Embodiment
The embodiment of the invention mainly is to cover two layers of transmission network through in the core network of operator, setting up virtual exchange; This virtual network realizes the discovery feature of data center, makes two layers of interconnected solution of data center can adapt to the dynamic migration of data center.
Below in conjunction with accompanying drawing the embodiment of the invention is described in detail.
Referring to Fig. 4, be the network design sketch map of the embodiment of the invention.
As shown in Figure 4, establish tunnel link in the core network of operator between each equipment so that two layers interconnected, move Routing Protocol on this tunnel, this Routing Protocol is supported the VPN-MAC route.Wherein, At least one equipment in the core network is set to AA (Address Advertiser; The address issue) equipment; Be used for ED equipment is carried out location registration process, and through with core network in tunnel between miscellaneous equipment be connected issue this ED MAC Address in other core network device, to calculate the operations such as shortest path tree of MAC route.Further; At least one equipment in the core network is set to AR (Address Resolver; Address resolution) equipment is used to respond the address resolution request of ED, returns the IP address of its ED that asks to this ED; So that ED safeguards local ARP (Address Resolver Protocol, address resolution protocol) table.
During practical implementation, can carry out as above network design through the mode of difference configuration virtual router (AA and AR also belong to virtual router) on each equipment in core network, to realize that each equipment is interconnected at two layers in the core network.With the mode through the configuration virtual router, in the core network of operator, setting up virtual two layers of transmission network of exchange covering is example below, and the network design process that the present invention is implemented is described in detail.
In the core network of operator, configuration virtual router on each equipment for these virtual router distributing IP addresses, in these virtual routers, comprises AA and AR.Between these virtual routers, set up the gre tunneling link, thereby make these virtual routers form virtual network.Routing Protocol operates on the gre tunneling; The Routing Protocol that operates on the gre tunneling is supported the VPN-MAC route; Routing Protocol both can be IGP (Interior Gateway Protocol, an Interior Gateway Protocol), also can be BGP (Border Gateway Protocol; Border Gateway Protocol), the embodiment of the invention is that example describes with BGP.Configuration is used for the VRF (Virtual Routing Forwarding, VPN route forwarding table) of address notification on each virtual router, and the interface that this VRF comprises is the gre tunneling mouth.
When disposing data center, need dispose as follows:
On the one hand, the IP address of configuration self IP address, AR/AA on the ED of data center.Configuration mode can adopt: the DHCP (Dynamic Host Configuration Protocol, DHCP) by operator gives data center ED distributing IP address, the IP address of carrying the AR/AA virtual router simultaneously; Perhaps, the IP address of manual configuration of IP address and AR/AA virtual router on the ED of data center.
On the other hand, on the ED of data center, dispose other members' in the VPN MAC Address.Configuration mode can adopt a plurality of MAC Addresss of static configuration to realize.
In the above-mentioned network architecture, address issuing service virtual router (being AA) also can be realized following function except having MAC route calculating etc. as other virtual router (promptly not being configured to the virtual router of AA or AR) the function:
(1) after the reception register requirement; The address information of the ED that buffer memory wherein carries; Through the process of caching of ED address information is safeguarded the ED device databases,, and bunch be the all-router that the form of VPN-MAC route is published to virtual network with the address with MAC Address comprising IP address and the MAC Address of ED; So that these routers calculate the outbound port of MAC route on shortest path tree according to the MAC routing iinformation of issuing, this outbound port is two layers of gre tunneling mouth;
(2) behind virtual network receiver address analysis request message, this message is forwarded to ED equipment, perhaps replys the address resolution request according to the ED device databases.
In the above-mentioned network architecture, address resolution service virtual router (being AR) also can be realized following function except having MAC route calculating etc. as other virtual router (promptly not being configured to the virtual router of AA or AR) the function:
(1) safeguards ED facility information buffer memory, comprise IP address, the MAC Address of ED; For example, in the process that the logon message of ED is issued in virtual network, but AR receives the address information of the ED that buffer memory wherein carries behind this logon message;
(2) receive the address resolution request of coming from ED equipment; The back is handled in this request sends from virtual network; For example, AR perhaps is transmitted to AA with this address resolution request of request AA response with it according to this address resolution request of address information response of the ED of its buffer memory.
Based on the above-mentioned network architecture, the embodiment of the invention can realize that data center disposes automatically.Based on the above-mentioned network architecture, the automatic layoutprocedure in data center is described in detail below, wherein related flow process can comprise: the register flow path of the ED in the data center, data center find flow process and data center's migration flow process.
Referring to Fig. 5, the sketch map of the ED register flow path in the data center that provides for the embodiment of the invention.After data center had carried out disposing and carried out the IP address setting, the ED of this data center initiated register flow path, and initiating register flow path with the ED1 in the data center 1 is example, and this flow process can comprise:
Step 501, ED1 sends logon message according to the IP address of the AA of configuration on it to AA, wherein carries IP address and the mask thereof of ED1, and the MAC Address of ED1.
Step 502 after AA receives logon message, according to the information of carrying in this message, is saved in MAC Address and the IP address of ED1 in the ED equipment information database.
Step 503; AA is according to the VRF that is used for address notification of configuration on it; Through and core network in the bgp session set up between other virtual router; Virtual router to the session opposite end sends the BGP message, wherein carries the MAC Address of ED1, thereby the MAC Address of ED1 is published to the virtual router of session opposite end with the form of address bunch VPN-MAC route.
Step 504; The virtual router of session opposite end is after receiving the BGP message; VRF according to configuration on it; Through and core network in the bgp session set up between other virtual router, the virtual router to the session opposite end sends the MAC Address of BGP message with announcement ED1, thus this MAC routing iinformation of announcement is to all virtual routers in the virtual network of BGPoGRE; Comprising the AR virtual router,, calculates each virtual router so that carrying out the MAC route according to the MAC routing iinformation of announcing.In this process; Virtual router in virtual network according to AS (autonomous system) path jumping figure; Calculate the outbound port (this outbound port be two layer gre tunneling mouth) of MAC route on shortest path tree, thereby calculate the shortest path tree of forming by gre tunneling for each MAC route.
Under the situation that adopts MAC address aging mechanism; When ageing timer is overtime; Corresponding MAC Address can be worn out, in order to keep the existence of self MAC address in virtual network, in the embodiment of the invention; ED can periodically send logon message to AA, and logon message sends Cycle Length and is not more than the MAC address aging Cycle Length usually.Its register flow path is basic identical with above-mentioned flow process.
Further, ED can also carry version information (like version number) in logon message, in order to the MAC Address that identifies this request registration and the version of IP address.If the MAC Address of ED and IP address do not change, then version number is constant; If the IP address of ED changes, then version number increases progressively on the basis of last revision.For example, the version number that the ED1 of data center 1 carries in the logon message when initial registration is 1, and move 1 first time when data center, and after the IP address change of ED1, the version number of carrying in the logon message that ED1 sends is 2, by that analogy.
Accordingly; The AA server is behind the logon message that carries version information that receives the ED1 transmission; If also do not have MAC Address and IP address (the initial registration situation) of ED1 in the ED equipment information database, then it is saved in the ED equipment information database, and this version information of corresponding record; If had MAC Address and the IP address of ED1 in the ED equipment information database; But that writes down in the version information in this logon message and the ED equipment information database is different; Variation has taken place in MAC Address or IP address that ED1 is described, needs to upgrade the ED equipment information database, otherwise; MAC Address and IP address that ED1 is described do not change, and can upgrade the ED equipment information database.But no matter whether upgrade the ED equipment information database, AA will announce the virtual router to the bgp session opposite end with the MAC Address of ED1, to realize the announcement of MAC Address in virtual network.
Referring to Fig. 6, the data center that provides for the embodiment of the invention finds the sketch map of flow process.Because the IP address that has disposed this machine on the ED of data center, and interior other members' of VPN MAC Address, so the main purpose of data center's discovery feature is to find the IP address of other members' ED in the VPN.Be example with the ED1 in the data center 1 still, data center finds that flow process can comprise:
Step 601, behind the last MAC Address that has disposed interior other members of VPN of ED1, ED1 sends the address resolution request message to AR, to ask other members' in the said VPN IP address.This address resolution request message can be the Ethernet message through UDP (User Datagram Protocol, User Datagram Protocol) encapsulation.IP address with ED1 request ED2 is an example; The source IP address of this UDP message is the IP address of ED1; Purpose IP address is the IP address of AR; The Ethernet message target MAC (Media Access Control) address of UDP encapsulation is the MAC Address MAC-ED2 of ED2, and source MAC is the MAC Address MAC-ED1 of ED1, and the MAC Address and the IP address information of having carried ED1 of the load in the Ethernet message.
Step 602, AR decapsulation address resolution request message sends original Ethernet message in virtual network.
Step 603; After this Ethernet message is forwarded to the AA of issue MAC-ED2 route along the path that BGPoGRE sets up; AA resolves this Ethernet message; In the ED equipment information database, search corresponding IP address according to the target MAC (Media Access Control) address (being MAC-ED2) of this Ethernet message, identify the message of the IP address that is request ED2, then this Ethernet message is carried out the UDP encapsulation and send to ED2.Wherein, the purpose IP address of UDP encapsulation is the IP address of ED2, and source IP address is the IP address of oneself.
Step 604, ED2 receives after the address resolution request message of UDP encapsulation, will send the address resolution response message of Ethernet message format with the UDP mode to ED1.Wherein, The purpose IP address of UDP encapsulation is IP address ip-ED1 of ED1; Source IP address is self IP address ip-ED2; The target MAC (Media Access Control) address of Ethernet message is the MAC Address MAC-ED1 of ED1, and the source MAC of Ethernet message is the MAC Address MAC-ED2 of self, and Ethernet message load has been carried MAC Address and the IP address information of ED2.
Step 605, ED1 receives after the address resolution response message, from response message, parses MAC Address and the IP address of ED2, and this information of buffer memory, as upgrades local ARP table.
Step 606, ED1 is used for two layers of forwarding according to the gre tunneling that IP-ED1, IP-ED2 set up between the two.Same, the ED2 of data center 2 also can pass through the IP address that above-mentioned similar flow process is found the ED1 of data center 1 automatically, and the gre tunneling that is established to ED1 is used for two layers of forwarding.
In the above-mentioned flow process, described transmit ED1 by AA the address resolution request to ED2, and respond the process of seeing of this address resolution request by ED2.In another embodiment of the present invention; AA is after receiving the address resolution request message of ED1; Owing to record ED information in its ED equipment information database; Therefore can obtain the IP address of ED2 through its ED equipment information database of inquiry, and to ED1 return address resolution response message, thereby by the address resolution request of AA response ED1.
In another embodiment of the present invention; After AR receives the address resolution request message; By buffer memory on it MAC Address and the IP address of ED are arranged, therefore, the address information of the ED equipment that AR can be through its buffer memory of inquiry obtains the IP address of ED2; And to ED1 return address resolution response message, thereby by the address resolution request of AR response ED1.
Data center can be used as integral body and carries out mobile roaming, and mobile roaming is perhaps changed in the process of operator, and the IP address of the ED of data center can change, and the MAC Address of ED remains unchanged.
Referring to Fig. 7, the data center that provides for the embodiment of the invention moves the sketch map of flow process.This flow process with data center 2 be moved (perhaps change insert operator) be that example is described, as shown in the figure, this flow process can comprise:
Step 701 after the ED2 in the data center 2 upgrades the IP address, is sent logon message to AA, wherein carries the MAC Address MAC-ED2 of self, and its own IP address IP-ED2 (this IP address is the IP address after upgrading).As previously mentioned, can also carry version number in the logon message, the version number that the logon message that sends before this version number and IP address are upgraded carries is different, and is higher with the version of the address information that shows this request registration.
Step 702 after AA receives the logon message of ED2, is then injected the route of VPN-MAC-ED2 through the BGPoGRE virtual network, upgrade the routing information of the MAC-ED2 that all bgp routers calculate in the virtual network.Further, if the IP address of the ED2 that writes down in the IP address that AA finds ED2 and the ED equipment information database is different, then also to upgrade its ED device databases.
Concrete; In logon message, do not carry under the situation of version number; AA can be according to the corresponding IP address of this MAC Address in the MAC Address inquiry ED equipment information database of the ED2 that carries in the message; If the IP address of the ED2 that carries in the IP address that inquires and this message is different, explain that then variation has taken place in the IP address; In logon message, carry under the situation of version number; AA can be according to the corresponding version number of this MAC Address in the MAC Address inquiry ED equipment information database of the ED2 that carries in the message; If the version number of carrying in the version number that inquires and this message is different, explain that then variation has taken place in the IP address.
During practical implementation; AA can adopt the mode in the aforementioned flow process shown in Figure 5; The opposite end virtual router that Xiang Yuqi has bgp session sends the BGP message, wherein carries the MAC Address of ED2, promptly; This MAC Address is distributed to session opposite end virtual router with routing mode; So that the virtual router of session opposite end is after receiving the BGP message, through and core network in the bgp session set up between other virtual router, the virtual router to the session opposite end sends the MAC Address of BGP message with announcement ED2; Thereby this MAC routing iinformation of announcement is to all BGP virtual routers in the virtual network of BGPoGRE, and each virtual router calculates the shortest path tree of being made up of gre tunneling according to the MAC routing iinformation of announcement for each MAC route.
Step 703, the ED2 of data center 2 also buffer memory (as previously mentioned, in the VPN of ED2 institute buffer memory the information of other member ED can through the static mode configuration) be arranged under the situation of information of the ED of other data centers; After reshuffle the IP address of ED2 in the data center 2; Except to AA sends logon message, also can send the address resolution request message to these ED according to the information of the every other ED of previous buffer memory; This request message can adopt the UDP encapsulation; Wherein carry the MAC Address MAC-ED2 of ED2, be used for triggering these ED and send the address resolution request message, with the IP address of request ED2.
Step 704; After the ED of said other data center receives this request message, send the address resolution request, wherein carry the MAC Address of ED2 to AR; With the corresponding IP address of request MAC-ED2; And after receiving the address resolution response message, upgrade local cache information according to the IP address of the ED2 that acquires, and the gre tunneling that can further set up between the two according to IP-ED1, IP-ED2 is used for two layers of forwarding.Wherein, The ED of said other data center is after AR sends the address resolution request message, and is to the process that receives response message, similar with step 602~604 in the flow process shown in Figure 6; Promptly by opposite end ED response address analysis request message; Also can by AA or AR response address analysis request message, repeat no more as previously mentioned at this.
In the flow process shown in Figure 7, do not have strict sequential requirement between each step, for example, the execution sequence of step 701 and step 703 does not have the branch of strict priority.
Need to prove; Above-mentioned AA, AR, gre tunneling virtual router equipment such as (being except that AA, virtual router the AR in the core network) both can be the router device in the existing IP network; Also can be the newly-increased server apparatus of disposing in existing IP network, as long as the Routing Protocol that this equipment support needs and can reach each other through existing IP network.
Can find out through above description; The embodiment of the invention is used for data center when interconnected; If when the operator that data center moves, inserts variation etc. causes the IP address of the edge device of data center to change; The new IP address of discovery website that can dynamic self-adapting, and need not manual intervention.With need manual type configuration edge device in the prior art, and again between data center synchronously MAC Address compare, can improve allocative efficiency, and avoid flow to interrupt for a long time.
Based on identical technical conceive, the application embodiment also provides data center's edge device and core network device.
Referring to Fig. 8, the structural representation of the edge device in the data center that provides for the embodiment of the invention.This equipment is applied to two layers of internet of data center; The framework of two layers of internet of said data center as previously mentioned; Be provided with address distribution apparatus and address resolution equipment in the core network device; Dispose the VPN VPN that supports two layers of forwarding on each core network device, set up virtual two layers of connection between each core network device.As shown in Figure 8, this data center's edge device can comprise:
IP address configuration module 801 is used to dispose its own IP address;
Registering modules 802; Be used for after IP address configuration module 801 is accomplished its own IP address configuration; Oneself IP address and MAC Address is carried on logon message sends to the address distribution apparatus; With through said address distribution apparatus, utilize the virtual two layers of connection between core network device, the MAC Address of said data center edge device is published on each core network device;
VPN member's configuration module 803; Be used for after IP address configuration module 801 is accomplished its own IP address configuration; The MAC Address of the VPN member's edge device that disposes on this equipment of obtaining; And send to said VPN member's edge device according to the MAC Address that gets access to and to be used to trigger the request message of initiating address resolution, initiate the IP address that said data center edge device is obtained in the address resolution request to ask said VPN member's edge device to address resolution equipment.
Further; This equipment also can comprise address resolution request module 804; Be used at the VPN member edge device of this equipment as other data center's edge device; After being used to of receiving that said other data center's edge device sent after its own IP address is accomplished in configuration trigger the request message of initiation address resolution; Send the address resolution request to address resolution equipment, wherein carry the MAC Address of the data center's edge device that sends the described request message, in order to the IP address of this data center's edge device of acquisition request; And, receiving after address resolution replys, preserve the IP address of institute's acquisition request of wherein carrying.
Further; VPN member's configuration module 803 also can be used for carrying out VPN member's edge device MAC Address configuration operation; And behind the configuration operation of accomplishing VPN member's edge device MAC Address; Send the address resolution request message to address resolution equipment, with the IP address of the said VPN member's edge device of acquisition request; And, after receiving the address resolution response message, preserve the IP address of the said VPN member's edge device that wherein carries.
Further; Registering modules 802 also can be used for: send logon message according to setting cycle to the address distribution apparatus; Wherein carry oneself IP address and MAC Address; With through said address distribution apparatus, utilize the virtual two layers of connection between core network device, the MAC Address of said data center edge device is published on each equipment of the core network.
Referring to Fig. 9, the core network device structural representation in the data center that provides for the embodiment of the invention.This equipment is applied to two layers of internet of data center; As previously mentioned; Be provided with address distribution apparatus and address resolution equipment in the core network device of two layers of internet of said data center; Dispose the VPN VPN that supports two layers of forwarding on each core network device, set up virtual two layers of connection between each core network device.As shown in Figure 9, this data center's core network device can comprise:
Acquisition module 901 is used for behind the logon message that receives data center's edge device transmission, obtaining the IP address and the MAC Address of the said data center edge device that wherein carries; Wherein, said data center edge device sends the logon message that carries self IP address and MAC Address accomplishing its own IP address configuration back to the address distribution apparatus;
MAC routing calculation module 902, the MAC Address that is used for getting access to according to acquisition module 901 are carried out the MAC route and are calculated;
Address release module 903 is used for being published to the opposite end core network device through the MAC Address that the virtual two layers of connection between core network device get access to acquisition module 901.
Shown in Figure 10 A,, then on the basis of structure shown in Figure 9, also can comprise if said data center core network device is configured to address resolution equipment:
Memory module 904 is used for after receiving the logon message that the data center edge device sends, and the IP address and the MAC Address of the said data center edge device that wherein carries is saved in this locality;
Address resolution module 905; Be used for after receiving the address resolution request message; Obtain the MAC Address of data center's edge device of institute's request analysis of wherein carrying; The IP address and the MAC Address of data center's edge device of preserving according to this locality obtain the IP address corresponding with this MAC Address, and this IP address are carried on data center's edge device that the address resolution response message sends to initiation address resolution request.Wherein, the process of transmitting of said address resolution request message has following two kinds of situation:
Situation one: after data center's edge device is accomplished its own IP address configuration; Send the request message that is used to trigger the initiation address resolution to its VPN member's edge device, said VPN member's edge device is initiated the IP address that the address resolution request message obtains said data center edge device according to this request message to address resolution equipment;
Situation two: after data center's edge device is accomplished its own IP address configuration, carry out VPN member's edge device MAC Address configuration operation; And behind the configuration operation of accomplishing VPN member's edge device MAC Address; Send the address resolution request message to address resolution equipment, with the IP address of the said VPN member's edge device of acquisition request.
Shown in Figure 10 B,, then on the basis of structure shown in Figure 9, also can comprise if said data center core network device is configured to the address distribution apparatus:
Memory module 906 is used for after receiving the logon message that the data center edge device sends, and the IP address and the MAC Address of the said data center edge device that wherein carries is saved in this locality;
Address resolution module 907; Be used for after receiving the address resolution request message; Obtain the MAC Address of data center's edge device of institute's request analysis of wherein carrying; The IP address and the MAC Address of data center's edge device of preserving according to this locality obtain the IP address corresponding with this MAC Address, and this IP address are carried on data center's edge device that the address resolution response message sends to initiation address resolution request.Wherein, the process of transmitting of said address resolution request message has following two kinds of situation:
Situation one: after data center's edge device is accomplished its own IP address configuration; Send the request message that is used to trigger the initiation address resolution to its VPN member's edge device; Said VPN member's edge device is initiated the IP address that the address resolution request message obtains said data center edge device according to this request message to address resolution equipment, and said address resolution equipment sends to the address distribution apparatus with this address resolution request message;
Situation two: after data center's edge device is accomplished its own IP address configuration, carry out VPN member's edge device MAC Address configuration operation; And behind the configuration operation of accomplishing VPN member's edge device MAC Address; Send the address resolution request message to address resolution equipment; With the IP address of the said VPN member's edge device of acquisition request, said address resolution equipment sends to said address distribution apparatus with said address resolution request.
Through the description of above execution mode, those skilled in the art can be well understood to the present invention and can realize by the mode that software adds essential general hardware platform, can certainly pass through hardware, but the former is better execution mode under a lot of situation.Based on such understanding; The part that technical scheme of the present invention contributes to prior art in essence in other words can be come out with the embodied of software product; This computer software product is stored in the storage medium, comprise some instructions with so that a station terminal equipment (can be mobile phone, personal computer; Server, the perhaps network equipment etc.) carry out the described method of each embodiment of the present invention.
The above only is a preferred implementation of the present invention; Should be pointed out that for those skilled in the art, under the prerequisite that does not break away from the principle of the invention; Can also make some improvement and retouching, these improvement and retouching also should be looked protection scope of the present invention.