WO2014094218A1

WO2014094218A1 - Switch configuration method and cluster management device base on virtual networking

Info

Publication number: WO2014094218A1
Application number: PCT/CN2012/086810
Authority: WO
Inventors: 吴向阳; 张亚军; 段莹涛; 和江涛
Original assignee: 华为技术有限公司
Priority date: 2012-12-18
Filing date: 2012-12-18
Publication date: 2014-06-26
Also published as: CN103563304B; CN103563304A

Abstract

The present invention relates to the field of communications, and especially relates to a switch configuration method and a cluster management device base on virtual networking, wherein the method includes: A: obtaining a first correspondence between the physical port of an access switch and a server; B: obtaining a sixth correspondence between the server and a Virtual Local Area Network (VLAN); C: according to the obtained first correspondence and sixth correspondence, determining a seventh correspondence between the physical port of the access switch and the VLAN; D: according to the VLAN corresponding to each physical port indicated in the seventh correspondence, configuring admitted VLAN for the physical port of the access switch. With the embodiments of the present invention, unnecessary network traffic configured on the switch is avoided, and safety hidden trouble is avoided.

Description

Virtual network-based switch configuration method and cluster management device

The present invention relates to the field of IT technologies, and in particular, to a virtual network-based switch configuration method and a cluster management device. Background technique

In a virtual networking environment, end users have an independent network plane to implement their own virtual machines (VMs) and the need to isolate virtual applications from other users. Currently, at the virtualization layer, virtual machines are separated by virtual local area networks (vlans). Figure 1 shows a structure diagram of a data center based on virtual networking. As shown in Figure 1, one data center includes two physical machine clusters clusterl and cluster2; cluster clusterl contains two servers hostl and host2 (each of which Running multiple virtual machine VMs in one host), and cluterl uses two virtual local area networks vlan (10, 20); cluster cluster2 contains several server hosts ( hostl , hostx ), and cluster2 uses two virtual local area networks vlan ( 30, 80).

As can be seen from Figure 1, in order to enable inter-server communication in clusterl and the servers in clusterl to communicate with other devices outside the data center, and to enable inter-server communication in cluster2 and servers in cluster2 to be connected to data center equipment. Interworking, the prior art proposes a switch configuration as follows:

Because access switch SW1 needs to support Hostl and Host2 in clusterl and HostX in cluster2, you need to configure the physical port on access switch SW1 to allow vlan (10, 20, 30, 80) corresponding to clusterl and cluster2 to pass. ;

Since the access switch SW2 needs to support Host5, 6... in cluster2, it is necessary to configure the physical port on the access switch SW2 to allow the vlan (30, 80) corresponding to cluster2 to pass;

Configure the physical port of the access switch SW1 on the aggregation switch SW to allow vlan (10, 20, 30, 80) to pass.

As can be seen from the above, when the virtual LAN is configured for the physical port of the switch, in some cases, the switch is configured with additional information. For example, the server hostx only uses vlan (30), but on the access switch swl. It is configured according to the vlan (30, 80) used by cluster2, so that the access switch swl needs additional configuration to allow vlan (80) to pass, resulting in unnecessary network traffic; Introducing additional security risks

In view of this, the present invention provides a virtual network-based switch configuration method and a cluster management device, which can avoid unnecessary virtual networking configuration problems on the switch.

A first aspect of the present invention provides a virtual network-based switch configuration method, which may include:

A: obtaining a first correspondence between the physical port of the access switch and the server, where the access switch is located in the data center, the data center includes multiple physical machine clusters, and each physical machine cluster is configured correspondingly. Each of the physical machine clusters includes at least one server, and at least one virtual machine is created on each of the servers, and the virtual machines in each of the servers correspond to at least one virtual local area network;

B: obtaining a sixth correspondence between the server and the virtual local area network;

C: determining, according to the obtained first correspondence and the sixth correspondence, a seventh correspondence between the physical port of the access switch and the virtual local area network;

D: Configure, according to the virtual local area network corresponding to each physical port indicated in the seventh correspondence, a virtual local area network that allows the physical port of the access switch to pass.

With reference to the first aspect, in a first possible implementation, the first correspondence between the physical port of the access switch and the server is obtained, including:

Recording, by the access switch, the second correspondence between the physical port and the communication address on the access switch;

Querying the cluster relationship data, obtaining a third correspondence between the server and the communication address; performing association processing on the second correspondence relationship and the third correspondence relationship based on the communication address, to obtain physics on the access switch The first correspondence between the port and the server.

With reference to the first aspect, in a second possible implementation, the obtaining a sixth correspondence between the server and the virtual local area network includes:

Querying cluster relationship data, obtaining a fourth correspondence between the server and the virtual machine, and a fifth correspondence between the virtual machine and the virtual local area network;

Performing association processing on the fourth corresponding relationship and the fifth corresponding relationship that are obtained by the virtual machine to obtain a sixth correspondence between the server and the virtual local area network.

With reference to the first aspect, in a third possible implementation, the method further includes: E: record the determined seventh correspondence between the physical port of the access switch and the virtual local area network.

With reference to the first aspect to any one of the third possible implementation manners of the first aspect, in a fourth possible implementation, the method further includes:

Establishing and storing the cluster relationship data in the cluster management device, where the cluster relationship data includes at least a third correspondence between the server and a communication address, a fourth correspondence between the server and the virtual machine, and the virtual machine The fifth correspondence with the virtual local area network.

With reference to any one of the fourth possible implementation manners of the first aspect, in a fifth possible implementation manner, the method further includes:

When a server is added or decremented in the physical machine cluster, a second correspondence between the physical port and the communication address on the access switch is updated, and the stored cluster relationship data is updated.

With reference to any one of the fifth possible implementation manners of the first aspect, in a sixth possible implementation, the method further includes:

After the second correspondence or the cluster relationship data is updated, the steps A to D are performed to update the virtual local area network through which the physical port of the access switch is allowed to pass.

With reference to any one of the sixth possible implementation manners of the first aspect, in a seventh possible implementation, after the second correspondence or the cluster relationship data is updated, the step D includes: Comparing the determined seventh correspondence between the physical port of the switch and the virtual local area network and the seventh correspondence between the recorded physical port and the virtual local area network to find difference data; Add a virtual local area network that allows access to the physical port of the switch, or delete an unnecessary virtual local area network for the physical port of the switch.

A second aspect of the present invention provides a cluster management device, which may include:

a first acquiring module, configured to acquire a first correspondence between a physical port of the access switch and the server; the access switch is located in a data center, where the data center includes multiple physical machine clusters, and each physical entity The machine cluster is configured with one access switch, each physical machine cluster includes at least one server, and at least one virtual machine is created on each server, and the virtual machine in each server corresponds to at least one virtual local area network. ;

a second obtaining block, configured to acquire a sixth correspondence between the server and the virtual local area network; a determining module, configured to be configured according to the first corresponding relationship acquired by the first acquiring module and acquired by the second acquiring module a sixth correspondence, determining a physical port of the access switch and the virtual office The seventh correspondence between the domain networks;

And a configuration module, configured to configure, according to the virtual local area network corresponding to each physical port indicated in the seventh correspondence relationship determined by the determining module, a virtual local area network that is allowed to pass through for the physical port of the access switch.

With reference to the second aspect, in a first possible implementation, the first acquiring module includes: a first recording module, configured to record the access switch when communication data passes through the access switch for communication a second correspondence between the physical port and the communication address;

a first query module, configured to query cluster relationship data, and obtain a third correspondence between the server and the communication address;

The first association processing module is configured to perform association processing on the second correspondence relationship and the third correspondence relationship based on the communication address, to obtain a first correspondence relationship between the physical port on the access switch and the server.

With reference to the second aspect, in a second possible implementation, the second obtaining module includes: a second query module, configured to query cluster relationship data, obtain a fourth correspondence between the server and the virtual machine, and a fifth correspondence between the virtual machine and the virtual office i or the network;

And a second association processing module, configured to perform association processing on the fourth corresponding relationship and the fifth correspondence relationship that are obtained by the virtual machine, to obtain a sixth correspondence between the server and the virtual local area network.

With reference to the second aspect, in a third possible implementation, the cluster management device further includes: a second recording module, configured to record, by the determining module, a physical port of the access switch and the virtual local area network The seventh correspondence between the two.

With reference to any one of the second aspect to the third possible implementation manner of the second aspect, in a fourth possible implementation, the cluster management device further includes:

a creating module, configured to establish and store the cluster relationship data in the cluster management device, where the cluster relationship data includes at least a third correspondence between the server and a communication address, and a fourth correspondence between the server and the virtual machine. And a fifth correspondence between the virtual machine and the virtual local area network.

With the fourth possible implementation of the second aspect, in a fifth possible implementation, the cluster management device further includes:

An update module, configured to update a second correspondence between a physical port on the access switch and a communication address, and update the cluster management device when the server is added or removed from the physical machine cluster The first obtaining module is specifically configured to obtain an access switch obtained by using the second correspondence between the physical port and the communication address on the access switch that is updated by the update module and the cluster relationship data stored in the cluster management device. The first correspondence between the physical port and the server;

The second obtaining module acquires a sixth correspondence between the server and the virtual local area network according to the cluster relationship data stored in the cluster management device after the update module is updated.

With the fifth possible implementation of the second aspect, in a sixth possible implementation, the cluster management device further includes:

a comparison module, configured to perform a seventh correspondence between the physical port of the switch and the virtual local area network determined by the determining module, and a seventh correspondence between the physical port recorded by the second recording module and the virtual local area network Compare and find the difference data;

And an adjusting module, configured to dynamically add a virtual local area network that is allowed to pass through the physical port of the switch according to the difference data, or delete an unnecessary virtual local area network for the physical port of the switch.

A third aspect of the present invention provides a cluster management device, including: a processor, a memory, a bus, and a communication interface; the memory is configured to store a computer execution instruction, and the processor is connected to the memory through the bus When the cluster management device is running, the processor executes the computer execution instruction stored by the memory, and communicates with a device external to the cluster management device through the communication interface, so that the cluster management The apparatus performs the virtual networking based switch configuration method of any one of claims 1-8.

The fourth aspect of the present invention provides a computer readable medium, which may include a computer-executed instruction, when the processor of the computer executes the computer-executed instruction, the computer performs the virtual networking described in the embodiment of the present invention. Switch configuration method.

It can be seen that, in some possible implementation manners of the present invention, obtaining a first correspondence between a physical port of the access switch and the server; acquiring a sixth correspondence between the server and the virtual local area network; a first correspondence relationship and a sixth correspondence relationship, determining a seventh correspondence between the physical port of the access switch and the virtual local area network; and corresponding to each physical port indicated in the seventh correspondence relationship The virtual local area network is configured to allow the physical port of the access switch to pass through the virtual local area network. Therefore, the embodiment of the present invention can reduce the range of the virtual local area network allowed by the physical port on the switch, and avoid configuration on the switch. Unnecessary network traffic and reduced security risks. DRAWINGS

FIG. 1 is a schematic diagram of a networking structure of a data center based on a virtual networking;

2 is a schematic flow chart of a second embodiment of a virtual network-based switch configuration method according to the present invention;

3 is a schematic flow chart of a second embodiment of a virtual network-based switch configuration method according to the present invention;

4 is a schematic structural diagram of a first embodiment of a cluster management device according to the present invention;

FIG. 5 is a schematic structural diagram of an embodiment of the first obtaining module in FIG.

6 is a schematic structural diagram of an embodiment of a second acquisition module in FIG. 4;

7 is a schematic structural diagram of a second embodiment of a cluster management device according to the present invention;

8 is a schematic structural diagram of an embodiment of a first obtaining module in FIG. 7;

9 is a schematic structural diagram of an embodiment of a second acquisition module in FIG. 7;

FIG. 10 is a schematic structural diagram of a third embodiment of a cluster management device according to the present invention. Specific embodiment

The invention will now be described in detail by way of specific examples.

2 is a schematic flow chart of a first embodiment of a virtual network-based switch configuration method according to the present invention. As shown in FIG. 2, it may include:

Step S110: Obtain a first correspondence between a physical port of the access switch and the server. Specifically, in conjunction with FIG. 1, the embodiment of the present invention is applied to a data center, where the data center includes multiple physical machine clusters, each The physical machine cluster includes at least one server host and one access switch, and each of the servers creates at least one virtual machine VM, and the virtual machines in each server correspond to at least one virtual local area network Vlan, The virtual machine in each server communicates through the at least one access switch, where the access switch includes multiple physical ports, and each physical port corresponds to one server;

In a specific implementation, the obtaining the first correspondence between the physical port of the access switch and the server may be in two ways:

For example, if each physical machine cluster is configured with one access switch configured by the administrator through the maintenance platform, the first physical port between the access switch and the server is obtained through the maintenance platform. Correspondence relationship

Second, if an access switch corresponding to each physical machine cluster is automatically configured during communication, the access switch records the access switch when the packet communicates through its own port. a second correspondence between the physical port and the communication address, and reporting the second correspondence to the cluster management device,

In a specific implementation, the access switch may use a Layer 2 (Media Access Control (MAC)) address or a Layer 3 address (IP address) for "3⁄4 text exchange. Therefore, the communication address in step S110 may be MAC. Address and/or IP address. In the virtual network, the access switch can learn and store the second correspondence between the physical port of the access switch and the communication address when performing packet exchange with the server. The MAC address is used as an example. The correspondence between the physical port and the communication address can be recorded as: port-MAC. Referring to FIG. 1 and taking the switch SW1 (subsequent access switch for short) as an example, each of SW1 can be obtained in step S110. Correspondence between physical port and MAC).

In addition, when the data center is created, cluster relationship data can be established in the cluster management device of the data center. The cluster relationship data includes a correspondence between a physical machine cluster, a server, a virtual machine, and a virtual local area network. For example, what are the servers included in the physical machine cluster, which virtual machines are included in the server, which virtual local networks are used by the virtual machine, and which communication addresses are used by the server for communication, etc.; the correspondences included in the cluster relationship data may include: the server and the communication address The third correspondence, the fourth correspondence between the server and the virtual machine, and the fifth correspondence between the virtual machine and the virtual local area network, and the like.

Therefore, in the step S110, the third correspondence between the server and the communication address can be obtained by querying the cluster data. Taking the MAC address as an example, the third correspondence between the server and the communication address can be recorded as: server-MAC, combined with FIG. Taking the server hostx as an example, the correspondence relationship of the hostx-MAC can be obtained in step S110.

Thus, in step S110, based on the second correspondence between the MAC and the "port-MAC" and the third correspondence of "hostx-MAC", the first "port-hostx" is obtained. Correspondence relationship.

In some feasible implementation manners, the cluster relationship data may change, for example, adding a server or reducing a server. At this time, the switch and the cluster management device dynamically update the physical port and the communication address according to the change of the cluster. Two correspondences, and dynamically updated cluster relationship data. Then, the second correspondence between the updated physical port and the communication address may be obtained in step S110, or the first correspondence between the dynamically updated physical port and the server. Step S1: obtaining a sixth correspondence between the server and the virtual local area network; specifically, querying the cluster relationship data, obtaining a fourth correspondence between the server and the virtual machine, and between the virtual machine and the virtual local area network a fifth correspondence relationship, and a fourth correspondence between the queried server and the virtual machine and a fifth correspondence between the virtual machine and the virtual local area network, and obtaining a relationship between the server and the virtual local area network Six correspondence.

In a specific implementation, when the cluster relationship data is established in the cluster management device when the cluster is created, or when the cluster networking changes, the cluster relationship data updated in the cluster management device can be queried to the fourth between the server and the virtual machine. Corresponding relationship (in conjunction with FIG. 1, the correspondence between hostx and the virtual machine can be queried in step S111, which can be recorded as: hostx-virtual machine) and the fifth correspondence between the virtual machine and the virtual local area network (in combination with FIG. 1 , Step S111 can query the correspondence between the virtual machine and the virtual local area network Vlan (30), which can be recorded as: virtual machine-Vlan (30).

Thus, in step S111, based on the fourth correspondence between the virtual machine pair "hostx-virtual machine" and the fifth correspondence relationship of the "virtual machine-Vlan(30)", "hostx-Vlan" is obtained. 30)" The sixth correspondence.

Step S112, determining, according to the first correspondence between the physical port of the access switch and the server, and the sixth correspondence between the server and the virtual local area network, determining a physical port between the access switch and the virtual local area network. The seventh correspondence.

Correlating a first correspondence between the physical port of the switch and the server and a sixth correspondence between the server and the virtual local area network, and obtaining a seventh between the physical port and the virtual local area network Correspondence relationship.

Still in conjunction with the previous example of the figure, in step S112, based on the server hostx's first correspondence of "port-hostx" and the sixth correspondence of "hostx-Vlan (30),", the "port-" is obtained. The seventh correspondence of Vlan ( 30 )".

Step S113: Configure a virtual local area network that is allowed to pass through for the physical port of the access switch according to the virtual local area network corresponding to each physical port indicated in the seventh correspondence.

Still referring to the previous example of the figure, in step S113, the physical port of the switch can be configured to allow the virtual local area network to pass according to the seventh correspondence of "port-Vlan (30)". Therefore, after the method of the embodiment of the present invention is used, the granularity of the virtual machine configured on the switch SW1 is reduced from the physical machine cluster to the server granularity, that is, only the vlan (30) required by the server hostx can be configured, and the other is not required to be configured. Vlan (80) that is not needed, thereby reducing the physical side of the switch compared to the prior art The range of virtual LANs allowed by the port avoids unnecessary network traffic and reduces security risks on the switch.

FIG. 3 is a schematic flow chart of a second embodiment of a virtual network-based switch configuration method according to the present invention. As shown in FIG. 3, it may include:

Step S210: Dynamically update a second correspondence between the physical port on the access switch and the communication address when the server is added or decreased in the cluster, and update the stored cluster relationship data.

Specifically, with reference to FIG. 1, the embodiment of the present invention is applied to a data center, where the data center includes a plurality of physical machine clusters, each physical machine cluster includes at least one server host, and at least one is created on each of the servers. Each of the virtual machine VMs corresponds to at least one virtual local area network vlan, and each of the physical machine clusters is configured with an access switch SW, and the virtual machines in each of the servers are connected through the at least one Incoming to the switch for communication, the access switch includes multiple physical ports, and each physical port corresponds to one server;

When the data center is created, cluster relationship data can be established in the cluster management device of the data center. The cluster relationship data includes a correspondence between a physical machine cluster, a server, a virtual machine, and a virtual local area network. For example, what are the servers included in the physical machine cluster, which virtual machines are included in the server, which virtual local networks are used by the virtual machine, and which communication addresses are used by the server for communication, etc.; the correspondences included in the cluster relationship data may include: the server and the communication address The third correspondence, the fourth correspondence between the server and the virtual machine, and the fifth correspondence between the virtual machine and the virtual local area network, and the like.

If an access switch configured for each physical machine cluster is automatically configured during communication, the access switch records the physical port on the access switch when the packet communicates through its own port. A second correspondence between the communication addresses, and the second correspondence may be reported to the cluster management device. In a specific implementation, the access switch may use a Layer 2 (Media Access Control (MAC)) address or a Layer 3 address (IP address) for exchange of texts. Therefore, the communication address of the present invention may be a MAC address and / or IP address. In the virtual networking, the access switch can learn and store the second correspondence between the physical port of the access switch and the communication address when the packet exchanges with the server (using the MAC address as an example, The correspondence between the physical port and the communication address is recorded as: port-MAC. Referring to FIG. 1, with the switch SW1 (subsequent access switch referred to as the switch) as an example, the correspondence between the physical port and the MAC can be recorded on the SW1 in step S210. ).

After that, the cluster relationship data may change, for example, adding a server or reducing the server. At this time, in the step S210, the switch and the cluster management device will dynamically change according to the change of the cluster. The second correspondence between the new physical port and the communication address, and the dynamically updated cluster relationship data. Step S211: Obtain a first correspondence between the physical port of the access switch and the server. In some feasible implementation manners, the first between the physical port and the communication address on the access switch may be obtained by querying the switch or the cluster management device. The correspondence between the physical port and the communication address is as follows: port-MAC, in combination with FIG. 1, and switch SW1 (subsequent access switch referred to as switch), for example, in step S211. Obtain the correspondence between each physical port and MAC recorded on SW1). And, the third correspondence between the server and the communication address can be obtained by querying the cluster data. Taking the MAC address as an example, the third correspondence between the server and the communication address can be recorded as: server-MAC, combined with FIG. 1, with server hostx For example, the correspondence relationship of the hostx-MAC can be obtained in step S211. Moreover, based on the second correspondence between the MAC and the "port-MAC" and the third correspondence of "hostx-MAC", the first correspondence of "port-hostx" is obtained.

Step S212: Acquire a sixth correspondence between the server and the virtual local area network.

Specifically, the fourth correspondence between the server and the virtual machine stored in the cluster relationship data, and the fifth correspondence between the virtual machine and the virtual local area network, and the fourth between the queried server and the virtual machine may be queried. Corresponding relationship and a fifth correspondence between the virtual machine and the virtual local area network are processed to obtain a sixth correspondence between the server and the virtual local area network.

In a specific implementation, based on the updated cluster relationship data, the fourth correspondence between the server and the virtual machine may be queried (in combination with FIG. 1 , the correspondence between the hostx and the virtual machine may be queried in step S212, and the record may be: hostx-virtual And a fifth correspondence between the virtual machine and the virtual local area network (in conjunction with FIG. 1 , the correspondence between the virtual machine and the virtual local area network Vlan ( 30 ) can be queried in step S212, and can be recorded as: virtual machine-Vlan (30) )).

Thus, in step S212, based on the fourth correspondence between the virtual machine pair "hostx-virtual machine" and the fifth correspondence relationship of the "virtual machine-Vlan(30)", "hostx-Vlan" is obtained. 30)" The sixth correspondence.

Step S213, determining, according to the first correspondence between the physical port of the access switch and the server, and the sixth correspondence between the server and the virtual local area network, determining a physical port between the access switch and the virtual local area network. The seventh correspondence.

Correlating the first correspondence between the physical port of the switch and the server and the sixth correspondence between the server and the virtual local area network to obtain the physical port a seventh correspondence relationship with the virtual local area network.

Still in conjunction with the previous example of the figure, in step S213, based on the server hostx's first correspondence of "port-hostx" and the sixth correspondence of "hostx-Vlan (30),", the "port" is obtained. The seventh correspondence of Vlan (30)".

Step S214: Compare the seventh correspondence between the physical port and the virtual local area network with the seventh correspondence between the recorded physical port and the virtual local area network, and find the difference data.

Step S215: Dynamically add a virtual local area network that is allowed to pass through the physical port of the switch according to the difference data, or delete an unnecessary virtual local area network for a physical port of the switch.

In some feasible implementation manners, there may be multiple configurations of the switch based on the virtual networking. For example, the switch needs to be configured at time A, and the server is added or decreased in the cluster in the data center at time B. At time B, the cluster relationship data stored in the cluster management device needs to be dynamically updated, and the seventh correspondence between the updated physical port of the access switch and the virtual local area network needs to be re-acquired by the method of the embodiment of the present invention. . However, before the time B, the cluster relationship data of the time A may be saved in the cluster relationship device, and the embodiment of the present invention may only partially update the configuration of the switch according to the changed cluster relationship data. Therefore, the switch does not need to be completely reconfigured. Therefore, the seventh correspondence between the physical port and the virtual local area network and the seventh correspondence between the last recorded physical port and the virtual local area network are performed in step S214. Compare and find the difference data. Then, in step S215, a virtual local area network allowed to pass through the physical port of the switch may be dynamically added according to the difference data, or an unnecessary virtual local area network may be deleted for the physical port of the switch.

Still referring to FIG. 1 and the previous example, after the server hostx exits the cluster cluster2, after the processing of steps S210-S213, the seventh correspondence between the physical port of the switch and the virtual local area network may be: The corresponding relationship between the physical port of host2 and the virtual LAN is: "Port-Vlan (10, 20)". The corresponding relationship between the physical port of host1 and the virtual LAN on switch SW1 is: "Port-Vlan (10, 20)". Prior to this, the switch still stores the corresponding relationship of hostl, which is: The corresponding relationship between the physical port corresponding to host2 on the switch SW1 and the virtual local area network is: "port-Vlan (10, 20)", on the switch SW1 Correspondence between the physical port of the hostx and the virtual LAN is: "Port-Vlan(30)". The corresponding relationship between the physical port of host1 and the virtual LAN on switch SW1 is: "Port-Vlan (10, 20)", then , in step S213, the determined "port-Vlan (10, 20)" and the stored "port-Vlan (10, 20)" and "Port - Vlan ( 30 )" is compared to get the difference data of "Port - Vlan ( 30 )".

After the processing of S214, the physical port of the switch SW1 no longer needs the virtual local area network Vlan (30). Therefore, in step S215, the physical port of the switch SW1 deletes the unnecessary virtual local area network Vlan (30).

It can be seen that, in some embodiments of the present invention, when the physical port of the switch is configured, the virtual local area network may be added or deleted in combination with the historical data, instead of all being configured according to the re-acquired seventh correspondence relationship. It avoids redundant configuration operations and further saves resources.

Embodiments of the present invention accordingly provide a related embodiment of a cluster management device that can be used to implement the virtual network-based switch configuration method of the present invention. The cluster management device of the present invention will be described below by way of an embodiment.

FIG. 4 is a schematic structural diagram of a first embodiment of a cluster management device according to the present invention. As shown in FIG. 4, the cluster management device of the present invention may include: a first obtaining module 41, a second obtaining module 42, a determining module 43, and a configuration module 44, wherein:

The first obtaining module 41 is configured to acquire a first correspondence between a physical port of the access switch and the server;

Specifically, with reference to FIG. 1, the embodiment of the present invention is applied to a data center, where the data center includes a plurality of physical machine clusters, each physical machine cluster includes at least one server host, and at least one is created on each of the servers. Each of the virtual machine VMs corresponds to at least one virtual local area network vlan, and each of the physical machine clusters is configured with an access switch SW, and the virtual machines in each of the servers are connected through the at least one The ingress switch communicates, and the access switch includes multiple physical ports, and each physical port corresponds to one server.

The first corresponding relationship between the physical port of the access switch and the server is obtained by the maintenance platform, if each physical machine cluster is configured with one access switch configured by a person through the maintenance platform;

Second, if an access switch corresponding to each physical machine cluster is automatically configured during communication, the access switch records the access switch when the packet communicates through its own port. a second correspondence between the physical port and the communication address, and reporting the second correspondence to the cluster management device, so that the cluster management device can access the communication data through the access When the switch performs communication, the second correspondence between the physical port on the access switch and the communication address is recorded. In addition, when the data center is created, cluster relationship data can be established in the cluster management device of the data center. The cluster relationship data includes a correspondence between a physical machine cluster, a server, a virtual machine, and a virtual local area network. For example, what are the servers included in the physical machine cluster, which virtual machines are included in the server, which virtual local networks are used by the virtual machine, and which communication addresses are used by the server for communication, etc.; the correspondences included in the cluster relationship data may include: the server and the communication address The third correspondence, the fourth correspondence between the server and the virtual machine, and the fifth correspondence between the virtual machine and the virtual local area network, and the like. At this time, the cluster management device of the embodiment of the present invention may further include a creation module (not shown) for establishing and storing the cluster relationship data in the cluster management device.

Further, referring to FIG. 5, in some possible implementations, the first obtaining module 41 may include: a first recording module 411, a first query module 412, and a first association processing module 413, where:

The first recording module 411 is configured to record a second correspondence between the physical port on the access switch and the communication address when communication data is communicated through the access switch.

In a specific implementation, the access switch may use a Layer 2 (Media Access Control (MAC)) address or a Layer 3 address (IP address) for message exchange. Therefore, the communication address recorded in the first recording module 411 is used. Can be a MAC address and / or an IP address. In the virtual networking, the access switch can learn and store the second correspondence between the physical port of the access switch and the communication address when the packet exchanges with the server (using the MAC address as an example, The correspondence between the physical port and the communication address is recorded as: port-MAC. Referring to FIG. 1, the switch SW1 (the subsequent access switch is referred to as the switch) is taken as an example. In step S110, the correspondence between the physical ports and the MAC on the SW1 can be obtained. And sending the stored second correspondence to the cluster management device for recording.

The first query module 412 is configured to query the cluster relationship data to obtain a third correspondence between the server and the communication address.

Taking the MAC address as an example, the third correspondence between the server and the communication address can be recorded as: server-MAC, in combination with FIG. 1, taking the server hostx as an example, the first query module 412 can obtain the hostx-MAC by querying the cluster relationship data. Correspondence).

The first association processing module 413 is configured to perform a correlation process on the second correspondence between the physical port and the communication address on the access switch and the third correspondence between the server and the communication address based on the communication address, to obtain the connection. The first correspondence between the physical port on the switch and the server.

Taking the MAC address as an example, based on the second correspondence between the MAC address and the "port-MAC", The third correspondence of "hostx-MAC" is processed by join, and the first correspondence of "port-hostx" is obtained.

In some feasible implementation manners, the cluster relationship data may change, for example, adding a server or reducing a server. At this time, the switch and the cluster management device dynamically update the physical port and the communication address according to the change of the cluster. Two correspondences, and dynamically updated cluster relationship data. In this case, the cluster management device of the embodiment of the present invention may further include: an update module (not shown), configured to dynamically update cluster relationship data stored in the cluster management device when a server is added or decreased in the cluster, and according to The updated cluster relationship data acquires a seventh correspondence between the updated physical port of the access switch and the virtual local area network.

The second obtaining block 42 is configured to obtain a sixth correspondence between the server and the virtual local area network. Specifically, the fourth correspondence between the server and the virtual machine may be obtained by querying the cluster relationship data, and the The fifth correspondence between the virtual machine and the virtual local area network, and the fourth correspondence between the queried server and the virtual machine and the fifth correspondence between the virtual machine and the virtual local area network are processed to obtain the server and a sixth correspondence between the virtual local area networks.

Further, referring to FIG. 6, in some feasible implementation manners, the second obtaining module 42 may include: a second query module 421 and a second association module 422, where:

The second query module 421 is configured to query the cluster relationship data, obtain a fourth correspondence between the server and the virtual machine, and a fifth correspondence between the virtual machine and the virtual local area network;

The second association processing module 422 is configured to perform association processing on the fourth correspondence between the server and the virtual machine that is queried, and the fifth correspondence between the virtual machine and the virtual local area network, to obtain the server and the virtual local area network. The sixth correspondence between the two.

In a specific implementation, when the cluster relationship data is established in the cluster management device when the cluster is created, or when the cluster networking changes, the cluster relationship data updated in the cluster management device can be queried to the fourth between the server and the virtual machine. Corresponding relationship (in conjunction with FIG. 1, the second query module 421 can query the correspondence between the hostx and the virtual machine, which can be recorded as: hostx-virtual machine) and the fifth correspondence between the virtual machine and the virtual local area network (in combination with FIG. 1) The second query module 421 can query the correspondence between the virtual machine and the virtual local area network Vlan (30), and can be recorded as: virtual machine-Vlan (30).

Therefore, the second association module 422 can perform association processing with the fifth correspondence relationship of the virtual machine-Vlan (30) based on the fourth correspondence relationship of the virtual machine to the "hostx-virtual machine", and obtain the "hostx-" The sixth correspondence of Vlan ( 30 )". The determining module 43 is configured to: according to the first correspondence between the physical port of the access switch acquired by the first obtaining module 41 and the server, and the sixth between the server and the virtual local area network acquired by the second obtaining module 42 Corresponding relationship, determining a seventh correspondence between the physical port of the access switch and the virtual local area network;

Still in conjunction with the previous example of the figure, the determining module 43 performs association processing based on the first correspondence between the port xhost and the sixth correspondence of "hostx-Vlan (30)" by the server hostx, and then obtains "port-Vlan ( 30)" The seventh correspondence.

In a specific implementation, the cluster management device of the embodiment of the present invention may record, by using a second recording module (not shown), a seventh correspondence between the physical port of the access switch determined by the determining module 43 and the virtual local area network. Relationship, in order to subsequently use the seventh correspondence of the record.

The configuration module 44 is configured to configure, according to the virtual local area network corresponding to each physical port indicated in the seventh correspondence relationship determined by the determining module 43 , a virtual local area network that is allowed to pass through for the physical port of the access switch.

Still in conjunction with the previous example of the figure, the configuration module 44 can configure the virtual local area network that the switch is allowed to pass through according to the seventh correspondence of "port - Vlan (30)". Therefore, after the method of the embodiment of the present invention is used, the granularity of the virtual machine configured on the switch SW1 is reduced from the physical machine cluster to the server granularity, that is, only the vlan (30) required by the server hostx can be configured, and the other is not required to be configured. The vlan (80) that is not needed is used, thereby reducing the range of the virtual local area network that the physical port on the switch is allowed to pass, and avoiding unnecessary network traffic and reducing security risks on the switch.

FIG. 7 is a schematic structural diagram of a second embodiment of a cluster management device according to the present invention. As shown in FIG. 7, the cluster management device of the present invention may include: a creation module 51, an update module 52, a first acquisition module 53, a second acquisition module 54, a determination module 55, a second recording module 56, a comparison module 57, and an adjustment. Module 58, wherein:

a creating module 51, configured to establish and store cluster relationship data in the cluster management device, where the cluster relationship data includes at least a third correspondence between the server and a communication address, and a fourth correspondence between the server and the virtual machine. And a fifth correspondence between the virtual machine and the virtual local area network.

In a specific implementation, specifically, in conjunction with FIG. 1, the embodiment of the present invention is applied to a data center, where the data center includes a plurality of physical machine clusters, each physical machine cluster includes at least one server host, and each server Creating at least one virtual machine VM, each of the servers corresponding to at least one virtual a local area network vlan, where each physical machine cluster cluster is configured with one access switch SW, and the virtual machines in each server communicate through the at least one access switch, where the access switch includes multiple physical Port, each physical port corresponds to one server. Then, when the data center is created, cluster relationship data can be established in the cluster management device of the data center. The cluster relationship data includes a correspondence between a physical machine cluster, a server, a virtual machine, and a virtual local area network. For example, what are the servers included in the physical machine cluster, which virtual machines are included in the server, which virtual local networks are used by the virtual machine, and which communication addresses are used by the server for communication, etc.; the correspondences included in the cluster relationship data may include: the server and the communication address The third correspondence, the fourth correspondence between the server and the virtual machine, and the fifth correspondence between the virtual machine and the virtual local area network, and the like.

If an access switch configured for each physical machine cluster is automatically configured during communication, the access switch records the physical port on the access switch when the packet communicates through its own port. A second correspondence between the communication addresses, and the second correspondence may be reported to the cluster management device. In a specific implementation, the access switch may use a Layer 2 (Media Access Control (MAC)) address or a Layer 3 address (IP address) for exchange of texts. Therefore, the communication address of the present invention may be a MAC address and / or IP address. In the virtual networking, the access switch can learn and store the second correspondence between the physical port of the access switch and the communication address when the packet exchanges with the server (using the MAC address as an example, The correspondence between the physical port and the MAC address is recorded as follows: Port-MAC, in combination with Figure 1, with switch SW1 (subsequent access switch referred to as switch) as an example, the corresponding relationship between each physical port and MAC can be recorded on SW1.

Thereafter, the cluster relationship data may change, for example, adding a server or reducing the server. At this time, the update module 52 is configured to dynamically update the physical port and the communication address on the access switch when the server is added or decreased in the cluster. a second correspondence between the two, and updating the cluster relationship data stored in the cluster management device;

The first obtaining module 53 is configured to obtain a first correspondence between the physical port of the access switch and the server;

In a specific implementation, the first acquiring module 53 is specifically configured to: according to the second correspondence between the physical port and the communication address on the access switch that is updated by the update module 52, and the cluster relationship data stored in the cluster management device. The first correspondence between the physical port of the access switch and the server.

Further, referring to FIG. 8, in some possible implementation manners, the first obtaining module 53 may include: a first recording module 531, a first query module 532, and a first association processing module 533, wherein: the first recording module 531 is configured to record, on the access switch, when communication data passes through the access switch for communication The second correspondence between the physical port and the communication address.

In a specific implementation, the access switch may use a Layer 2 (Media Access Control (MAO) address or a Layer 3 address (IP address) for message exchange. Therefore, the communication address recorded in the first recording module 531 may be The MAC address and/or the IP address. When the virtual networking changes, the access switch can learn and store the second between the physical port of the access switch and the communication address when performing packet exchange with the server. Correspondence relationship (taking the MAC address as an example, the correspondence between the physical port and the communication address can be recorded as: port-MAC, in combination with FIG. 1, with the switch SW1 (subsequent access switch referred to as the switch) as an example, the access switch can obtain The corresponding relationship between each physical port and the MAC on the SW1, and the stored second correspondence is sent to the cluster management device for recording.

The first query module 532 is configured to query cluster relationship data, and obtain a third correspondence between the server and the communication address.

Taking the MAC address as an example, the third correspondence between the server and the communication address can be recorded as: server-MAC. Referring to FIG. 1, taking the server hostx as an example, the first query module 532 can obtain the hostx-MAC by querying the cluster relationship data. Correspondence).

The first association processing module 533 is configured to perform a correlation process on the second correspondence between the physical port and the communication address on the access switch and the third correspondence between the server and the communication address based on the communication address, to obtain the connection. The first correspondence between the physical port on the switch and the server.

Taking the MAC address as an example, based on the second correspondence between the MAC address and the "port-MAC" and the third correspondence of "hostx-MAC", the first "port-hostx" can be obtained. Correspondence relationship.

The second acquisition module 54 is configured to obtain a sixth correspondence between the server and the virtual local area network. In a specific implementation, the second obtaining module 54 is specifically updated according to the update module 52. The stored cluster relationship data acquires a sixth correspondence between the server and the virtual local area network.

Further, referring to FIG. 9, in some possible implementation manners, the second obtaining module 54 may include: a second query module 541 and a second association module 542, where:

The second query module 541 is configured to query the cluster relationship data, obtain a fourth correspondence between the server and the virtual machine, and a fifth correspondence between the virtual machine and the virtual local area network; The second association processing module 542 is configured to perform association processing on the fourth correspondence between the server and the virtual machine that is queried, and the fifth correspondence between the virtual machine and the virtual local area network, to obtain the server and the virtual local area network. The sixth correspondence between the two.

In a specific implementation, when the cluster relationship data is established in the cluster management device when the cluster is created, or when the cluster networking changes, the cluster relationship data updated in the cluster management device can be queried to the fourth between the server and the virtual machine. Corresponding relationship (in conjunction with FIG. 1, the second query module 541 can query the correspondence between the hostx and the virtual machine, which can be recorded as: hostx-virtual machine) and the fifth correspondence between the virtual machine and the virtual local area network (in combination with FIG. 1) The second query module 541 can query the correspondence between the virtual machine and the virtual local area network Vlan (30), and can be recorded as: virtual machine-Vlan (30).

Therefore, the second association module 542 can perform association processing with the fifth correspondence relationship of the virtual machine-Vlan (30) based on the fourth correspondence relationship of the virtual machine to the "hostx-virtual machine", and obtain "hostx-" The sixth correspondence of Vlan ( 30 )".

a determining module 55, configured to: according to the first correspondence between the physical port of the access switch acquired by the first obtaining module 53 and the server, and the sixth between the server and the virtual local area network acquired by the second obtaining module 54 Corresponding relationship, determining a seventh correspondence between the physical port of the access switch and the virtual local area network;

Still in conjunction with the previous example of the figure, the determination module 55 performs association processing based on the first correspondence of the server hostx to "port-hostx" and the sixth correspondence of "hostx-Vlan (30)", thereby obtaining "port-Vlan ( 30)" The seventh correspondence.

The second recording module 56 is configured to record a seventh correspondence between the physical port of the access switch and the virtual local area network, so as to use the seventh corresponding relationship of the record.

In some feasible implementation manners, there may be multiple configurations of the switch based on the virtual networking. For example, the switch needs to be configured at time A, and the server is added or decreased in the cluster in the data center at time B. At time B, the cluster relationship data stored in the cluster management device needs to be dynamically updated, and the seventh correspondence between the updated physical port of the access switch and the virtual local area network needs to be re-acquired by the method of the embodiment of the present invention. . However, before the time B, the cluster relationship data of the time A may be saved in the cluster relationship device, and the embodiment of the present invention may only partially update the configuration of the switch according to the changed cluster relationship data. The cluster management device of the embodiment of the present invention further includes: a comparison module 57, configured to use the physical port and the virtual office of the switch determined by the determining module The seventh correspondence between the domain networks is compared with the seventh correspondence between the physical port recorded by the second recording module and the virtual local area network, and the difference data is found;

The adjusting module 58 is configured to dynamically add a virtual local area network that is allowed to pass through the physical port of the switch according to the difference data, or delete an unnecessary virtual local area network for the physical port of the switch.

Still referring to FIG. 1 and the previous example, after the server hostx exits the cluster cluster 2, the seventh correspondence between the physical port of the switch determined by the determining module 55 and the virtual local area network may be: physical port corresponding to the host 2 on the switch SW1 The corresponding relationship of the virtual local area network is: "Port - Vlan

( 10, 20 )" , the corresponding relationship between the physical port corresponding to hostl and the virtual local area network on switch SW1 is:

"Port - Vlan (10, 20)". Prior to this, the correspondence between the physical port and the virtual LAN corresponding to host2 on the switch SW1 is as follows:

"Port-Vlan (10, 20)", the corresponding relationship between the physical port of the switch and the virtual LAN on the switch SW1 is: "port-Vlan (30)", the correspondence between the physical port of hostl and the virtual local area network on the switch SW1 To: "Port-Vlan (10, 20)", then, compare module 58 will determine the "port-Vlan (10, 20)" and the stored "port-Vlan (10, 20)" and "port-Vlan" ( 30 )" For comparison, you can get the difference data of "Port - Vlan ( 30 )".

After the cluster changes, the physical port of switch SW1 no longer needs virtual LAN Vlan

(30), therefore, the adjustment module 58 can delete the unneeded virtual local area network VLAN (30) for the physical port of the switch SW1.

FIG. 10 is a schematic structural diagram of a third embodiment of a cluster management device according to the present invention. As shown in FIG. 10, in a specific implementation, the cluster management device of the embodiment of the present invention may also be configured by a physical module such as a processor 101, a memory 102, a bus 103, and a communication interface 104, where the memory 102 is configured to store a computer execution instruction. The processor 101 is connected to the memory 102 via the bus, and when the cluster management device is running, the processor 101 executes the computer execution instruction stored by the memory 102, and passes through the communication interface 104. Communicating with the device outside the cluster management device, so that the cluster management device performs the virtual network-based switch configuration method described in the embodiments of the present invention.

In a specific implementation, the present invention further provides a computer storage medium, wherein the computer storage medium The program may be stored with a program, and some or all of the steps in the embodiments of the virtual network-based switch configuration method provided by the present invention may be included in the execution of the program. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM). The spirit and scope of the Ming. Thus, it is intended that the present invention cover the modifications and the modifications of the invention

Claims

Rights request

1. A switch configuration method based on virtual networking, which is characterized by including:

A: Obtain the first correspondence between the physical port of the access switch and the server. The access switch is located in the data center. The data center includes multiple physical machine clusters. Each physical machine cluster is configured with a corresponding configuration. The access switch is provided, each physical machine cluster includes at least one server, at least one virtual machine is created on each server, and the virtual machine in each server corresponds to at least one virtual local area network;

B: Obtain the sixth correspondence between the server and the virtual local area network;

C: Determine the seventh correspondence between the physical port of the access switch and the virtual local area network according to the obtained first correspondence and the sixth correspondence;

D: Configure a virtual LAN that is allowed to pass for the physical port of the access switch according to the virtual LAN corresponding to each physical port indicated in the seventh correspondence relationship.

2. The switch configuration method based on virtual networking as claimed in claim 1, characterized in that obtaining the first correspondence between the physical port of the access switch and the server includes:

When communication data is communicated through the access switch, record the second correspondence between the physical port and the communication address on the access switch;

Query the cluster relationship data to obtain the third correspondence between the server and the communication address; perform correlation processing on the second correspondence and the third correspondence based on the communication address to obtain the physical data on the access switch. The first correspondence between the port and the server.

3. The switch configuration method based on virtual networking according to claim 1, wherein the obtaining the sixth correspondence between the server and the virtual local area network includes:

Query cluster relationship data to obtain the fourth correspondence between the server and the virtual machine, and the fifth correspondence between the virtual machine and the virtual LAN;

The virtual machine performs correlation processing on the queried fourth correspondence relationship and the fifth correspondence relationship to obtain a sixth correspondence relationship between the server and the virtual local area network.

4. The switch configuration method based on virtual networking according to claim 1, characterized in that: The above methods also include:

E: Record the determined seventh correspondence between the physical port of the access switch and the virtual LAN.

5. The switch configuration method based on virtual networking according to any one of claims 1 to 4, characterized in that the method further includes:

The cluster relationship data is established and stored in the cluster management device. The cluster relationship data includes at least a third correspondence between the server and the communication address, a fourth correspondence between the server and the virtual machine, and the virtual machine. Fifth correspondence with virtual LAN.

6. The switch configuration method based on virtual networking as claimed in claim 5, characterized in that the method further includes:

When a server is added or removed from the physical machine cluster, the second correspondence relationship between the physical port and the communication address on the access switch is updated, and the stored cluster relationship data is updated.

7. The switch configuration method based on virtual networking as claimed in claim 6, characterized in that the method further includes:

After the second corresponding relationship or the cluster relationship data is updated, return to steps A to D to update the virtual local area network that the physical port of the access switch allows to pass through.

8. The switch configuration method based on virtual networking according to claim 7, characterized in that, after the second corresponding relationship or the cluster relationship data is updated, the step D includes:

Compare the determined seventh correspondence between the physical port of the switch and the virtual LAN with the recorded seventh correspondence between the physical port and the virtual LAN, and find out the difference data; dynamically according to the difference data Add a virtual local area network that is allowed to pass through to the physical port of the switch, or delete unnecessary virtual local area networks from the physical port of the switch.

9. A cluster management device, characterized by including:

The first acquisition module is used to obtain the first correspondence between the physical port of the access switch and the server; the access switch is located in a data center, and the data center includes multiple physical machine clusters, Each physical machine cluster is configured with one access switch, each physical machine cluster includes at least one server, at least one virtual machine is created on each server, and the virtual machine in each server Corresponds to at least one virtual LAN;

The second acquisition module is used to acquire the sixth correspondence relationship between the server and the virtual local area network; the determination module is used to obtain the first correspondence relationship according to the first acquisition module and the second acquisition module. The sixth correspondence relationship is to determine the seventh correspondence relationship between the physical port of the access switch and the virtual local area network;

A configuration module configured to configure a virtual LAN that is allowed to pass for the physical port of the access switch according to the virtual LAN corresponding to each physical port indicated in the seventh correspondence relationship determined by the determination module.

10. The cluster management device according to claim 9, wherein the first acquisition module includes:

The first recording module is used to record the second correspondence between the physical port on the access switch and the communication address when communication data is communicated through the access switch;

The first query module is used to query cluster relationship data and obtain the third corresponding relationship between the server and the communication address;

A first association processing module, configured to perform association processing on the second correspondence relationship and the third correspondence relationship based on the communication address, to obtain the first correspondence relationship between the physical port on the access switch and the server.

11. The cluster management device according to claim 9, wherein the second acquisition module includes:

The second query module is used to query cluster relationship data to obtain the fourth correspondence between the server and the virtual machine, and the fifth correspondence between the virtual machine and the virtual office or network;

The second correlation processing module is configured to perform correlation processing on the queried fourth correspondence relationship and the fifth correspondence relationship based on the virtual machine, and obtain the sixth correspondence relationship between the server and the virtual local area network.

12. The cluster management device according to claim 9, further comprising: The second recording module is configured to record the seventh correspondence between the physical port of the access switch and the virtual local area network determined by the determination module.

13. The cluster management device according to any one of claims 9 to 12, further comprising: a creation module, configured to establish and store the cluster relationship data in the cluster management device, the cluster relationship data This includes at least a third correspondence between the server and the communication address, a fourth correspondence between the server and the virtual machine, and a fifth correspondence between the virtual machine and the virtual local area network.

14. The cluster management device according to claim 13, further comprising:

An update module, configured to update the second correspondence between the physical port and the communication address on the access switch when a server is added or removed from the physical machine cluster, and update the cluster relationship stored in the cluster management device. data;

Then the first acquisition module obtains the access switch specifically based on the second correspondence between the physical port and the communication address on the access switch updated by the update module and the cluster relationship data stored in the cluster management device. The first correspondence between the physical port and the server;

The second acquisition module specifically acquires the sixth corresponding relationship between the server and the virtual local area network based on the cluster relationship data stored in the cluster management device after the update module.

15. The cluster management device according to claim 14, further comprising:

A comparison module, configured to compare the seventh correspondence between the physical port of the switch and the virtual LAN determined by the determination module and the seventh correspondence between the physical port and the virtual LAN recorded by the second recording module. Compare and find out the difference data;

The adjustment module is configured to dynamically add a virtual local area network that is allowed to pass through the physical port of the switch according to the difference data, or delete unnecessary virtual local area networks from the physical port of the switch.

16. A cluster management device, characterized in that it includes a processor, a memory, a bus and a communication interface; the memory is used to store computer execution instructions, the processor and the memory are connected through the bus, when the When the cluster management device is running, the processor executes the computer execution instructions stored in the memory, and communicates with a device external to the cluster management device through the communication interface, so that the cluster management device executes the instructions as specified. Based on virtual groups as described in any one of requirements 1-8 Network switch configuration method.

17. A computer-readable medium, characterized in that it includes computer execution instructions, so that when the computer processor executes the computer execution instructions, the computer executes the virtualization-based method as described in any one of claims 1-8. Network switch configuration method.