CN106936680B - System and method for intercommunication among heterogeneous networks of cloud computing platform - Google Patents

Abstract

The embodiment of the invention provides a system and a method for intercommunication between heterogeneous networks of a cloud computing platform, wherein the system is arranged between the cloud platform network and an external heterogeneous network; the system comprises: a routing network element and a forwarding network element; the routing network element and the forwarding network element are used for supporting an external heterogeneous network to access a cloud platform network through the routing network element and the forwarding network element; the routing network element is further configured to support the cloud platform network to communicate with the external heterogeneous network through the routing network element; the forwarding network element is further configured to support the cloud platform network to communicate with an external heterogeneous network through the forwarding network element in two layers. By implementing the method and the device, the problem of intercommunication between two-layer and three-layer external heterogeneous networks of the cloud computing platform can be solved.

Description

System and method for interconnection between heterogeneous networks of cloud computing platforms

technical field

The invention relates to the communication technology in the field of cloud computing technology, in particular to a system and method for intercommunication between heterogeneous networks of cloud computing platforms.

Background technique

Many public cloud enterprise customers always want to deploy their private data services in a network environment with high security, especially on bare metal servers with strong processing performance. These heterogeneously deployed services need to be interoperable with services deployed on the public cloud, which means that the public cloud network needs to implement heterogeneous network intercommunication with private clouds or traditional data centers.

Taking the public cloud customer network deployment in Figure 1 as an example, customer hosts E and F located in customer network B are deployed in a private cloud environment with high security, and the customer routers communicate with customer network A at Layer 3 (network layer) ( Mutual communication), so that client hosts in different virtual local area networks (VLANs) can communicate with each other; client host C located in client network A is deployed on a high-performance bare metal server, and client hosts A and B are deployed on virtual machines. layer (data link layer) intercommunication.

Because public cloud customer service networks are generally closed networks, such as overlay tunnel networks, and cannot directly communicate with other heterogeneous networks, the industry's existing heterogeneous network interworking solutions mainly include the following:

Virtual Private Network (VPN) tunnel technology: All cloud platforms in the industry have implemented this type of technology. The VPN tunnel terminal is implemented on the router, and a tunnel connection is established with another VPN tunnel terminal on the external heterogeneous network to achieve Layer 3 interworking.

Private gateway technology; the open source cloud platform cloudstack implements this type of technology, and enables three-layer intercommunication with external heterogeneous networks by opening external interfaces through routers.

The industry cloud platform VPN tunnel technical solution currently only supports Layer 3 interworking, and does not support Layer 2 heterogeneous network interworking. The private gateway technology of the industry cloud platform can only support Layer 3 interworking, and the service router itself is implemented by a virtual machine, resulting in a large bottleneck in forwarding performance and low bandwidth utilization.

To sum up, there is no effective solution for the interworking of heterogeneous networks in the prior art.

SUMMARY OF THE INVENTION

The embodiments of the present invention provide a system and method for intercommunication between heterogeneous networks of a cloud computing platform, which can solve the problem of intercommunication between the second-layer and third-layer external heterogeneous networks of the cloud computing platform.

The technical solution of the embodiment of the present invention is realized as follows:

In a first aspect, an embodiment of the present invention provides a system for intercommunication between cloud computing platform heterogeneous networks, where the system is set between the cloud platform network and an external heterogeneous network;

The system includes: a routing network element and a forwarding network element;

the routing network element, configured to support the external heterogeneous network with the forwarding network element to access the cloud platform network through the routing network element and the forwarding network element;

The routing network element is further configured to support Layer 3 intercommunication between the cloud platform network and the external heterogeneous network through the routing network element;

The forwarding network element is further configured to support Layer 2 intercommunication between the cloud platform network and an external heterogeneous network through the forwarding network element.

Preferably, the routing network element is further configured to configure a private gateway interface, and is connected to the external heterogeneous network through the forwarding network element;

The routing network element is further configured to configure an internal service gateway interface to connect to the service network.

Preferably, the routing network element is further configured to configure the private gateway routing table, and configure the gateway address of the network where the configured private gateway interface is located as the default next-hop address;

The routing network element is further configured to publish the routing information of the cloud platform service network to the external heterogeneous network through the configured private gateway interface.

Preferably, the routing network element is further configured to dynamically learn the routing information of the external heterogeneous network through the configured private gateway interface, and dynamically update the private gateway routing table.

Preferably, the forwarding network element is further configured to configure an external forwarding interface to connect to the external heterogeneous network, and configure an internal forwarding interface to connect to the service network;

The forwarding network element is also used to configure a forwarding table, so that the external heterogeneous network and the service network are in the same Layer 2 broadcast domain.

In a second aspect, an embodiment of the present invention provides a method for intercommunication between heterogeneous networks of a cloud computing platform, and a routing network element and a forwarding network element are set between the cloud platform network and the external heterogeneous network;

The method includes:

The routing network element and the forwarding network element support external heterogeneous networks to access the cloud platform network through the routing network element and the forwarding network element;

The routing network element supports Layer 3 intercommunication between the cloud platform network and the external heterogeneous network through the routing network element;

The forwarding network element supports Layer 2 intercommunication between the cloud platform network and an external heterogeneous network through the forwarding network element.

Preferably, the routing network element supports Layer 3 intercommunication between the cloud platform network and the external heterogeneous network through the routing network element, including:

The routing network element is configured with a private gateway interface, and is connected to the external heterogeneous network through the forwarding network element;

The routing network element configures an internal service gateway interface to connect to the service network.

Preferably, the routing network element supports Layer 3 intercommunication between the cloud platform network and the external heterogeneous network through the routing network element, including:

The routing network element configures a private gateway routing table, and configures the gateway address of the network where the configured private gateway interface is located as a default next-hop address;

The routing network element publishes the routing information of the cloud platform service network to the external heterogeneous network through the configured private gateway interface.

Preferably, the routing network element supports Layer 3 intercommunication between the cloud platform network and the external heterogeneous network through the routing network element, including:

The routing network element dynamically learns the routing information of the external heterogeneous network through the configured private gateway interface, and dynamically updates the private gateway routing table.

Preferably, the forwarding network element supports Layer 2 intercommunication between the cloud platform network and an external heterogeneous network through the forwarding network element, including:

The forwarding network element configures an external forwarding interface to connect to the external heterogeneous network, and configures an internal forwarding interface to connect to the service network;

The forwarding network element is configured with a forwarding table, so that the external heterogeneous network and the service network are in the same Layer 2 broadcast domain.

Compared with the existing cloud platform heterogeneous network interworking technology in the industry, the embodiment of the present invention has the following advantages:

1. Simultaneously support the interworking of Layer 2 and Layer 3 heterogeneous networks;

2. It can be integrated with existing VPN technical solutions, with higher flexibility;

3. Support hardware device implementation to reduce performance overhead.

Description of drawings

Figure 1 is a schematic diagram of public cloud customer network deployment;

2 is a schematic structural diagram of a system for realizing intercommunication between heterogeneous networks of cloud computing platforms in an embodiment of the present invention;

3 is a schematic flowchart of a method for realizing intercommunication between heterogeneous networks of cloud computing platforms according to an embodiment of the present invention;

FIG. 4 is an underlying network architecture diagram for realizing the intercommunication between the second-layer and third-layer heterogeneous networks of the cloud platform according to an embodiment of the present invention;

FIG. 5 is a relationship diagram of an internal forwarding table of a forwarding network element in an embodiment of the present invention;

FIG. 6 is an internal functional logic diagram of a routing network element in an embodiment of the present invention.

Detailed ways

The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention, but not to limit the present invention.

The embodiment of the present invention solves the problem of intercommunication between cloud platform virtual machines and external heterogeneous networks. Referring to FIG. 2, a system for intercommunication between cloud computing platform heterogeneous networks is provided, which is set between the cloud platform network and the external heterogeneous network. ; External heterogeneous network is the extended network of cloud platform business network, including: physical data center network, other cloud platform network.

The system includes: a routing network element 2 and a forwarding network element 1; the routing network element 2 can be a hardware routing device, or can be software implemented by a network namespace technology; the forwarding network element 1 can be a hardware forwarding device or a soft switch device.

The routing network element 2 is used to support the external heterogeneous network with the forwarding network element 1 to access the cloud platform network through the routing network element 2 and the forwarding network element 1;

The routing network element 2 is also used to support the three-layer intercommunication between the cloud platform network and the external heterogeneous network through the routing network element 2;

The forwarding network element 1 is also used to support Layer 2 intercommunication between the cloud platform network and the external heterogeneous network through the forwarding network element 1.

The routing network element 2 is also used to configure the private gateway interface, and is connected to the external heterogeneous network through the forwarding network element 1;

The routing network element 2 is also used to configure the internal service gateway interface to connect to the service network.

The routing network element 2 is also used to configure the private gateway routing table, and configure the gateway address of the network where the configured private gateway interface is located as the default next-hop address;

The routing network element 2 is further configured to publish the routing information of the cloud platform service network to the external heterogeneous network through the configured private gateway interface.

The routing network element 2 is further configured to dynamically learn external heterogeneous network routing information through the configured private gateway interface, and dynamically update the private gateway routing table.

The forwarding network element 1 is further configured to configure an external forwarding interface to connect to an external heterogeneous network, and configure an internal forwarding interface to connect to a service network;

The forwarding network element 1 is also used to configure a forwarding table, so that the external heterogeneous network and the service network are in the same Layer 2 broadcast domain.

With the above-mentioned system for realizing intercommunication between cloud platform virtual machines and external heterogeneous networks, an embodiment of the present invention also provides a method for intercommunication between cloud computing platform heterogeneous networks. Referring to FIG. 3 , the following steps are included:

Step 101, the external heterogeneous network accesses the cloud platform network through the routing network element 2 and the forwarding network element 1.

The execution order of step 102 and step 103 is not in any particular order, and corresponds to the implementation method of layer 3 interworking and layer 2 interworking.

Step 102, the cloud platform network communicates with the external heterogeneous network at Layer 3 through the routing network element 2.

Routing NE 2 is configured with a private gateway interface, connected to the external heterogeneous network through forwarding NE 1, and configured with an internal service gateway interface to connect to the service network.

Routing NE 2 configures the private gateway routing table, and configures the gateway address of the network where the private gateway interface is located as the default next-hop address.

The routing network element 2 publishes the routing information of the cloud platform service network to the external heterogeneous network through the private gateway interface.

The routing network element 2 dynamically learns the routing information of the external heterogeneous network through the private gateway interface, and dynamically updates the private gateway routing table.

Step 103 , communicate with the external heterogeneous network at Layer 2 through the forwarding network element 1 .

Forwarding NE 1 configures external forwarding interfaces to connect to external heterogeneous networks, and configures internal forwarding interfaces to connect to service networks.

Forwarding NE 1 is configured with a forwarding table so that the external heterogeneous network and the service network are in the same Layer 2 broadcast domain.

The forwarding network element 1 may be a hardware forwarding device or a soft switch device.

FIG. 4 is an architecture diagram of an underlying network for realizing intercommunication between a second-layer and a third-layer heterogeneous network of a cloud platform according to an embodiment of the present invention. In FIG. 4 , the routing network element 2 and the forwarding network element 1 are located on the network node, and the client hosts A and B are deployed on the computing node. Client host C is deployed on external heterogeneous network A and belongs to client network A along with client hosts A and B. Client hosts E and F are deployed on external heterogeneous network B and belong to client network B.

The Layer 2 communication path between client host C and client host A is: client host C-(tunnel 8)-forwarding network element 1-aggregation bridge 3-tunnel bridge 4-tunnel 5-tunnel bridge 6-aggregation bridge 7- Client Host A.

The Layer 2 communication path between client host C and client host B is: client host C-(tunnel 8)-forwarding network element 1-aggregation bridge 3-tunnel bridge 4-tunnel 5-tunnel bridge 6-aggregation bridge 7- Client Host B.

The Layer 3 communication path between client host E and client host A is: client host E-(tunnel 8)-forwarding NE 1-routing NE 2-aggregation bridge 3-tunnel bridge 4-tunnel 5-tunnel network Bridge 6 - Aggregation Bridge 7 - Client Host A;

The Layer 3 communication path between client host E and client host B is: client host E-(tunnel 8)-forwarding NE 1-routing NE 2-aggregation bridge 3-tunnel bridge 4-tunnel 5-tunnel network Bridge 6 - Aggregation Bridge 7 - Client Hosts A and B.

The Layer 3 communication path between client host F and client host A is: client host F-(tunnel 8)-forwarding network element 1-routing network element 2-aggregation network bridge 3-tunnel bridge 4-tunnel 5-tunnel network Bridge 6 - Aggregation Bridge 7 - Client Host A;

The Layer 3 communication path between client host F and client host B is: client host F-(tunnel 8)-forwarding NE 1-routing NE 2-aggregation bridge 3-tunnel bridge 4-tunnel 5-tunnel network Bridge 6 - Aggregation Bridge 7 - Client Host B.

The Layer 3 communication path between client host C and client host E is: client host C-(tunnel 8)-forwarding NE 1-aggregation bridge 3-routing NE 2-forwarding NE 1-(tunnel 8)-client host E.

The Layer 3 communication path between client host C and client host F is: client host C-(tunnel 8)-forwarding NE 1-aggregation bridge 3-routing NE 2-forwarding NE 1-(tunnel 8)-client host F.

FIG. 5 is a relationship diagram of an internal forwarding table of forwarding network element 1 according to an embodiment of the present invention. In Fig. 5, Table A is a classification table. According to the difference of the forwarding interface of the data packet ingress, the data packets are respectively pushed to Table B and Table C for processing. Table B processes the data packets from the internal forwarding interface, and forwards the data packets from the external network forwarding interface according to different network attributes of the data packets, such as VLAN identification information, and Table C processes the data packets from external heterogeneous networks. Different network attributes, such as tunnel 5 identification information, forward the data packets out the corresponding internal interface.

FIG. 6 is a logical diagram of the internal functions of the routing network element 2 according to the embodiment of the present invention. After the routing network element 2 receives the data packet (step 201), it queries the private gateway routing table to determine the destination address of the data packet (step 202). If the destination address is the internal service network of the cloud platform, the data packet is routed to the service gateway interface, And send out from this interface (step 203), if the destination address is an external heterogeneous network, route the data packet to the private gateway interface, and send out from this interface (step 204).

Compared with the existing cloud platform heterogeneous network interworking technology in the industry, the embodiment of the present invention has the following advantages:

1. Simultaneously support the interworking of Layer 2 and Layer 3 heterogeneous networks;

2. It can be integrated with existing VPN technical solutions, with higher flexibility;

3. Support hardware device implementation to reduce performance overhead.

Those of ordinary skill in the art can understand that all or part of the steps of implementing the above method embodiments can be completed by program instructions related to hardware, the aforementioned program can be stored in a computer-readable storage medium, and when the program is executed, execute Including the steps of the above method embodiment; and the aforementioned storage medium includes: a mobile storage device, a random access memory (RAM, Random Access Memory), a read-only memory (ROM, Read-Only Memory), a magnetic disk or an optical disk and other various A medium on which program code can be stored.

Alternatively, if the above-mentioned integrated unit of the present invention is implemented in the form of a software function module and sold or used as an independent product, it may also be stored in a computer-readable storage medium. Based on such understanding, the technical solutions of the embodiments of the present invention may be embodied in the form of software products in essence or the parts that make contributions to related technologies. The computer software products are stored in a storage medium and include several instructions for making A computer device (which may be a personal computer, a server, or a network device, etc.) executes all or part of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes: a removable storage device, a RAM, a ROM, a magnetic disk or an optical disk and other mediums that can store program codes.

The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention. should be included within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (10)

1. The system for intercommunication between heterogeneous networks of a cloud computing platform is characterized in that the system is arranged between the cloud platform network and an external heterogeneous network;

the system comprises: a routing network element and a forwarding network element;

the routing network element and the forwarding network element are used for supporting an external heterogeneous network to access a cloud platform network through the routing network element and the forwarding network element;

the routing network element is further configured to support the cloud platform network to communicate with the external heterogeneous network through the routing network element; the routing network element inquires the destination address of the data packet; sending the data packet through an internal service gateway interface under the condition that the destination address is an internal service network of the cloud platform; sending the data packet out through a private gateway interface under the condition that the destination address is an external heterogeneous network;

the forwarding network element is also used for supporting the two-layer intercommunication between the cloud platform network and AN external heterogeneous network through the forwarding network element, sending a data packet received by the internal forwarding interface through a corresponding external network forwarding interface according to the virtual local area network V L AN identification information of the data packet, and sending the data packet received by the external network interface through a corresponding internal interface according to the tunnel identification information of the data packet.

2. The system of claim 1,

the routing network element is further configured to configure a private gateway interface, and connect to the external heterogeneous network through the forwarding network element;

the routing network element is further configured to configure an internal service gateway interface to connect to the service network.

3. The system of claim 1,

the routing network element is further configured to configure a private gateway routing table, and configure a gateway address of a network where the configured private gateway interface is located as a default next hop address;

the routing network element is further configured to publish routing information of the cloud platform service network to the external heterogeneous network through the configured private gateway interface.

4. The system of claim 1,

the routing network element is further configured to dynamically learn the routing information of the external heterogeneous network through the configured private gateway interface, and dynamically update a private gateway routing table.

5. The system of claim 1,

the forwarding network element is further configured to configure an external forwarding interface to connect to the external heterogeneous network, and configure an internal forwarding interface to connect to the service network;

the forwarding network element is further configured to configure a forwarding table, so that the external heterogeneous network and the service network are in the same two-layer broadcast domain.

6. A method for intercommunication between heterogeneous networks of a cloud computing platform is characterized in that a routing network element and a forwarding network element are arranged between a cloud platform network and an external heterogeneous network;

the method comprises the following steps:

the routing network element and the forwarding network element support an external heterogeneous network to access a cloud platform network through the routing network element and the forwarding network element;

the routing network element supports the cloud platform network to be communicated with the external heterogeneous network through the routing network element;

the routing network element inquires the destination address of the data packet; sending the data packet through an internal service gateway interface under the condition that the destination address is an internal service network of the cloud platform; sending the data packet out through a private gateway interface under the condition that the destination address is an external heterogeneous network;

the forwarding network element supports the two-layer intercommunication of the cloud platform network and an external heterogeneous network through the forwarding network element;

the forwarding network element sends the data packet received by the internal forwarding interface through the corresponding external network forwarding interface according to the virtual local area network V L AN identification information of the data packet, and sends the data packet received by the external network interface through the corresponding internal interface according to the tunnel identification information of the data packet.

7. The method of claim 6, wherein the routing network element supports the cloud platform network to interwork with the external heterogeneous network through three layers of the routing network element, and comprises:

the routing network element is configured with a private gateway interface and is connected to the external heterogeneous network through the forwarding network element;

and the routing network element configures an internal service gateway interface to be connected to the service network.

8. The method of claim 6, wherein the routing network element supports the cloud platform network to interwork with the external heterogeneous network through three layers of the routing network element, and comprises:

the routing network element configures a private gateway routing table, and configures a gateway address of a network where a configured private gateway interface is located as a default next hop address;

and the routing network element issues the routing information of the cloud platform service network to the external heterogeneous network through the configured private gateway interface.

9. The method of claim 6, wherein the routing network element supports the cloud platform network to interwork with the external heterogeneous network through three layers of the routing network element, and comprises:

and the routing network element dynamically learns the routing information of the external heterogeneous network through the configured private gateway interface and dynamically updates a private gateway routing table.

10. The method of any one of claims 6 to 9, wherein the forwarding network element supports the cloud platform network to interwork with an external heterogeneous network layer two through the forwarding network element, and comprises:

the forwarding network element configures an external forwarding interface to connect with the external heterogeneous network, and configures an internal forwarding interface to connect with the service network;

and the forwarding network element configures a forwarding table to enable the external heterogeneous network and the service network to be in the same two-layer broadcast domain.

Images