CN106921553B - Method and system for realizing high availability in virtual network - Google Patents

Method and system for realizing high availability in virtual network Download PDF

Info

Publication number
CN106921553B
CN106921553B CN201511003093.4A CN201511003093A CN106921553B CN 106921553 B CN106921553 B CN 106921553B CN 201511003093 A CN201511003093 A CN 201511003093A CN 106921553 B CN106921553 B CN 106921553B
Authority
CN
China
Prior art keywords
nfv
virtual
flow table
open vswitch
main
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201511003093.4A
Other languages
Chinese (zh)
Other versions
CN106921553A (en
Inventor
周志洪
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
China Mobile Suzhou Software Technology Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
China Mobile Suzhou Software Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd, China Mobile Suzhou Software Technology Co Ltd filed Critical China Mobile Communications Group Co Ltd
Priority to CN201511003093.4A priority Critical patent/CN106921553B/en
Publication of CN106921553A publication Critical patent/CN106921553A/en
Application granted granted Critical
Publication of CN106921553B publication Critical patent/CN106921553B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4641Virtual LANs, VLANs, e.g. virtual private networks [VPN]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The embodiment of the invention discloses a method for realizing high availability in a virtual network, which comprises the following steps: the Open virtual switch Open vSwitch broadcasts the obtained ARP message in a two-layer virtual network; two identical Network Function Virtualization (NFV) devices with the same virtual IP address respectively receive the ARP message, respectively process the ARP message to obtain respective response messages, and respectively send the respective response messages to the Open vSwitch; and after receiving the response messages sent by the two identical NFV devices, the Open vSwitch learns a flow table of the Open vSwitch, and determines a main NFV device and a standby NFV device according to the flow table of the Open vSwitch. The embodiment of the invention also discloses a system for realizing high availability in the virtual network.

Description

Method and system for realizing high availability in virtual network
Technical Field
The invention relates to a cloud computing virtual network technology, in particular to a method and a system for realizing high availability in a virtual network.
Background
In the current cloud computing Virtual network, a plurality of Virtual network function devices based on a Network Function Virtualization (NFV) architecture, such as a Virtual load balancer (vLB), a Virtual firewall (vFW), a Virtual Router (vrrouter), etc., are used, and these Virtual network function devices are generally used in combination with a keepalive tool to achieve high availability, and the keepalive tool is a high-availability tool that achieves a Virtual Routing Redundancy Protocol (VRRP), such as: virtual load balancer high availability: vLB + keepalived; the virtual firewall is highly available: vFW + keepalived virtual router is highly available: vRouter + keepalived; when the NFV devices are used in combination with a keepalive tool to achieve high availability, the implementation principle and the deployment method are basically the same, haproxy is a common virtual load balancer, and the prior art is described in the following with an implementation scheme that haproxy + keepalive achieves vLB high availability.
Taking the current popular OpenStack cloud computing platform as an example, the scheme realizes high availability of a hash virtual load balancer by respectively operating hash + keepalive on two servers; com, when the user accesses test, the access is to the hash virtual load balancer on the server 1, and after the hash virtual load balancer on the server 1 does not work normally, the keepalive on the server 1 detects the keepalive, then informs the keepalive on the server 2, and deletes the virtual IP address on the server 1; com, when the subsequent user accesses test, it is the hash virtual load balancer on the server 2 that actually accesses, thus realizing the high availability of the hash virtual load balancer.
But implementing high availability of a virtual load balancer based on a highly available tool (e.g., keepalived) may suffer from the following disadvantages: on the existing basis, the complexity of management, configuration and other work of highly available tool resources is increased, too much system resources are consumed, and the overhead of network bandwidth is increased.
Disclosure of Invention
In view of this, embodiments of the present invention are expected to provide a method and a system for realizing high availability in a virtual network, so as to reduce the complexity of work, reduce the consumption of system resources, and reduce the overhead of network bandwidth on the premise of ensuring high availability of the system.
In order to achieve the purpose, the technical scheme of the invention is realized as follows:
the invention provides a method for realizing high availability in a virtual network, which comprises the following steps:
the Open virtual switch Open vSwitch broadcasts the obtained ARP message in a two-layer virtual network;
two identical Network Function Virtualization (NFV) devices with the same virtual IP address respectively receive the ARP message, respectively process the ARP message to obtain respective response messages, and respectively send the respective response messages to the Open vSwitch;
and after receiving the response messages sent by the two identical NFV devices, the Open vSwitch learns a flow table of the Open vSwitch, and determines a main NFV device and a standby NFV device according to the flow table of the Open vSwitch.
In the foregoing solution, the determining, according to the flow table of the Open vSwitch, a primary NFV device and a secondary NFV device includes:
determining the NFV device corresponding to the response message in the flow table which reaches the Open vSwitch first as the standby NFV device, and determining the NFV device corresponding to the response message in the flow table which reaches the Open vSwitch later as the main NFV device.
In the foregoing solution, after determining the main NFV device and the standby NFV device according to the flow table of the Open vSwitch, the method further includes:
the method comprises the steps that an agent detects the state of main NFV equipment at fixed time, and when the state of the main NFV equipment is in an abnormal working state, the agent reports the abnormal working state of the main NFV equipment to a controller;
and after receiving the abnormal working state of the main NFV equipment, the controller modifies the flow table of the Open vSwitch, so that the message of the user accessing the virtual IP address is forwarded to the standby NFV equipment.
In the foregoing solution, before the Open virtual switch Open vSwitch broadcasts the obtained ARP packet in a two-layer virtual network, the method further includes:
the controller configures the same virtual IP address on the two identical NFV devices.
In the above scheme, the NFV device is at least one of a virtual load balancer, a virtual firewall, and a virtual router;
the flow table is an Openflow flow table.
The present invention also provides a system for achieving high availability in a virtual network, the system comprising:
the Open virtual switch Open vSwitch is used for broadcasting the obtained ARP message in a two-layer virtual network; the network function virtualization NFV device is further configured to learn a flow table of an Open vSwitch after receiving the response messages sent by the two identical network function virtualization NFV devices, and determine a main NFV device and a standby NFV device according to the flow table of the Open vSwitch;
and the two identical NFV devices with the same virtual IP address are used for respectively receiving the ARP message, respectively processing the ARP message to obtain respective response messages, and respectively sending the respective response messages to the OpenvSwitch.
In the above scheme, the Open vSwitch is further configured to determine, as the standby NFV device, the NFV device corresponding to the response packet that first reaches the Open vSwitch in the flow table, and determine, as the main NFV device, the NFV device corresponding to the response packet that later reaches the Open vSwitch in the flow table.
In the above solution, the system further includes:
the agent is used for detecting the state of the main NFV equipment at fixed time, and reporting the abnormal working state of the main NFV equipment to the controller when the state of the main NFV equipment is the abnormal working state;
and the controller is further configured to modify the flow table of the OpenvSwitch after receiving the abnormal working state of the main NFV device, so that a message for a user to access the virtual IP address is forwarded to the standby NFV device.
In the above scheme, the controller is further configured to configure the same virtual IP address on the two identical NFV devices.
In the above solution, the NFV device is at least one of a virtual load balancer, a virtual firewall, and a virtual router,
the flow table is an Openflow flow table.
According to the method and the system for realizing high availability in the virtual network, the same virtual IP address is configured on two identical NFV devices through the controller; the Open vSwitch broadcasts the obtained ARP message in a two-layer virtual network; two identical NFV devices with the same virtual IP address respectively receive the ARP messages, respectively process the ARP messages to obtain respective response messages, and respectively send the respective response messages to the Open vSwitch; after receiving response messages sent by two identical NFV devices, the Open vSwitch learns a flow table of the Open vSwitch, and a main load balancer and a standby load balancer are determined according to the flow table of the Open vSwitch; the agent detects the state of the main load balancer at regular time, and reports the abnormal working state of the main load balancer to the controller when the state of the main load balancer is abnormal; after receiving the abnormal working state of the main NFV equipment, the controller modifies the flow table of the Open vSwitch, so that a message of a user accessing a virtual IP address is forwarded to the standby NFV equipment; by utilizing the flow table of the Open vSwitch, on the premise of ensuring high availability of the system, the working complexity is reduced, the consumption of system resources is reduced, the overhead of network bandwidth is reduced, and virtual IP address conflict among NFV (network function virtualization) devices is avoided; in addition, the state of the main load balancer is detected at regular time through the agent, so that the switching speed between the main NFV equipment and the standby NFV equipment is higher, and the second-level high availability is realized.
Drawings
FIG. 1 is a flow chart of an embodiment of a method of the present invention for achieving high availability in a virtual network;
fig. 2 is a schematic structural diagram of an embodiment of the system for implementing high availability in a virtual network according to the present invention.
Detailed Description
The technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention.
The method for realizing high availability in the virtual Network is applied to a system for realizing high availability in the virtual Network, and the system consists of an Open virtual switch Open vSwitch, NFV (Network Function Virtualization) equipment with two identical virtual IP addresses, a controller and an agent; the NFV device may be at least one of a virtual Load Balance (vLB), a virtual Fire Wall (vFW), a virtual Router (vRouter), and the like.
Fig. 1 is a flowchart of an embodiment of a method for implementing high availability in a virtual network, where as shown in fig. 1, the method of the present invention may include the following steps:
step 101, the controller configures the same virtual IP address on two identical NFV devices.
A controller in a system that implements high availability in a virtual network configures the same virtual IP address on two identical NFV devices.
Because the implementation principle and the deployment method of various NFV devices in a system for implementing high availability in a virtual network are basically the same, in this embodiment, a detailed description is given only by taking an NFV device as a hash virtual load balancer as an example; the controller configures the same virtual IP address 192.168.1.200 on two identical hash virtual load balancers.
And 102, the Open virtual switch Open vSwitch broadcasts the obtained ARP message in a two-layer virtual network.
When a user accesses the virtual IP Address 192.168.1.200, an Open vSwitch in a system that is highly available in a virtual network may acquire an Address Resolution Protocol (ARP) message, and at this time, the Open vSwitch does not learn a flow table of the Open vSwitch yet, and the ARP message does not match the flow table of the Open vSwitch, so the Open vSwitch may broadcast the acquired ARP message in a two-layer virtual network.
The flow table may be a dynamic flow table or a static flow table; the flow table may also be an Openflow flow table.
Step 103, after receiving the ARP packet, each of the two identical NFV devices with the same virtual IP address respectively processes the ARP packet to obtain a respective response packet, and sends the respective response packet to the OpenvSwitch.
Two identical haproxy virtual load balancers with the same virtual IP address 192.168.1.200 firstly receive the ARP message broadcast by the Open vSwitch respectively, then obtain respective response messages after respective load balancing processing, and finally send the respective corresponding response messages to the Open vSwitch.
Step 104, after receiving the response messages sent by the two identical NFV devices, the Open vSwitch learns the flow table of the Open vSwitch, and determines a main load balancer and a standby load balancer according to the flow table of the Open vSwitch.
Specifically, the determining a main NFV device and a standby NFV device according to the flow table of the Open vSwitch includes:
determining the NFV device corresponding to the response message in the flow table which reaches the Open vSwitch first as the standby NFV device, and determining the NFV device corresponding to the response message in the flow table which reaches the Open vSwitch later as the main NFV device.
An Open vSwitch in a system with high availability in a virtual network can learn a flow table of the Open vSwitch after receiving response messages respectively sent by two identical haproxy virtual load balancers, the Open vSwitch can determine a haproxy virtual load balancer corresponding to a response message in the flow table which reaches the Open vSwitch first as a standby haproxy virtual load balancer, and determine a haproxy virtual load balancer corresponding to a response message in the flow table which reaches the Open vSwitch later as a main haproxy virtual load balancer.
For example, if the response message of the second haproxy virtual load balancer arrives at the Open vSwitch first, the Open vSwitch learns a flow table, and the flow table forwards the message of the user accessing the virtual IP address to the second haproxy virtual load balancer; then, the response message of the first haproxy virtual load balancer also reaches the Open vSwitch, although the source IP address of the response message of the first haproxy virtual load balancer is the same as the source IP address of the response message of the second haproxy virtual load balancer, but the ports are different, at this time, the Open vSwitch learns the flow table again, and then the learned flow table is covered; a subsequent user accesses a message of a virtual IP address, a latest flow table is matched in an Open vSwitch, and all subsequent messages are forwarded to a first haproxy virtual load balancer because the destination of the latest flow table is the first haproxy virtual load balancer, namely the first haproxy virtual load balancer is a main haproxy virtual load balancer; at this time, although the virtual IP address is also configured on the second haproxy virtual load balancer, no flow table in the Open vSwitch points to the second haproxy virtual load balancer, so that the user cannot access the second haproxy virtual load balancer, that is, the second haproxy virtual load balancer serves as a standby haproxy virtual load balancer, and the service is not provided for a while.
If the first haproxy virtual load balancer does not work normally, it is not detected in time, the message of the user accessing the virtual IP address is still forwarded to the first haproxy virtual load balancer with the fault, so that the service is not available, and the user can not access normally; in this case, the characteristic of flow table aging of the Open vSwitch can be utilized to provide high availability, that is, a flow table learned by the Open vSwitch and destined to a first hash virtual load balancer can be automatically aged within a certain time (which can be configured according to actual requirements within a certain time), that is, after a certain time, the flow table can be automatically deleted, at this time, when a user accesses a virtual IP address, a message can be rebroadcast by the Open vSwitch, because the first hash virtual load balancer does not work, the message cannot be responded, only a second hash virtual load balancer can respond, at this time, the Open vSwitch can learn a flow table destined to a second hash virtual load balancer, so that messages subsequently accessing the virtual IP address by the user can be forwarded to the second hash virtual load balancer, high availability can be realized by utilizing the flow table characteristic of the Open vSwitch, high reliability is achieved, and compared with the prior art, because a highly available tool is not needed, system resources can be saved, and the expense of network bandwidth is reduced; in addition, network isolation can be performed by using the flow table characteristics of Open vSwitch, so that virtual IP address conflict between the haproxy virtual load balancers is avoided.
And 105, detecting the state of the main load balancer at regular time by the agent, and reporting the abnormal working state of the main load balancer to the controller by the agent when the state of the main load balancer is the abnormal working state.
The method includes that an agent in a high-availability system in a virtual network detects the state of a main NFV device at regular time (the timing time length can be set according to actual requirements), and when the state of the main NFV device is in an abnormal working state, the agent reports the abnormal working state of the main NFV device to a controller, closes a network port of the main NFV device, and does not allow a message to be transmitted on the main NFV device any more.
For example, in an OpenStack cloud computing platform, the agent may be neutron-lbaas-agent and the controller may be neutron-server; and detecting the working state of the first haproxy virtual load balancer by utilizing the neutron-Ibaas-agent every 1 second, if the neutron-Ibaas-agent finds that the first haproxy virtual load balancer does not work normally, reporting the abnormal working state of the first haproxy virtual load balancer to the neutron-server in time, closing a network port of the first haproxy virtual load balancer, and not transmitting the message on the first haproxy virtual load balancer any more.
And step 106, after receiving the abnormal working state of the main NFV equipment, the controller modifies the flow table of the OpenvSwitch, so that the message of the user accessing the virtual IP address is forwarded to the standby NFV equipment.
After a controller in a system which realizes high availability in a virtual network receives the abnormal working state of a main NFV device, a flow table of an Open vSwitch is modified, so that a message of a user accessing a virtual IP address is forwarded to a standby NFV device.
For example, the neutron-server modifies the flow table of the Open vSwitch in time after receiving the abnormal working state of the first haproxy virtual load balancer, so that a message of a user accessing a virtual IP address is forwarded to the second haproxy virtual load balancer according to the modified flow table of the Open vSwitch, and the second haproxy virtual load balancer provides service; thus, the processing for detecting faults and fault switching is simple, the switching speed is higher, and high availability in the second level can be provided.
The method for realizing high availability in the virtual network provided by the invention configures the same virtual IP address on two identical NFV devices through the controller; the Open vSwitch broadcasts the obtained ARP message in a two-layer virtual network; two identical NFV devices with the same virtual IP address respectively receive the ARP messages, respectively process the ARP messages to obtain respective response messages, and respectively send the respective response messages to the Open vSwitch; after receiving response messages sent by two identical NFV devices, an Open vSwitch learns a flow table of the Open vSwitch, and a main load balancer and a standby load balancer are determined according to the flow table of the Open vSwitch; the agent detects the state of the main load balancer at regular time, and reports the abnormal working state of the main load balancer to the controller when the state of the main load balancer is abnormal; after receiving the abnormal working state of the main NFV equipment, the controller modifies the flow table of the Open vSwitch, so that a message of a user accessing a virtual IP address is forwarded to the standby NFV equipment; by utilizing the flow table of the Open vSwitch, on the premise of ensuring high availability of the system, the working complexity is reduced, the consumption of system resources is reduced, the overhead of network bandwidth is reduced, and virtual IP address conflict among NFV (network function virtualization) devices is avoided; in addition, the state of the main load balancer is detected at regular time through the agent, so that the switching speed between the main NFV equipment and the standby NFV equipment is higher, and the second-level high availability is realized.
Fig. 2 is a schematic structural diagram of an embodiment of the system for implementing high availability in a virtual network according to the present invention, and as shown in fig. 2, the system 02 for implementing high availability in a virtual network according to the present invention may include: an Open virtual switch Open vSwitch 21, two identical NFV devices 22; wherein the content of the first and second substances,
the Open virtual switch Open vSwitch 21 is configured to broadcast the obtained ARP packet in a two-layer virtual network; the network function virtualization NFV device 22 is further configured to learn a flow table of an Open vSwitch after receiving the response packet sent by the two identical network function virtualization NFV devices 22, and determine a main NFV device and a standby NFV device according to the flow table of the Open vSwitch;
the two identical NFV devices 22 having the same virtual IP address are configured to receive the ARP packet, process the ARP packet to obtain a response packet, and send the response packet to the OpenvSwitch.
Further, the Open vSwitch 21 is further configured to determine, as the standby NFV device, the NFV device corresponding to the response packet that first reaches the Open vSwitch in the flow table, and determine, as the main NFV device, the NFV device corresponding to the response packet that later reaches the Open vSwitch in the flow table.
Further, the system further comprises: an agent 23, a controller 24; wherein the content of the first and second substances,
the agent 23 is configured to detect a state of the main NFV device at regular time, and when the state of the main NFV device is an abnormal operating state, the agent 23 reports the abnormal operating state of the main NFV device to the controller 24;
the controller 24 is further configured to modify the flow table of the OpenvSwitch after receiving the abnormal working state of the main NFV device, so that a message that a user accesses the virtual IP address is forwarded to the standby NFV device.
Further, the controller 24 is further configured to configure the same virtual IP address on the two identical NFV devices 22.
Further, the NFV device is at least one of a virtual load balancer, a virtual firewall, and a virtual router;
the flow table is an Openflow flow table.
The system of this embodiment may be configured to implement the technical solutions of the above-described method embodiments, and the implementation principles and technical effects are similar, which are not described herein again.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
The above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention.

Claims (8)

1. A method for achieving high availability in a virtual network, the method comprising:
the Open virtual switch Open vSwitch broadcasts the obtained ARP message in a two-layer virtual network;
two identical Network Function Virtualization (NFV) devices with the same virtual IP address respectively receive the ARP message, respectively process the ARP message to obtain respective response messages, and respectively send the respective response messages to the OpenvSwitch;
after receiving the response messages sent by two identical NFV devices, the Open vSwitch learns a flow table of the Open vSwitch, and determines a main NFV device and a standby NFV device according to the flow table of the Open vSwitch;
wherein the determining a primary NFV device and a secondary NFV device according to the flow table of the Open vSwitch includes:
determining the NFV device corresponding to the response message in the flow table which reaches the Open vSwitch first as the standby NFV device, and determining the NFV device corresponding to the response message in the flow table which reaches the Open vSwitch later as the main NFV device.
2. The method of claim 1, wherein after determining a primary NFV device and a standby NFV device according to the Open vSwitch flow table, the method further comprises:
the method comprises the steps that an agent detects the state of main NFV equipment at fixed time, and when the state of the main NFV equipment is in an abnormal working state, the agent reports the abnormal working state of the main NFV equipment to a controller;
and after receiving the abnormal working state of the main NFV equipment, the controller modifies the flow table of the Open vSwitch, so that the message of the user accessing the virtual IP address is forwarded to the standby NFV equipment.
3. The method according to claim 1, wherein before the Open virtual switch Open vSwitch broadcasts the obtained ARP packet in the layer two virtual network, the method further comprises:
the controller configures the same virtual IP address on the two identical NFV devices.
4. The method according to any of claims 1 to 3, wherein the NFV device is at least one of a virtual load balancer, a virtual firewall, a virtual router;
the flow table is an Openflow flow table.
5. A system for achieving high availability in a virtual network, the system comprising:
the Open virtual switch Open vSwitch is used for broadcasting the obtained ARP message in a two-layer virtual network; the network function virtualization NFV device is also used for learning a flow table of an Open vSwitch after receiving response messages sent by two identical network function virtualization NFV devices, and determining a main NFV device and a standby NFV device according to the flow table of the Open vSwitch;
two identical NFV devices with the same virtual IP address are used for respectively receiving the ARP message, respectively processing the ARP message to obtain respective response messages, and respectively sending the respective response messages to the Open vSwitch;
the Open vSwitch is further configured to determine, as the standby NFV device, the NFV device corresponding to the response packet in the flow table that reaches the Open vSwitch first, and determine, as the main NFV device, the NFV device corresponding to the response packet in the flow table that reaches the Open vSwitch later.
6. The system of claim 5, further comprising:
the agent is used for detecting the state of the main NFV equipment at fixed time, and reporting the abnormal working state of the main NFV equipment to the controller when the state of the main NFV equipment is the abnormal working state;
the controller is further configured to modify the flow table of the Open vSwitch after receiving the abnormal working state of the main NFV device, so that a message for a user to access the virtual IP address is forwarded to the standby NFV device.
7. The system of claim 6, wherein the controller is further configured to configure the same virtual IP address on the two identical NFV devices.
8. The system according to any of claims 5 to 7, wherein the NFV device is at least one of a virtual load balancer, a virtual firewall, and a virtual router
The flow table is an Openflow flow table.
CN201511003093.4A 2015-12-28 2015-12-28 Method and system for realizing high availability in virtual network Active CN106921553B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201511003093.4A CN106921553B (en) 2015-12-28 2015-12-28 Method and system for realizing high availability in virtual network

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201511003093.4A CN106921553B (en) 2015-12-28 2015-12-28 Method and system for realizing high availability in virtual network

Publications (2)

Publication Number Publication Date
CN106921553A CN106921553A (en) 2017-07-04
CN106921553B true CN106921553B (en) 2020-04-17

Family

ID=59455929

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201511003093.4A Active CN106921553B (en) 2015-12-28 2015-12-28 Method and system for realizing high availability in virtual network

Country Status (1)

Country Link
CN (1) CN106921553B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109218160A (en) * 2018-09-11 2019-01-15 武汉维力克科技有限公司 A kind of communication device based on fictitious host computer
CN113709220B (en) * 2021-08-16 2024-03-22 华云数据控股集团有限公司 High-availability implementation method and system of virtual load equalizer and electronic equipment
CN116566752B (en) * 2023-07-11 2023-09-12 苏州浪潮智能科技有限公司 Safety drainage system, cloud host and safety drainage method

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103581021A (en) * 2013-10-23 2014-02-12 华为技术有限公司 Method and equipment for detecting services in software defined network
CN103905577A (en) * 2012-12-28 2014-07-02 中兴通讯股份有限公司 Address resolution protocol message processing method and system
CN103905283A (en) * 2012-12-25 2014-07-02 华为技术有限公司 Communication method and apparatus based on expandable virtual local area network
CN104219340A (en) * 2014-09-25 2014-12-17 杭州华三通信技术有限公司 ARP (Address Resolution Protocol) response proxy method and apparatus

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9191271B2 (en) * 2013-04-29 2015-11-17 Telefonaktiebolaget L M Ericsson (Publ) Fast traffic recovery in VRRP based routers

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103905283A (en) * 2012-12-25 2014-07-02 华为技术有限公司 Communication method and apparatus based on expandable virtual local area network
CN103905577A (en) * 2012-12-28 2014-07-02 中兴通讯股份有限公司 Address resolution protocol message processing method and system
CN103581021A (en) * 2013-10-23 2014-02-12 华为技术有限公司 Method and equipment for detecting services in software defined network
CN104219340A (en) * 2014-09-25 2014-12-17 杭州华三通信技术有限公司 ARP (Address Resolution Protocol) response proxy method and apparatus

Also Published As

Publication number Publication date
CN106921553A (en) 2017-07-04

Similar Documents

Publication Publication Date Title
CN107454155B (en) Fault processing method, device and system based on load balancing cluster
US10187459B2 (en) Distributed load balancing system, health check method, and service node
EP3346661B1 (en) Path detection method and device
CN107026890B (en) Message generation method based on server cluster and load balancer
US20180302326A1 (en) Multiple active l3 gateways for logical networks
US9503371B2 (en) High availability L3 gateways for logical networks
US20140250220A1 (en) Optimizing Handling of Virtual Machine Mobility in Data Center Environments
US20140064104A1 (en) Host Detection by Top of Rack Switch Devices in Data Center Environments
US20150189009A1 (en) Distributed multi-level stateless load balancing
WO2017100365A1 (en) Directing data traffic between intra-server virtual machines
US11233737B2 (en) Stateless distributed load-balancing
US9203753B2 (en) Traffic optimization using network address and port translation in a computer cluster
US10050855B1 (en) Maintaining a tunnel liveness session in a multi-chassis link aggregation group topology
JP2012524919A5 (en)
US20220345331A1 (en) Two-layer private line network system, configuration method, and device
CN107682406B (en) Method, device and system for processing service
EP4325807A3 (en) Duplicate address detection for global ip address or range of link local ip addresses
US10129148B2 (en) Table-based load balancing for bonded network interfaces
CN106921553B (en) Method and system for realizing high availability in virtual network
CN106101297B (en) A kind of message answer method and device
CN106817267B (en) Fault detection method and equipment
US20160323371A1 (en) Methods and apparatus for load balancing in a network
US10567262B1 (en) Dynamic server device monitoring
US10476774B2 (en) Selective transmission of bidirectional forwarding detection (BFD) messages for verifying multicast connectivity
CN112217735A (en) Information synchronization method and load balancing system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant