WO2018001339A1

WO2018001339A1 - Method and apparatus for forwarding packet in virtual extensible local area network (vxlan)

Info

Publication number: WO2018001339A1
Application number: PCT/CN2017/090953
Authority: WO
Inventors: 王朋; 陈志伟
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-06-30
Filing date: 2017-06-29
Publication date: 2018-01-04
Also published as: CN107566262A

Abstract

Provided are a method and apparatus for forwarding a packet in a virtual extensible local area network (VXLAN). The method comprises: a first virtual tunnel end point (VTEP) receiving a first packet from a first virtual machine (VM), wherein a destination VM media access control (MAC) address of the first packet is a MAC address of a second VM; the first VTEP determining a second VTEP according to a correlation, recorded in the first VTEP, between the MAC address of the second VM and the second VTEP connected to the second VM, wherein the correlation between the MAC address of the second VM and the second VTEP is notified by the second VTEP to the first VTEP; and the first VTEP forwarding the first packet to the second VM via the second VTEP. By means of the embodiments of the present invention, the problem existing in the related art that a network bandwidth is occupied such that the performance of a device is affected when a packet is forwarded between VTEPs is solved.

Description

Message forwarding method and device in virtual scalable local area network VXLAN

Technical field

The present invention relates to the field of communications, and in particular to a packet forwarding method and apparatus in a virtual scalable local area network (VXLAN).

Background technique

In a data center cloud computing multi-tenant environment, each user is assigned a different virtual machine and resources, and different tenants need to be logically isolated. Traditionally, a virtual local area network (VLAN) is used for isolation. However, the isolation capability of a 12-bit VLAN ID can only reach 4096. In an environment of an increasingly large-scale data center, VLAN isolation has been adopted. Can not meet the demand. At the same time, when the data center is used for migration and backup, the Internet Protocol (IP) subnetting method also limits Layer 2 connectivity.

The Virtual eXtensible Local Area Network (VXLAN) technology is mainly used to solve the above problems. The original packet is encapsulated in a User Data Protocol (UDP) packet. The Layer 2 Ethernet frame encapsulated by the VXLAN can span the Layer 3 network boundary to make the networking and application deployment more flexible. . VXLAN uses a 24-bit virtual scalable LAN identifier (VXLAN Network Identifier, VNID for short) to identify different logical networks, greatly expanding the number of logical networks.

1 is a schematic diagram of a format of a VXLAN packet in the related art, where O-SIP and O-DIP respectively represent a source IP and a destination IP of an outer IP header, and I-DMAC and I-SMAC respectively represent an inner header of an Ethernet packet. Destination MAC and source MAC.

FIG. 2 is a schematic diagram of networking of a VXLAN network in the related art. Assume that the virtual machine VM A (Virtual Machine) under the VTEP1 (Virtual Tunnel End Point) needs to communicate with the VM C under VTEP2, and is generally multicast. By specifying The VNID is mapped to a multicast group. The VTEPs of the same VNIDs in the network are added to the same multicast group. The multicast and learning mechanisms are used to implement MAC address learning and packet forwarding. The following steps are included:

1. VM A sends an I-SMAC message with A and I-DMAC as C. VTEP1 first learns the address of A (that is, records the MAC address of VM A), and then searches for the address of C on VTEP1. The original data packet plus the VXLAN header is encapsulated and sent to all other VTEPs that join the multicast group in a multicast manner;

2. The other VTEPs in the network receive the VXLAN packet encapsulated by the VTEP1, learn the address A of the I-SMAC in the packet, and then find the address C of the I-DMAC. If the VTEP does not find the packet, the packet is decapsulated. And then flooding the locally accessed VM;

3. VM C receives the VTEP2 flooding message. The data packet sent by the VMA to the I-SMAC is A, and the I-DMAC is C.

At this time, the problem arises. If VM C does not send a message that is reversed to VM A, VTEP2 and VTEP1 will not know the address of VM C, and the data message sent by VM A to VM C will always be multicast. The form is encapsulated, and other VTEPs and other VMs receive messages that they do not have to receive. In this case, they occupy network bandwidth and affect device performance. In response to such a situation, the following solutions are proposed in the related art: adding a proxy server to the network, so that all unknown unicast packets are forwarded by the proxy server, thereby reducing multicast in the network, but this method requires additional addition. High-performance proxy server devices, and will also increase the complexity of networking deployment.

An effective solution has not been proposed in the related art for the problem that the network bandwidth affects the performance of the device that occurs when the message is forwarded between the VTEPs in the related art.

Summary of the invention

The embodiment of the invention provides a method and a device for forwarding a message in a virtual scalable local area network (VXLAN), so as to solve at least the problem that the network bandwidth affects the performance of the device that occurs when the message is forwarded between the VTEPs in the related art.

According to an embodiment of the present invention, a packet forwarding method in a virtual scalable local area network VXLAN is provided, including: a first virtual tunnel terminal VTEP receives a first packet from a first virtual machine VM, where the first The destination VM media access control MAC address is the MAC address of the second VM; the first VTEP is based on the MAC address of the second VM recorded in the first VTEP and connected to the second VM Corresponding relationship of the second VTEP determines the second VTEP, wherein the correspondence between the MAC address of the second VM and the second VTEP is that the second VTEP is notified to the first VTEP; A VTEP forwards the first message to the second VM through the second VTEP.

Optionally, before the first VTEP receives the first packet from the first VM, the method further includes: the first VTEP receiving a second packet, where the second packet The destination VM MAC address is the MAC address of the second VM; the first VTEP determines that the correspondence between the MAC address of the second VM and the second VTEP is not recorded in the first VTEP In the case, the second packet is encapsulated into a multicast VXLAN packet; the first VTEP sends the multicast VXLAN packet to another VTEP that belongs to the same multicast group as the first VTEP; The first VTEP receives and records the correspondence between the MAC address of the second VM and the second VTEP that the VTEP connected to the second VM in the other VTEP responds to according to the multicast VXLAN message.

Optionally, after the first VTEP sends the multicast VXLAN message to the other VTEP that belongs to the same multicast group as the first VTEP, the method further includes: the first VTEP If the correspondence between the MAC address of the second VM and the second VTEP is not received, discarding the second packet; or the first VTEP is not receiving the second VM And the second packet is encapsulated into a multicast VXLAN packet, and the re-encapsulated multicast VXLAN packet is sent to the first VTEP, where the mapping between the MAC address and the second VTEP is performed. Other VTEPs of the same multicast group.

Optionally, the first VTEP receives and records the MAC address of the second VM and the second VTEP that are connected to the second VM in the other VTEP according to the multicast VXLAN message. Before the mapping of the VTEP, the method further includes: the first VTEP receiving the third packet, where the destination VM MAC address of the third packet is the second VM a MAC address; buffering the third message; and the first VTEP receiving and recording, in the other VTEP, the VTEP connected to the second VM according to the multicast VXLAN message After the correspondence between the MAC address of the second VM and the second VTEP, the method further includes: the first VTEP, according to the correspondence between the MAC address of the second VM and the second VTEP, the cached The third message is forwarded to the second VM by the second VTEP.

Optionally, the first VTEP receives and records the MAC address of the second VM and the second VTEP that are connected to the second VM in the other VTEP according to the multicast VXLAN message. After the correspondence between the VTEPs, the method further includes: the first VTEP does not receive the first predetermined time after the correspondence between the MAC address of the second VM and the second VTEP is recorded. Deleting the recorded correspondence between the MAC address of the second VM and the second VTEP in the case where the correspondence relationship of the VTEP of the second VM connection is answered again; and/or the first VTEP is recording Receiving the MAC address and location of the second VM that is replied to by the VTEP connected to the second VM within the first predetermined time after the correspondence between the MAC address of the second VM and the second VTEP In the case of the correspondence relationship of the second VTEP, the correspondence between the recorded MAC address of the second VM and the second VTEP is maintained.

Optionally, the method further includes: the first VTEP receiving a MAC address of the one or more VMs advertised by one or more VMs connected to the first VTEP; the first VTEP record a MAC address of one or more VMs of the first VTEP connection; wherein, when the first VTEP is in a second predetermined time after recording a MAC address of one or more VMs connected to the first VTEP Deleting the MAC address of the first portion VM of the record if the MAC address of the first portion VM re-advertised by the first portion VM of the one or more VMs connected to the first VTEP is received; and/or And receiving, in the second predetermined time after the first VTEP is connected to the MAC address of the one or more VMs connected to the first VTEP, in one or more VMs connected to the first VTEP In the case where the second part VM re-advertises the MAC address of the second part VM, the MAC address of the second part VM of the record is maintained.

According to another embodiment of the present invention, a method for forwarding a message in a virtual scalable local area network (VXLAN) is provided, comprising: a second virtual tunnel terminal VTEP receiving a multicast VXLAN message from a first VTEP, wherein the group The broadcast VXLAN packet is obtained by encapsulating the second packet from the first virtual machine VM by the first VTEP, and the source VM media access control MAC address of the second packet is the first VM a MAC address, a destination VM MAC address of the second packet is a MAC address of the second VM; the second VTEP searches for a second VM in the VM connected to the second VTEP; the second The VTEP decapsulates the multicast VXLAN packet and sends the obtained second packet to the second VM, and the second VM, when the second VM is found. Corresponding relationship between the MAC address and the second VTEP is replied to the first VTEP.

Optionally, after the second VTEP receives the multicast VXLAN message from the first VTEP, the method further includes: the second VTEP records the MAC address of the first VM and the first VTEP Correspondence relationship.

Optionally, after the second VTEP records the correspondence between the MAC address of the first VM and the first VTEP, the method further includes: the second VTEP is recording the first VM In the case where the message from the first VTEP and the source VM MAC address is the first VM is not received within the first predetermined time after the correspondence between the MAC address and the first VTEP, the record is deleted. Corresponding relationship between the MAC address of the first VM and the first VTEP; and/or the second VTEP after recording the correspondence between the MAC address of the first VM and the first VTEP Maintaining the recorded MAC address of the first VM and the first VTEP in a case where a message from the first VTEP and the source VM MAC address is the first VM is received within a predetermined time Correspondence relationship.

Optionally, the method further includes: the second VTEP receiving a MAC address of the one or more VMs advertised by one or more VMs connected to the second VTEP; the second VTEP record a MAC address of one or more VMs connected to the second VTEP; wherein, when the second VTEP is in a second predetermined time after recording a MAC address of one or more VMs connected to the second VTEP Receiving a MAC address of the first partial VM that is advertised again by the first one of the one or more VMs connected to the second VTEP a case where the MAC address of the first portion VM of the record is deleted; and/or a second reservation after the second VTEP records the MAC address of the one or more VMs connected to the second VTEP Maintaining the MAC of the second part VM of the record if the MAC address of the second part VM re-advertised by the second part VM of the one or more VMs connected to the second VTEP is received in time address.

According to another embodiment of the present invention, there is also provided a message forwarding device in a virtual scalable local area network (VXLAN), the device being applied to the first virtual tunnel terminal VTEP, comprising: a first receiving module, configured to receive from the first a first packet of the virtual machine VM, wherein the destination VM media access control MAC address of the first packet is a MAC address of the second VM; and the determining module is configured to be according to the record in the first VTEP Determining, by the correspondence between the MAC address of the second VM and the second VTEP connected to the second VM, the second VTEP, wherein the correspondence between the MAC address of the second VM and the second VTEP is The second VTEP is notified to the first VTEP; the forwarding module is configured to forward the first packet to the second VM through the second VTEP.

According to another embodiment of the present invention, there is also provided a message forwarding device in a virtual scalable local area network (VXLAN), the device being applied to the second virtual tunnel terminal VTEP, comprising: a second receiving module, configured to receive from the first a VTEP multicast XLAN packet, wherein the multicast VXLAN packet is encapsulated by the first VTEP for the second packet from the first virtual machine VM, and the source of the second packet is The VM media access control MAC address is the MAC address of the first VM, the destination VM MAC address of the second packet is the MAC address of the second VM, and the lookup module is configured to look up the connection with the second VTEP. Whether the second VM exists in the VM; the sending module is configured to: when the second VM is found, decapsulate the multicast VXLAN packet and send the obtained second packet to And the second VM, and the corresponding relationship between the MAC address of the second VM and the second VTEP is replied to the first VTEP.

According to still another embodiment of the present invention, a storage medium is also provided. The storage medium is arranged to store program code for performing the various steps described above.

According to still another embodiment of the present invention, there is also provided a processor for running a program, wherein the program is executed to perform the method of any of the above.

According to the embodiment of the present invention, since the MAC address of the other VM and the VTEP of the VM are pre-recorded in the first VTEP, the MAC address of the other VM recorded in the first VTEP and the VM may be used. The VTEPs are forwarded to forward packets. The packets are sent in the multicast mode. This prevents the packets from being forwarded to other non-related VTEPs. When the network bandwidth affects the performance of the device, the problem of avoiding excessive network bandwidth and improving device performance is achieved.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a schematic diagram of a format of a VXLAN message in the related art;

2 is a schematic diagram of networking of a VXLAN network in the related art;

3 is a flowchart (1) of a packet forwarding method in a VXLAN according to an embodiment of the present invention;

4 is a flowchart (2) of a packet forwarding method in a VXLAN according to an embodiment of the present invention;

FIG. 5 is a flowchart of packet forwarding in a VXLAN network according to an embodiment of the present invention; FIG.

6 is a schematic structural diagram of a message in a VXLAN according to an embodiment of the present invention;

7 is a flow chart of packet forwarding in a VXLAN according to a specific embodiment of the present invention;

8 is a flow chart of packet forwarding in a VXLAN according to a second embodiment of the present invention;

9 is a flow chart of packet forwarding in a VXLAN according to a third embodiment of the present invention;

10 is a structural block diagram (1) of a message forwarding device in a VXLAN according to an embodiment of the present invention;

11 is a structural block diagram of a message forwarding device in a VXLAN according to an embodiment of the present invention. (two);

FIG. 12 is a schematic structural diagram of a message forwarding apparatus in a VXLAN according to an embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

In this embodiment, a packet forwarding method in a virtual scalable local area network VXLAN is provided. FIG. 3 is a flowchart (1) of a packet forwarding method in a VXLAN according to an embodiment of the present invention, as shown in FIG. Including the following steps:

Step S302, the first virtual tunnel terminal VTEP receives the first packet from the first virtual machine VM, where the destination VM media access control MAC address of the first packet is the MAC address of the second VM;

Step S304, the first VTEP determines a second VTEP according to a correspondence between a MAC address of the second VM recorded in the first VTEP and a second VTEP connected to the second VM, where the MAC address of the second VM and the second The correspondence relationship of the VTEP is notified to the first VTEP by the second VTEP;

Step S306, the first VTEP forwards the first packet to the second VM by using the second VTEP.

The first VM is connected to the first VTEP, and the source VM MAC address of the first packet is the MAC address of the first VM. In the above embodiment, after the first VM sends a message (for example, the first message described above) to the first VTEP, the MAC address of the first VM is recorded (also referred to as learning) in the first VTEP. The correspondence between the MAC address of the second VM and the second VTEP may be that the second VTEP is to be sent from the first VTEP (which may be sent by the first VM connected to the first VTEP, or may be the first VTEP connection). After the message sent by the VM and sent to the second VM is forwarded to the second VM, it is advertised to the first VTEP.

Through the above steps, since the correspondence between the MAC address of the other VM and the VTEP connected to the VM can be pre-recorded in the first VTEP, the MAC address of the other VM recorded in the first VTEP and the MAC address can be connected to the VM. The VTEP unicasts the packets, so that the packets are not sent in the multicast mode, and the packets are sent to other non-related VTEPs. This effectively solves the problem of forwarding packets between VTEPs. There is a problem that the network bandwidth affects the performance of the device, and the effect of avoiding excessive network bandwidth and improving device performance is achieved.

It can be seen from the above embodiment that the correspondence between the MAC address of the second VM and the second VTEP can be recorded in the first VTEP. The following describes how to record the correspondence between the MAC address of the second VM and the second VTEP: Before the first VTEP receives the first packet from the first VM, the method further includes: the first VTEP receiving the second packet, where the destination VM MAC address of the second packet is the MAC address of the second VM The first VTEP encapsulates the second packet into a multicast VXLAN packet when the first VTEP does not record the correspondence between the MAC address of the second VM and the second VTEP; the first VTEP group The broadcast VXLAN message is sent to other VTEPs belonging to the same multicast group as the first VTEP; the first VTEP receives and records the MAC address of the second VM that the VTEP connected to the second VM in the other VTEP responds to according to the multicast VXLAN message. Correspondence with the second VTEP. In this embodiment, after the first VTEP sends the multicast VXLAN message to other VTEPs that belong to the same multicast group as the first VTEP, the other VTEPs in the same multicast group can record the MAC of the first VM. Corresponding relationship between the address and the first VTEP, wherein the second VTEP connected to the second VM, after finding that the second VM is connected to itself, decapsulates the multicast VXLAN message and obtains the second obtained after decapsulation The message is sent to the second VM, and the second VTEP notifies the first VTEP of the correspondence between the MAC address of the second VM and the second VTEP. The remaining VTEP (that is, the VTEP other than the first VTEP in the other VTEPs of the same multicast group) does not find the second VM in the VM connected to it, and discards the received multicast VXLAN packet. And, if the remaining VTEP has not been received after a period of time In the case of a packet from the first VTEP and the source VM MAC address is the MAC address of the first VM, the remaining VTEP aging deletes the correspondence between the recorded MAC address of the first VM and the first VTEP. The O-DIP of the outer IP header of the multicast VXLAN packet is the multicast IP address corresponding to the VNID (that is, the IP address of the multicast group), and the O-SIP is the IP of the source VTEP (that is, the first VTEP). address.

In an optional embodiment, after the first VTEP sends the multicast VXLAN message to another VTEP that belongs to the same multicast group as the first VTEP, the method further includes: the first VTEP is not received. If the correspondence between the MAC address of the second VM and the second VTEP is performed, the second packet is discarded; or the first VTEP does not receive the correspondence between the MAC address of the second VM and the second VTEP. The second packet is encapsulated into a multicast VXLAN packet, and the re-encapsulated multicast VXLAN packet is sent to other VTEPs that belong to the same multicast group as the first VTEP. In this embodiment, when the first VTEP does not receive (may not be received within a predetermined time) to the correspondence between the MAC address of the second VM and the second VTEP, it indicates that the other VTEP may not be connected to the second VM. To avoid resource occupation, the second packet can be discarded. In this embodiment, when the first VTEP does not receive (may not be received within a predetermined time) to the correspondence between the MAC address of the second VM and the second VTEP, in addition to performing the discard operation described above, The second packet can be re-encapsulated and the encapsulated multicast VXLAN packet is sent again. It should be noted that the pre-condition for performing the re-encapsulation of the second packet may also be that the first VTEP is not received (may be in one The correspondence between the MAC address of the second VM and the second VTEP is not received within a predetermined time, and the first VTEP continues to receive the message to be sent to the second VM.

In an optional embodiment, the first VTEP receives and records the correspondence between the MAC address of the second VM and the second VTEP that the VTEP connected to the second VM in the other VTEP responds to according to the multicast VXLAN message. The foregoing method further includes: the first VTEP receives the third packet, where the destination VM MAC address of the third packet is the MAC address of the second VM; the third packet is buffered; and the first VTEP is receiving And after the mapping between the MAC address of the second VM and the second VTEP that the VTEP connected to the second VM in the other VTEP is configured according to the multicast VXLAN message, the method further includes: the first VTEP according to the second Corresponding relationship between the MAC address of the VM and the second VTEP forwards the buffered third packet to the second VM through the second VTEP. In this embodiment, the message to be sent to the second VM that is waiting to be acquired within the waiting time of the correspondence between the MAC address of the second VM and the second VTEP connected to the second VM may be temporarily obtained. After being cached, after obtaining the correspondence between the MAC address of the second VM and the second VTEP connected to the second VM, the unicast packet is temporarily unicast, thereby reducing the number of times the multicast packet is sent. Reduce the occupation of network bandwidth.

In an optional embodiment, the first VTEP receives and records the correspondence between the MAC address of the second VM and the second VTEP that the VTEP connected to the second VM in the other VTEP responds to according to the multicast VXLAN message. Thereafter, the method further includes: the first VTEP does not receive the correspondence of the VTEP re-answer with the second VM connection within the first predetermined time after the correspondence between the MAC address of the second VM and the second VTEP is recorded. In the case of deleting the recorded correspondence between the MAC address of the second VM and the second VTEP; and/or, the first predetermined time after the first VTEP records the correspondence between the MAC address of the second VM and the second VTEP In the case where the correspondence between the MAC address of the second VM and the second VTEP that the VTEP that is connected to the second VM is again received is received, the correspondence between the recorded MAC address of the second VM and the second VTEP is maintained. In this embodiment, the corresponding relationship recorded in the first VTEP has a certain aging time. When the corresponding relationship is not received again after the aging time is reached, in order to avoid unnecessary space occupation, the corresponding relationship needs to be deleted. (After the deletion, if the above correspondence is received again, the recording can be performed again), and when the corresponding relationship is received again before the aging time arrives, the aging time of the correspondence can be re-timed according to the time of re-reception.

In an optional embodiment, the method further includes: the first VTEP receiving a MAC address of one or more VMs advertised by the one or more VMs connected to the first VTEP; the first VTEP record being connected to the first VTEP a MAC address of one or more VMs; wherein, when the first VTEP does not receive a connection with the first VTEP within a second predetermined time after recording the MAC address of the one or more VMs connected to the first VTEP Delete the record if the MAC of the first part of the VM is advertised again by the first part of the VMs The MAC address of the first portion of the VM; and/or, when the first VTEP receives the first VTEP connection or the second predetermined time after recording the MAC address of the one or more VMs connected to the first VTEP In the case where the second part VM of the plurality of VMs advertises the MAC address of the second part VM again, the MAC address of the second part VM of the record is maintained. In this embodiment, each VM needs to report its own MAC address when accessing the corresponding VTEP, and each VM needs to periodically advertise its own state (that is, report its own MAC address) to the corresponding VTEP. The corresponding VTEP maintains the MAC address information of the locally active VM. After the aging time is reached, if the status information of the VM is not updated, the recorded MAC information of the VM whose status information is not updated is deleted.

In this embodiment, a packet forwarding method in a virtual scalable local area network (VXLAN) is provided. FIG. 4 is a flowchart (2) of a packet forwarding method in a VXLAN according to an embodiment of the present invention. The process includes the following steps:

Step S402, the second virtual tunnel terminal VTEP receives the multicast VXLAN packet from the first VTEP, where the multicast VXLAN packet is encapsulated by the first VTEP to encapsulate the second packet from the first virtual machine VM. The source VM media access control MAC address of the second packet is the MAC address of the first VM, and the destination VM MAC address of the second packet is the MAC address of the second VM.

Step S404, the second VTEP searches for a second VM in the VM connected to the second VTEP;

Step S406, the second VTEP decapsulates the multicast VXLAN message and sends the obtained second packet to the second VM, and sends the MAC address of the second VM to the second VM. The correspondence of the second VTEP is replied to the first VTEP.

Through the above steps, when determining that the second VM is connected to the second VTEP, the second VTEP may respond to the first VTEP by the correspondence between the MAC address of the second VM and the second VTEP, so that the first VTEP is unicast according to the recorded correspondence. The packets are forwarded, so that the packets are not sent in the multicast mode. This prevents the packets from being sent to other non-related VTEPs. This effectively solves the problem that network bandwidth can occur when packets are forwarded between VTEPs. Equipment The performance problem has achieved the effect of avoiding excessive network bandwidth consumption and improving device performance.

In an optional embodiment, after the receiving, by the second VTEP, the multicast VXLAN packet from the first VTEP, the method further includes: the second VTEP records the correspondence between the MAC address of the first VM and the first VTEP. Therefore, after receiving the packet to be sent to the first VM, the second VTEP can perform unicast transmission on the packet according to the corresponding relationship recorded in the second VTEP, without multicast transmission. Optionally, when receiving the unicast VXLAN packet, the second VTEP can learn the I-SMAC of the packet, and look up the I-DMAC in the local MAC address information table, decapsulate the VXLAN packet, and send the corresponding packet to the corresponding packet. Local VM. The unicast VXLAN packet is a unicast IP address of the O-SIP and the O-DIP of the VXLAN packet, and corresponds to the IP of a certain VTEP (for example, the second VTEP) in the networking. When the first VM sends a packet whose I-DMAC is known, the first VTEP searches for the IP address of the VTEP corresponding to the I-DMAC in the first VTEP, and encapsulates the data packet into a unicast VXLAN packet and sends the packet to the destination VTEP. (ie, the second VTEP).

In an optional embodiment, after the foregoing second VTEP records the correspondence between the MAC address of the first VM and the first VTEP, the method further includes: the second VTEP records the MAC address of the first VM and the first In the case where the message from the first VTEP and the source VM MAC address is the first VM is not received within the first predetermined time after the correspondence of the VTEP, the MAC address of the recorded first VM and the first VTEP are deleted. Corresponding relationship; and/or, the second VTEP receives the source VM MAC address from the first VTEP and the first VM within a first predetermined time after recording the correspondence between the MAC address of the first VM and the first VTEP In the case of the message, the correspondence between the MAC address of the first VM and the first VTEP is maintained. In this embodiment, the corresponding relationship recorded in the second VTEP is a certain aging time. When the corresponding relationship recorded in the second VTEP is not received again after the aging time is reached, in order to avoid unnecessary space occupation, it is required. The corresponding relationship is deleted (after the deletion, if the corresponding relationship is received again, the recording can be performed again), and when the corresponding relationship is received again before the aging time arrives, the corresponding relationship can be re-timed according to the time of receiving again. Aging time.

In an optional embodiment, the method further includes: receiving, by the second VTEP, the second The MAC address of one or more VMs advertised by one or more VMs connected by the VTEP; the second VTEP records the MAC address of one or more VMs connected to the second VTEP; wherein, when the second VTEP is recorded In the case where the MAC address of the first partial VM re-advertised by the first partial VM of the one or more VMs connected to the second VTEP is not received within the second predetermined time after the MAC address of the one or more VMs of the two VTEP connections Deleting the MAC address of the first portion of the VM of the record; and/or, when the second VTEP receives the second VTEP connection within a second predetermined time after recording the MAC address of the one or more VMs connected to the second VTEP In the case where the second part of the one or more VMs advertises the MAC address of the second part VM again, the MAC address of the second part VM of the above record is maintained. In this embodiment, each VM needs to report its own MAC address when accessing the corresponding VTEP, and each VM needs to periodically advertise its own state (that is, report its own MAC address) to the corresponding VTEP. The corresponding VTEP maintains the MAC address information of the locally active VM. After the aging time is reached, if the status information of the VM is not updated, the recorded MAC information of the VM whose status information is not updated is deleted.

The present invention will be specifically described below with reference to FIG. 2:

5 is a flow chart of message forwarding according to an embodiment of the present invention. FIG. 6 is a first embodiment of the present invention, in which VM A (corresponding to the first VM described above) sends a message to VM C (corresponding to the second VM) The flow chart of the main message. With reference to FIG. 5 and FIG. 6, the specific implementation steps of the present invention mainly include:

Step S502: When there is a VM (for example, VM A) access on the local access side, the VM periodically advertises its own state to the VTEP (for example, VTEP1), and the VTEP learns and maintains the MAC address information of the locally active VM. After the aging time is reached, if the status information of the VM is not updated, the MAC information corresponding to the VM is deleted.

Preferably, the link layer discovery protocol (LLDP) can be used when the VM advertises and keeps its own state to the VTEP. Of course, the method of notification and keep-alive is not limited to this method, for example, it can also be advertised by means of a proprietary agreement.

Preferably, the MAC address information table of the local VM can be saved in the format shown in Table 1. Take the MAC saved on VTEP1 as an example:

Table 1

MACMAC	VNIDVNID	INTERFACEINTERFACE
MAC AMAC A	1600016000	Gei-1Gei-1
MAC BMAC B	1600016000	Gei-2Gei-2

Step S504: When the local VM sends an I-DMAC unknown data packet, the source VTEP (for example, VTEP1) encapsulates the data packet into a multicast VXLAN packet and sends it to other VTEPs in the same multicast group; The I-DMAC message is temporarily buffered, and is sent after waiting for the VTEP information corresponding to the I-DMAC.

The multicast VXLAN packet is that the destination IP field O-DIP of the outer IP header of the VXLAN packet is the multicast IP address corresponding to the VNID, and the source IP field O-SIP is the IP address of the VTEP.

Preferably, on the basis of step S504, if the packet sent by the local VM is a multicast or broadcast packet, the packet is not buffered and processed, and is directly encapsulated into a multicast VXLAN packet and then sent to other VTEPs.

As shown in FIG. 6, the form of the multicast message encapsulated by the VM A and encapsulated by the VTEP1 is shown in the message 2 of FIG. 6, wherein the O-SIP is the IP-1 of the VTEP1. The O-DIP is the multicast IP address IP-M of the multicast group mapped by the VNID to which the VMA belongs.

Step S506: When the VTEP (for example, VTEP2) receives the multicast VXLAN message, learn the I-SMAC; and look up the I-DMAC in the local MAC address information table, and if found, the I-DMAC and the VTEP ( For example, the correspondence of VTEP2) is replied to the source VTEP (eg, VTEP1) with the address O-SIP; and the message is decapsulated and then sent to the local VM (eg, VM C) corresponding to the I-DMAC.

Preferably, the correspondence between the I-DMAC and the VTEP (for example, VTEP2) is sent to the source VTEP (for example, VTEP1) with the address O-SIP, and the VXLAN packet is sent to the source by encapsulating a reverse unicast null data. The form of VTEP is implemented.

The reverse unicast null data VXLAN message is that the PAYLOAD segment of the inner layer message is set to an invalid value, and the I-SMAC and I-DMAC of the inner layer data message are respectively set to the received multicast VXLAN message. The I-DMAC and I-SMAC of the inner data packet, the O-SIP of the outer IP header is set to the IP of the VTEP, and the O-DIP of the outer IP header is set to the IP header of the received multicast VXLAN packet. O-SIP.

As shown in FIG. 6, the reverse unicast null data message sent by VTEP2 to VTEP1 is shown in message 4 in FIG. 6, where O-SIP is set to IP-2 of VTEP2, and O-DIP is set to IP- 1, that is, the value of the O-SIP field of the received multicast VXLAN message; I-DMAC is set to A, and I-SMAC is set to C, corresponding to the I-SMAC field of the received multicast VXLAN message and The value of the I-DMAC field; the PAYLOAD' field is set to an invalid value. This type of response does not require additional protocol support, and the source VTEP does not require special handling of response messages. Of course, the manner of responding to the source VTEP is not limited to this manner.

Step S508: When the VTEP (for example, VTEP2) receives the unicast VXLAN message, learn the I-SMAC, and look up the I-DMAC in the local MAC address information table, and then decapsulate the VXLAN message to the I-DMAC. Corresponding local VM (for example, VM C).

Preferably, the MAC address information table of the remote VM can be saved in the format shown in Table 2, taking the remote MAC saved on VTEP2 as an example:

Table 2

MACMAC	VNIDVNID	VTEP IPVTEP IP
MAC AMAC A	1600016000	IP1IP1

Preferably, on the basis of step S504, the I-DMAC unknown message sent by the VM (for example, VM A) is sent to the I-DMAC packet after being sent out by the VTEP (for example, VTEP1) encapsulation. If the response is not received within the predetermined time, the other VTEPs do not have the VM corresponding to the I-DMAC and discard the packets.

Preferably, on the basis of the foregoing step S504, if the VTEP (for example, VTEP1) continues to receive the packet sent by the local VM to the I-DMAC, in addition to performing the discarding operation, the multicast packet is re-encapsulated and sent after a certain time. , request the VTEP information corresponding to the I-DMAC again.

Preferably, on the basis of step S506, after the VTEP (for example, VTEP1) learns the I-SMAC information corresponding to the remote VM (for example, VM C), after a period of time, if the I-SMAC is not received again. If the packet is received, the I-SMAC can be deleted.

Step S510: When the data message I-DMAC sent by the VM (for example, VMA) is known, look up the IP of the destination VTEP corresponding to the I-DMAC on the VTEP (for example, VTEP1), and encapsulate the data packet into a unicast. The VXLAN message is sent to the destination VTEP (for example, VTEP2).

Preferably, when the I-DMAC of the data message sent by the VM (eg, VM A) is known and is the address of another VM (eg, VM B) under the VTEP (eg, VTEP1), the message does not need to go through The encapsulation is directly forwarded to the destination VM according to the interface information corresponding to the saved I-DMAC.

In summary, by the method in the embodiment of the present invention, flooding can be reduced in the present VTEP (for example, VTEP1), and multicast can be reduced between VTEPs.

The present invention will be described below in conjunction with specific embodiments:

Embodiment 1

Referring to FIG. 2, each VTEP establishes a link as shown in FIG. 2, and each VTEP accesses the VM as shown in FIG. 2. All VTEPs belong to the same multicast group, and all VMs belong to the same VNID16000. Assuming that the VM A is to communicate with the VM C, the packet forwarding step of the VXLAN according to the present invention is as shown in FIG. 7 , and specifically includes:

Step S702: The VMs under each VTEP actively advertise their own status to the VTEP, and each VTEP learns and maintains the MAC address information corresponding to the local VM.

Step S704: The VM A sends the packet destined for the MAC C, and searches for the record of the MAC C on the VTEP1. If the packet is not found, the packet is encapsulated into a multicast VXLAN packet and sent to other VTEPs.

Step S706: VTEP2 receives the multicast VXLAN packet, learns the source MAC address of the inner layer packet, searches for the destination MAC C of the inner layer packet, and finds and encapsulates a reverse unicast null data VXLAN message to VTEP1. At the same time, the received packet is decapsulated and sent to VM C. VTEP3 and VTEP4 receive the multicast VXLAN packet, learn the source MAC address of the inner layer packet, and find the destination MAC C of the inner layer packet. Continue processing.

Step S708: The VTEP1 receives the unicast VXLAN packet sent by the VTEP2, learns the source MAC address of the inner layer packet, searches for the destination MAC A of the inner layer packet, searches for the packet, and decapsulates the packet to the VMA.

Step S710: The VM A continues to send the data packet destined for the MAC C, and searches for the record of the MAC C on the VTEP1. The packet can be encapsulated into a unicast VXLAN packet and sent to the VTEP2.

Step S712: VTEP2 receives the unicast VXLAN packet, and learns the source MAC address of the inner layer packet. If the saved MAC A information has not been aged, it does not need to be saved repeatedly. The destination MAC C of the inner layer packet is searched. , the packet is decapsulated and sent to VM C.

Step S714: The VM C sends a data packet destined for the MAC A, and searches for the record of the MAC A on the VTEP2. The packet can be encapsulated into a unicast VXLAN packet and sent to the VTEP1.

Step S716: After a period of time, the VTEP3 and the VTEP4 do not receive the data packet of the MAC A, which is sent by the VTEP1, and deletes the record of the MAC A.

Through the above steps, the interworking between VM A and VM C is completed. After the network status is stabilized, the remote MAC C is saved on VTEP1, and the remote MAC A is saved on VTEP2, and VTEP3 and VTEP4 are not added. MAC, all VTEPs do not store useless MAC information. During the forwarding process, VTEP1 uses multicast only when it is first sent, and then uses unicast to reduce multicast. When VTEP2 sends a packet to the local VM, it directly finds the local MAC information table to get the outgoing interface, and then sends the interface. For the corresponding VM, there is no flooding.

Specific embodiment 2:

In the networking environment shown in the specific embodiment 1, it is assumed that the VM A is to communicate with the VM B. The flow of the packet forwarding process of the VXLAN according to the embodiment of the present invention is as shown in FIG.

Step S802: The VMs in each VTEP actively advertise their own status to the VTEP, and each VTEP learns and maintains the MAC address information corresponding to the local VM.

Step S804: VM A sends a data packet destined for MAC B, and searches for the record of MAC B on VTEP1, which can be found and is locally, and the packet is directly sent from the corresponding port Gei-2. issue.

Step S806: The VM B sends a data packet destined for the MAC A, and searches for the record of the MAC A on the VTEP1, and can find and locally send the packet directly from the corresponding port Gei-1.

Through the above steps, the interworking between VM A and VM B is completed. Compared with the traditional method, before VM B sends reverse traffic, the packet is directly sent to VM B, which reduces the transmission of multicast to other VTEPs. Flooding within this VTEP.

Specific embodiment 3:

In the networking environment shown in the specific embodiment 1, it is assumed that the VM A sends a data packet destined for the MAC N, where the MAC N does not exist in the VXLAN network. In this case, the VXLAN packet forwarding according to the present invention is performed. The process of the steps is shown in Figure 9, which mainly includes:

Step S902: The VMs under each VTEP actively advertise their own status to the VTEP, and each VTEP learns and maintains the MAC address information corresponding to the local VM.

Step S904: The VM A sends a data packet destined for the MAC N, searches for the record of the MAC N on the VTEP1, and does not find the packet, and encapsulates the packet into a multicast form and sends the packet to other VTEPs.

Step S906: VTEP2, VTEP3, and VTEP4 receive the VXLAN packet encapsulated in the multicast, learn the source MAC address of the inner layer packet, and find the destination MAC address of the inner layer packet.

Step S908: VTEP1 does not receive any message that returns a reply, and discards the message.

Preferably, the embodiment of the present invention can also enable the periodic retransmission mechanism in step S908. If no message is returned in a certain period of time, the message will be discarded. After the retransmission time is reached, a multicast packet will be sent out again. Request purpose information. Specifically, as described in step S910.

Step S910: After the timing retransmission time, the MAC N record is searched again on the VTEP1, and the packet is encapsulated into a multicast form and sent to other VTEPs.

Through the above steps, between VTEP, the number of multicasts is reduced, only at the arrival timing. After the retransmission time, a multicast encapsulated packet is sent out. In VTEP1, after the MAC N is not found, the local MAC address does not exist and the flood is not flooded under the VTEP.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.

In this embodiment, a message forwarding device is also provided, which is used to implement the foregoing embodiments and preferred embodiments, and has not been described again. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

FIG. 10 is a structural block diagram (1) of a message forwarding device in a VXLAN according to an embodiment of the present invention. The device may be applied to a first virtual tunnel terminal VTEP. As shown in FIG. 10, the device includes a first receiving module 102. The module 104 and the forwarding module 106 are determined, and the device is described below:

The first receiving module 102 is configured to receive the first packet from the first virtual machine VM, where the destination VM media access control MAC address of the first packet is the MAC address of the second VM, and the determining module 104 is connected. The first receiving module 102 is configured to determine a second VTEP according to a correspondence between a MAC address of the second VM recorded in the first VTEP and a second VTEP connected to the second VM, where the MAC address of the second VM is The correspondence between the second VTEP and the second VTEP is sent to the first VTEP; the forwarding module 106 is connected to the determining module 104, and is configured to forward the first packet to the second VM through the second VTEP.

In an optional embodiment, the apparatus further includes a first processing module, configured to receive the second packet before the first VTEP receives the first packet from the first VM, where the second packet is The destination VM MAC address is the MAC address of the second VM. If the correspondence between the MAC address of the second VM and the second VTEP is not recorded in the first VTEP, the second packet is encapsulated into a multicast VXLAN packet. Sending the multicast VXLAN message to other VTEPs belonging to the same multicast group as the first VTEP; receiving and recording the MAC address of the second VM that the VTEP connected to the second VM in the other VTEP responds to according to the multicast VXLAN message Correspondence with the second VTEP.

In an optional embodiment, the foregoing apparatus further includes a second processing module, configured to: after transmitting the multicast VXLAN message to another VTEP that belongs to the same multicast group as the first VTEP, does not receive the second If the correspondence between the MAC address of the VM and the second VTEP is the same, the second packet is discarded; or the second packet is re-received if the correspondence between the MAC address of the second VM and the second VTEP is not received. The packet is encapsulated into a multicast VXLAN packet, and the re-encapsulated multicast VXLAN packet is sent to other VTEPs that belong to the same multicast group as the first VTEP.

In an optional embodiment, the apparatus further includes a third processing module configured to receive and record a MAC address of the second VM that is replied to by the VTEP connected to the second VM in the other VTEP according to the multicast VXLAN message. Before the correspondence between the two VTEPs, receiving the third packet, where the destination VM MAC address of the third packet is the MAC address of the second VM; buffering the third packet; and, in receiving and recording the other VTEP After the VTEP connected to the second VM responds to the correspondence between the MAC address of the second VM and the second VTEP that is replied to by the multicast VXLAN message, the third report that is cached according to the correspondence between the MAC address of the second VM and the second VTEP The text is forwarded to the second VM through the second VTEP.

In an optional embodiment, the apparatus further includes a fourth processing module configured to receive and record a MAC address of the second VM that is replied to by the VTEP connected to the second VM in the other VTEP according to the multicast VXLAN message. After the correspondence between the two VTEPs, in the case where the correspondence relationship with the VTEP re-answer of the second VM connection is not received within the first predetermined time after the correspondence between the MAC address of the second VM and the second VTEP is recorded, Delete record Corresponding relationship between the MAC address of the second VM and the second VTEP; and/or receiving the connection with the second VM within a first predetermined time after the correspondence between the MAC address of the second VM and the second VTEP is recorded In the case where the VTEP responds again to the correspondence between the MAC address of the second VM and the second VTEP, the correspondence between the recorded MAC address of the second VM and the second VTEP is maintained.

In an optional embodiment, the apparatus further includes a fifth processing module configured to receive a MAC address of the one or more VMs advertised by the one or more VMs connected to the first VTEP; and record the connection with the first VTEP a MAC address of one or more VMs; wherein, when the first VTEP does not receive one of the first VTEP connections or after a second predetermined time after recording the MAC addresses of the one or more VMs connected to the first VTEP Deleting the MAC address of the first partial VM of the record in the case where the first partial VM of the plurality of VMs re-advertises the MAC address of the first partial VM; and/or when the first VTEP is recording one or the connection with the first VTEP In the case where the MAC address of the second partial VM re-advertised by the second partial VM of the one or more VMs connected to the first VTEP is received within the second predetermined time after the MAC addresses of the plurality of VMs, the record is maintained The MAC address of the two parts of the VM.

11 is a structural block diagram (2) of a message forwarding device in a VXLAN according to an embodiment of the present invention. The device may be applied to a second virtual tunnel terminal VTEP. As shown in FIG. 11, the device includes a second receiving module 112. The search module 114 and the sending module 116 are described below:

The second receiving module 112 is configured to receive the multicast VXLAN packet from the first VTEP, where the multicast VXLAN packet is encapsulated by the first VTEP to encapsulate the second packet from the first virtual machine VM. The source VM media access control MAC address of the second packet is the MAC address of the first VM, and the destination VM MAC address of the second packet is the MAC address of the second VM. The searching module 114 is connected to the second receiving module 112. Is configured to find whether there is a second VM in the VM connected to the second VTEP; the sending module 116 is connected to the foregoing searching module 114, and configured to decapsulate the multicast VXLAN packet when the second VM is found And sending the obtained second packet to the second VM, and responding to the first VTEP by the correspondence between the MAC address of the second VM and the second VTEP.

In an optional embodiment, the apparatus further includes a sixth processing module, configured to record a correspondence between a MAC address of the first VM and the first VTEP after receiving the multicast VXLAN message from the first VTEP.

In an optional embodiment, the apparatus further includes a seventh processing module, configured to record the MAC address of the first VM and the first VTEP after recording the correspondence between the MAC address of the first VM and the first VTEP. In the case where the message from the first VTEP and the source VM MAC address is the first VM is not received within the first predetermined time after the correspondence, the correspondence between the MAC address of the recorded first VM and the first VTEP is deleted. And/or, the second VTEP receives the source VM MAC address from the first VTEP and the source VM address is the first VM within a first predetermined time after the mapping of the MAC address of the first VM and the first VTEP is recorded In the case of a message, the correspondence between the MAC address of the recorded first VM and the first VTEP is maintained.

In an optional embodiment, the apparatus further includes an eighth processing module configured to receive a MAC address of the one or more VMs advertised by the one or more VMs connected to the second VTEP; the second VTEP record and the second a MAC address of one or more VMs connected by the VTEP; wherein the second VTEP does not receive the connection with the second VTEP within a second predetermined time after the MAC address of the one or more VMs connected to the second VTEP is recorded In the case where the first part of the one or more VMs advertises the MAC address of the first part of the VM again, the MAC address of the first part of the VM is deleted; and/or when the second VTEP is recorded with the second VTEP Maintaining the MAC address of the second partial VM re-advertised by the second partial VM of the one or more VMs connected to the second VTEP in the second predetermined time after the MAC address of the one or more VMs is maintained Record the MAC address of the second part of the VM.

FIG. 12 is a schematic structural diagram of a message forwarding device in a VXLAN according to an embodiment of the present invention. The device may be located on a VTEP, and includes:

The message receiving module 122 (corresponding to the first receiving module 102 and the second receiving module 112) is configured to receive the packet, including the original data packet received by the local access side port and the VXLAN received by the network side port. Message

The MAC information learning module 124 (corresponding to the fifth processing module and the eighth processing module) is configured to learn the MAC information of the packet, record the relationship between the MAC address and the corresponding forwarding interface, and save the information in the MAC information table.

Preferably, the MAC information learning module may further include a local MAC information table maintenance sub-module 1241 and a remote MAC information table maintenance sub-module 1242, where:

The local MAC information table maintenance sub-module 1241 is configured to maintain a local MAC information table, and add a corresponding MAC entry when learning a new local MAC entry, and delete the MAC entry that needs to be aged after the aging time expires;

The remote MAC address table maintenance sub-module 1242 is configured to maintain a remote MAC address table, and add a corresponding MAC entry when the new remote MAC address entry is learned. After the aging time expires, the MAC entry that needs to be aged is deleted.

The local MAC information response module 126 (corresponding to the above-mentioned search module 114 and the sending module 116) is configured to: when receiving the multicast VXLAN message, query whether the I-DMAC of the inner layer message is local, if local, I - The correspondence between the DMAC and the VTEP is answered to the source VTEP with the address O-SIP.

The packet forwarding module 128 (corresponding to the forwarding module 106 and the sending module 116) is configured to encapsulate the received data packet and send it to other VTEPs, and decapsulate the received VXLAN encapsulated packet and send the packet to the local device. VM.

Preferably, the message forwarding module 128 may further include a package sending submodule 1281 and a decapsulation sending submodule 1282, where:

The encapsulating and transmitting sub-module 1281 is configured to encapsulate the data packet into a VXLAN packet, and when the destination MAC address is known, the encapsulation is a unicast packet, and the packet is encapsulated into a multicast packet if the destination MAC address is unknown.

The decapsulation and sending submodule 1282 is configured to decapsulate the VXLAN message into an original message and then send it to the local corresponding VM.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the above modules are in any combination. The forms are located in different processors.

Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the storage medium may be configured to store program code for performing the steps in the foregoing method embodiments.

Optionally, in the embodiment, the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), and a Random Access Memory (RAM). A variety of media that can store program code, such as a hard disk, a disk, or an optical disk.

Optionally, in the embodiment, the processor performs the above steps according to the stored program code in the storage medium.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

Embodiments of the present invention also provide a processor for running a program, wherein the program is executed to perform the steps of any of the above methods.

The device in the embodiment of the present invention is located on the VTEP, and does not need to additionally add a centralized controller or a proxy server in the networking, which can reduce the networking cost.

In the embodiment of the present invention, the VM adopts an active advertisement mechanism, and the VTEP maintains the address information of the local active VM, and the remote to local VXLAN packet, if the destination address of the inner layer data packet is not found on the VTEP, directly discards and reduces Flooding under VTEP.

The VTEP information corresponding to the destination MAC in the embodiment of the present invention adopts an "on-demand request" manner, and the local VM sends a packet whose destination MAC address is unknown, and first sends the packet to the other VTEP through the multicast encapsulation, and the VTEP of the destination MAC receives the multicast. After the VXLAN packet is sent, the relationship between the destination MAC address and the VTEP is sent to the source VTEP, which is equivalent to the source VTEP "requesting" the MAC information of the destination. The source VTEP only learns the MAC required for traffic forwarding, and does not maintain unnecessary. Remote MAC information.

In the embodiment of the present invention, when the VTEP information corresponding to the unknown MAC address is not available, the VMs that do not have the MAC address in the other VTEPs are discarded, and the packet is discarded, and the multicast forwarding between the VTEPs is reduced.

In the case that the VTEP information corresponding to the remote MAC address is obtained in the present invention, the data packet is sent to the destination VTEP in a unicast manner, which reduces multicast forwarding between VTEPs.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

As described above, the packet forwarding method and apparatus in the virtual scalable local area network VXLAN provided by the embodiment of the present invention have the following beneficial effects: the network bandwidth occupied by the packet forwarding between VTEPs in the related art is solved. The problem that affects the performance of the device achieves the effect of avoiding excessive use of network bandwidth and improving device performance.

Claims

A packet forwarding method in a virtual scalable LAN VXLAN, comprising:

The first virtual tunnel terminal VTEP receives the first packet from the first virtual machine VM, where the destination VM media access control MAC address of the first packet is the MAC address of the second VM;

Determining, by the first VTEP, the second VTEP according to a correspondence between a MAC address of the second VM recorded in the first VTEP and a second VTEP connected to the second VM, where the second VTEP Corresponding relationship between the MAC address of the VM and the second VTEP is notified to the first VTEP by the second VTEP;

The first VTEP forwards the first packet to the second VM through the second VTEP.
The method of claim 1, wherein before the first VTEP receives the first message from the first VM, the method further comprises:

The first VTEP receives the second packet, where the destination VM MAC address of the second packet is the MAC address of the second VM;

The first VTEP encapsulates the second packet into a multicast VXLAN report if the correspondence between the MAC address of the second VM and the second VTEP is not recorded in the first VTEP. Text

Sending, by the first VTEP, the multicast VXLAN packet to another VTEP that belongs to the same multicast group as the first VTEP;

The first VTEP receives and records the correspondence between the MAC address of the second VM and the second VTEP that the VTEP connected to the second VM in the other VTEP responds to according to the multicast VXLAN message.
The method according to claim 2, wherein said first VTEP after said multicast VXLAN message is sent to said other VTEP belonging to the same multicast group as said first VTEP, said method further Includes:

The first VTEP discards the second packet if the correspondence between the MAC address of the second VM and the second VTEP is not received; or

If the first VTEP does not receive the correspondence between the MAC address of the second VM and the second VTEP, the second packet is re-encapsulated into a multicast VXLAN packet; The multicast VXLAN message is sent to other VTEPs belonging to the same multicast group as the first VTEP.
The method of claim 2, wherein

The first VTEP receives and records the correspondence between the MAC address of the second VM and the second VTEP that the VTEP connected to the second VM in the other VTEP responds to according to the multicast VXLAN message. The method further includes: the first VTEP receiving the third packet, wherein the destination VM MAC address of the third packet is a MAC address of the second VM; and the third packet is buffered; as well as,

The first VTEP receives and records the correspondence between the MAC address of the second VM and the second VTEP that the VTEP connected to the second VM in the other VTEP responds to according to the multicast VXLAN message. The method further includes: the first VTEP forwarding, by the second VTEP, the cached third packet according to the correspondence between the MAC address of the second VM and the second VTEP to the Second VM.
The method of claim 2, wherein the first VTEP receives and records in the other VTEP that the VTEP connected to the second VM is responsive to the second VM responsive to the multicast VXLAN message After the correspondence between the MAC address and the second VTEP, the method further includes:

The first VTEP does not receive the VTEP re-answer that is connected to the second VM within a first predetermined time after the mapping of the MAC address of the second VM and the second VTEP is recorded Corresponding relationship, deleting the correspondence between the recorded MAC address of the second VM and the second VTEP; and/or,

Receiving, by the first VTEP, the VTEP re-answered with the second VM connected within a first predetermined time after the mapping of the MAC address of the second VM and the second VTEP is recorded In the case of the correspondence between the MAC address of the second VM and the second VTEP, the correspondence between the recorded MAC address of the second VM and the second VTEP is maintained.
The method of any of claims 1 to 5, wherein the method further comprises:

The first VTEP receives a MAC address of the one or more VMs advertised by one or more VMs connected to the first VTEP;

The first VTEP records a MAC address of one or more VMs connected to the first VTEP;

Wherein the first VTEP does not receive one or more VMs connected to the first VTEP within a second predetermined time after recording the MAC address of the one or more VMs connected to the first VTEP In the case where the first part of the VM re-advertises the MAC address of the first part VM, the MAC address of the first part VM of the record is deleted; and/or when the first VTEP is recorded with the first The MAC of the second partial VM that is re-announced by the second partial VM of the one or more VMs connected to the first VTEP is received within a second predetermined time after the MAC address of the one or more VMs of the VTEP connection In the case of an address, the MAC address of the second part VM of the record is maintained.
A packet forwarding method in a virtual scalable LAN VXLAN, comprising:

The second virtual tunnel terminal VTEP receives the multicast VXLAN packet from the first VTEP, where the multicast VXLAN packet is encapsulated by the first VTEP to encapsulate the second packet from the first virtual machine VM. The source VM media access control MAC address of the second packet is the MAC address of the first VM, and the destination VM MAC address of the second packet is the MAC address of the second VM.

Determining, by the second VTEP, whether the second VM exists in a VM connected to the second VTEP;

The second VTEP decapsulates the multicast VXLAN message and sends the obtained second packet to the second VM, and The correspondence between the MAC address of the second VM and the second VTEP is replied to the first VTEP.
The method of claim 7, wherein after the receiving, by the second VTEP, the multicast VXLAN message from the first VTEP, the method further comprises:

The second VTEP records a correspondence between a MAC address of the first VM and the first VTEP.
The method of claim 8, wherein after the recording, by the second VTEP, the correspondence between the MAC address of the first VM and the first VTEP, the method further comprises:

The second VTEP does not receive the source VM MAC address from the first VTEP within a first predetermined time after the mapping of the MAC address of the first VM and the first VTEP is recorded. In the case of the message of the first VM, deleting the correspondence between the MAC address of the first VM and the first VTEP; and/or,

Receiving, by the second VTEP, the source VM MAC address from the first VTEP and the first predetermined time after recording the correspondence between the MAC address of the first VM and the first VTEP In the case of the message of the first VM, the correspondence between the MAC address of the first VM and the first VTEP is maintained.
The method of claim 7 wherein the method further comprises:

The second VTEP receives a MAC address of the one or more VMs advertised by one or more VMs connected to the second VTEP;

The second VTEP records a MAC address of one or more VMs connected to the second VTEP;

Wherein the second VTEP does not receive one or more VMs connected to the second VTEP within a second predetermined time after the MAC address of the one or more VMs connected to the second VTEP is recorded In the case where the first part of the VM re-advertises the MAC address of the first part VM, the MAC address of the first part VM of the record is deleted; and/or when the second VTEP is recorded with the second Receiving the MAC of the second partial VM re-announced by the second partial VM of the one or more VMs connected to the second VTEP within a second predetermined time after the MAC address of the one or more VMs of the VTEP connection In the case of an address, the MAC address of the second part VM of the record is maintained.
A packet forwarding device in a virtual scalable LAN VXLAN is applied to a first virtual tunnel terminal VTEP, including:

The first receiving module is configured to receive the first packet from the first virtual machine VM, where the destination VM media access control MAC address of the first packet is a MAC address of the second VM;

a determining module, configured to determine the second VTEP according to a correspondence between a MAC address of the second VM recorded in the first VTEP and a second VTEP connected to the second VM, where the second Corresponding relationship between the MAC address of the VM and the second VTEP is notified to the first VTEP by the second VTEP;

And a forwarding module, configured to forward the first packet to the second VM by using the second VTEP.
A packet forwarding device in a virtual scalable LAN VXLAN is applied to a second virtual tunnel terminal VTEP, including:

a second receiving module, configured to receive a multicast VXLAN message from the first VTEP, where the multicast VXLAN message is from the first virtual machine by the first VTEP pair The second packet of the VM is encapsulated, and the source VM media access control MAC address of the second packet is the MAC address of the first VM, and the destination VM MAC address of the second packet is the second packet. VM's MAC address;

a finding module, configured to find whether the second VM exists in a VM connected to the second VTEP;

a sending module, configured to: when the second VM is found, decapsulate the multicast VXLAN packet, and send the obtained second packet to the second VM, and The correspondence between the MAC address of the second VM and the second VTEP is replied to the first VTEP.
A storage medium, characterized in that the storage medium comprises a stored program, wherein the program is executed to perform the method of any one of claims 1 to 10.