TW201904234A - Method and device for virtual network link detection - Google Patents

Abstract

Provided is a virtual network link detection method, wherein a virtual network comprises a virtual switch implemented within the same physical machine and one or more virtual machines in communicative connection with the virtual switch. The method comprises: acquiring network information about each of the one or more virtual machines; creating a namespace within the physical machine; establishing a communicative connection between the namespace and the virtual switch; setting network information about the namespace according to the network information about the virtual machine to be detected in the one or more virtual machines; sending, by means of the virtual switch, a detection signal from the namespace to the virtual machine to be detected; and determining, according to the feedback on the detection signal from the virtual machine to be detected, whether a link between the virtual machine to be detected and the virtual switch is normal. In addition, further provided are a corresponding detection device and a physical machine where the virtual network link detection solution is applied.

Description

Method and device for virtual network link detection

The present invention relates generally to virtual network technology, and specifically, to a solution for virtual network link detection.

An important concept in virtualization technology is a virtual machine (VM: Virtual Machine), which is simply a virtual computer simulated, or logically a computer. Virtual machines obtained through software simulation usually have complete hardware system functions and complete computer systems running in a completely isolated environment.

Virtual machines can be implemented on physically existing computers. Relative to virtual machines, physical computers can be called physical machines. These physical machines provide a hardware environment for virtual machines, so they are sometimes referred to as "hosts" or "hosts." Multiple virtual machines can be implemented on one physical machine at the same time, or virtual machines can be realized across physical machines. In addition, a virtual switch can also be provided to connect a virtual network on the same physical machine and / or different physical machines. Such a virtual network can be used to construct a cloud platform in practical applications.

The current data center monitoring system mostly monitors the traffic of the business system. In traditional data centers, business systems are deployed in physical machines, and only physical links affect current business data. However, in a virtualized environment, the network will penetrate inside the physical machine. When it is detected that the service data is interrupted, it cannot be determined whether the problem occurs on the physical link outside the physical machine or the virtual link inside the physical machine.

At present, the industry already has monitoring and detection methods for physical switches and related physical links, but there is still a lack of detection for virtual switches and related virtual network links. Therefore, it is desirable to design a monitoring and detection scheme for virtual network links.

In view of this, the present invention provides a solution for virtual network link detection, which can improve the above problems.

In one aspect, the present invention provides a method for virtual network link detection. The virtual network includes a virtual switch implemented in the same physical machine and one or more virtual machines communicatively connected to the virtual switch The method includes: (a) acquiring network information of each of the one or more virtual machines; (b) creating a namespace in the physical machine; (c) in the namespace Establish a communication connection with the virtual switch; (d) set the network information of the namespace according to the network information of the virtual machine to be detected in the one or more virtual machines; (e) from the naming Space sends a detection signal to the virtual machine to be detected through the virtual switch; and (f) judging the virtual machine to be detected and the virtual machine based on the feedback of the virtual machine to the detection signal Whether the link between the switches is normal.

The method as described above, wherein step (a) includes obtaining the IP address, virtual area network identifier of each virtual machine, and the corresponding switch port identifier on the virtual switch corresponding to the virtual machine.

The method as described above, wherein step (d) includes setting the IP address of the namespace to be on the same network segment as the virtual machine to be detected and making the namespace recognized by the virtual switch as It has the same virtual local area network identifier as the virtual machine to be detected.

The method as described above, wherein step (c) includes allocating switch ports for the namespace on the virtual switch.

The method as described above, wherein step (d) includes setting the same virtual area network identity as the virtual machine to be detected in the switch port allocated to the namespace.

The method as described above, wherein the detection signal is a PING signal.

The method as described above, further comprising performing steps (d)-(f) for each of the one or more virtual machines.

The method as described above, wherein the virtual network constitutes a cloud platform, and step (a) includes obtaining network information of each virtual machine from a database of the cloud platform.

On the other hand, the present invention also provides a device for virtual network link detection, which includes a memory, a processor, and a computer program stored on the memory, wherein, when the processor is executed on the processor The computer program causes the device to perform the method described above.

In addition, the present invention also provides a physical machine including a virtual switch and one or more virtual machines communicatively connected to the virtual switch, wherein the physical machine further includes the Road link detection device.

A schematic example of the present invention will now be described with reference to the drawings, where the same reference numerals denote the same components. The examples described below help those skilled in the art to thoroughly understand the present invention, and the examples are intended to be examples rather than limitations. The illustrations of various elements, components, modules, devices and equipment bodies in the figure only schematically indicate the existence of these elements, components, modules, devices and equipment bodies and also indicate the relative relationship between them, but they are not used to limit them. The specific shape of the flow chart; the relationship between the steps in the flow chart is not limited to the order given, and can be adjusted according to the actual application without departing from the scope of protection of the present invention.

As described in the prior art, the present invention is directed to the detection of a virtual network link, where the virtual network link may be generally understood by those skilled in the art for network data on one or more physical machines The concept of internally transmitted links. The virtual network targeted by the present invention generally includes a virtual switch implemented in the same physical machine and one or more virtual machines communicatively connected to the virtual switch.

A virtual switch can be a multi-layer virtual switch such as Open vSwitch (OVS) running on a virtualization platform, which provides the virtual machine on the physical machine where it is located with the same functions as other physical switches, such as network isolation, QoS configuration, Traffic monitoring, data packet analysis. Through programming expansion of such virtual switches, it can realize the automatic configuration, management and maintenance of large-scale networks, and support the existing standard management interfaces and protocols. A person skilled in the art can understand that the virtual switch involved in the present invention can be implemented in any form, as long as it can provide network connection for the virtual machine on the physical machine with the same function as the physical switch.

An important application form of the virtual network is to provide a cloud platform. Therefore, the present invention can be applied to detect the virtual network connection on the cloud platform. The implementation of the present invention will be described in detail below in conjunction with the application of the cloud platform. However, those skilled in the art can understand that the present invention can be applied to any scenario where a virtual network can be applied.

FIG. 1 is an implementation scenario of a method for virtual network link detection according to an embodiment of the present invention. The system 100 may be a cloud platform implemented by a virtual machine, on which the method provided by the present invention can be applied. The method provided by the present invention can be applied to the system 100 shown in FIG. 1. Generally, the system 100 may include a physical switched network 10, which may be a decentralized core network of "spine-leaf" architecture, which may include spine nodes 102 and leaf nodes 101 .

Generally, the spine node 102 can be used to connect physical switches, and the leaf node 101 can be used to connect servers and network devices. The solution provided by the present invention will be further described below by taking the leaf node 101 as a physical machine in which a virtual machine is implemented. However, those skilled in the art can understand that the "spine-leaf" architecture shown in FIG. 1 is not limiting. The invention can be applied to any other network architecture including physical machines.

The host 20 illustrates the general structure of the leaf node 101 as a physical machine. In this article, "host" and "physical machine" may be used interchangeably, and each represents a subject in which a virtual machine can be implemented. As shown in FIG. 1, the virtual machine 203 can be implemented in the host 20, and data exchange between the virtual machines 203 is provided through the virtual switch 202.

The detection device 201 may be further provided in the host 20 to execute various methods provided by the present invention, so as to detect the state of the virtual network link between the virtual machines 203. In some examples, the detection device 201 can include a memory, a processor, and a computer program stored on the memory. When these computer programs are executed on the processor, the detection device can execute various methods provided by the present invention.

In the embodiment shown in FIG. 1, the detection device 201 is integrated in the physical machine. Correspondingly, the detection device 201 can be realized by sharing the processor and the memory in the physical machine. Specifically, in some examples, the detection device 201 can be implemented by a mechanism such as an agent. In other examples, the detection device 201 may also be implemented separately, for example, configured as a device independent of the physical machine, or implemented in a processing system independent of the physical machine.

The operation of the detection device 201 will be described below in conjunction with FIG. 2. 2 is a flowchart of a method for virtual network link detection according to an embodiment of the present invention.

In step 21 , the network information of each virtual machine 203 is obtained. For example, the network information of the virtual machine 203 may include an IP address, a virtual local area network identifier vlanID, and corresponding switch port identifiers on the virtual machine and the virtual switch.

In the context of the system 100 being a cloud platform, the virtual machine information inside each physical machine can be obtained from the cloud platform database 30, for example. In practice, the cloud platform database 30 may include information related to all virtual machines on the physically switched network 10, such as which virtual machines are included in each physical machine, and network information of each virtual machine (such as IP Address, vlanID and its corresponding network port information, port mapping relationship between virtual machines and virtual switches, and the like).

Similar to the general physical switch, in the construction of the virtual network inside the physical machine, each virtual machine is connected to the bridge through a port on the virtual switch. In order to implement the virtual network detection method provided by the present invention, the port mapping relationship between the virtual machine and the virtual switch needs to be obtained. In some examples, this information can already be stored in a database such as the cloud platform database 30, like the network information of other virtual machines.

In some other examples, obtaining corresponding switch port identifiers on the virtual machine and the virtual switch may include two aspects. On the one hand, the network port ID of the virtual machine can be obtained from the cloud platform database, on the other hand, for example, by calling the control interface of the virtual switch to obtain all the ports connected to the virtual machine. The detection device 201 may further correspond to the network port data of the virtual machine and the port data of the virtual switch to obtain a mapping relationship between the two for use in subsequent detection. For example, for effective management, some virtual switches follow certain rules when naming ports. For example, the Openstack cloud platform names the network port of the virtual switch by using the fixed prefix and the ID interception information of the network port of the virtual machine. For example, the port IDf467189c-341f-42fc-8056-065255e14530 of the virtual machine, then the name of the OpenvSwitch virtual switch port corresponding to the virtual machine is qvo-f467189c-34. After acquiring the information in two aspects, the detection device 201 may construct a mapping relationship table for subsequent query and use.

In some examples, the detection device 201 can obtain the network information of the virtual machine by directly accessing the cloud platform database 30, especially when the detection of the virtual network is not so frequent.

In other examples, in addition to the detection device 201 implemented inside the physical machine, an additional virtual network detection platform 40 implemented outside the virtual machine may also be provided. First, the virtual network detection platform 40 can collect the network information of the virtual machine from the cloud platform database centrally and store the information in its local database. Further, the detection device 201 obtains the required information from the virtual network detection platform 40. Such an implementation will be particularly advantageous for high-frequency virtual machine detection (for example, seconds or even milliseconds), because it avoids the detection device 201 from accessing the cloud platform database to an excessively high frequency.

In order to prevent the virtual machine information from changing, the data acquisition module on the virtual network detection platform 40 may be configured to update the data in real time, such as periodically going to the cloud platform database for information synchronization. Since the frequency of changing the virtual machine network information will not be too high, the information synchronization period can be set longer. Because the amount of data in virtual machine network information is not very large, and the cycle of information synchronization is also mentioned above, it will not place an excessive burden on the network.

In step 22 , the detection device 201 will create a namespace in the physical machine where it is located. The namespace may be a concept of a virtual network subject used to isolate network-related resources on a virtual machine as understood by those skilled in the art. Each network namespace can have its own network device, IP address, IP routing table, / proc / net directory, port number, etc. A person skilled in the art can implement such a namespace with any technology known or to be developed in the future. An example of a namespace is the Linux network naming control (Network namespaces).

In Step 23, the detection means 201 may be configured such that the namespace established communication connection is established between the virtual switch. In some examples, this may include assigning switch ports to the namespace on the virtual switch in the physical machine, so that the namespace can access the bridge like other virtual machines. Specifically, you can create a network port in the namespace and connect the network port to the virtual switch.

In step 24 , the detection device 201 may further set the network information of the namespace according to the network information of a specific virtual machine 203 to be detected. In some examples, the IP address of the namespace can be set on the same network segment as the virtual machine to be detected and the namespace can be recognized by the virtual switch as having the same virtual area network identity as the virtual machine to be detected . For example, the same VLAN ID vlanID as the virtual machine to be detected can be set in the switch port allocated to the namespace.

In step 25, the detection device 201 may transmit the virtual machine detection signal to be detected from the namespace created through a virtual switch. For example, the sent detection signal may be a PING signal. PING (Packet Internet Groper: Packet Internet Groper) is a program that is often used to test the network connection. It uses the uniqueness of the IP address of the machine on the network to send a packet to the target IP address and request The other party returns a data packet of the same size to determine whether the two network machines are connected and what the delay is. Therefore, you can use the PING command to check whether the network is smooth or the network connection speed. However, those skilled in the art can understand that the present invention is not limited to the use of the PING signal, and any other mechanism that can be used to determine whether two network machines are connected can be used in the context of the present invention.

In step 26 , the detection device 201 may determine whether the link between the virtual machine and the virtual switch is normal according to the feedback of the virtual machine to be detected on the detection signal. For example, in the case of PING to communicate with the virtual machine, if it can be connected, it means that the link of the virtual switch is normal, and if PING fails, it means that the virtual link has a fault.

In practice, the detection device 201 can record information about the link, such as bridges, ports, and virtual machines, and send the detection results to the detection result processing module in the virtual network detection platform 40. Since more than one virtual machine is usually set on the physical machine, a loop strategy can also be used to detect each virtual machine to ensure that the detection range covers each link within the physical machine. For the detection of each virtual machine, it is necessary to reset the namespace, such as resetting the IP address and vlanID. The detection device 201 may feed back the detection results to the virtual network detection platform 40 after the loop detection is completed.

In some examples, the detection device 201 may be further configured to respond to the detection instruction of the virtual network detection platform 40 to perform detection on the virtual network according to steps 2 1 to 2 6 and feed back the detection result.

In some cases, after receiving the detection result from the detection device 201, the virtual network detection platform 40 may further standardize the detection result and then send the data to the network monitoring system 50, as shown in FIG. 1 . As a result, the detection of the virtual network can be effectively integrated into the entire network monitoring system, thereby providing more complete and conclusive network detection results, which will include both physical and virtual networks.

The invention proposes a fault detection scheme for a virtual network link inside a physical machine, which solves the problem that the software switch and the virtual network inside the physical machine cannot be monitored. The method and equipment provided by the present invention can effectively extend the scope of network monitoring and extend the monitoring effort from the outside of the physical machine to the inside of the physical machine, making the monitoring system more suitable for environments such as cloud networks. The method and device of the present invention can also greatly enhance the accuracy of network problem localization, thereby improving the operation and maintenance automation capability and operation and maintenance efficiency.

It should be noted that the above specific embodiments are only used to illustrate the technical solutions of the present invention rather than limit them. Although the present invention has been described in detail with reference to the above specific embodiments, those of ordinary skill in the art should understand that the specific embodiments of the present invention can be modified or some technical features can be equivalently replaced without departing from the essence of the present invention. All are covered by the claimed scope of the present invention.

10‧‧‧Physical switched network

20‧‧‧Host

30‧‧‧ Cloud platform database

40‧‧‧Virtual network detection platform

50‧‧‧Network monitoring system

100‧‧‧System

101‧‧‧leaf node

102‧‧‧ridge node

201‧‧‧Detection device

202‧‧‧Virtual Switch

203‧‧‧ virtual machine

The foregoing and other objects, features, and advantages of the present invention will be apparent from the following more detailed description of the embodiments of the present invention, which are illustrated in the accompanying drawings.

FIG. 1 is an implementation scenario of a method for virtual network link detection according to an embodiment of the present invention.

2 is a flowchart of a method for virtual network link detection according to an embodiment of the present invention.

Claims (10)

A method for virtual network link detection. The virtual network includes a virtual switch implemented in the same physical machine and one or more virtual machines communicatively connected to the virtual switch. The method includes: (a) acquisition Network information of each virtual machine in the one or more virtual machines; (b) create a namespace in the physical machine; (c) establish a communication connection between the namespace and the virtual switch; (d) Setting the network information of the namespace according to the network information of the virtual machine to be detected in the one or more virtual machines; (e) sending a detection signal from the namespace to the virtual machine to be detected through the virtual switch; and (f) Determine whether the link between the virtual machine to be detected and the virtual switch is normal according to the feedback of the virtual machine to be detected from the detection signal. The method as described in item 1 of the patent application scope, wherein step (a) includes obtaining an IP address of each virtual machine, a virtual local area network identifier, and a switch port identifier corresponding to the virtual machine on the virtual switch. The method as described in item 2 of the patent application scope, wherein step (d) includes setting the IP address of the namespace to be on the same network segment as the virtual machine to be detected and causing the namespace to be used by the virtual switch It is identified as having the same virtual local area network identifier as the virtual machine to be detected. The method according to item 3 of the patent application scope, wherein step (c) includes allocating switch ports for the namespace on the virtual switch. The method as described in item 4 of the patent application scope, wherein step (d) includes setting the same virtual local area network identifier as the virtual machine to be detected in the switch port allocated to the namespace. The method as described in item 1 of the patent application scope, wherein the detection signal is a PING signal. The method as described in item 1 of the patent application scope, which further includes performing steps (d)-(f) for each of the one or more virtual machines. The method according to item 1 of the patent application scope, wherein the virtual network constitutes a cloud platform, and step (a) includes obtaining network information of each virtual machine from a database of the cloud platform. A device for virtual network link detection, including a memory, a processor, and a computer program stored on the memory, wherein when the computer program is executed on the processor, the device is executed as claimed in the patent scope The method according to any one of items 1 to 8. A physical machine including a virtual switch and one or more virtual machines communicatively connected to the virtual switch, wherein the physical machine further includes a virtual network link detection as described in item 9 of the patent application scope s installation.