CN107547347B

CN107547347B - VNI-based path adjustment method and device

Info

Publication number: CN107547347B
Application number: CN201710610806.6A
Authority: CN
Inventors: 程剑锋; 高瑞昌
Original assignee: Hangzhou H3C Technologies Co Ltd
Current assignee: Hangzhou H3C Technologies Co Ltd
Priority date: 2017-07-25
Filing date: 2017-07-25
Publication date: 2020-06-09
Anticipated expiration: 2037-07-25
Also published as: CN107547347A

Abstract

The application provides a VNI-based path adjustment method and a VNI-based path adjustment device. In the application, when the VXLAN tunnel between any two VTEPs in the networking fails to cause data flow obstruction, instead of replanning and adjusting the nodes related to the VXLAN tunnel, the existing normal VXLAN tunnel is used to forward the message originally transmitted through the failed VXLAN tunnel through an unused VNI, and the message transmission between two ends of the failed VXLAN tunnel is quickly recovered.

Description

VNI-based path adjustment method and device

Technical Field

The present application relates to Network communication technologies, and in particular, to a method and an apparatus for adjusting a path based on a Network Identifier (VNI) of a virtual extensible local area Network (VXLAN).

Background

And the VXLAN encapsulates the two-layer message by using a three-layer protocol, thereby realizing the extension of the two-layer network within the range of three layers. The VXLAN network comprises:

VXLAN Tunnel End Points (VTEP), edge devices of a VXLAN network are the starting point and the end point of the VXLAN Tunnel, and when the VXLAN Tunnel end points are used as the starting point of the VXLAN Tunnel, the message is subjected to VXLAN encapsulation, and when the VXLAN Tunnel end points are used as the end point of the VXLAN Tunnel, the message subjected to VXLAN encapsulation is subjected to decapsulation and processing.

VNIs, a user identifier similar to a VLAN ID, one VNI represents a tenant, and two-layer communication cannot be directly performed between virtual machines belonging to different VNIs.

The VXLAN tunnel is used for transmitting messages encapsulated by VXLAN, and is a virtual channel established between two VTEPs. In VXLAN encapsulation, the outer destination MAC is the MAC for the next hop of the tunnel, typically the MAC for the next hop router, the outer destination IP is the IP address of the destination VTEP, the source IP address is the IP address of the local VTEP, and the destination port of the outer UDP is a port specific to VXLAN.

When receiving the message, the VTEP determines a Virtual Switch Interface (VSI: Virtual Switch Interface) Identifier (ID) which is bound by a connection Circuit (AC: Attachment Circuit) port of the received message and corresponds to the VLAN to which the message belongs, performs VXLAN encapsulation on the message according to the VXLAN tunnel corresponding to the determined VSI ID, and forwards the message through the VXLAN tunnel corresponding to the determined VSI ID.

Disclosure of Invention

The application provides a VNI-based path adjustment method and a VNI-based path adjustment device, so that the VNI-based path adjustment is realized.

The technical scheme provided by the application comprises the following steps:

a path adjustment method based on a network identifier (VNI) of a scalable virtual local area network (VXLAN) is applied to a first VTEP and comprises the following steps:

if a first VXLAN Tunnel between a first VTEP and a second VTEP fails, a first VNI corresponding to a VSI bound by a local first AC port is modified into an unused second VNI, and a second VNI is bound by a normal second VXLAN Tunnel between the first VTEP and a third VTEP, wherein the third VTEP is connected with the second VTEP through a normal third VXLAN Tunnel, and the first VNI is a VNI bound by the first VXLAN Tunnel;

receiving a first message through the first AC port; the first message is a message sent to the second VTEP;

and switching the first message originally forwarded by the first VXLAN Tunnel to the second VXLAN Tunnel for forwarding according to the modification and the binding, so that the first message is sent to a second VTEP through a normal third VXLAN Tunnel.

