CN103607308A - Virtual machine multi-network management system and method in cloud computing environment - Google Patents

Virtual machine multi-network management system and method in cloud computing environment Download PDF

Info

Publication number
CN103607308A
CN103607308A CN201310618609.0A CN201310618609A CN103607308A CN 103607308 A CN103607308 A CN 103607308A CN 201310618609 A CN201310618609 A CN 201310618609A CN 103607308 A CN103607308 A CN 103607308A
Authority
CN
China
Prior art keywords
network
vlan
virtual machine
switch
virtual
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201310618609.0A
Other languages
Chinese (zh)
Other versions
CN103607308B (en
Inventor
廖建新
李小康
曹予飞
于强
张恒镭
黄亮亮
刘化东
刘益
张清泉
罗嗣彬
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Xinxun Digital Technology Hangzhou Co ltd
Original Assignee
Hangzhou Dongxin Beiyou Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hangzhou Dongxin Beiyou Information Technology Co Ltd filed Critical Hangzhou Dongxin Beiyou Information Technology Co Ltd
Priority to CN201310618609.0A priority Critical patent/CN103607308B/en
Publication of CN103607308A publication Critical patent/CN103607308A/en
Application granted granted Critical
Publication of CN103607308B publication Critical patent/CN103607308B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

Provided are a virtual machine multi-network management system and method in a cloud computing environment. The method comprises the steps that firstly, a network is divided into a plurality of security areas, each security area is continued to be divided into a plurality of network areas, then an actual receiving interchanger is configured for each network area, and a corresponding VLAN pool and an IP pool are constructed; secondly, multiple physical nodes are respectively divided into different safety areas, a virtual interchanger is constructed on a physical node of each security area, the physical nodes are one physical host or a computer cluster formed by multiple physical hosts, and the virtual interchangers comprise distributed interchangers and standard interchangers; thirdly, the virtual interchanger in each security area and the receiving interchanger configured in each network area are connected in a one-to-one mode, and connection between the virtual interchangers and the receiving interchangers is configured to be a trunk mode. The virtual machine multi-network management system and method belong to the technical field of network communication, and virtual machines can have access to multiple networks.

Description

The many NMSs of virtual machine under the cloud computing environment method of unifying
Technical field
The present invention relates to many NMSs of virtual machine under a kind of cloud computing environment method of unifying, belong to network communications technology field.
Background technology
In cloud computing environment, the rapid deployment of server is reached the standard grade convenience is provided for business, but the Cloud Server of single network is difficult to meet operation system multiple demand, virtual machine can be linked in a plurality of networks is the test to cloud computing system service supporting capacity.
The technical scheme of more existing virtual machines all only limits to single network.Patent application CN 201210130269.2(patent name for example: virtual network management system and method in cloud computing data center, the applying date: 2012-04-27, applicant: disclose virtual network management system and the method in a kind of cloud computing data center Beijing dragon spruce century network technology Co., Ltd), related to network architecture and network communication protocol technical field.This system comprises: physical server ,Yu data center core switching network is connected, and possess the switch that at least one supports OpenFlow related protocol, and physical server is connected on it with controller; Controller, builds virtual network, safeguards the configuration of virtual network, and the mapping relations between virtual network and virtual broadcast domain and local broadcast domain, and the switch on one or more physical server is configured and is controlled.In this technical scheme, virtual machine is only supported single network, does not relate to the support to many networks.
Therefore, how virtual machine is linked in a plurality of networks, is still a technical problem that is worth further investigation.
Summary of the invention
In view of this, the object of this invention is to provide many NMSs of virtual machine under a kind of cloud computing environment method of unifying, virtual machine can be linked in a plurality of networks.
In order to achieve the above object, the invention provides the many network management system of virtual machine under a kind of cloud computing environment, include computational resource server and Virtual Machine Manager server, wherein, computational resource server further includes:
Network area construction device, for network is divided into several security domains, again each security domain is continued to be divided into several network areas, then for each network area configures actual access switch and build corresponding VLAN pond and IP pond, described VLAN pond includes all available VLAN numbering sections in described network area, and IP pond includes all available IP address fields in described network area;
Virtual switch creation apparatus, for a plurality of physical nodes are divided into respectively to different security domains, and create virtual switch on the physical node of each security domain, described physical node is 1 physical host or the computer cluster that consists of a plurality of physical hosts, described virtual switch includes distribution switch and standard switchboard, then the virtual switch in each security domain is connected one by one with the access switch of each network area configuration, and the connection between virtual switch and access switch is configured to trunk pattern.
In order to achieve the above object, the present invention also provides the virtual machine under a kind of cloud computing environment many network managements, includes:
Step 1, network is divided into several security domains, again each security domain is continued to be divided into several network areas, then for each network area configures actual access switch and build corresponding VLAN pond and IP pond, described VLAN pond includes all available VLAN numbering sections in described network area, and IP pond includes all available IP address fields in described network area;
Step 2, a plurality of physical nodes are divided into respectively in different security domains, and create virtual switch on the physical node of each security domain, described physical node is 1 physical host or the computer cluster that consists of a plurality of physical hosts, and described virtual switch includes distribution switch and standard switchboard;
Step 3, the virtual switch in each security domain is connected one by one with the access switch of each network area configuration, and the connection between virtual switch and access switch is configured to trunk pattern.
Compared with prior art, the invention has the beneficial effects as follows: due to the otherness of virtual network and physical network, want the network traffics of virtual machine to shunt away by the network interface card of physical host, must realize the intercommunication between virtual network and physical network, the present invention is by the interconnected tie of setting up between virtual network and real network between virtual switch and actual access switch, and set up and network model corresponding to real network in virtual network, comprise security domain, VLAN numbering, IP address etc., the virtual machine being created like this can be linked into the network area of different security domains under one or more network types simultaneously, thereby met the multiple demand of operation system, for the different VLAN numbering of each network interface card application of the virtual machine that is created, and stamp corresponding network type label for each network interface card, when the switch of configuring virtual machine, can find the uplink virtual switch of having beaten identical network type label according to the network type label of network interface card like this, then in virtual switch, select a port set that numbering is the same with network interface card VLAN, owing to being configured to trunk pattern between virtual switch and up actual access switch, therefore the port set of virtual machine configuration has been equivalent to directly be configured on the access switch in real network model, thereby realized the intercommunication of virtual network and real network, technical scheme facilitates feasible.
Accompanying drawing explanation
Fig. 1 is the composition structural representation of the many network management system of virtual machine under a kind of cloud computing environment of the present invention.
Fig. 2 is the composition structural representation of virtual switch creation apparatus.
Fig. 3 is the inside annexation schematic diagram that the present invention creates an embodiment after virtual machine on physical host.
Fig. 4 is the flow chart of the many network managements of virtual machine under a kind of cloud computing environment of the present invention.
Fig. 5 is the concrete operations flow chart of Fig. 4 step 2.
Fig. 6 is the concrete operations flow chart when user creates a new virtual machine.
Embodiment
For making the object, technical solutions and advantages of the present invention clearer, below in conjunction with accompanying drawing, the present invention is described in further detail.
As shown in Figure 1, the many network management system of virtual machine under a kind of cloud computing environment of the present invention, include computational resource server and Virtual Machine Manager server, and wherein, computational resource server further includes:
Network area construction device, for network is divided into several security domains, again each security domain is continued to be divided into several network areas, then for each network area configures actual access switch and build corresponding VLAN pond and IP pond, it is VLAN that described VLAN pond includes all available VLAN(in described network area) numbering section, IP pond includes all available IP address fields in described network area;
Virtual switch creation apparatus, for a plurality of physical nodes are divided into respectively to different security domains, and create virtual switch on the physical node of each security domain, described physical node can be 1 physical host or the computer cluster that consists of a plurality of physical hosts, described virtual switch includes distribution switch and standard switchboard, then the virtual switch in each security domain is connected one by one with the access switch of each network area configuration, and the connection between virtual switch and access switch is configured to trunk pattern; Now, the port set of virtual switch configuration is equivalent to directly be configured on access switch, thereby has realized the intercommunication of virtual network and real network;
Virtual machine creating request processing unit, for receiving user's establishment virtual machine request message, in described establishment virtual machine request message, include the affiliated security domain of virtual machine being created, the information such as the network type label of virtual machine network interface card, for the virtual machine being created distributes a new virtual machine numbering, and the virtual machine state being created is set in establishment, then by the virtual machine numbering being created, the information such as the VLAN numbered list in user-specified network region and corresponding IP address return to user, also to Virtual Machine Manager server, send virtual machine creating notification message simultaneously, in described virtual machine creating notification message, include the virtual machine numbering being created, the VLAN numbered list in user-specified network region, security domain under virtual machine and the information such as network type label of virtual machine network interface card, finally when receiving the establishment successful result that Virtual Machine Manager server returns, virtual machine state is updated to ready, and the virtual machine of notifying user to be created by the IP address access in virtual machine creating response message,
Virtual machine network choice device, for reading one by one each network area from user's application VLAN request message and judging whether have a vlan network having created each network area, if so, the VLAN numbering of the vlan network having created is added in the VLAN numbered list in user-specified network region; If not, in described network area, create VLAN numbering and the IP address of a new vlan network, also selected described new vlan network, then the VLAN numbering of the vlan network newly creating is added in the VLAN numbered list in user-specified network region.
The configuration mode of the network equipment has generally included two kinds of trunk and access, wherein:
1, trunk pattern is as main line, transmits each vlan information, and trunk mouth is used for the connection between the network equipment conventionally, for example connection between switch and switch or switch and router, and the port of trunk pattern can pass through a plurality of VLAN;
2, access pattern is that network equipment port is divided into certain VLAN, is typically used as main frame access, and the port of accsee pattern can only pass through a VLAN, i.e. port place VLAN.
Network area construction device can be divided into different security domains and network area by network according to purposes, safe class, access strategy etc. by the configuration on the network equipment (as switch, fire compartment wall), described network can include one or more dissimilar networks, when comprising a network type, all security domains belong to same network type (such as business network being divided into the security domains such as DMZ district, TEST district, core production area); When comprising a plurality of network types (network types such as business, storage or heartbeat), all security domains belong to respectively different network types.
From Safety Redundancy, consider, the network of server is at least wanted two netting twine trends, is connected in 2 same function roles' access switch, and described network area construction device can also include:
The virtual unit of access switch, be used to 2 access switch of each network area configuration, and it is virtual to 2 access switch, to adopt Intel Virtualization Technology to carry out respectively, thereby 2 access switch is invented to 1 access switch equipment of logic.
As shown in Figure 2, virtual switch creation apparatus can further include:
Virtual switch construction unit, be used for according to the network type of each network area of security domain, for example on the physical node of each security domain, create several distribution switch, for dividing the cluster shared network (business network distribution switch or storage networking distribution switch) of different purposes, and on every physical host, create 1 standard switchboard and monopolize network (for example heartbeat network standard switch) for dividing the physical host of different purposes;
Virtual switch tag unit, for example, for stamping different network type label (business, storage, management) to the virtual switch (including distribution switch and standard switchboard) of each security domain, and be that each security domain builds 1 computing pool, in described computing pool, preserve the information such as virtual switch in security domain and network type label thereof.
Virtual machine can be linked in a plurality of network areas according to multi-business diversification demand simultaneously, and described virtual machine network choice device can further include:
Vlan network creating unit, for creating a new vlan network in network area: a selected available VLAN numbering from the VLAN pond of described network area, then according to the network size that will create, in the IP pond of described network area, mark off an IP subnet section, on fire compartment wall, configure again the information such as the gateway of VLAN and mask, thereby create out one and have the vlan network that is not less than required IP address space, finally from the IP subnet section marking off, select an idle IP address, preserve the network area of the vlan network of described new establishment, and the information such as selected VLAN numbering and IP address.
Described Virtual Machine Manager server further includes:
Virtual machine creating device, for receiving the virtual machine creating notification message that computational resource server is sent, in described virtual machine creating notification message, include the virtual machine numbering being created, the VLAN numbered list in user-specified network region, security domain under virtual machine and the network type label of virtual machine network interface card, security domain under virtual machine, select 1 physical host, and find virtual switch consistent with the network type label of virtual machine network interface card in security domain, then from the VLAN numbered list in user-specified network region, extract one by one each VLAN numbering, and judge that on virtual switch, whether having consistent with it port set numbers, if not, on described virtual switch newly-built one number consistent port set with VLAN, and each port arrangement in described port set is become to access pattern, when the VLAN numbered list from user-specified network region, extracted after all VLAN numberings, h.323-configured gateway on virtual machine network interface card again, the information such as mask and IP address, and a VLAN who successively a network interface card of virtual machine is linked in the VLAN numbered list with user-specified network region numbers in consistent virtual switch port set, finally start the virtual machine process that creates, beginning creates virtual machine on selected physical host, after creating virtual machine success, in the computing pool of the security domain under virtual machine, increase described virtual machine information, to computational resource server, return to establishment successful result simultaneously.
Fig. 3 shows the inside annexation schematic diagram that the present invention creates an embodiment after virtual machine on physical host.As shown in Figure 3, 2 distribution switch for different purposes (being service distribution formula switch and distributed storage switch) on physical host, have been created, 1 standard switchboard and 2 virtual machines (being VM-1 and VM-2), virtual machine respectively with service distribution formula switch, distributed storage switch, standard switchboard is connected, A, B, C, D, E, F is the network interface card of physical host, A`, B`, C`, D`, E`, F` is the network interface card of fictitious host computer (gather Intel Virtualization Technology and carry out the physical host after virtual), A``, B``, C``, D`` is the uplink port of two distribution type switches.
As can be seen from Figure 3, the uplink port group of distribution switch and the port of access switch are connected, and wherein distribution switch side is pressed the pattern configurations of vlan trunking, and access switch side is configured to trunk pattern.The down link port group of virtual switch (is business network port set 1, business network port set n, storage networking port set 1, storage networking port set m, supervising the network port set 1, supervising the network port set p) acquiescence when creating of each port set in has 256 ports, assigned vlan is numbered simultaneously, a network interface card of port under port set and the virtual machine being created (eth0 for example, eth1, eth2) be connected, the one group of switch ports themselves that is equivalent to physical switches, and each port is configured to access pattern, only allow the network traffics of particular vlan numbering to pass through.The data flow that the uplink port group of the distribution switch network traffics of all VLAN numbering (allow by) is responsible for all down link port groups network traffics of particular vlan numbering (only allow by) exports, so uplink port group and down link port group are the relations of one-to-many, the port in the uplink port group of distribution switch can be configured to active and standby or load-sharing mode.Standard switchboard is mainly used in fictitious host computer aspect and carries out the required network of Virtual Machine Manager.
As shown in Figure 4, the many network managements of virtual machine under a kind of cloud computing environment of the present invention, include:
Step 1, network is divided into several security domains, again each security domain is continued to be divided into several network areas, then for each network area configures actual access switch and build corresponding VLAN pond and IP pond, described VLAN pond includes all available VLAN numbering sections in described network area, and IP pond includes all available IP address fields in described network area;
Step 2, a plurality of physical nodes are divided into respectively in different security domains, and create virtual switch on the physical node of each security domain, described physical node can be 1 physical host or the computer cluster that consists of a plurality of physical hosts, and described virtual switch includes distribution switch and standard switchboard;
Step 3, the virtual switch in each security domain is connected one by one with the access switch of each network area configuration, and the connection between virtual switch and access switch is configured to trunk pattern; Now, the port set of virtual switch configuration is equivalent to directly be configured on access switch, thereby has realized the intercommunication of virtual network and real network.
In described step 1, can network be divided into different security domains and network area according to purposes, safe class, access strategy etc. by the configuration on the network equipment (as switch, fire compartment wall).
It is worth mentioning that, network in step 1 can include one or more dissimilar networks, when comprising a network type, all security domains belong to same network type (such as business network being divided into the security domains such as DMZ district, TEST district, core production area); When comprising a plurality of network types (network types such as business, storage or heartbeat), all security domains belong to respectively different network types.
From Safety Redundancy, consider, the network of server is at least wanted two netting twine trends, is connected in 2 same function roles' access switch, and Fig. 4 step 1 also includes:
For 2 access switch of each network area configuration, and it is virtual to 2 access switch, to adopt Intel Virtualization Technology to carry out respectively, thereby 2 access switch is invented to 1 access switch equipment of logic.
As shown in Figure 5, in Fig. 1 step 2, further include:
Step 21, according to the network type of each network area in security domain, for example on the physical node of each security domain, create several distribution switch, for dividing the cluster shared network (business network distribution switch or storage networking distribution switch) of different purposes, and on every physical host of security domain, create 1 standard switchboard and monopolize network (for example heartbeat network standard switch) for dividing the physical host of different purposes;
Step 22, stamp different network type label (for example business, storage, management) to the virtual switch (including distribution switch and standard switchboard) of each security domain;
Step 23, be that each security domain builds 1 computing pool, in described computing pool, preserve the information such as virtual switch in security domain and network type label thereof.
As shown in Figure 6, when user creates a new virtual machine, also include:
Steps A 1, user are sent and are created virtual machine request message to computational resource server, include the security domain under the virtual machine being created, the information such as network type label of virtual machine network interface card in described establishment virtual machine request message;
Steps A 2, computational resource server are that the virtual machine being created distributes a new virtual machine numbering, and the virtual machine state being created is set in establishment;
In steps A 3, the user security domain under virtual machine, select one or more network areas, and send application VLAN request message to computational resource server; The virtual machine being created can be supported one or more network areas, thereby meets the multiple demand of operation system;
Steps A 4, computational resource server read one by one each network area and judge in each network area, whether to have a vlan network having created from application VLAN request message, if so, the VLAN numbering of the vlan network having created is added in the VLAN numbered list in user-specified network region; If not, in described network area, create VLAN numbering and the IP address of a new vlan network, also selected described new vlan network, then the VLAN numbering of the vlan network newly creating is added in the VLAN numbered list in user-specified network region;
Steps A 5, computational resource server return to virtual machine creating response message to user, and described virtual machine creating response message includes the information such as the VLAN numbered list in the virtual machine numbering that is created, user-specified network region and corresponding IP address;
Steps A 6, computational resource server send virtual machine creating notification message to Virtual Machine Manager server, include the virtual machine numbering being created, VLAN numbered list, the security domain under virtual machine and the information such as network type label of virtual machine network interface card in user-specified network region in described virtual machine creating notification message;
Steps A 7, the security domain of Virtual Machine Manager server under virtual machine, select 1 physical host, and find virtual switch consistent with the network type label of virtual machine network interface card in security domain, then from the VLAN numbered list in user-specified network region, extracting one by one each VLAN numbers and judges that on virtual switch, whether having consistent with it port set numbers, if so, continue to extract next VLAN numbering; If not, on described virtual switch newly-built one number consistent port set with VLAN, and each port arrangement in port set is become to access pattern, then continue to extract next VLAN numbering;
Steps A 8, Virtual Machine Manager server be the information such as h.323-configured gateway, mask and IP address on virtual machine network interface card, and a VLAN who successively a network interface card of virtual machine is linked in the VLAN numbered list with user-specified network region numbers in consistent virtual switch port set, then start the virtual machine process that creates, beginning creates virtual machine on selected physical host, after creating virtual machine success, in the computing pool of the security domain under virtual machine, increase described virtual machine information, to computational resource server, return to establishment successful result simultaneously;
Steps A 9, computational resource server are updated to virtual machine state ready, and the virtual machine of notifying user to be created by the IP address access in virtual machine creating response message.
In Fig. 6 steps A 4, in described network area, create VLAN numbering and the IP address of a new vlan network, also selected described new vlan network, further include:
A selected available VLAN numbering from the VLAN pond of described network area, then according to the network size that will create, in the IP pond of described network area, mark off an IP subnet section, on fire compartment wall, configure again gateway and the mask of VLAN, thereby create out one and have the vlan network that is not less than required IP address space, last from the IP subnet section marking off a selected idle IP address, preserve the network area of vlan network of described new establishment and selected VLAN numbering and IP address.
The foregoing is only preferred embodiment of the present invention, in order to limit the present invention, within the spirit and principles in the present invention not all, any modification of making, be equal to replacement, improvement etc., within all should being included in the scope of protection of the invention.

Claims (16)

1. the many network management system of the virtual machine under cloud computing environment, is characterized in that, include computational resource server and Virtual Machine Manager server, and wherein, computational resource server further includes:
Network area construction device, for network is divided into several security domains, again each security domain is continued to be divided into several network areas, then for each network area configures actual access switch and build corresponding VLAN pond and IP pond, described VLAN pond includes all available VLAN numbering sections in described network area, and IP pond includes all available IP address fields in described network area;
Virtual switch creation apparatus, for a plurality of physical nodes are divided into respectively to different security domains, and create virtual switch on the physical node of each security domain, described physical node is 1 physical host or the computer cluster that consists of a plurality of physical hosts, described virtual switch includes distribution switch and standard switchboard, then the virtual switch in each security domain is connected one by one with the access switch of each network area configuration, and the connection between virtual switch and access switch is configured to trunk pattern.
2. system according to claim 1, is characterized in that, computational resource server also includes:
Virtual machine network choice device, for reading one by one each network area from user's application VLAN request message and judging whether have a vlan network having created each network area, if so, the VLAN numbering of the vlan network having created is added in the VLAN numbered list in user-specified network region; If not, in described network area, create VLAN numbering and the IP address of a new vlan network, also selected described new vlan network, then the VLAN numbering of the vlan network newly creating is added in the VLAN numbered list in user-specified network region.
3. system according to claim 2, is characterized in that, virtual machine network choice device further includes:
Vlan network creating unit, for creating a new vlan network in network area: a selected available VLAN numbering from the VLAN pond of described network area, then according to the network size that will create, in the IP pond of described network area, mark off an IP subnet section, on fire compartment wall, configure again gateway and the mask of VLAN, thereby create out one and have the vlan network that is not less than required IP address space, finally from the IP subnet section marking off, select an idle IP address, preserve the network area of the vlan network of described new establishment, and selected VLAN numbering and IP address.
4. system according to claim 1, it is characterized in that, described network area construction device is divided into different security domains and network area by the configuration on the network equipment by network, described network includes one or more dissimilar networks, and described network area construction device also includes:
The virtual unit of access switch, be used to 2 access switch of each network area configuration, and it is virtual to 2 access switch, to adopt Intel Virtualization Technology to carry out respectively, thereby 2 access switch is invented to 1 access switch equipment of logic.
5. system according to claim 1, is characterized in that, virtual switch creation apparatus further includes:
Virtual switch tag unit, for stamping different network type labels to the virtual switch of each security domain, and for each security domain builds 1 computing pool, preserves virtual switch and network type label thereof in security domain in described computing pool.
6. system according to claim 5, is characterized in that, virtual switch creation apparatus also includes:
Virtual switch construction unit for according to the network type of each network area of security domain, creates several distribution switch, and create 1 standard switchboard on every physical host of security domain on the physical node of each security domain.
7. system according to claim 5, is characterized in that, Virtual Machine Manager server further includes:
Virtual machine creating device, for receiving the virtual machine creating notification message that computational resource server is sent, in described virtual machine creating notification message, include the virtual machine numbering being created, the VLAN numbered list in user-specified network region, security domain under virtual machine and the network type label of virtual machine network interface card, security domain under virtual machine, select 1 physical host, and find virtual switch consistent with the network type label of virtual machine network interface card in security domain, then from the VLAN numbered list in user-specified network region, extract one by one each VLAN numbering, and judge that on virtual switch, whether having consistent with it port set numbers, if not, on described virtual switch newly-built one number consistent port set with VLAN, and each port arrangement in described port set is become to access pattern, when the VLAN numbered list from user-specified network region, extracted after all VLAN numberings, h.323-configured gateway on virtual machine network interface card again, mask and IP address, and a VLAN who successively a network interface card of virtual machine is linked in the VLAN numbered list with user-specified network region numbers in consistent virtual switch port set, finally start the virtual machine process that creates, beginning creates virtual machine on selected physical host, after creating virtual machine success, in the computing pool of the security domain under virtual machine, increase described virtual machine information, to computational resource server, return to establishment successful result simultaneously.
8. system according to claim 1, is characterized in that, the uplink port group of distribution switch and the port of access switch are connected, and wherein distribution switch side is pressed the pattern configurations of vlan trunking, and access switch side is configured to trunk pattern; Port under the down link port group of virtual switch and a network interface card of the virtual machine being created are connected, and the port arrangement in down link port group becomes access pattern.
9. the many network managements of the virtual machine under cloud computing environment, is characterized in that, include:
Step 1, network is divided into several security domains, again each security domain is continued to be divided into several network areas, then for each network area configures actual access switch and build corresponding VLAN pond and IP pond, described VLAN pond includes all available VLAN numbering sections in described network area, and IP pond includes all available IP address fields in described network area;
Step 2, a plurality of physical nodes are divided into respectively in different security domains, and create virtual switch on the physical node of each security domain, described physical node is 1 physical host or the computer cluster that consists of a plurality of physical hosts, and described virtual switch includes distribution switch and standard switchboard;
Step 3, the virtual switch in each security domain is connected one by one with the access switch of each network area configuration, and the connection between virtual switch and access switch is configured to trunk pattern.
10. method according to claim 9, is characterized in that, in step 1, by the configuration on the network equipment, network is divided into different security domains and network area, and described network includes one or more dissimilar networks,
Step 1 also includes:
For 2 access switch of each network area configuration, and it is virtual to 2 access switch, to adopt Intel Virtualization Technology to carry out respectively, thereby 2 access switch is invented to 1 access switch equipment of logic.
11. methods according to claim 9, is characterized in that, step 2 further includes:
Step 21, stamp different network type labels to the virtual switch of each security domain;
Step 22, for each security domain builds 1 computing pool, in described computing pool, preserve virtual switch and network type label thereof in security domain.
12. methods according to claim 11, is characterized in that, before step 21, also include:
According to the network type of each network area in security domain, on the physical node of each security domain, create several distribution switch, and create 1 standard switchboard on every physical host of security domain.
13. methods according to claim 11, is characterized in that, when user creates a new virtual machine, also include:
Step 1, computational resource server send virtual machine creating notification message to Virtual Machine Manager server, include the virtual machine numbering being created, VLAN numbered list, the security domain under virtual machine and the network type label of virtual machine network interface card in user-specified network region in described virtual machine creating notification message;
Step 2, the security domain of Virtual Machine Manager server under virtual machine, select 1 physical host, and find virtual switch consistent with the network type label of virtual machine network interface card in security domain, then from the VLAN numbered list in user-specified network region, extracting one by one each VLAN numbers and judges that on virtual switch, whether having consistent with it port set numbers, if so, continue to extract next VLAN numbering; If not, on described virtual switch newly-built one number consistent port set with VLAN, and each port arrangement in port set is become to access pattern, then continue to extract next VLAN numbering;
Step 3, Virtual Machine Manager server be h.323-configured gateway, mask and IP address on virtual machine network interface card, and a VLAN who successively a network interface card of virtual machine is linked in the VLAN numbered list with user-specified network region numbers in consistent virtual switch port set, then start the virtual machine process that creates, beginning creates virtual machine on selected physical host, after creating virtual machine success, in the computing pool of the security domain under virtual machine, increase described virtual machine information, to computational resource server, return to establishment successful result simultaneously.
14. methods according to claim 13, is characterized in that, before step 1, also include:
In steps A 1, the user security domain under virtual machine, select one or more network areas, and send application VLAN request message to computational resource server;
Steps A 2, computational resource server read one by one each network area and judge in each network area, whether to have a vlan network having created from application VLAN request message, if so, the VLAN numbering of the vlan network having created is added in the VLAN numbered list in user-specified network region; If not, in described network area, create VLAN numbering and the IP address of a new vlan network, also selected described new vlan network, then the VLAN numbering of the vlan network newly creating is added in the VLAN numbered list in user-specified network region.
15. methods according to claim 14, is characterized in that, before steps A 1, also include:
User sends and creates virtual machine request message to computational resource server, includes the security domain under the virtual machine being created, the network type label of virtual machine network interface card in described establishment virtual machine request message;
Computational resource server is that the virtual machine being created distributes a new virtual machine numbering.
16. methods according to claim 14, is characterized in that, in steps A 2, create VLAN numbering and the IP address of a new vlan network, also selected described new vlan network in described network area, further include:
A selected available VLAN numbering from the VLAN pond of described network area, then according to the network size that will create, in the IP pond of described network area, mark off an IP subnet section, on fire compartment wall, configure again gateway and the mask of VLAN, thereby create out one and have the vlan network that is not less than required IP address space, last from the IP subnet section marking off a selected idle IP address, preserve the network area of vlan network of described new establishment and selected VLAN numbering and IP address.
CN201310618609.0A 2013-11-29 2013-11-29 Virtual machine multi-network management system under cloud computing environment and method Active CN103607308B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201310618609.0A CN103607308B (en) 2013-11-29 2013-11-29 Virtual machine multi-network management system under cloud computing environment and method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310618609.0A CN103607308B (en) 2013-11-29 2013-11-29 Virtual machine multi-network management system under cloud computing environment and method

Publications (2)

Publication Number Publication Date
CN103607308A true CN103607308A (en) 2014-02-26
CN103607308B CN103607308B (en) 2016-09-21

Family

ID=50125509

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310618609.0A Active CN103607308B (en) 2013-11-29 2013-11-29 Virtual machine multi-network management system under cloud computing environment and method

Country Status (1)

Country Link
CN (1) CN103607308B (en)

Cited By (38)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104010028A (en) * 2014-05-04 2014-08-27 华南理工大学 Dynamic virtual resource management strategy method for performance weighting under cloud platform
CN104486363A (en) * 2015-01-05 2015-04-01 四川中时代科技有限公司 Cloud safety guarantee system
WO2016019492A1 (en) * 2014-08-04 2016-02-11 华为技术有限公司 Virtual-operation administration and maintenance deployment method, device and virtual network system
WO2016050109A1 (en) * 2014-09-29 2016-04-07 华为技术有限公司 Communication method, cloud management server and virtual switch
CN105589749A (en) * 2014-12-30 2016-05-18 中国银联股份有限公司 Method and device for allocating network IP resources in cloud computing environment
CN105912892A (en) * 2016-04-08 2016-08-31 浪潮电子信息产业股份有限公司 Process protection method and framework based on cloud computing
CN105991734A (en) * 2015-02-16 2016-10-05 广东亿迅科技有限公司 Cloud platform management method and system
CN106612225A (en) * 2016-12-12 2017-05-03 武汉烽火信息集成技术有限公司 Openstack based agent deployment system and method
WO2017070963A1 (en) * 2015-10-31 2017-05-04 华为技术有限公司 Method, apparatus, and system for deploying virtual resources
CN106878204A (en) * 2016-12-21 2017-06-20 新华三技术有限公司 The creation method and device of a kind of virtual machine
CN107113219A (en) * 2014-12-19 2017-08-29 思科技术公司 VLAN marks in virtual environment
CN107153565A (en) * 2016-03-03 2017-09-12 华为技术有限公司 Configure the method and its network equipment of resource
CN107256163A (en) * 2017-06-20 2017-10-17 郑州云海信息技术有限公司 A kind of method and device for realizing node administration
CN107453959A (en) * 2017-09-22 2017-12-08 郑州云海信息技术有限公司 The management method and its device of a kind of network interface card
CN107666493A (en) * 2016-07-27 2018-02-06 腾讯科技(深圳)有限公司 A kind of configuration method for database and its equipment
CN107743152A (en) * 2017-12-07 2018-02-27 南京易捷思达软件科技有限公司 The implementation method of the High Availabitity of load equalizer in a kind of OpenStack cloud platforms
CN108156079A (en) * 2017-12-29 2018-06-12 深信服网络科技(深圳)有限公司 A kind of data packet forwarding system and method based on cloud service platform
CN108173767A (en) * 2017-12-25 2018-06-15 杭州迪普科技股份有限公司 A kind of message forwarding method and device based on VLAN-IF interface duplexes
CN108683607A (en) * 2018-06-14 2018-10-19 新华三云计算技术有限公司 Virtual machine traffic control method, device and server
CN108768807A (en) * 2018-06-01 2018-11-06 中国电子信息产业集团有限公司第六研究所 A kind of method and device of cloud platform actual situation interconnection
CN109254831A (en) * 2018-09-06 2019-01-22 山东师范大学 Virtual machine network method for managing security based on cloud management platform
CN109445910A (en) * 2018-11-02 2019-03-08 郑州云海信息技术有限公司 A kind of virtual machine vlan management method, apparatus, terminal and storage medium
CN109587243A (en) * 2018-12-05 2019-04-05 郑州云海信息技术有限公司 A kind of cloud platform and dispositions method comprising distributed storage
CN109617720A (en) * 2018-12-11 2019-04-12 郑州云海信息技术有限公司 A kind of distribution method and device of Internet resources
CN109756431A (en) * 2017-11-06 2019-05-14 阿里巴巴集团控股有限公司 Hybrid network configuration method, device, network structure and electronic equipment
CN109995816A (en) * 2017-12-29 2019-07-09 中移(苏州)软件技术有限公司 Information introduction method, device and communication equipment based on cloud computing platform
CN110011836A (en) * 2019-03-15 2019-07-12 启迪云计算有限公司 A kind of the distributed virtual switch and configuration method
CN110474913A (en) * 2019-08-20 2019-11-19 福建伊时代信息科技股份有限公司 Virtualization means of defence and terminal under a kind of cloud environment
CN111262771A (en) * 2018-11-30 2020-06-09 北京金山云网络技术有限公司 Virtual private cloud communication system, system configuration method and controller
CN111464511A (en) * 2020-03-18 2020-07-28 紫光云技术有限公司 Method for supporting multi-VPC isolation in cloud computing network
CN111934971A (en) * 2020-08-12 2020-11-13 杭州默安科技有限公司 Method and device for local network access from mapping service spanning three-layer network to multiple VLANs and multiple IPs
TWI710915B (en) * 2017-02-27 2020-11-21 大陸商騰訊科技(深圳)有限公司 Resource processing method based on internet data center, related devices and communication system
CN112099913A (en) * 2020-09-01 2020-12-18 北京思特奇信息技术股份有限公司 Method for realizing safety isolation of virtual machine based on OpenStack
CN112433678A (en) * 2020-11-26 2021-03-02 湖南国科微电子股份有限公司 Network adjusting method, device, equipment and medium for distributed storage system
CN112804131A (en) * 2021-01-08 2021-05-14 上海自恒信息科技有限公司 Access control method based on VLAN structure
CN113259164A (en) * 2021-05-18 2021-08-13 广州锦行网络科技有限公司 Method for realizing virtual-real networking based on virtual routing system construction
CN113783910A (en) * 2020-06-09 2021-12-10 阿里巴巴集团控股有限公司 Data forwarding method, device and system
CN114422296A (en) * 2022-01-05 2022-04-29 北京天一恩华科技股份有限公司 Multi-scene virtual network construction system, method, terminal and storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102223308A (en) * 2011-07-06 2011-10-19 北京航空航天大学 Network area traffic compressing and distributing system based on virtual link exchange
CN102523166A (en) * 2011-12-23 2012-06-27 中山大学 Structured network system applicable to future internet
CN102739798A (en) * 2012-07-05 2012-10-17 成都国腾实业集团有限公司 Cloud platform resource scheduling method with network sensing function
CN102970204A (en) * 2012-10-24 2013-03-13 曙光信息产业(北京)有限公司 Distributed switch system based on xen virtualization platform and achieving method thereof

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102223308A (en) * 2011-07-06 2011-10-19 北京航空航天大学 Network area traffic compressing and distributing system based on virtual link exchange
CN102523166A (en) * 2011-12-23 2012-06-27 中山大学 Structured network system applicable to future internet
CN102739798A (en) * 2012-07-05 2012-10-17 成都国腾实业集团有限公司 Cloud platform resource scheduling method with network sensing function
CN102970204A (en) * 2012-10-24 2013-03-13 曙光信息产业(北京)有限公司 Distributed switch system based on xen virtualization platform and achieving method thereof

Cited By (63)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104010028A (en) * 2014-05-04 2014-08-27 华南理工大学 Dynamic virtual resource management strategy method for performance weighting under cloud platform
CN104010028B (en) * 2014-05-04 2017-11-07 华南理工大学 A kind of dynamic management strategy method of virtual resource that performance is weighted under cloud platform
CN106464515A (en) * 2014-08-04 2017-02-22 华为技术有限公司 Virtual-operation administration and maintenance deployment method, device and virtual network system
WO2016019492A1 (en) * 2014-08-04 2016-02-11 华为技术有限公司 Virtual-operation administration and maintenance deployment method, device and virtual network system
US10587462B2 (en) 2014-08-04 2020-03-10 Huawei Technologies Co., Ltd. Method and apparatus for deploying virtual operation, administration and maintenance, and virtualized network system
WO2016050109A1 (en) * 2014-09-29 2016-04-07 华为技术有限公司 Communication method, cloud management server and virtual switch
CN107113219A (en) * 2014-12-19 2017-08-29 思科技术公司 VLAN marks in virtual environment
CN107113219B (en) * 2014-12-19 2020-06-19 思科技术公司 System and method for supporting VLAN tagging in a virtual environment
CN105589749B (en) * 2014-12-30 2018-11-27 中国银联股份有限公司 Network IP resources distribution method and device under cloud computing environment
CN105589749A (en) * 2014-12-30 2016-05-18 中国银联股份有限公司 Method and device for allocating network IP resources in cloud computing environment
CN104486363B (en) * 2015-01-05 2017-08-25 福建爱特点信息科技有限公司 A kind of cloud security safeguards system
CN104486363A (en) * 2015-01-05 2015-04-01 四川中时代科技有限公司 Cloud safety guarantee system
CN105991734A (en) * 2015-02-16 2016-10-05 广东亿迅科技有限公司 Cloud platform management method and system
CN105991734B (en) * 2015-02-16 2019-05-17 广东亿迅科技有限公司 A kind of cloud platform management method and system
WO2017070963A1 (en) * 2015-10-31 2017-05-04 华为技术有限公司 Method, apparatus, and system for deploying virtual resources
CN107153565A (en) * 2016-03-03 2017-09-12 华为技术有限公司 Configure the method and its network equipment of resource
US10616133B2 (en) 2016-03-03 2020-04-07 Huawei Technologies Co., Ltd. Resource configuration method and network device thereof
CN107153565B (en) * 2016-03-03 2020-06-16 华为技术有限公司 Method for configuring resource and network equipment thereof
CN105912892B (en) * 2016-04-08 2018-09-04 浪潮电子信息产业股份有限公司 A kind of Process Protection system and method based on cloud computing
CN105912892A (en) * 2016-04-08 2016-08-31 浪潮电子信息产业股份有限公司 Process protection method and framework based on cloud computing
CN107666493B (en) * 2016-07-27 2020-08-14 腾讯科技(深圳)有限公司 Database configuration method and equipment thereof
CN107666493A (en) * 2016-07-27 2018-02-06 腾讯科技(深圳)有限公司 A kind of configuration method for database and its equipment
CN106612225A (en) * 2016-12-12 2017-05-03 武汉烽火信息集成技术有限公司 Openstack based agent deployment system and method
CN106612225B (en) * 2016-12-12 2020-01-14 武汉烽火信息集成技术有限公司 Openstack-based agent deployment system and method
CN106878204A (en) * 2016-12-21 2017-06-20 新华三技术有限公司 The creation method and device of a kind of virtual machine
TWI710915B (en) * 2017-02-27 2020-11-21 大陸商騰訊科技(深圳)有限公司 Resource processing method based on internet data center, related devices and communication system
CN107256163A (en) * 2017-06-20 2017-10-17 郑州云海信息技术有限公司 A kind of method and device for realizing node administration
CN107453959A (en) * 2017-09-22 2017-12-08 郑州云海信息技术有限公司 The management method and its device of a kind of network interface card
CN109756431A (en) * 2017-11-06 2019-05-14 阿里巴巴集团控股有限公司 Hybrid network configuration method, device, network structure and electronic equipment
CN109756431B (en) * 2017-11-06 2021-07-16 阿里巴巴集团控股有限公司 Hybrid network configuration method and device, network structure and electronic equipment
CN107743152A (en) * 2017-12-07 2018-02-27 南京易捷思达软件科技有限公司 The implementation method of the High Availabitity of load equalizer in a kind of OpenStack cloud platforms
CN108173767B (en) * 2017-12-25 2021-02-26 杭州迪普科技股份有限公司 Message forwarding method and device based on VLAN-IF interface multiplexing
CN108173767A (en) * 2017-12-25 2018-06-15 杭州迪普科技股份有限公司 A kind of message forwarding method and device based on VLAN-IF interface duplexes
CN109995816A (en) * 2017-12-29 2019-07-09 中移(苏州)软件技术有限公司 Information introduction method, device and communication equipment based on cloud computing platform
CN108156079B (en) * 2017-12-29 2021-08-13 深信服科技股份有限公司 Data packet forwarding system and method based on cloud service platform
CN108156079A (en) * 2017-12-29 2018-06-12 深信服网络科技(深圳)有限公司 A kind of data packet forwarding system and method based on cloud service platform
CN108768807B (en) * 2018-06-01 2021-08-17 中国电子信息产业集团有限公司第六研究所 Virtual-real interconnection method and device for cloud platform
CN108768807A (en) * 2018-06-01 2018-11-06 中国电子信息产业集团有限公司第六研究所 A kind of method and device of cloud platform actual situation interconnection
CN108683607A (en) * 2018-06-14 2018-10-19 新华三云计算技术有限公司 Virtual machine traffic control method, device and server
CN109254831A (en) * 2018-09-06 2019-01-22 山东师范大学 Virtual machine network method for managing security based on cloud management platform
CN109254831B (en) * 2018-09-06 2020-05-29 山东师范大学 Virtual machine network security management method based on cloud management platform
CN109445910A (en) * 2018-11-02 2019-03-08 郑州云海信息技术有限公司 A kind of virtual machine vlan management method, apparatus, terminal and storage medium
CN109445910B (en) * 2018-11-02 2022-03-04 郑州云海信息技术有限公司 Virtual machine VLAN management method, device, terminal and storage medium
CN111262771A (en) * 2018-11-30 2020-06-09 北京金山云网络技术有限公司 Virtual private cloud communication system, system configuration method and controller
CN109587243B (en) * 2018-12-05 2021-10-29 郑州云海信息技术有限公司 Cloud platform comprising distributed storage and deployment method
CN109587243A (en) * 2018-12-05 2019-04-05 郑州云海信息技术有限公司 A kind of cloud platform and dispositions method comprising distributed storage
CN109617720B (en) * 2018-12-11 2022-02-25 郑州云海信息技术有限公司 Method and device for distributing network resources
CN109617720A (en) * 2018-12-11 2019-04-12 郑州云海信息技术有限公司 A kind of distribution method and device of Internet resources
CN110011836A (en) * 2019-03-15 2019-07-12 启迪云计算有限公司 A kind of the distributed virtual switch and configuration method
CN110474913A (en) * 2019-08-20 2019-11-19 福建伊时代信息科技股份有限公司 Virtualization means of defence and terminal under a kind of cloud environment
CN111464511A (en) * 2020-03-18 2020-07-28 紫光云技术有限公司 Method for supporting multi-VPC isolation in cloud computing network
CN113783910A (en) * 2020-06-09 2021-12-10 阿里巴巴集团控股有限公司 Data forwarding method, device and system
CN113783910B (en) * 2020-06-09 2024-02-13 阿里巴巴集团控股有限公司 Data forwarding method, device and system
CN111934971A (en) * 2020-08-12 2020-11-13 杭州默安科技有限公司 Method and device for local network access from mapping service spanning three-layer network to multiple VLANs and multiple IPs
CN112099913A (en) * 2020-09-01 2020-12-18 北京思特奇信息技术股份有限公司 Method for realizing safety isolation of virtual machine based on OpenStack
CN112099913B (en) * 2020-09-01 2023-12-01 北京思特奇信息技术股份有限公司 Method for realizing virtual machine security isolation based on OpenStack
CN112433678A (en) * 2020-11-26 2021-03-02 湖南国科微电子股份有限公司 Network adjusting method, device, equipment and medium for distributed storage system
CN112433678B (en) * 2020-11-26 2022-08-19 湖南国科微电子股份有限公司 Network adjusting method, device, equipment and medium for distributed storage system
CN112804131A (en) * 2021-01-08 2021-05-14 上海自恒信息科技有限公司 Access control method based on VLAN structure
CN113259164A (en) * 2021-05-18 2021-08-13 广州锦行网络科技有限公司 Method for realizing virtual-real networking based on virtual routing system construction
CN113259164B (en) * 2021-05-18 2022-03-22 广州锦行网络科技有限公司 Method for realizing virtual-real networking based on virtual routing system construction
CN114422296A (en) * 2022-01-05 2022-04-29 北京天一恩华科技股份有限公司 Multi-scene virtual network construction system, method, terminal and storage medium
CN114422296B (en) * 2022-01-05 2024-02-20 北京天一恩华科技股份有限公司 Multi-scene virtual network construction system, method, terminal and storage medium

Also Published As

Publication number Publication date
CN103607308B (en) 2016-09-21

Similar Documents

Publication Publication Date Title
CN103607308A (en) Virtual machine multi-network management system and method in cloud computing environment
US20200204450A1 (en) Method, Apparatus, and System for Implementing Software-Defined Network SDN
CN102549983B (en) Distributed data center access switch
CN102149024B (en) Method, device and system for vicariously managing ONU (Optical Network Unit) by OLT (Optical Line Terminal)
CN102843286B (en) Implementation method, and system of virtual routers
CN105162704B (en) The method and device of multicast replication in Overlay network
CN103404084B (en) MAC Address forces retransmission unit and method
CN103312836B (en) A kind of large-scale local network ip address management method
CN107438016A (en) Network management, equipment, system and storage medium
CN107370642A (en) One kind is based on cloud platform multi-tenant network smoothness monitoring system and method
CN103329485B (en) Network system, the network equipment and network information establishing method
CN105119820B (en) The more example parallel execution systems of Routing Protocol and its method is performed parallel
CN105071945A (en) Network terminal address bulk binding method based on interchanger technology
CN106878480A (en) A kind of DHCP service process sharing method and device
CN106034052A (en) System and method for monitoring two-layer traffic among virtual machines
CN103856358A (en) Ethernet port VLAN (virtual local area network) configuration system and method of EOC (Ethernet over coax) equipment
CN107820262A (en) Method for parameter configuration, apparatus and system
CN101141380B (en) Method and system of transmitting packet
CN103262480A (en) Method of establishing virtual cluster and network devices
CN108696370B (en) Method, device and system for binding and unbinding server and service
CN108418907A (en) IP address distribution method and device
CN108282462A (en) A kind of device of isolation service network and management net
CN103532747A (en) Method and system for generating network topology of industrial system
CN107465621A (en) A kind of router finds method, SDN controllers, router and network system
EP2495917A1 (en) Relay server and relay communication system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CP02 Change in the address of a patent holder

Address after: 310013, Zhejiang, Xihu District, Wensanlu Road, No. 398, 4 floor, Hangzhou

Patentee after: EB Information Technology Ltd.

Address before: 100191 Beijing, Zhichun Road, No. 9, hearing the building on the floor of the 7 floor,

Patentee before: EB Information Technology Ltd.

CP02 Change in the address of a patent holder
CP01 Change in the name or title of a patent holder

Address after: 310013 4th floor, No.398 Wensan Road, Xihu District, Hangzhou City, Zhejiang Province

Patentee after: Xinxun Digital Technology (Hangzhou) Co.,Ltd.

Address before: 310013 4th floor, No.398 Wensan Road, Xihu District, Hangzhou City, Zhejiang Province

Patentee before: EB Information Technology Ltd.

CP01 Change in the name or title of a patent holder