚拟局域网网关将所述扩容处理后的业务数据转换为统一协议的业务数据。
  10. 一种接入方法，其特征在于，包括：
    交换机接收网络或硬件设备中的至少一个发送的业务数据；
    所述交换机对所述业务数据进行扩容处理，发送扩容处理后的业务数据至虚拟局域网网关，所述扩容处理用于增加云资源可接入网络或硬件设备的数量。
  11. 如权利要求10所述的方法，其特征在于，所述业务数据的头部分中至少包括虚拟局域网标识字段，所述虚拟局域网标识字段中包括虚拟局域网标识，所述虚拟局域网标识为所述云资源预先给网络或硬件设备所分配的；
    所述交换机对所述业务数据进行扩容处理，包括：
    所述交换机在所述业务数据的头部分中，新增虚拟局域网标识字段；或者，
    所述交换机在所述业务数据的头部分中所包括的虚拟局域网标识字段中，增加所述虚拟局域网标识所对应的比特数量。
  12. 一种通信装置，其特征在于，包括处理器和存储器；
    所述存储器存储有计算机指令；
    所述处理器用于执行所述存储器所存储的计算机指令，以使所述通信装置实现如权利要求6至11任一项所述的方法。
  13. 一种计算机可读存储介质，其特征在于，所述存储介质存储有计算机指令，当所述计算机指令被计算机执行时，使得所述计算机执行如权利要求6至11中任一项所述的方法。
  14. 一种计算机程序产品，其特征在于，所述计算机程序产品包括计算机指令，当所述计算机指令被计算机执行时，使得所述计算机执行如权利要求6至11中任一项所述的方法。
PCT/CN2019/120649 2018-11-26 2019-11-25 一种接入***、方法及装置 WO2020108438A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201811417167.2A CN109728984B (zh) 2018-11-26 2018-11-26 一种接入***、方法及装置
CN201811417167.2 2018-11-26

Publications (1)

Publication Number Publication Date
WO2020108438A1 true WO2020108438A1 (zh) 2020-06-04

Family

ID=66294685

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/120649 WO2020108438A1 (zh) 2018-11-26 2019-11-25 一种接入***、方法及装置

Country Status (2)

Country Link
CN (1) CN109728984B (zh)
WO (1) WO2020108438A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114124678A (zh) * 2021-11-30 2022-03-01 中国工商银行股份有限公司 知识图谱展示方法及装置

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109728984B (zh) * 2018-11-26 2021-01-29 华为技术有限公司 一种接入***、方法及装置
US10965592B2 (en) * 2019-05-31 2021-03-30 Juniper Networks, Inc. Inter-network service chaining
CN110764987A (zh) * 2019-10-21 2020-02-07 西安电子科技大学 基于虚拟化技术的网络仿真测试***中硬件设备接入方法
CN114363346B (zh) * 2020-02-14 2024-06-04 北京百度网讯科技有限公司 Ip挂载、数据处理方法和装置
CN114827079B (zh) * 2022-03-25 2024-04-30 阿里云计算有限公司 网络地址转换网关的扩容方法、设备及存储介质

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101437002A (zh) * 2007-11-16 2009-05-20 ***通信集团公司 移动代理服务器***
US20100306396A1 (en) * 2007-10-24 2010-12-02 Zte Corporation Uniform Service Access System And Access Method
CN104639515A (zh) * 2013-11-15 2015-05-20 上海信游网络科技有限公司 基于银行核心业务的第三方通讯转换平台
CN104917758A (zh) * 2015-05-21 2015-09-16 浪潮集团有限公司 一种socket协议连接转换为其它协议连接的实现方法
CN106936857A (zh) * 2015-12-29 2017-07-07 中国电信股份有限公司 一种混合云的连接管理方法、sdn控制器及混合云***
CN109728984A (zh) * 2018-11-26 2019-05-07 华为技术有限公司 一种接入***、方法及装置

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101064720A (zh) * 2006-04-28 2007-10-31 华为技术有限公司 提高基站接入业务流的方法
US8233486B2 (en) * 2006-12-11 2012-07-31 Verizon Patent And Licensing Inc. Remote management of network devices
CN102045896A (zh) * 2010-11-22 2011-05-04 中山爱科数字科技有限公司 实现多协议及网络自适应的虚拟物联网网关***
CN103067397B (zh) * 2012-12-31 2017-06-13 华为技术有限公司 一种桌面云***的安全认证方法、接入网关及认证服务器
CN103812930B (zh) * 2014-01-16 2017-10-17 华为技术有限公司 一种资源调度的方法及装置
CN104734926B (zh) * 2015-03-20 2018-07-06 武汉兴火源科技有限责任公司 一纤通式家庭网关的数据传输方法
US10367655B2 (en) * 2016-01-25 2019-07-30 Alibaba Group Holding Limited Network system and method for connecting a private network with a virtual private network
CN108683659A (zh) * 2018-05-11 2018-10-19 新华三技术有限公司成都分公司 多协议数据通信方法及装置
CN108768817B (zh) * 2018-05-22 2020-07-28 腾讯科技（深圳）有限公司 一种虚拟化网络组网***、数据包发送方法

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100306396A1 (en) * 2007-10-24 2010-12-02 Zte Corporation Uniform Service Access System And Access Method
CN101437002A (zh) * 2007-11-16 2009-05-20 ***通信集团公司 移动代理服务器***
CN104639515A (zh) * 2013-11-15 2015-05-20 上海信游网络科技有限公司 基于银行核心业务的第三方通讯转换平台
CN104917758A (zh) * 2015-05-21 2015-09-16 浪潮集团有限公司 一种socket协议连接转换为其它协议连接的实现方法
CN106936857A (zh) * 2015-12-29 2017-07-07 中国电信股份有限公司 一种混合云的连接管理方法、sdn控制器及混合云***
CN109728984A (zh) * 2018-11-26 2019-05-07 华为技术有限公司 一种接入***、方法及装置

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114124678A (zh) * 2021-11-30 2022-03-01 中国工商银行股份有限公司 知识图谱展示方法及装置

Also Published As

Publication number Publication date
CN109728984A (zh) 2019-05-07
CN109728984B (zh) 2021-01-29

Similar Documents

Publication Publication Date Title
WO2020108438A1 (zh) 一种接入***、方法及装置
WO2021136311A1 (zh) 一种vpc之间的通信方法及装置
CN108449282B (zh) 一种负载均衡方法及其装置
US10541836B2 (en) Virtual gateways and implicit routing in distributed overlay virtual environments
CN116057910B (zh) 虚拟私有云通信及配置方法以及相关装置
CN107872542B (zh) 一种数据传输的方法及网络设备
CN108347493B (zh) 混合云管理方法、装置和计算设备
US10320738B2 (en) Address allocation method, CGN device, and CGN dual-active system
US8650326B2 (en) Smart client routing
US11153262B1 (en) System and method for enabling communication between networks with overlapping IP address ranges
CN108566445B (zh) 一种报文传输方法及装置
WO2020253631A1 (zh) Ip地址的配置方法、设备及***
US11444808B1 (en) Scaling network address translation (NAT) and firewall functionality to support public cloud networks
WO2017113300A1 (zh) 路由确定方法、网络配置方法以及相关装置
JP2022541381A (ja) ハイブリッドクラウド環境における通信方法、ゲートウェイ、並びに管理方法及び装置
CN112671938B (zh) 业务服务提供方法及***、远端加速网关
US11121969B2 (en) Routing between software defined networks and physical networks
CN110691150A (zh) 一种基于SDN的IPv4与IPv6互联方法及***
US20230370375A1 (en) Data processing method and system, encapsulation node, and de-encapsulation node
CN114679370B (zh) 一种服务器托管方法、装置、***及存储介质
CN106656718B (zh) VxLAN网关以及基于VxLAN网关实现的主机接入互联网的方法
WO2024001549A1 (zh) 地址配置方法和电子设备
CN116582516B (zh) 数据传输方法、设备、***、介质及程序产品
US11909624B2 (en) Communication method, apparatus, device, system, and computer-readable storage medium
CN115695087A (zh) 跨域局域网的建立方法、装置、设备及存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19891386

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 19891386

Country of ref document: EP

Kind code of ref document: A1