A path adjusting method based on a network identifier (VNI) of a scalable virtual local area network (VXLAN) is applied to an SDN controller and comprises the following steps:

when a first VXLAN Tunnel fault from a first VTEP to a second VTEP is detected, issuing a VNI modification instruction to the first VTEP and the second VTEP, wherein the VNI modification instruction is used for indicating that a first VNI corresponding to a VSI bound to an AC port of a second layer access circuit is modified into an unused second VNI, and the first VNI is a VNI bound to the first VXLAN Tunnel;

and determining at least one VXLAN Tunnel from the first VTEP to the second VTEP from all the existing normal VXLAN tunnels, and issuing a VNI binding instruction to the Tunnel source end of each determined VXLAN Tunnel, wherein the VNI binding instruction is used for indicating the determined VXLAN Tunnel to bind the second VNI.

A path adjustment apparatus based on a network identifier VNI of a scalable virtual local area network VXLAN, the apparatus being applied to a first VTEP, and comprising:

a configuration unit, configured to, when a first VXLAN Tunnel between a first VTEP and a second VTEP fails, modify a first VNI corresponding to a VSI bound to a local first AC port to an unused second VNI, and bind a normal second VXLAN Tunnel between the first VTEP and a third VTEP to the second VNI, where the third VTEP is connected to the second VTEP through a normal third VXLAN Tunnel, and the first VNI is a VNI bound to the first VXLAN Tunnel;

a receiving unit, configured to receive a first packet through the first AC port; the first message is a message sent to the second VTEP;

and the forwarding unit is used for switching the first message originally forwarded by the first VXLANNTunnel to the second VXLAN Tunnel for forwarding according to the modification and binding executed by the configuration unit, so that the first message is sent to the second VTEP through a normal third VXLAN Tunnel.

A path adjusting device based on a network identifier (VNI) of a scalable virtual local area network (VXLAN), which is applied to an SDN controller, comprises:

a VNI modification unit, configured to issue a VNI modification instruction to the first VTEP and the second VTEP when a failure of a first VXLAN primary of the first VTEP to the second VTEP is detected, where the VNI modification instruction is used to instruct to modify a first VNI corresponding to a VSI bound to an AC interface of a second layer access circuit to an unused second VNI, and the first VNI is a VNI bound to a first VXLAN Tunnel;

the path planning unit is used for determining at least one VXLAN Tunnel from a first VTEP to a second VTEP from all the existing normal VXLAN tunnels, and issuing a VNI binding instruction to the Tunnel source end of each determined VXLAN Tunnel, wherein the VNI binding instruction is used for indicating the determined VXLAN Tunnel to bind the second VNI; and the number of the first and second groups,

setting the incoming direction horizontal split of the VTEP to be not enabled, which satisfies the following conditions: a Tunnel source other than the first VTEP and being the determined VXLAN Tunnel.

According to the technical scheme, when the data flow is blocked due to the failure of the VXLAN tunnel between any two VTEPs in the networking, the nodes related to the VXLAN tunnel are not planned and adjusted again, but the message transmitted through the failed VXLAN tunnel is forwarded by using the existing normal VXLAN tunnel through an unused VNI, and the message transmission between two ends of the failed VXLAN tunnel is recovered quickly.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and together with the description, serve to explain the principles of the disclosure.

Fig. 1 is a schematic diagram of VXLAN networking provided by the present application;

FIG. 2 is a flow chart of a method provided herein;

FIG. 3 is a schematic diagram of application networking according to an embodiment provided herein;

FIG. 4 is a schematic diagram of the apparatus provided herein;

fig. 5 is a schematic structural diagram of another apparatus provided in the present application.

Detailed Description

In the VXLAN service application, an SDN controller collects the network topology of the whole network and issues VXLAN tunnel configuration to each VTEP in the network according to the resources and requirements of the whole network so as to establish VXLAN tunnels among the VTEPs.

As shown in fig. 1, in the VXLAN networking, the SDN controller issues VXLAN tunnel configuration to VTEP1, VTEP2, and VTEP3, VTEP1, VTEP2, and VTEP3 establish VXLAN tunnels based on the received VXLAN configuration, for example, VXLAN tunnel 1_1 is established between VTEP1 and VTEP2, VXLAN tunnel 1_2 is established between VTEP1 and VTEP3, and VXLAN tunnel 1_3 is established between VTEP2 and VTEP 3.

After VXLAN tunnels are established between VTEPs, VXLAN tunnels between nodes bind corresponding VNIs, for example, VXLAN tunnel 1_1 shown in fig. 1 binds VNI10, which means that data flow between VTEP1 and VTEP2 is forwarded through VXLAN tunnel 1_1 via VNI 10; the T VXLAN tunnel 1_2 shown in fig. 1 binds VNI20, meaning that data flow between VTEP1 and VTEP3 is forwarded through VXLAN tunnel 1_2 via VNI 20; VXLAN tunnel 1_1 shown in fig. 1 binds VNI30, meaning that data flow between VTEP2 and VTEP3 is forwarded through VXLAN tunnel 1_3 via VNI 30.

However, when the VXLAN tunnel between any two VTEPs in the networking, for example, VXLAN tunnel 1_1 between VTEP1 and VTEP2, fails to pass through the data flow, the path needs to be re-planned, as shown in fig. 2 in particular.

Referring to fig. 2, fig. 2 is a flow chart of a method provided by the present application. The process is applied to a first VTEP, where the first VTEP is generally any VTEP in a network, and is only named for convenience of description and is not used to limit the present application.

As shown in fig. 2, the streaming may include the steps of:

step 201, when a first VXLAN Tunnel between a first VTEP and a second VTEP fails, a first VNI corresponding to a VSI bound to a local first AC port is modified to an unused second VNI, and a second VNI bound to a normal second VXLAN Tunnel between the first VTEP and a third VTEP is bound to the second VNI, where the first VNI is a VNI bound to the first VXLAN Tunnel.

The first AC port is a layer two port supporting the VLAN mapped by the first VNI on the first VTEP and the second VTEP.

As an example, the third VTEP is connected to the second VTEP via a normal third VXLAN Tunnel. It can be seen that in the present application, when a first VXLAN Tunnel between a first VTEP and a second VTEP fails, instead of re-planning and adjusting the nodes involved in the first VXLAN Tunnel, a normal VXLAN Tunnel capable of reaching the second VTEP, such as a normal second VXLAN Tunnel between the first VTEP and a third VTEP, is selected again from the existing normal VXLAN tunnels, and the message received by the first AC port is finally forwarded to the second VTEP through the selected VXLAN Tunnel, which is described below in step 102.

Step 202, a first VTEP receives a first message through a first AC port; and the first message is a message sent to the second VTEP, and the first message originally forwarded by the first VXLAN Tunnel is switched to the second VXLAN Tunnel for forwarding according to the modification and binding, so that the first message is sent to the second VTEP through the existing normal third VXLAN Tunnel.

As can be seen from step 202, the message originally forwarded via the first VXLAN Tunnel is finally forwarded to the second VTEP via the existing normal VXLAN Tunnel.

Thus, the flow shown in fig. 2 is completed.

As can be seen from the flow shown in fig. 2, in the present application, when a VXLAN tunnel failure between any two VTEPs in the networking causes data flow to be blocked, instead of replanning and adjusting the nodes related to the VXLAN tunnel, an unused VNI is used to forward a packet originally transmitted through the failed VXLAN tunnel by using an existing normal VXLAN tunnel, so as to quickly recover the packet transmission between two ends of the failed VXLAN tunnel.

The flow shown in fig. 2 is described below by a specific embodiment:

referring to fig. 3, fig. 3 is a schematic diagram of an embodiment of VXLAN networking provided by the present application. As shown in fig. 3, VXLAN tunnel 3_1 is established between VTEP301 and VTEP302, VXLAN tunnel 3_2 is established between VTEP301 and VTEP303, and VXLAN tunnel 3_3 is established between VTEP303 and VTEP 302. VXLAN tunnel 3_1 binds VNI101, VXLAN tunnel 3_2 binds VNI102, and VXLAN tunnel 3_3 binds VNI 103.

In fig. 3, the AC port 201 on the VTEP301 is bound with a VSI401, the VSI401 has a mapping relationship with the VLAN501, and the VSI401 corresponds to the VNI 101. The AC port 202 on the VTEP302 binds the VSI402, the VSI402 has a mapping relationship with the VLAN501, and the VSI402 corresponds to the VNI 101.

In fig. 3, if VXLAN Tunnel 3_1 established between VTEP301 and VTEP302 fails, when the SDN controller senses VXLAN Tunnel 3_1, at least one VXLAN Tunnel passing from VTEP301 to VTEP302 is determined from all the existing normal VXLAN tunnels, here, it is assumed that the determined VXLAN Tunnel is VXLAN Tunnel 3_2 and VXLAN Tunnel 3_ 3.

The SDN controller issues VNI modification instructions to VTEP301, VTEP302, and,

the SDN controller issues a first VNI binding instruction to the determined VTEP301 as the tunnel source end of the VXLAN tunnel 3_2, and issues a second VNI binding instruction to the determined VTEP303 as the tunnel source end of the VXLAN tunnel 3_ 3.

VTEP301 receives a VNI modification instruction, and modifies VNI101 corresponding to VSI401 bound to AC port 201 into a new VNI (denoted as VNI104) according to the received VNI modification instruction. And VTEP301 receives the first VNI binding instruction, and binds VXLAN tunnel 3_2 to VNI104 according to the first VNI binding instruction.

VTEP302 receives a VNI modification instruction, and modifies VNI101 corresponding to VSI402 bound by AC port 202 into a new VNI (denoted as VNI104) according to the received VNI modification instruction.

VTEP303 receives the second VNI binding instruction, and binds VXLAN tunnel 3_3 to VNI104 according to the second VNI binding instruction. In this embodiment, in order to ensure that the VTEP303 continues to send the message with the VNI104 through the VXLAN tunnel 3_3 when receiving the message with the VNI104 through the VXLAN tunnel 3_2, it is necessary to set the ingress direction horizontal splitting of the VXLAN port of the VXLAN tunnel 3_2 of the VTEP303 to be disabled.

VTEP301 receives message 700 via AC port 201. The source IP address of the packet 700 is the IP address of the server (denoted as S1) directly connected to the AC port 201, and the destination IP address is the IP address of the server (denoted as S2) directly connected to the AC port 202 of the VTEP 302. The VLAN to which the message 700 belongs is VLAN 501.

VTEP301 finds VSI401 bound to AC port 201 from VLAN 501.

VTEP301 finds that VSI401 corresponds to VNI104, and determines the VXLAN tunnel bound to VNI104, i.e., VXLAN tunnel 3_ 2.

VTEP301 performs VXLAN encapsulation on packet 700 according to VXLAN tunnel 3_2 and VNI 104. The message 700 encapsulated by VXLAN is recorded as a message 701. The VNI in the VXLAN encapsulation is VNI104, the tunnel source address is the IP address of VTEP301, and the tunnel destination address is the IP address of VTEP 303.

VTEP301 sends message 701 through VXLAN tunnel 3_ 2.

VTEP303 receives message 701 through VXLAN port of VXLAN tunnel 3_ 2.

VTEP303 determines, according to VNI104 in the VXLAN encapsulation of message 701, VXLAN tunnel 3_3, bound to VNI 104.

VTEP303 decapsulates message 701 by VXLAN, thereby recovering message 700 described above.

The VTEP303 finds that the ingress direction horizontal splitting of the VXLAN port of VXLAN tunnel 3_2 of the VTEP303 is not enabled, and performs VXLAN encapsulation on the message 700 according to VXLAN tunnel 3_3 and VNI 104. At this time, the message 700 encapsulated by VXLAN is recorded as a message 702. The VNI in the VXLAN encapsulation is VNI104, the tunnel source address is the IP address of VTEP303, and the tunnel destination address is the IP address of VTEP 302.

VTEP303 sends message 702 through VXLAN tunnel 3_ 3.

VTEP302 receives message 702 through VXLAN port of VXLAN tunnel 3_ 3.

VTEP302 identifies VNI104 in the VXLAN encapsulation of message 702 and determines the VXLAN tunnel bound to VNI104, i.e., VXLAN tunnel 3_ 3.

VTEP302 decapsulates message 702 by VXLAN, i.e. recovers message 700 as described above.

The VTEP302 finds that the destination IP address of the message 700 is the IP address of the local S2, determines the corresponding VSI402 according to the identified VNI104, and forwards the message 700 through the AC port 202 bound to the VSI 402. Eventually S2 local to VTEP302 will receive message 700.

Thus, when the VXLAN tunnel 3_1 between the VTEP301 and the VTEP302 fails, the VTEP301 still sends the message to the VTEP302 according to the existing VXLAN tunnel 3_2 and VXLAN tunnel 3_ 3.

It can be seen that, in the present application, once VXLAN tunnel 3_2 between VTEP301 and VTEP302 fails, the VNI can select the existing normal VXLAN tunnel, i.e., VXLAN tunnel 3_2 and VXLAN tunnel 3_3, to transmit the message originally transmitted through the failed VXLAN tunnel 3_2, and quickly resume the message transmission between VTEP301 and VTEP 302.

The method provided by the present application is described above, and the device provided by the present application is described below:

referring to fig. 4, fig. 4 is a diagram illustrating the structure of the apparatus according to the present invention. The device is applied to a first VTEP and comprises:

As an embodiment, the VNI configuration unit further binds the second VXLAN Tunnel to a fourth VNI, where the fourth VNI is obtained by modifying a third VNI corresponding to a VSI on a fourth VTEP when the fourth VXLAN Tunnel between the fourth VTEP and the third VTEP fails, and the third VNI is a VNI bound by the fourth VXLAN Tunnel;

the receiving unit further receives a second message through a VXLAN port of a fifth VXLAN Tunnel between the first VTEP and the third VTEP; the second message is a message sent to the third VTEP;

the forwarding unit further determines a second VXLANNTunnel according to a fourth VNI in VXLAN encapsulation of the second message, performs VXLAN decapsulation on the second message, performs VXLAN encapsulation on the decapsulated second message again according to the fourth VNI and the determined second VXLAN Tunnel, and forwards the decapsulated second message to a third VTEP through the second VXLAN Tunnel.

As an embodiment, the configuration unit further sets that the ingress direction horizontal splitting of the VXLAN port of the fifth VXLAN Tunnel is not enabled, so that the packet entering from the VXLAN port can also continue to be forwarded through other VXLAN networks.

Thus, the description of the device structure shown in fig. 4 is completed.

Referring to fig. 5, fig. 5 is a block diagram of another apparatus provided in the present application. The device is applied to the SDN controller and comprises:

a VNI modification unit, configured to issue a VNI modification instruction to the first VTEP and the second VTEP when a failure of a first VXLAN Tunnel from the first VTEP to the second VTEP is detected, where the VNI modification instruction is used to instruct to modify a first VNI corresponding to a VSI bound to an AC interface of a second layer access circuit into an unused second VNI, and the first VNI is a VNI bound to the first VXLAN Tunnel;

Thus, the description of the structure of the apparatus shown in fig. 5 is completed.

The above description is only exemplary of the present application and should not be taken as limiting the present application, as any modification, equivalent replacement, or improvement made within the spirit and principle of the present application should be included in the scope of protection of the present application.

Claims

1. A path adjustment method based on a network identifier (VNI) of a scalable virtual local area network (VXLAN) is applied to a first VTEP and comprises the following steps:

if a first VXLAN Tunnel between a first VTEP and a second VTEP fails, modifying a first VNI corresponding to a VSI bound by a local first access circuit AC port into an unused second VNI, and binding a normal second VXLAN Tunnel between the first VTEP and a third VTEP to the second VNI, wherein the third VTEP is connected with the second VTEP through the normal third VXLAN Tunnel, and the first VNI is a VNI bound by the first VXLAN Tunnel;

receiving a first message through a first AC port; the first message is a message sent to the second VTEP;

2. The method of claim 1, further comprising:

binding the second VXLAN Tunnel to a fourth VNI, wherein the fourth VNI is obtained by modifying a third VNI corresponding to a VSI on a fourth VTEP when the fourth VXLAN Tunnel between the fourth VTEP and the third VTEP fails, and the third VNI is a VNI bound by the fourth VXLAN Tunnel;

receiving a second message through a VXLAN port of a fifth VXLAN Tunnel between the first VTEP and the third VTEP; the second message is a message sent to the third VTEP;

determining the second VXLAN Tunnel according to a fourth VNI in VXLAN encapsulation of the second message;

and carrying out VXLAN decapsulation on the second message, carrying out VXLAN encapsulation on the decapsulated second message again according to the fourth VNI and the determined second VXLAN Tunnel, and forwarding the decapsulated second message to a third VTEP through the second VXLAN Tunnel.

3. The method of claim 2, further comprising:

and setting the horizontal division of the entering direction of the VXLAN port of the fifth VXLAN Tunnel to be disabled, so that the message entering from the VXLAN port can be forwarded through other VXLAN tunnels continuously.

4. The method of claim 1, wherein the modification is performed according to a VNI modification instruction issued by an SDN controller;

the binding is executed according to a VNI binding instruction issued by an SDN controller; the VNI binding instruction is issued when the SDN controller determines, from all existing normal VXLAN tunnels, that at least one VXLAN Tunnel that arrives at the second VTEP is replaced with the first VXLAN Tunnel.

5. A path adjusting method based on a network identifier (VNI) of a scalable virtual local area network (VXLAN) is applied to an SDN controller and comprises the following steps:

6. The method of claim 5, further comprising:

7. A path adjustment apparatus based on a network identifier VNI of a scalable virtual local area network VXLAN, the apparatus being applied to a first VTEP, and comprising:

a configuration unit, configured to, when a first VXLAN Tunnel between a first VTEP and a second VTEP fails, modify a first VNI corresponding to a VSI bound to a local first access circuit AC port to an unused second VNI, and bind a normal second VXLAN Tunnel between the first VTEP and a third VTEP to the second VNI, where the third VTEP is connected to the second VTEP through a normal third VXLAN Tunnel, and the first VNI is a VNI bound to the first VXLAN Tunnel;

a receiving unit, configured to receive a first packet through a first AC interface; the first message is a message sent to the second VTEP;

8. The apparatus according to claim 7, wherein the VNI configuration unit further binds the second vxlannnel to a fourth VNI, where the fourth VNI is obtained by modifying a third VNI corresponding to a VSI on a fourth VTEP when the fourth VXLAN Tunnel between the fourth VTEP and the third VTEP fails, and the third VNI is a VNI bound by the fourth VXLAN Tunnel;

9. The apparatus according to claim 8, wherein the configuration unit further sets an ingress direction horizontal splitting of the VXLAN port of the fifth VXLAN packet not enabled, so that the incoming packet from the VXLAN port can be further forwarded through other VXLAN tunnels.

10. A path adjusting device based on a network identifier (VNI) of a scalable virtual local area network (VXLAN), the device is applied to an SDN controller, and the device comprises: