CN108418740B

CN108418740B - Message processing method and device

Info

Publication number: CN108418740B
Application number: CN201810167035.2A
Authority: CN
Inventors: 唐成; 黄李伟
Original assignee: Hangzhou H3C Technologies Co Ltd
Current assignee: Hangzhou H3C Technologies Co Ltd
Priority date: 2018-02-28
Filing date: 2018-02-28
Publication date: 2020-09-08
Anticipated expiration: 2038-02-28
Also published as: CN108418740A

Abstract

The invention relates to a message processing method and device. The message processing method comprises the following steps: the method comprises the steps that a first VTEP receives a migration message sent by a second VTEP, an output port used for carrying out communication interaction with a VM is determined from a forwarding table stored by the first VTEP according to identification information of the VM included by the migration message, a detection message is sent to a switching device through the output port, and the detection message comprises an MAC address of the VM, so that the switching device sends the detection message to the VM according to the MAC address of the VM, and updates the forwarding table stored by the switching device according to whether a response message fed back by the VM is received within a preset time length, and therefore the switching device can sense virtual machine migration, timely updates the forwarding table stored by the switching device, and guarantees normal forwarding of service flow.

Description

Message processing method and device

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a method and an apparatus for processing a packet.

Background

An Ethernet Virtual Private Network (EVPN) is a two-layer Virtual Private Network (VPN) technology, where a control plane advertises EVPN routing information using a Multi-Protocol Border Gateway Protocol (MP-BGP), and a data plane forwards a packet using a Virtual extended Local area Network (VXLAN) encapsulation method.

Virtual Machine (VM) migration is a commonly used technique in EVPN, and refers to migrating a VM from a VXLAN Tunnel End Point (VTEP) or a switching device to which the VM accesses, to another VTEP or a switching device in a data center network, thereby improving the reliability of the Virtual Machine.

Fig. 1 shows a schematic diagram of virtual machine migration in the related art. As shown in fig. 1, before VM1 is migrated, VM1 and VM2 Access VTEP1 through a Local Access Network Switch (LSW) respectively, and VM3 accesses VTEP 3. After VM1 migration, VM1 accesses VTEP2, VM2 connects through LSW access VTEP1, and VM3 accesses VTEP 3.

As shown in fig. 1, prior to VM1 migrating, if VM2 wants to access VM1, VM2 may access VM1 via the LSW, i.e., Port3, the egress Port in the forwarding table on the LSW for communicative interaction with VM 1. After VM1 is migrated, the forwarding table on VTEP1 may be updated according to the migration message received from VTEP2, that is, the egress Port in the forwarding table on VTEP1 for performing communication interaction with VM1 is updated to Tunnel1 by Port 1. But LSW cannot perceive that VM1 has migrated, the egress Port in the forwarding table on LSW for communication interaction with VM1 is still Port 3. Therefore, when the traffic forwarded to the VM1 by the VM2 passes through the LSW, the traffic is still forwarded through the Port3, which causes packet forwarding errors and service traffic interruption.

Disclosure of Invention

In view of this, the present invention provides a message processing method and apparatus, so as to solve the problems in the related art that a forwarding table stored in a switching device cannot be updated in time due to the switching device being unable to sense virtual machine migration, and thus a message forwarding error and service traffic interruption are caused.

In a first aspect, the present invention provides a message processing method, where the method is used for a first VXLAN tunnel endpoint VTEP, and the method includes:

receiving a migration message sent by a second VTEP, wherein the migration message comprises identification information of a Virtual Machine (VM), and the VM is a VM migrated from a first VTEP to the second VTEP;

according to the identification information of the VM, determining an exit port for performing communication interaction with the VM from a forwarding table stored by the first VTEP;

and sending a detection message to the switching equipment through the output port, wherein the detection message comprises the MAC address of the VM, and is used for enabling the switching equipment to send the detection message to the VM according to the MAC address of the VM and update a forwarding table stored by the switching equipment according to whether a response message fed back by the VM is received within a preset time length.

With reference to the first aspect, in a first implementation manner, the migration packet further includes routing information of the VM, and the method further includes:

and updating an egress port used for performing communication interaction with the VM in a forwarding table stored by the first VTEP to be an identifier of a first VXLAN tunnel according to the routing information of the VM, where the first VXLAN tunnel is a VXLAN tunnel between the first VTEP and the second VTEP.

With reference to the first aspect or the first implementation manner of the first aspect, in a second implementation manner, after receiving a migration packet sent by a second VTEP, the method further includes:

judging whether the first VTEP starts a detection mode, wherein the detection mode is used for detecting whether the first VETP is connected with a VM through exchange equipment;

if the first VTEP has started a detection mode, determining an exit port for performing communication interaction with the VM from a forwarding table stored by the first VTEP according to the identification information of the VM;

and if the detection mode is not started by the first VTEP, updating an egress port used for communication interaction with the VM in a forwarding table stored by the first VTEP to be the identifier of the first VXLAN tunnel according to the routing information of the VM.

With reference to the first aspect, in a third implementation manner, the detection packet is a data packet or an address resolution protocol, ARP, packet.

In a second aspect, the present invention provides a message processing method, where the method is used for a switching device, and the method includes:

receiving a detection message sent by a first VTEP, wherein the detection message comprises an MAC address of a Virtual Machine (VM), and the VM is a VM migrated from the first VTEP to a second VTEP;

according to the MAC address of the VM, determining an output port for performing communication interaction with the VM from a forwarding table stored by the switching equipment;

sending the detection message to the VM through the output port;

and updating the forwarding table stored in the switching equipment according to whether the response message fed back by the VM is received within a preset time length.

With reference to the second aspect, in a first implementation manner, the updating, according to whether a response packet fed back by the VM is received within a preset time, a forwarding table stored in the switching device includes:

and when the response message fed back by the VM is not received within a preset time length, updating an output port used for performing communication interaction with the VM in a forwarding table stored in the switching equipment to be an identifier of a first port, wherein the first port is a port of the switching equipment which receives the detection message.

With reference to the second aspect, in a second implementation manner, the updating, according to whether the response packet fed back by the VM is received within a preset time, the forwarding table stored in the switching device includes:

and when a response message fed back by the VM is received within a preset time, keeping an output port used for communication interaction with the VM in a forwarding table stored by the switching equipment unchanged.

In a third aspect, the present invention provides a packet processing apparatus, where the apparatus is used for a first VXLAN tunnel endpoint VTEP, and the apparatus includes:

a migration message receiving module, configured to receive a migration message sent by a second VTEP, where the migration message includes identification information of a virtual machine VM, and the VM is a VM migrated from a first VTEP to the second VTEP;

a first egress port determining module, configured to determine, according to the identifier information of the VM, an egress port for performing communication interaction with the VM from a forwarding table stored in the first VTEP;

and the first detection message sending module is used for sending a detection message to the switching equipment through the output port, wherein the detection message comprises the MAC address of the VM, and is used for enabling the switching equipment to send the detection message to the VM according to the MAC address of the VM and update the forwarding table stored by the switching equipment according to whether a response message fed back by the VM is received within a preset time length.

With reference to the third aspect, in a first implementation manner, the migration packet further includes routing information of the VM, and the apparatus further includes:

and a first forwarding table updating module, configured to update an egress port, used for performing communication interaction with the VM, in the forwarding table stored in the first VTEP to an identifier of a first VXLAN tunnel according to the routing information of the VM, where the first VXLAN tunnel is a VXLAN tunnel between the first VTEP and the second VTEP.

With reference to the third aspect, or with reference to the first implementation manner of the third aspect, in a second implementation manner, the apparatus further includes:

a determining module, configured to determine whether a probing mode is started by the first VTEP, where the probing mode is used to detect whether the first VETP is connected to a VM through a switching device;

a first egress port determining module, configured to determine, according to the identifier information of the VM, an egress port for performing communication interaction with the VM from a forwarding table stored in the first VTEP if the first VTEP has started a probe mode;

and a first forwarding table updating module, configured to update, according to the routing information of the VM, an egress port, which is used for performing communication interaction with the VM, in a forwarding table stored in the first VTEP to an identifier of a first VXLAN tunnel if the first VTEP does not start the probe mode.

With reference to the third aspect, in a third implementation manner, the detection packet is a data packet or an address resolution protocol, ARP, packet.

In a fourth aspect, the present invention provides a packet processing apparatus, where the apparatus is used for a switching device, and the apparatus includes:

a detection message receiving module, configured to receive a detection message sent by a first VTEP, where the detection message includes an MAC address of a virtual machine VM, and the VM is a VM migrated from the first VTEP to a second VTEP;

a second egress port determining module, configured to determine, according to the MAC address of the VM, an egress port for performing communication interaction with the VM from a forwarding table stored in the switching device;

a second detection message sending module, configured to send the detection message to the VM through the egress port;

and the second forwarding table updating module is used for updating the forwarding table stored in the switching equipment according to whether the response message fed back by the VM is received within the preset time.

With reference to the fourth aspect, in a first implementation manner, the second forwarding table updating module includes:

and the first updating sub-module is configured to update an egress port, which is used for performing communication interaction with the VM, in a forwarding table stored in the switching device to be an identifier of a first port when a response message fed back by the VM is not received within a preset time, where the first port is a port through which the switching device receives the detection message.

With reference to the fourth aspect, in a second implementation manner, the second forwarding table updating module includes:

and the second updating submodule is used for keeping an output port, which is used for performing communication interaction with the VM, in a forwarding table stored by the switching equipment unchanged when receiving a response message fed back by the VM within a preset time length.

In a fifth aspect, the present invention provides a packet processing apparatus, including: a processor and a machine-readable storage medium storing machine-executable instructions executable by the processor to implement the message processing method described above.

In a sixth aspect, the present invention provides a non-transitory computer readable storage medium having stored thereon computer program instructions which, when executed by a processor, implement the message processing method described above.

Therefore, by applying the message processing method and apparatus provided by the embodiment of the present invention, the first VTEP receives the migration message sent by the second VTEP, determines the egress port for performing communication interaction with the VM from the forwarding table stored in the first VTEP according to the identification information of the VM included in the migration message, and sends the probe message to the switching device through the egress port, where the probe message includes the MAC address of the VM, so that the switching device sends the probe message to the VM according to the MAC address of the VM, and updates the forwarding table stored in the switching device according to whether the response message fed back by the VM is received within the preset time, thereby implementing that the switching device can sense the migration of the virtual machine, and timely update the forwarding table stored in the switching device, and ensure that the traffic flow is normally forwarded.

Other features and aspects of the present invention will become apparent from the following detailed description of exemplary embodiments, which proceeds with reference to the accompanying drawings.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate exemplary embodiments, features, and aspects of the invention and, together with the description, serve to explain the principles of the invention.

Fig. 1 shows a schematic diagram of virtual machine migration in the related art.

FIG. 2 illustrates a schematic diagram of virtual machine migration according to an embodiment of the present invention.

Fig. 3 shows a flow chart of a message processing method according to an embodiment of the invention.

Fig. 4 shows a flow chart of a message processing method according to an embodiment of the invention.

Fig. 5 is a block diagram of a message processing apparatus according to an embodiment of the present invention.

Fig. 6 is a block diagram of a message processing apparatus according to an embodiment of the present invention.

Fig. 7 is a block diagram of a message processing apparatus according to an embodiment of the present invention.

Fig. 8 is a block diagram of a message processing apparatus according to an embodiment of the present invention.

Fig. 9 is a block diagram of a message processing apparatus according to an embodiment of the present invention.

Detailed Description

Various exemplary embodiments, features and aspects of the present invention will be described in detail below with reference to the accompanying drawings. In the drawings, like reference numbers can indicate functionally identical or similar elements. While the various aspects of the embodiments are presented in drawings, the drawings are not necessarily drawn to scale unless specifically indicated.

The word "exemplary" is used exclusively herein to mean "serving as an example, embodiment, or illustration. Any embodiment described herein as "exemplary" is not necessarily to be construed as preferred or advantageous over other embodiments.

Furthermore, in the following detailed description, numerous specific details are set forth in order to provide a better understanding of the present invention. It will be understood by those skilled in the art that the present invention may be practiced without some of these specific details. In some instances, methods, procedures, components, and circuits that are well known to those skilled in the art have not been described in detail so as not to obscure the present invention.

In order to make those skilled in the art better understand the technical solutions in the embodiments of the present invention, a brief description will be given below of some technical terms involved in the embodiments of the present invention.

VXLAN: the two-layer VPN technology is based on a network Protocol (IP) network and adopts a Media Access Control encapsulation User Datagram Protocol (MAC in UDP) encapsulation form.

VM: one or more virtual machines can be created on a server, and different virtual machines can belong to different VXLANs. Virtual machines belonging to the same VXLAN are in the same logic two-layer network and are communicated with each other in two layers; two levels of isolation between virtual machines belonging to different VXLANs.

VTEP: edge device of VXLAN. The VXLAN processing is performed on the VTEP, for example, to identify the VXLAN to which the ethernet data frame belongs, to perform two-layer forwarding on the data frame based on the VXLAN, and to encapsulate/decapsulate the packet. The VTEP may be an independent physical device or a server where the virtual machine is located.

VXLAN tunnel: a point-to-point logical tunnel between two VTEPs. After encapsulating a VXLAN header, a UDP header and an IP header for a data frame, the VTEP forwards the encapsulated message to a far-end VTEP through a VXLAN tunnel, and the far-end VTEP decapsulates the encapsulated message.

Virtual Switch Instance (English: Virtual Switch Instance, abbreviated as VSI): a virtual switching instance on the VTEP provides a two-layer switching service for VXLAN. The VSI can be regarded as a virtual switch device on the VTEP that performs two-layer forwarding based on VXLAN, and has all functions of the conventional ethernet switch device, including source MAC address learning, MAC address aging, flooding, and the like. VSIs correspond one-to-one to VXLANs.

Access Circuit (English: Attachment Circuit, AC for short): the VTEP connects physical or virtual circuits of the local site. On VTEP, the three-tier interface or ethernet Service Instance (Service Instance) associated with the VSI is referred to as the AC. Wherein an ethernet service instance is created on a layer two ethernet interface that defines a series of matching rules for matching data frames received from the layer two ethernet interface.

FIG. 2 illustrates a schematic diagram of virtual machine migration according to an embodiment of the present invention. As shown in fig. 2, the IP address of VTEP1 is 1.1.1.1, the IP address of VTEP2 is 2.2.2.2, and the IP address of VTEP3 is 3.3.3.3. A first VXLAN Tunnel (Tunnel1) is established between VTEP1 and VTEP2, a second VXLAN Tunnel (Tunnel2) is established between VTEP1 and VTEP3, and a third VXLAN Tunnel (Tunnel3) is established between VTEP2 and VTEP 3.

Before VM1 migrates, VM1 and VM2 are connected via LSW access VTEP1, respectively, and VM3 accesses VTEP 3. A logic interface AC1 Port and an AC2 Port are respectively configured on the Port 1. Messages destined for VM1 are forwarded from logical interface AC1 port, and messages destined for VM2 are forwarded from logical interface AC2 port.

Table 1 shows a forwarding table in VTEP1 before VM1 is migrated, according to an embodiment of the invention. As shown in table 1, before VM1 migrates, in the forwarding table stored in VTEP1, the egress port that communicates with VM1 is port AC1, the egress port that communicates with VM2 is port AC2, and the egress port that communicates with VM3 is port Tunnel 2.

TABLE 1

Table 2 illustrates forwarding tables in LSWs before migration of VM1 according to an embodiment of the present invention. As shown in table 2, before VM1 migrates, the forwarding table stored in the LSW has Port3 as the egress Port for communication interaction with VM1, Port5 as the egress Port for communication interaction with VM2, and Port2 as the egress Port for communication interaction with VM 3.

TABLE 2

Table 3 shows forwarding tables in VTEP2 before VM1 is migrated, according to an embodiment of the invention. As shown in table 3, before VM1 migrates, in the forwarding table stored in VTEP2, the egress port that communicatively interacts with VM1 is Tunnel1, the egress port that communicatively interacts with VM2 is Tunnel1, and the egress port that communicatively interacts with VM3 is Tunnel 3.

TABLE 3

After VM1 migration, VM1 accesses VTEP2, VM2 connects through LSW access VTEP1, and VM3 accesses VTEP 3. VTEP2, upon sensing that VM1 comes online, will update the forwarding table that VTEP2 has stored, and after updating the stored forwarding table, send the updated MAC/IP routes to VTEP1 and VTEP3, respectively.

Table 4 shows a forwarding table in VTEP2 after VM1 has migrated, according to an embodiment of the invention. As shown in table 4, after VM1 migrates, in the forwarding table stored in VTEP2, the egress port that communicatively interacts with VM1 is the AC3 port, the egress port that communicatively interacts with VM2 is Tunnel1, and the egress port that communicatively interacts with VM3 is Tunnel 3.

TABLE 4

Fig. 3 shows a flow chart of a message processing method according to an embodiment of the invention. The method is for a first VTEP. As shown in fig. 3, the message processing method includes steps S31 to S33.

In step S31, a migration packet sent by the second VTEP is received, where the migration packet includes identification information of a VM of the virtual machine, and the VM is a VM migrated from the first VTEP to the second VTEP.

The migration packet may refer to a packet including VM migration information (e.g., identification information and routing information of the VM where the migration occurs). In one implementation, the migration packet may be a MAC/IP route, and the MAC/IP route is used to advertise MAC/IP address information.

VM migration refers to the migration of a VM from a VTEP or switching device to which it is attached to another VTEP or switching device of the data center network. The newly migrated VTEP or switching device will again sense the VM is on-line and will re-advertise the MAC/IP route. The difference between the advertised MAC/IP route after VM migration and the advertised MAC/IP route before VM migration is that: the advertised MAC/IP route after VM migration includes a MAC migration Extended Community attribute (MAC Mobility Extended Community).

Wherein the MAC migration extended community attribute includes a migration Sequence Number (Sequence Number). Each time a VM migrates, the MAC/IP routes advertised after the VM migrates will include an increasing migration sequence number. When the remote VTEP receives the MAC/IP route, if the migration sequence number included in the MAC/IP route is larger than the migration sequence number of the local end, the MAC/IP route of the local end is updated, and the updated next hop points to the VTEP accessed after the VM migrates. And after receiving the MAC/IP route advertised after the VM is migrated, the VTEP accessed before the VM is migrated cancels the MAC/IP route advertised before the VM is migrated.

In step S32, an egress port for performing communication interaction with the VM is determined from the forwarding table stored in the first VTEP according to the identification information of the VM.

Here, the identification information of the VM may refer to information that can uniquely determine the VM. In an implementation manner, the identification information of the VM may be a MAC address of the VM, which is not limited in this embodiment of the present invention.

In the forwarding table stored in the VTEP, the egress port for performing communication interaction with the VM may be a physical port, an AC port, or a VXLAN tunnel, which is not limited in this embodiment of the present invention.

In one implementation, when an egress port for performing communication interaction with a VM is a physical port, a message destined for the VM is forwarded from the physical port; when an output port for performing communication interaction with a VM is an AC port, forwarding a message to the VM from a VSI corresponding to the AC port; and when the output port for carrying out communication interaction with the VM is a VXLAN tunnel, forwarding the message to the VM from the VXLAN tunnel.

In step S33, a probe message is sent to the switching device through the egress port, where the probe message includes the MAC address of the VM, and is used to enable the switching device to send the probe message to the VM according to the MAC address of the VM, and update the forwarding table stored in the switching device according to whether a response message fed back by the VM is received within a preset time.

The detection message includes an MAC address of the VM, and is used to detect whether the VM is further accessed to the VTEP that sends the detection message. For example, the destination address of the probe packet is the MAC address of the VM.

In an implementation manner, the detection message is a data message or an Address Resolution Protocol (ARP) message, and the like, which is not limited in this embodiment of the present invention.

As an example, as shown in fig. 2, VM1 migrates from access VTEP1 to access VTEP 2. After sensing that VM1 comes online, VTEP2 updates the forwarding table stored in VTEP2, and sends the updated MAC/IP routes (i.e., migration packets) to VTEP1 and VTEP3, respectively, after updating the stored forwarding table. The updated MAC/IP route includes identification information of VM1 (MAC VM 1). VTEP1 receives the updated MAC/IP routes sent by VTEP 2. VTEP1 determines the egress port for communicative interaction with VM1 as AC1 port from the forwarding table (as shown in table 1) that VTEP1 has stored, according to the identification information of VM1, MACVM 1. The VTEP1 sends a probe message through the AC1 port, and the destination address of the probe message is the MAC VM 1. Therefore, the LSW sends the detection message to the VM1 according to the destination address MAC VM1 of the detection message, and updates the forwarding table stored in the LSW according to whether a response message fed back by the VM1 is received within a preset time length.

In the message processing method of the embodiment of the invention, the first VTEP receives a migration message sent by the second VTEP, an output port used for carrying out communication interaction with the VM is determined from a forwarding table stored by the first VTEP according to the identification information of the VM included by the migration message, and a detection message is sent to the switching equipment through the output port, wherein the detection message includes the MAC address of the VM, so that the switching equipment sends the detection message to the VM according to the MAC address of the VM, and updates the forwarding table stored by the switching equipment according to whether a response message fed back by the VM is received within a preset time length, thereby realizing that the switching equipment can sense the VM migration, timely update the forwarding table stored by the switching equipment and ensure that the traffic flow is normally forwarded.

In one implementation, the migration packet further includes routing information of the VM, and the method further includes: and updating an egress port used for communication interaction with the VM in a forwarding table stored by the first VTEP into an identifier of a first VXLAN tunnel according to the routing information of the VM, wherein the first VXLAN tunnel is a VXLAN tunnel between the first VTEP and the second VTEP.

As an example, as shown in fig. 2, VM1 migrates from access VTEP1 to access VTEP 2. After sensing that VM1 comes online, VTEP2 updates the forwarding table stored in VTEP2, and sends the updated MAC/IP routes (i.e., migration packets) to VTEP1 and VTEP3, respectively, after updating the stored forwarding table. The updated MAC/IP route includes the routing information (MAC/IP route) of VM 1. VTEP1 receives the updated MAC/IP routes sent by VTEP 2. VTEP1 updates the forwarding table stored in VTEP1 according to the MAC/IP routing information of VM1, that is, updates the egress port used for communication interaction with VM1 in the forwarding table stored in VTEP1 to Tunnel1 through AC1 port, and tunnels 1 are VXLAN tunnels between VTEP1 and VTEP 2.

Table 5 shows a forwarding table in VTEP1 after VM1 has migrated, according to an embodiment of the invention. As shown in table 5, after VM1 migrates, in the forwarding table stored in VTEP1, the egress port that communicatively interacts with VM1 is Tunnel1, the egress port that communicatively interacts with VM2 is AC2 port, and the egress port that communicatively interacts with VM3 is Tunnel 2.

TABLE 5

In the message processing method of the embodiment of the invention, the first VTEP receives the migration message sent by the second VTEP, and the output port used for performing communication interaction with the VM in the forwarding table stored in the first VTEP is updated to be the identifier of the first VXLAN tunnel according to the routing information of the VM included in the migration message, and the first VXLAN tunnel is the VXLAN tunnel between the first VTEP and the second VTEP, so that the first VTEP can sense the migration of the VM and timely update the forwarding table stored in the first VTEP, and the normal forwarding of service flow is ensured.

In one implementation, after receiving the migration packet sent by the second VTEP, the method further includes: judging whether a first VTEP starts a detection mode, wherein the detection mode is used for detecting whether a first VETP is connected with a VM through exchange equipment; if the first VTEP has started the detection mode, according to the identification information of the VM, determining an exit port for carrying out communication interaction with the VM from a forwarding table stored by the first VTEP; and if the first VTEP does not start the detection mode, updating an egress port used for communication interaction with the VM in a forwarding table stored by the first VTEP to be the identifier of the first VXLAN tunnel according to the routing information of the VM.

Wherein the probing mode is used for detecting whether the VETP is connected with the VM through the switching device.

In one implementation, the VTEP needs to turn on the sniff mode when the VETP is connected to the VM through the switching device. When the VTEP starts the probing mode, if the local VTEP receives a migration packet (including identification information and routing information of a VM) sent by the remote VTEP, the local VTEP traverses a forwarding table stored in the local VTEP according to the identification information of the VM, and determines whether an egress port for performing communication interaction with the VM exists. If the port exists, the local end VTEP sends a detection message through the output port, and the detection message comprises the MAC address of the VM. In addition, the local end VTEP also updates an egress port used for communication interaction with the VM in a forwarding table stored by the local end VTEP to a remote end VTEP accessed after the next hop is transferred to the VM according to the routing information of the VM.

In another implementation, the VTEP does not need to turn on the sniff mode when the VETP is not connected to the VM through the switching device. When the VTEP does not start the probing mode, if the local VTEP receives a migration packet (including identification information and routing information of a VM) sent by the remote VTEP, the local VTEP updates an egress port, which is used for performing communication interaction with the VM in a forwarding table stored in the local VTEP, to a next hop according to the routing information of the VM, and points to the remote VTEP accessed after the VM migrates.

As an example, as shown in fig. 2, prior to VM1 migration, VM1 and VM2 are connected via LSW access VTEP1 and VM3 accesses VTEP3, respectively. VTEP1 may thus turn on sniff mode, and VTEP2 and VTEP3 may not turn on sniff mode.

As shown in fig. 2, after VM1 migrates, VTEP1 receives a migration message (including identification information and routing information of VM1) sent by VTEP2, and then VTEP1 traverses a forwarding table already stored by VTEP1 according to the identification information of VM1, determines an egress port for performing communication interaction with VM1, and sends a probe message through the egress port, where the probe message includes a MAC address of VM1 (MAC VM 1). Furthermore, VTEP1 updates the egress port of the forwarding table stored in VTEP1 for communication interaction with VM1 from AC1 port to Tunnel1 according to the routing information of VM 1.

As shown in fig. 2, after VM1 migrates, VTEP3 receives a migration packet (including identification information and routing information of VM1) sent by VTEP2, and then VTEP3 updates an egress port for performing communication interaction with VM1 in a forwarding table stored by VTEP3 to Tunnel3 from Tunnel2 according to the routing information of VM 1.

It should be noted that, as can be understood by those skilled in the art, the VTEP may start the probe mode by manual configuration, or may start the probe mode by automatic configuration according to the networking situation, which is not limited in this embodiment of the present invention.

Fig. 4 shows a flow chart of a message processing method according to an embodiment of the invention. The method is used for a switching device. As shown in fig. 3, the message processing method includes steps S41 to S44.

In step S41, a probe packet sent by the first VTEP is received, where the probe packet includes a MAC address of a virtual machine VM, and the VM is a VM migrated from the first VTEP to the second VTEP.

In step S42, an egress port for performing communication interaction with the VM is determined from a forwarding table stored in the switching device according to the MAC address of the VM.

Wherein, the switching device may refer to a device respectively connected with the VM and the VTEP, for enabling the VM to access the VTEP. In one implementation, the switching device may be a switch (e.g., a two-layer switch, a three-layer switch, a core switch, or an aggregation switch), and the like, which is not limited in this embodiment of the present invention.

In step S43, the probe message is sent to the VM through the egress port.

In step S44, the forwarding table stored in the switching device is updated according to whether the response message fed back by the VM is received within the preset time.

The preset duration may refer to a preset time threshold. In one implementation, the preset time period may be set to 30ms to 50ms, which is not limited by the embodiment of the present invention.

In the message processing method of the embodiment of the invention, the switching equipment receives the detection message sent by the first VTEP, sends the detection message to the VM according to the MAC address of the VM included in the detection message, and updates the forwarding table stored in the switching equipment according to whether the response message fed back by the VM is received within the preset time, so that the switching equipment can sense the migration of the VM and timely update the forwarding table stored in the switching equipment, and the normal forwarding of service flow is ensured.

In one implementation manner, updating a forwarding table stored in a switching device according to whether a response packet fed back by the VM is received within a preset time includes: and when the response message fed back by the VM is not received within the preset time length, updating an output port used for performing communication interaction with the VM in a forwarding table stored by the switching equipment to be the identifier of a first port, wherein the first port is the port of the switching equipment for receiving the detection message.

As an example, as shown in fig. 2, the LSW receives, through Port2, a probe packet sent by VTEP1, where the destination address of the probe packet is the MAC address of VM1 (MAC VM 1). According to the destination address of the probe message, MAC VM1, the LSW determines the Port used for communication interaction with VM1 from the forwarding table (as shown in table 2) stored in the LSW as Port 3. The LSW sends the probe message through Port 3. And if the LSW does not receive the response message fed back by the VM1 within the preset time length, the LSW updates the Port used for the communication interaction with the VM1 in the stored forwarding table from Port3 to Port 2.

Table 6 shows forwarding tables in LSWs after migration of VM1, according to an embodiment of the invention. As shown in table 6, after VM1 is migrated, the outgoing Port for communicative interaction with VM1 is Port2, the outgoing Port for communicative interaction with VM2 is Port5, and the outgoing Port for communicative interaction with VM3 is Port2 in the forwarding table stored in the LSW.

TABLE 6

In the message processing method of the embodiment of the invention, the LSW receives the probe message sent by the VTEP1, sends the probe message to the VM1 according to the MAC address of the VM1 included in the probe message, and updates the egress port used for performing communication interaction with the VM1 in the forwarding table stored in the LSW when the response message fed back by the VM1 is not received within the preset time, so that the LSW can sense VM migration, update the forwarding table stored in the LSW in time, and ensure normal forwarding of service traffic.

In one implementation manner, updating a forwarding table stored in a switching device according to whether a response packet fed back by the VM is received within a preset time includes: and when a response message fed back by the VM is received within a preset time length, keeping an output port used for communication interaction with the VM in a forwarding table stored by the switching equipment unchanged.

In one implementation, this may occur when a VM migrates from a first VTEP to a second VTEP, but quickly migrates from the second VTEP back to the first VTEP. Therefore, an egress port used for performing communication interaction with the VM in a forwarding table stored by the switching device can be kept unchanged, thereby ensuring that the service traffic is forwarded normally.

As an example, as shown in fig. 2, the LSW receives, through Port2, a probe packet sent by VTEP1, where the destination address of the probe packet is the MAC address of VM1 (MAC VM 1). According to the destination address of the probe message, MAC VM1, the LSW determines the Port used for communication interaction with VM1 from the forwarding table (as shown in table 2) stored in the LSW as Port 3. The LSW sends the probe message through Port 3. If the LSW receives the reply message fed back by the VM1 within the preset time, the LSW keeps the egress Port3 for performing communication interaction with the VM1 in the stored forwarding table unchanged.

In the message processing method of the embodiment of the invention, the LSW receives the probe message sent by the VTEP1, sends the probe message to the VM1 according to the MAC address of the VM1 included in the probe message, and keeps an output port used for performing communication interaction with the VM1 in a forwarding table stored in the LSW unchanged when receiving the response message fed back by the VM1 within a preset time, thereby ensuring normal forwarding of service traffic.

Fig. 5 is a block diagram of a message processing apparatus according to an embodiment of the present invention. The apparatus is for a first VXLAN tunnel endpoint, VTEP, as shown in fig. 5, the apparatus comprising:

a migration packet receiving module 51, configured to receive a migration packet sent by a second VTEP, where the migration packet includes identification information of a virtual machine VM, and the VM is a VM migrated from a first VTEP to the second VTEP;

a first egress port determining module 52, configured to determine, according to the identifier information of the VM, an egress port for performing communication interaction with the VM from a forwarding table stored in the first VTEP;

a first detection message sending module 53, configured to send a detection message to a switching device through the egress port, where the detection message includes the MAC address of the VM, and is used to enable the switching device to send the detection message to the VM according to the MAC address of the VM, and update a forwarding table stored in the switching device according to whether a response message fed back by the VM is received within a preset time period.

In one implementation, the detection message is a data message or an address resolution protocol, ARP, message.

Fig. 6 is a block diagram of a message processing apparatus according to an embodiment of the present invention. As shown in fig. 6:

in one implementation, the migration packet further includes routing information of the VM, and the apparatus further includes: a first forwarding table updating module 54, configured to update an egress port, used for performing communication interaction with the VM, in the forwarding table stored in the first VTEP to an identifier of a first VXLAN tunnel according to the routing information of the VM, where the first VXLAN tunnel is a VXLAN tunnel between the first VTEP and the second VTEP.

In one implementation, the apparatus further comprises: a determining module 55, configured to determine whether a probing mode is started by the first VTEP, where the probing mode is used to detect whether the first VETP is connected to the VM through a switching device;

a first egress port determining module 52, configured to determine, according to the identification information of the VM, an egress port for performing communication interaction with the VM from a forwarding table stored in the first VTEP if the first VTEP has started a probing mode;

a first forwarding table updating module 54, configured to update, according to the routing information of the VM, an egress port used for performing communication interaction with the VM in a forwarding table stored in the first VTEP as an identifier of a first VXLAN tunnel if the first VTEP does not start the probe mode.

In the message processing apparatus of the embodiment of the present invention, the first VTEP receives a migration message sent by the second VTEP, determines an egress port for performing communication interaction with the VM from a forwarding table stored in the first VTEP according to identification information of the VM included in the migration message, and sends a detection message to the switching device through the egress port, where the detection message includes an MAC address of the VM, so that the switching device sends the detection message to the VM according to the MAC address of the VM, and updates the forwarding table stored in the switching device according to whether a response message fed back by the VM is received within a preset time, thereby implementing that the switching device can sense VM migration, and timely update the forwarding table stored in the switching device, and ensuring normal forwarding of traffic flow.

Fig. 7 is a block diagram of a message processing apparatus according to an embodiment of the present invention. The apparatus is used for switching devices, as shown in fig. 7, and comprises:

a detection packet receiving module 71, configured to receive a detection packet sent by a first VTEP, where the detection packet includes an MAC address of a virtual machine VM, and the VM is a VM migrated from the first VTEP to a second VTEP;

a second egress port determining module 72, configured to determine, according to the MAC address of the VM, an egress port for performing communication interaction with the VM from a forwarding table stored in the switching device;

a second detection message sending module 73, configured to send the detection message to the VM through the egress port;

and a second forwarding table updating module 74, configured to update the forwarding table already stored in the switching device according to whether the response packet fed back by the VM is received within a preset time.

Fig. 8 is a block diagram of a message processing apparatus according to an embodiment of the present invention. As shown in fig. 8:

in one implementation, the second forwarding table updating module 74 includes: a first updating sub-module 741, configured to update an egress port, used for performing communication interaction with the VM, in a forwarding table stored in the switching device to an identifier of a first port when a response message fed back by the VM is not received within a preset time, where the first port is a port at which the switching device receives the detection message.

In one implementation, the second forwarding table updating module 74 includes: a second updating sub-module 742, configured to, when receiving a response packet fed back by the VM within a preset time period, keep an egress port, used for performing communication interaction with the VM, in a forwarding table stored in the switching device unchanged.

In the message processing apparatus of the embodiment of the present invention, the switching device receives the probe message sent by the first VTEP, sends the probe message to the VM according to the MAC address of the VM included in the probe message, and updates the forwarding table stored in the switching device according to whether the response message fed back by the VM is received within the preset time, so that the switching device can sense VM migration, and update the forwarding table stored in the switching device in time, thereby ensuring normal forwarding of service traffic.

Fig. 9 is a block diagram of a message processing apparatus according to an embodiment of the present invention. Referring to fig. 9, the apparatus 900 may include a processor 901, a machine-readable storage medium 902 having stored thereon machine-executable instructions. The processor 901 and the machine-readable storage medium 902 may communicate via a system bus 903. Also, the processor 901 performs the message processing method described above by reading machine-executable instructions in the machine-readable storage medium 902 corresponding to the message processing logic.

The machine-readable storage medium 902 referred to herein may be any electronic, magnetic, optical, or other physical storage device that can contain or store information such as executable instructions, data, and the like. For example, the machine-readable storage medium may be a random access memory: a Random Access Memory (RAM), a volatile Memory, a non-volatile Memory, a flash Memory, a storage drive (e.g., a hard drive), a solid state drive, any type of storage disk (e.g., an optical disk, a dvd, etc.), or similar storage media, or a combination thereof.

Having described embodiments of the present invention, the foregoing description is intended to be exemplary, not exhaustive, and not limited to the embodiments disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The terms used herein were chosen in order to best explain the principles of the embodiments, the practical application, or technical improvements to the techniques in the marketplace, or to enable others of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A method for message processing, the method being used for a first VXLAN tunnel endpoint, VTEP, the method comprising:

and sending a detection message to a switching device through the egress port, wherein the detection message comprises an MAC address of the VM, and is used for enabling the switching device to send the detection message to the VM according to the MAC address of the VM, and updating the egress port used for performing communication interaction with the VM in a forwarding table stored by the switching device as an identifier of a first port when a response message fed back by the VM is not received within a preset time length, and the first port is a port of the switching device receiving the detection message.

2. The method of claim 1, wherein the migration packet further includes routing information of the VM, and wherein the method further comprises:

3. The method according to claim 1 or 2, wherein after receiving the migration packet sent by the second VTEP, the method further comprises:

4. The method of claim 1, wherein the probe message is a data message or an Address Resolution Protocol (ARP) message.

5. A method for processing a packet, the method being used in a switching device, the method comprising:

sending the detection message to the VM through the output port;

updating a forwarding table stored in the switching equipment according to whether a response message fed back by the VM is received within a preset time length;

the updating the forwarding table stored in the switching device according to whether the response message fed back by the VM is received within a preset time includes: and when the response message fed back by the VM is not received within a preset time length, updating an output port used for performing communication interaction with the VM in a forwarding table stored in the switching equipment to be an identifier of a first port, wherein the first port is a port of the switching equipment which receives the detection message.

6. The method according to claim 5, wherein the updating the forwarding table stored in the switching device according to whether the response packet fed back by the VM is received within a preset time period comprises:

7. A message processing apparatus, the apparatus configured for a first VXLAN tunnel endpoint, VTEP, the apparatus comprising:

a first detection message sending module, configured to send a detection message to a switching device through the egress port, where the detection message includes an MAC address of the VM, and is used to enable the switching device to send the detection message to the VM according to the MAC address of the VM, and update an egress port, which is used for performing communication interaction with the VM, in a forwarding table stored in the switching device to be an identifier of a first port when a response message fed back by the VM is not received within a preset time, where the first port is a port through which the switching device receives the detection message.

8. The apparatus of claim 7, wherein the migration packet further includes routing information of the VM, and wherein the apparatus further comprises:

9. The apparatus of claim 7 or 8, further comprising:

10. The apparatus of claim 7, wherein the probe message is a data message or an Address Resolution Protocol (ARP) message.

11. A message processing apparatus, the apparatus being for a switching device, the apparatus comprising:

the second forwarding table updating module is used for updating the forwarding table stored in the switching equipment according to whether the response message fed back by the VM is received within the preset time;

the second forwarding table updating module comprises:

12. The apparatus of claim 11, wherein the second forwarding table updating module comprises: